Privacy Impact Assessment Amendment Summary
Introduction
A Privacy Impact Assessment Amendment was conducted to evaluate changes to Microsoft 365.
Objective
An amendment to the privacy impact assessment (PIA) for Microsoft 365 (M365) was conducted to determine if there were any privacy, confidentiality or security issues with changes to this product and, if so, to make recommendations for their resolution or mitigation.
Description
The following amendments shall be applied to the Microsoft 365 PIA (signed by the Chief Statistician October 5, 2021):
- The M365 Teams application now includes Voice Over Internet Protocol (VOIP) functionality for use by statistical survey operations interviewers in place of traditional telephones to conduct Computer Assisted Telephone Interviews (CATI).
- M365 may now also be used with deemed employees to discuss personal information or statistically sensitive information.
- Users are no longer being discouraged from completing M365 personal profile information.
- Sensitive statistical information that could be contained or referenced within M365 could now also include pre-release data.
Risk Area Identification and Categorization
The risk area identification and categorization remains unchanged.
Conclusion
This assessment of changes to Microsoft 365 did not identify any privacy risks that cannot be managed using existing safeguards.