An audit of the Federal Housing Finance Agency’s privacy program led the FHFA Office of Inspector General to make recommendations to address several weaknesses. The program was designed so the FHFA can implement privacy and data protection procedures governing its collection, use, sharing, disclosure, transfer, storage and security of information in an identifiable form related to employees and the public. Kearney & Company performed the audit and found that the FHFA had not effectively met three out of nine privacy requirements and controls.The report made several recommendations to make sure the agency adequately identifies, monitors, and protects the complete inventory of its personally identifying information (PII) holdings and appropriately approves and documents privileged user access.