Additionally, PIAs must include information on:

When and how individuals can consent to or decline particular uses of the information (other than required or authorized uses);

How the information will be secured (i.e., management, operational, and technological controls); and

Whether a system of records is being created under the Privacy Act of 1974.