§ 317.81 - DCAA training programs.

(a) Personnel to be trained. (1) To conform with Office of Management and Budget guidance, compliance with the statutory training requirements requires informed and active support of all agency personnel. All personnel who in any way use or operate systems of records, or who are engaged in the development of procedures for handling records, must be taught the requirements of the Privacy Act and must be trained in the agency's procedures for the implementation of the Privacy Act.

(2) Personnel to be trained include, but are not limited to, those engaged in the following:

(i) Personnel management.

(ii) Personnel finance.

(iii) Medical care.

(iv) Investigations of personnel.

(v) Records management (reports, forms, records, and related functions).

(vi) Computer systems development and operation.

(vii) Communications.

(viii) Statistical data collection and analysis, and

(ix) Performing other functions subject to this rule.

(b) Types of training. The agency shall establish the following three levels of training for those persons who are involved with the design, development, operation, or maintenance of any system of records. The training shall be provided to persons before or shortly after assuming the duties associated with the level of involvement.

(1) Orientation training. Orientation training that provides a general understanding of the individual's rights under the Privacy Act.

(2) Specialized training. Training concerning the application of this part to specialized areas of job performance.

(3) Management training. Training concentrated on factors affecting decisions made by managers under the Privacy Program, such as system managers, denial authorities, and managers of the specific functions listed.

(c) Methods of training. The agency is responsible for developing training methods that will meet this criteria. Such methods may include formal and informal (on-the-job) programs, if those personnel giving the training have, themselves, been trained.