Update and obtain final NARA approval of all HUD records retention schedules, including the Capstone email schedule, to comply with Federal requirements, including OMB M-19-21.

Develop and approve an enterprise strategy to meet all M-19-21 electronic transition requirements.

Issue a formal policy and requirements for managing CUI.

Establish and disseminate a policy on safeguarding or prohibiting the transportation of PII records out of the office for telework purposes.

Complete the development of performance measures and establish a formal records evaluation process to measure the effectiveness and progress of the records management program.

Standardize processes and duties for all RMLOs.

Conduct a staffing resource assessment for the HUD records program and identify any skills gaps or resource needs.

Implement control policies or procedures to at least annually coordinate with HUD’s Office of Public Housing to match data in the Single Family Data Warehouse to data in the Public Housing Information Center to prevent or mitigate instances of borrowers violating Program residency requirements by Read More

Implement controls to prevent or mitigate instances of borrowers violating HECM program residency requirements by concurrently participating in the Voucher program, including policies and procedures to at least annually coordinate with HUD’s Office of Public Housing to match borrower data in the Read More

Implement controls to prevent or reduce instances of borrowers violating HECM program residency requirements by concurrently participating in multifamily programs, including policies and procedures to at least annually coordinate with HUD’s Office of Multifamily Housing Programs to match borrower Read More

Ensure the privacy program is staffed with experienced personnel (such as a Chief Privacy Officer) to manage the operational aspects of the program.

Issue a notice at the Secretary level delegating and clarifying the authority and responsibilities of the SAOP and Privacy Office

A. Document the roles and specific responsibilities of all positions assigned privacy responsibilities. B. Communicate these responsibilities on a recurring basis, at least annually, to individuals holding these positions.

Implement thorough human capital processes to ensure execution of the HUD privacy program and all its requirements

Finalize and approve the draft privacy program strategic plan

Ensure the privacy program is integrated with the enterprise risk program and that privacy risks are incorporated into the agency risk management process

Establish an executive leadership dashboard to communicate continuous monitoring of key program risks and issues

A. Develop an internal privacy program communication plan to describe how privacy issues will be disseminated and best practices will be shared. B. Implement the communication plan

Develop a dedicated budget to address Privacy Office training needs and initiatives

Update all privacy guidance to reflect current Federal requirements and processes.