Just one in 17 U.S. federal agencies have been able to comply with year-old requirements for getting consent to disclose personal information, according to the Government Accountability Office. Agencies are behind in equal measure in accepting digital ID for identity proofing and authentication.
The GAO is the Congress’ investigator and auditor of the executive branch, and many an agency head has read an evaluation of their efforts with discomfort.
In this case, the GAO was checking to see if consent procedures, required to be implemented by November 2021 by another government watch dog, are in place.
Only the Securities and Exchange Commission had set up digital privacy processes required by the Office of Management and Budget, the GAO’s counterpart in the legislative branch.
The same guidance instructed agencies to accept digital identity proofing and authentication. This requirement was also unmet by 16 out of 17, with the SEC the exception.
US agencies 47 years behind with privacy law
