Which Air Force instruction covers privacy and civil liberties programs?

The controlling publication in each branch

What the regulation actually says

Start with AFI 33-332

For an Air Force privacy or civil liberties question, open AFI 33-332 first; it is the one instruction that covers both programs, and base or command supplements only add local detail to it.

DoD policy sits above it

DoDI 5400.11 sets the DoD Privacy and Civil Liberties Programs and has each DoD component designate an official to administer its own privacy and civil liberties programs; for the Air Force, AFI 33-332 is that program.

“d. In consultation with the SCOP, designate DoD Component PCLOs to administer their Component’s privacy and civil liberties programs. e. Ensure DoD personnel and DoD contractors, who have primary responsibility for implementing the DoD Privacy and Civil Liberties Programs, receive appropriate privacy and civil liberties training. Define any such roles and responsibilities in applicable contracts, including privacy, security, and compliance controls contained in the Federal Acquisition Regulation and Defense Federal Acquisition Regulations.”

Find your privacy office

Each command sets up a Privacy and Civil Liberties Office, and the wing commander appoints an installation Privacy Manager/Monitor and a Civil Liberties point of contact, so that is who to ask first at your base.

“2.8.1. Establish a Privacy and Civil Liberties Office(s) and appoint in writing, a command Privacy Manager/Monitor to execute command responsibilities as outlined in this instruction. The same will apply at installation -level where the Wing Com mander will appoint an installation Privacy Manager/Monitor and Civil Liberties POC and report to their respective command. (T-1).”

Some rules are punitive

Breaking the instruction's mandatory rule on transmitting protected health information is an Article 92 violation for military members, and civilians can be disciplined under DAFI 36-148.

“In addition, the transmission of PHI is restricted, pursuant to guidance in AFMAN 41-210 paragraph 6.16. Failure by military members to obey the mandatory provision in this paragraph is a violation of Article 92(1) of the UCMJ. Civilians who violate information security policy may be disciplined in accordance with DAFI 36-148, Discipline and Adverse Actions of Civilian Employees. (T-0) (MODIFY) 4.4.4. In accordance with 44 USC § 3501, an OMB control number must be requested whenever information is collected from ten or more members of the general public. This requirement may apply to Military or Government civilians whenever information is being collected outside their scope of their duty (See DAFI 33-324). (T-0) (MODIFY) 4.5.1.5. DAF SORN(s) are searchable by number and title and are available at: https://dpcld.defense.gov/privacy/SORNS.aspx (If applicable). (T-0) (DELETE) 4.5.3.”… (paragraph continues in the PDF)

Ask a follow-up

Need this narrowed to your branch or a specific paragraph? Ask it here — free, and the answer quotes the regulation text where we have it indexed.

Related answers

• How does extreme heat affect aircraft lift?
• What Should QA Look For During a Corrosion Control Inspection?
• What should QA check on an AGE ready line in-use inspection?
• What should QA look for when reviewing aircraft maintenance forms documentation?
• What should QA check for CTK and tool accountability?
• What should QA look for when evaluating technical data compliance?