Report 2008-012-AEP - REPORT ON FISCAL YEAR 2008 INDEPENDENT AUDIT OF EEOC PRIVACY PROGRAM AUDIT

The Equal Employment Opportunity Commission (EEOC or Commission), Office of Inspector General (OIG) contracted with Cotton & Company LLP to conduct an audit of privacy and data protection policies, procedures, and practices. We reviewed EEOC’s privacy related controls from May 28, 2008, through July 31, 2008. Such a review had not been previously performed by the EEOC OIG. Testing was primarily focused on requirements from federal laws and regulations, as well as from best practices in the field of privacy.