Department of Defense
DIRECTIVE
NUMBER 5400.11
October 29, 2014
DCMO
SUBJECT: DoD Privacy Program
References: See Enclosure 1
1. PURPOSE. This directive:
a. Reissues DoD Directive (DoDD) 5400.11 (Reference (a)) to update the established
policies and assigned responsibilities of the DoD Privacy Program pursuant to section 552a of
Title 5, United States Code (U.S.C.) (also known and referred to in this directive as “The Privacy
Act” (Reference (b))) and Office of Management and Budget (OMB) Circular No. A-130
(Reference (c)).
b. Authorizes the Defense Privacy Board and the Defense Data Integrity Board.
c. Authorizes DoD 5400.11-R (Reference (d)) to provide guidance on The Privacy Act;
prescribes uniform procedures for implementation of and compliance with the DoD Privacy
Program.
d. Delegates authorities and responsibilities for the effective administration of the DoD
Privacy Program.
2. APPLICABILITY
a. This directive applies to OSD, the Military Departments, the Office of the Chairman of
the Joint Chiefs of Staff and the Joint Staff, the Combatant Commands, the Office of the
Inspector General of the Department of Defense, the Defense Agencies, the DoD Field
Activities, and all other organizational entities within the DoD (referred to collectively in this
directive as the “DoD Components”).
b. For the purposes of subsection (i), “Criminal penalties,” of The Privacy Act, any DoD
contractor and any employee of such a contractor will be considered to be an employee of DoD
when DoD provides by a contract for the operation by or on behalf of DoD of a system of
records to accomplish a DoD function. DoD will, consistent with its authority, cause the
requirements of section (m) of The Privacy Act to be applied to such systems.