REGULATORY WATCH BRIEF Moderate 58 🧭 Regulatory Guidance published

DoD updates SORN for DON Child and Youth Program to align with cybersecurity policies

The notice updates how children's health and personal data are handled, adding cybersecurity safeguards and expanded uses.

ImpactModerate 58
Type🧭 Regulatory Guidance
Statuspublished enacted, check the effective date
JurisdictionUS

What happened

The Department of Defense is modifying and reissuing the system of records titled "DON Child and Youth Program" (NM01754-3) under the Privacy Act of 1974. The updates incorporate DoD standard routine uses A through J, expand the collection authority and purpose, and align the record with current cybersecurity policies. The changes aim to maintain accurate family and staff records for the Navy and Marine Corps Child and Youth Program.

Why it matters for trust and compliance

  • Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
  • The notice updates how children's health and personal data are handled, adding cybersecurity safeguards and expanded uses.

Who is affected

government controller processor Department of Defense Navy Department Marine Corps

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Map the security requirements to existing controls and close gaps.
  3. Review age assurance and protections for minors' data.
  4. Confirm handling of sensitive data categories meets the stricter rules.