GAO: Challenges of Using Web 2.0 in Government
Submitted by rthomas on Thu, 12/21/2017 - 14:58
Thursday, July 22, 2010
In its testimony, GAO found that 22 of the 24 major federal agencies have a presence on Facebook, Twitter, and YouTube. “However, agency use of these technologies also may present risks associated with properly managing and protecting government records and sensitive information, including personally identifiable information.” Key challenges include:
Privacy and Security Challenges
- Determining how the Privacy Act of 1974 applies to government use of social media. . . .key officials we interviewed said they are unsure about the extent to which personal information that is exchanged in such forums is protected by the provisions of the Privacy Act.”
- Ensuring that agencies are taking appropriate steps to limit the collection and use of personal information through social media. “Privacy could be compromised if clear limits are not set on how the government uses personal information to which it has access in social networking environments.”
- Extending privacy protections to the collection and use of personal information by third party providers. . . “Uncertainty about who has access to personal information provided through agency social networking sites could diminish individuals’ willingness to express their views and otherwise interact with the government.”
- Safeguarding personal information from security threats that target Web 2.0 technologies. . . “The extent to which FISMA makes federal agencies responsible for the security of third-party social media Web sites may depend. . . “
- Training government participants on the proper use of social networking tools. “Use of Web 2.0 technologies can result in a blending of professional and persona use by government employees, which can pose risks to their agencies.”
Records Management and Freedom of Information Challenges
- Determining requirements for preserving Web 2.0 information as federal records. . . there is “the question of whether information exchanged through these technologies constitute federal records pursuant to the Federal Records Act.”
- Establishing mechanisms for preserving Web 2.0 information as records. . . “the types of records involved when information is collected via Web 2.0 technoligies may not be clear.”
- Ensuring proper adherence to the requirements of the Federal of Information Act.. . “Determining whether Web 2.0 records qualify as ‘agency records’ under FOIA’s definition is a complex question.”
Agencies Have Taken Steps. GAO noted that the Executive Branch has taken a number of steps to address these issues. For example:
- The Department of Homeland Security sponsored a forum and a report on potential solutions.
- The National Archives has issued guidance on managing information associated with Web 2.0 use.
- The General Services Administration has negotiated terms-of-service agreements with several social networking providers.
- The Office of Management and Budget issued guidance to clarify where and how the Paperwork Reduction Act applies, and how privacy can be protected.
- OMB also issued guidance on agencies’ use of third party technologies to engage the public and associated assessments on privacy.
The key take-away? GAO did not say “stop!”