This management alert identified that the U.S. Department of Housing and Urban Development is failing to meet basic records management and privacy requirements for over 1 billion records containing PII. Specifically, HUD is unable to identify, categorize, and adequately secure all of its electronic and paper records that contain personally identifiable information (PII).
These issues were identified during the fiscal year (FY) 2019 Federal Information Security Modernization Act of 2014 (FISMA) evaluation. This management alert does not contain any recommendations, although further work by the Office of Inspector General (OIG) will be conducted to provide HUD with a comprehensive report and associated recommendations.