Department of Defense
INSTRUCTION
NUMBER 2000.26
September 23, 2014
Incorporating Change 1, May 12, 2017
USD(P)
SUBJECT: Suspicious Activity Reporting (SAR)
References: See Enclosure 1
1. PURPOSE. This instruction:
a. In accordance with the authority in DoD Directive (DoDD) 5111.1 (Reference (a)) and
Deputy Secretary of Defense Memorandum (Reference (b)), reissues DoD Instruction (DoDI)
2000.26 (Reference (c)) to establish policy, assign responsibilities, and provide procedures
implementing eGuardian as the DoD Law Enforcement (LE) SAR system.
b. Delegates authorities for the effective administration of this instruction.
2. APPLICABILITY. This instruction applies to:
a. OSD, the Military Departments, the Office of the Chairman of the Joint Chiefs of Staff
and the Joint Staff, the Combatant Commands, the Defense Agencies with law enforcement
authority, the DoD Field Activities, and all other organizational entities within the DoD (referred
to collectively in this instruction as the “DoD Components”).
b. DoD law enforcement officers (LEOs) and those working in a direct LE capacity, and
antiterrorism analysts and planners supporting an LE mission, who are assigned, attached, or
detailed to law enforcement agencies (LEAs).
c. DoD personnel designated as antiterrorism officers (ATOs) at the geographic Combatant
Commands and Military Departments/Services and installations that directly support operations
and planning and indirectly support LE missions and agencies.
d. DoD contractors who, on behalf of a DoD Component and sponsored by an LEA, are
involved in the SAR process, including operating a system of records as defined in the Glossary
and any of the activities associated with maintaining a system of records related to SARs, such as
collecting and disseminating records, but only to the extent specified by the terms of the relevant
contractual vehicle.