On the recordNovember 17, 2008
It is the policy of the United States that Federal agencies should conduct agency activities that involve personal identifiers in a manner consistent with protection of such identifiers against unlawful use.
Source
presidency.ucsb.edu




