2804 Public-facing Web Management Policy.pdf

NIH Policy Manual

2804 - Public-facing Web Management Policy

Issuing Office: OD/OCPL, OD/OCIO, OD/OM/OMA Phone: (301) 496-5787

Release Date: 4/09/2012 ? Technical Revision Date:9/20/2018 ?

Transmittal Notice

1. Explanation of Material Transmitted: This chapter provides policy on the creation and management of Public-facing Web sites and new media properties, which includes NIH hosted social media sites, Web applications and mobile Web sites.

Partial Revision: 02/06/13*

*Partial revision on 02/06/13: This Chapter has been updated to remove IC responsibilities concerning E-Government Act and NOFEAR Act requirements related to Public-facing Web sites previously in Section D.4 and D.13. Although the NIH and its ICs support these activities for the Department of Health and Human Services (HHS), the requirements of these Acts are for “executive agencies” (i.e., HHS).

2. Filing Instructions:

Insert: Manual Issuance 2804, dated 04/09/12. Partial Revision: 02/06/13.

PLEASE NOTE: For information on:

Content of this chapter, contact the issuing offices listed above.

NIH Policy Manual, contact the Division of Management Support (DMS), OMA on

301-496-4606, or enter this URL: https://oma.od.nih.gov/DMS/Pages/Manual- Chapters.aspx

A. Purpose

This chapter provides policy on the creation and management of Public-facing Web sites and new media properties, which includes NIH hosted social media sites, Web applications and mobile Web sites.

B. Scope

This policy applies to all Public-facing Web sites and new media properties that are funded by the National Institutes of Health (NIH), its Institutes and Centers (ICs) and Offices of the Director (OD), whether they are created and hosted by NIH staff or by contract personnel, within the NIH domain or externally. Existing Public-facing Web sites and new media properties funded by NIH should be brought into compliance within 30 days of this chapter tel:(301) 496-5787 javascript:void(0);

javascript:void(0);

https://oma.od.nih.gov/DMS/Pages/Manual-Chapters.aspx https://oma.od.nih.gov/DMS/Pages/Manual-Chapters.aspx publication.

C. Background

The advent of the Internet has fundamentally changed the ways in which NIH communicates and operates with the public. It is critical for NIH to meet expectations for online interactions while maintaining public trust and protecting the reputation and the information resources of the ICs, NIH, HHS and the Federal Government.

D. Policy

NIH recognizes the Web as a transformative tool for communications and operations and, therefore, encourages ICs and OD offices to use the Web to further the NIH mission. To support these efforts and ensure a consistent level of quality across all NIH Web and new media properties, the ICs and OD offices shall comply with the following policies and guidelines for Web development and management:

1. Branding:

a. Domain Names: NIH ICs and OD offices shall, in compliance with HHS policy, ensure that all Web sites reside in the .gov domain unless they obtain a waiver to reside outside the .gov domain. NIH ICs and OD offices shall use .gov domain names for Public-facing Web sites that are funded by NIH per HHS Policy for Internet Domain Names. HHS policy states that the use of .com .org, .edu, .net, .biz, .tv, or other domain names requires a HHS waiver (See http://www.hhs.gov/ocio/policy/200501.html). Public-facing Web sites that do not contain ‘NIH’ in the Web site address, but are controlled and operated by NIH directly or through contract or other agreement affiliated with NIH, such as www.cancer.gov, shall also obtain a HHS waiver.

ICs and OD offices may request a top-level NIH domain name (i.e., .nih.gov) through the Center for Information Technology (CIT) (http://www.net.nih.gov/DNS/). The requests are evaluated to determine whether the requested name is relevant and appropriate to the resource it describes and whether the requestor has official, sanctioned authority for the requested topic area.

Many Web sites exist that resemble government Web sites or appear to provide “official” government information. They can mislead the public into believing and acting on erroneous information. Visitors looking for official government information must be confident they are getting government information. Using domains that are exclusive to the government is one way to provide assurance to citizens that Federal public Web sites are legitimate official government sites.

b. NIH Name and Logo Use: NIH ICs and OD offices that use the names, symbols, logos or identifying marks of NIH, its components, offices or programs shall, in accordance with NIH policy, obtain approval as described in NIH Manual Chapter 1186, “Use of NIH Names and Logos" . ICs are required to submit a request to the NIH Office of Communications and Public Liaison (OCPL) for http://www.hhs.gov/ocio/policy/200501.html http://www.cancer.gov/ http://www.net.nih.gov/DNS/ review and approval before the NIH logo or name may be used.

2. Privacy and Personally Identifiable Information (PII): NIH ICs and OD offices shall ensure each Web property is compliant with NIH Manual Chapter 2805, "NIH Web Privacy Policy".

3. Records Management and Freedom of Information Act (FOIA):

a. Records Management: NIH ICs and OD offices shall maintain Web records and documents in the same manner in which they maintain hardcopy “official” documents for their IC or OD offices. Proper records management and the schedules for records maintenance and disposition shall be in accordance with HHS policy and the NIH Manual Chapter 1743, “Keeping and Destroying Records”. See http://www.archives.gov/records-mgmt/policy/managing-web-records-index.html for further information.

b. Freedom of Information Act (FOIA): NIH ICs and OD offices shall ensure public access to, and dissemination of, records that are created and maintained by the IC and OD office, as prescribed by FOIA and the NIH FOIA Office. Each IC has a FOIA Coordinator and shall maintain a FOIA information page that is accessible through the IC’s Public-facing Web site.

4. Open Government: NIH ICs and OD offices should enable openness, transparency and collaboration by publishing Web content and data in open, industry standard formats, e.g., Portable Document Format (PDF), etc. The open format shall allow information to be retrieved, downloaded, indexed and searched by commonly used Web search applications per the Open Government Directive.

5. Accessibility: NIH IC and OD office Web sites shall be accessible to all individuals in accordance with Section 508 of the Rehabilitation Act of 1973, as amended. Each IC shall ensure that (1) individuals with disabilities who are Federal employees have access to and use of information and data that is comparable to the access to and use of the information and data by Federal employees who are not individuals with disabilities; and (2) individuals with disabilities who are members of the public seeking information or services from a Federal department or agency have access to and use of information and data that is comparable to the access to and use of the information and data by such members of the public who are not individuals with disabilities. All Web tools and services acquired using NIH funds, e.g., under a contract, shall be Section 508 compliant. If there are extenuating circumstances that prevent acquisition of a compliant tool or service, NIH components have the option of requesting a temporary or long-term accommodation or exception from the comparable access requirement.

Requests shall be appropriately documented and submitted through their respective IC Section 508 Coordinator for the approval of the NIH Section 508 Coordinator. All exceptions or accommodations shall be approved in advance of their use.

When considering the use of various third-party sites for information or services that are of comparable value (e.g., multiple sites that provide bus schedules), NIH components shall give preference to third-party sites that are Section 508 compliant and/or accessible to persons with disabilities.

http://www.archives.gov/records-mgmt/policy/managing-web-records-index.html http://www.archives.gov/records-mgmt/policy/managing-web-records-index.html

6. Plain Language: NIH ICs and OD offices shall comply with the Plain Writing Act of 2010, which requires the Federal Government to write in simple, easy-to-understand language. Specifically, the Act defines “plain writing” as writing that the intended audience can readily understand because the writing is clear, concise, well-organized and follows best practices for plain writing. Furthermore, the Act specifies that plain writing shall be used in any writing that is relevant to obtaining Federal benefits or services or complying with Federal requirements.

7. Copyright: NIH ICs and OD offices shall ensure that content that is produced by Federal staff and made available on an NIH Public-facing Web site is in the public domain and does not include copyright notices. ICs and OD offices shall have written permission or a license to post documents or other materials produced by private individuals or organizations and the usage terms need to be followed and should be evaluated and renewed as needed.

8. Government Paperwork Elimination Act (GPEA): NIH ICs and OD offices shall, whenever practicable, use electronic forms, electronic filing, and electronic signatures to conduct official business with the public.

9. Non-Governmental Sites, Applications, and External Linking: NIH ICs and OD offices may utilize third-party, non-governmental sites or embedded application (“widgets”) within a government Web site to engage the public or disseminate information (such as embedding a YouTube video on an IC Web site). Furthermore, ICs and OD offices may establish a presence on or link to a third-party site, such as Facebook, GovLoop or LinkedIn, in support of their mission. Links to external sites should be clearly marked, so that users are aware that they are exiting the NIH site.

Each IC and OD office shall assess the risk of utilizing third-party applications or sites according to guidelines described in NIH Manual Chapter 2809, “NIH Social and New Media Policy.”

10. Limited English Proficiency: NIH IC and OD office Public-facing Web sites shall provide appropriate access for people with limited knowledge of English. ICs shall determine if their Web content requires translation per Department of Justice guidance described in Executive Order 13166 (http://www.justice.gov/crt/lep/13166/eolep.pdf).

11. Search: NIH ICs and OD offices shall provide a search function on all Public-facing Web sites. The search application shall allow users to search among public files within that IC or OD office’s Web domain.

12. Government Accountability and Security:

a. Lobbying: NIH ICs and OD offices shall not use Web and new media properties for direct or indirect lobbying efforts. The content, data and applications shall not be used or designed to influence a member of Congress, a jurisdiction or an official of any government to favor, adopt or oppose, by vote or otherwise, any legislation, law, etc. before or after the introduction of any bill, measure, or resolution proposing such legislation, law, etc.

b. Security: NIH ICs and OD offices shall maintain their Web servers in line with National Institute of Standards and Technology (NIST) Special Publication 800-44, “Guidelines on Securing Public Web Servers” and other associated guidance from NIST (http://csrc.nist.gov/publications/nistpubs/800-44-ver2/SP800-44v2.pdf (PDF Document, 142 pages)) and HHS/NIH policy.

http://www.justice.gov/crt/lep/13166/eolep.pdf http://csrc.nist.gov/publications/nistpubs/800-44-ver2/SP800-44v2.pdf http://csrc.nist.gov/publications/nistpubs/800-44-ver2/SP800-44v2.pdf

E. Definitions and Additional Information/Requirements

1. Child and Children: Unless the context otherwise provides, it means individuals under the age of 13 per the Children’s Online Privacy Protection Act (COPPA) of 1998.

2. Contract: Includes any contract, written or oral, subject to the Federal Acquisition Regulations.

3. Cookies: A text file, saved in a browser’s directory or folder, which is stored in the computer’s memory while the browser is running. The cookie usually goes unnoticed to the user and expires at some point. Using the cookie, the site can collect user preferences. In this file various types of information can be stored, from pages visited on the site, to information voluntarily given to the site. The browser records the cookie onto a “cookie list.”

The Office of Management and Budget Memo M-10-22, Guidance for Online Use of Web Measurement and Customization Technologies (PDF Document, 9 pages) allows Federal agencies to use cookies.

Basically there are two types of cookies used on Web sites:

a. “Persistent cookies” collect and maintain information for later use. They can track the activities of users over time and across different Web and new media properties. These are capable of capturing personal information that can be retrieved by individual identifiers (e.g., name, SSN, etc.) and may therefore be covered by the Privacy Act. Use of persistent cookies requires pre-approval.

b. “Session cookies” do not fall within the scope of this policy. Exempted “session” cookies include those that retain information only during the session or for the purpose of completing a particular online transaction, without any capacity to track users over time and across different Web sites.

4. Disclaimer: A statement that NIH is not responsible for the information or material included on (1) the NIH Web site that was derived from other non-NIH sources and (2) external Web pages. A disclaimer is also used to avoid giving a user the impression that NIH is endorsing information or a commercial product described on an NIH page or at an external site linked to an NIH page. Notice regarding inclusion of information which may be copyrighted, disclaimers, endorsement (general and external links), liability, and medical information may be used, as appropriate, for individual IC Web sites.

Sample disclaimers are available at https://ocio.nih.gov/aboutus/Pages/disclaimer.aspx.

In determining appropriate statements, careful consideration should be given to the nature of the specific site and its potential risk.

5. Exit Page: An intermediary page the user sees before proceeding to third-party Web sites, and which notifies the user that they are leaving NIH-managed Web pages.

6. Kid’s Pages: NIH Web sites directed to children under the age of 13.

7. Personal Identifier: A name, or the identifying number, symbol, or other unique identifier, such as Social Security Number or User ID Number assigned to an individual.

8. Personally Identifiable Information (PII): Information which can be used to distinguish or trace an individual's identity, such as their name, social security number, http://www.whitehouse.gov//sites/default/files/omb/assets/memoranda_2010/m10-22.pdf http://www.whitehouse.gov//sites/default/files/omb/assets/memoranda_2010/m10-22.pdf https://ocio.nih.gov/aboutus/Pages/disclaimer.aspx biometric records, etc. alone, or when combined with other personal or identifying information which is linked or linkable to a specific individual, such as date and place of birth, mother’s maiden name, etc. (Defined in OMB M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information ).

9. The Privacy Act of 1974, as amended: Protects the privacy of individuals by establishing “Fair Information Practices” for the collection, maintenance, use, and dissemination of information by federal agencies. The Privacy Act is the most significant milestone in the history of the protection of the privacy of personal information held by the Federal Government. Many subsequent laws, regulations, and guidance build upon the principles first articulated in the Privacy Act. (Privacy Act of 1974, as amended, 5 U.S.C. 552a).

10. Privacy Policy: “Privacy Policy” is described in OMB Memorandum M-99-18, Privacy Policies on Federal Web Sites and is further explained in OMB Memorandum M-03-22, OMB Guidance for Implementing the Privacy Provisions of the E- Government Act of 2002 . The Privacy Policy should be a consolidated explanation of the agency’s general privacy-related practices that pertain to its official Web site and its other online activities.

11. Third-Party Web Sites or Applications: “Third-party Web sites or applications” refers to Web-based technologies that are not exclusively owned, operated or controlled by a government entity, or Web-based technologies that involve significant participation of a nongovernment entity. Often these technologies are located on a “.com” Web site or other location that is not part of an official government domain.

However, third-party applications can also be embedded or incorporated on an agency’s official Web site.

12. Web 2.0/Social Media Technology: Web 2.0 technologies refer to a second generation of the World Wide Web as an enabling platform for Web-based communities of interest, collaboration, and interactive services. These technologies include those that exist today (listed below) as well as emerging new media technologies that will be developed in the future.

a. Blogs: Web sites where regular entries are made (such as in a journal or diary) and presented in reverse chronological order. Provides the ability to disseminate a message or information to a worldwide audience.

b. Cloud Computing: Uses Internet hosted servers/applications rather than locally installed servers/applications.

c. Social Networking Sites: Web sites that connect people or entities through online communities. Users can establish pages with their profiles and find other people or groups they know or look for other members with similar interests or affiliations. Examples include Facebook and Twitter.

d. Video and multimedia sharing: Web sites that use videos, images, and audio libraries to share information. YouTube is an example.

e. Wikis: Collections of Web pages that encourage users to contribute or directly modify the content.

f. Podcasting: Publishing digital media files on the Web so they can be downloaded onto computers or portable listening devices. Users can subscribe to a “feed” of new media files and download them automatically as they are posted.

http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2007/m07-16.pdf http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2007/m07-16.pdf http://www.whitehouse.gov/omb/memoranda_m99-18 http://www.whitehouse.gov/omb/memoranda_m99-18 http://www.whitehouse.gov/omb/memoranda_m03-22 http://www.whitehouse.gov/omb/memoranda_m03-22

g. RSS Feed: Really Simple Syndication and Rich Site Summary publish frequently updated (syndicated) works to multiple venues.

h. Mashups: Web sites that combine content from multiple sources for an integrated experience.

13. Web Measurement and Customization Technologies: These technologies are used to remember a user’s online interactions with a Web site or online application in order to conduct measurement and analysis of usage or to customize the user’s experience.

(Defined in OMB Memorandum M-10-22, Guidance for Online Use of Web Measurement and Customization Technologies)

a. Single-Session Technologies - These technologies remember a user’s online interactions within a single session or visit. Any identifier correlated to a particular user is used only within that session, is not later reused, and is deleted immediately after the session ends.

b. Multi-Session Technologies - These technologies remember a user’s online interactions through multiple sessions. This approach requires the use of a persistent identifier for each user, which lasts across multiple sessions or visits.

F. Responsibilities

NIH ICs and OD offices shall review and be familiar with the provisions of this policy prior to posting new or revised Web content to ensure compliance. The following are officials with responsibilities associated with this policy. Note that this is not a comprehensive list.

1. NIH Chief Information Officer (CIO) – The official responsible for oversight of IT management at NIH. Specific to this policy, the NIH CIO is responsible for:

a. Approving non- .gov domain name requests prior to submission to HHS.

b. Approving Section 508 exception and accommodation requests.

2. NIH Chief Information Security Officer (CISO) – The NIH official responsible for the NIH Information Security Program and ensuring that the implementation of this policy at NIH is consistent with all other Federal, HHS, and NIH rules and regulations.

(NIH Security policies, guidelines and regulations can be found at:

https://ocio.nih.gov/InfoSecurity/Policy/Pages/default.aspx.)

3. IC Web Site Owner/Administrator – The IC or OD office official who serves as the principal contact responsible for IC Web product development and Web project management. The IC/OD Web Site Owner/Administrator is responsible for ensuring adherence to this and other HHS and NIH Web policies

4. IC Contracting/Project Officer – The IC or OD Office official who oversees the development of the documentation and discussions of assigned contracts for award and administration, performs the final review of contract actions, and provides final signature authority. The IC/OD Contracting/Project Officer is responsible for ensuring any contractual agreements to design, develop, and/or implement Web sites comply with this and other applicable policies.

http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-22.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-22.pdf https://ocio.nih.gov/InfoSecurity/Policy/Pages/default.aspx

G. Procedures

Public-facing Web sites and new media activities shall follow appropriate procedures and clearances. In most cases, the procedures to be followed for print publication apply unless one is posting content that has already been cleared for public use.

For other types of less formal Public-facing Web site content, such as blogs, micro blogging, and replies to comments in public online space, activities should be coordinated through the appropriate supervisory channels. In most cases, the following offices should be contacted:

(1) IC or OD communication office to ensure appropriate content procedures are being followed, (2) IC or OD CIO office to learn if any security procedures need to be followed and

(3) IC or OD FOIA and Privacy liaisons to learn if any FOIA and Privacy procedures are required.

When using third party online applications on a Public-facing Web site or new media property, any polices or procedures associated with that service must be followed.

H. Records Retention and Disposal

All records (e-mail and non-e-mail) pertaining to this chapter must be retained and disposed of under the authority of NIH Manual Chapter 1743,"Keeping and Destroying Records," Appendix 1, NIH Records Control Schedule, in accordance with the specific schedule item as applied to the kind of records.

Web 2.0 Information: A challenge associated with the use of Web 2.0 technologies, including government blogs and wikis and Web pages hosted by commercial providers, is the question of whether information exchanged through these technologies constitute federal records pursuant to the Federal Records Act. According to the guidance, records generated when a user interacts with an agency Web site may form part of a set of official agency records. National Archives and Records Administration (NARA) guidance indicates that content created with interactive software on government Web sites is owned by the government, not the individuals who created it, and is likely to constitute agency records and should be managed as such. NARA issued “Guidance on Managing Web Records” to help agencies make decisions on what records generated by these technologies should be considered agency records: http://www.archives.gov/records-mgmt/pdf/managing-web-records-index.pdf (PDF Document, 28 pages).

NIH e-mail messages. NIH e-mail messages, including attachments that are created on NIH computer systems or transmitted over NIH networks that are evidence of the activities of the agency or have informational value are considered Federal records. These records must be maintained in accordance with current NIH Records Management guidelines. Contact your IC Records Liaison or the NIH Records Officer for additional information.

All e-mail messages are considered Government property, and, if requested for a legitimate Government purpose, must be provided to the requester, employees' supervisor, NIH staff http://www.archives.gov/records-mgmt/pdf/managing-web-records-index.pdf http://www.archives.gov/records-mgmt/pdf/managing-web-records-index.pdf conducting official reviews or investigations, and the Office of Inspector General who may request access to or copies of the e-mail messages. E-mail messages must also be provided to Congressional oversight committees if requested and are subject to Freedom of Information Act requests. Back-up files are subject to the same information requests as original messages and documents.

I. Internal Controls

The purpose of this manual issuance is to provide guidance to ICs and OD offices in meeting requirements related to privacy and the protection of personal information on NIH Public-facing Web site pages.

1. Office Responsible for Reviewing Internal Controls Relative to this Chapter:

Oversight of this policy will be carried out through a coordinated effort between the Office of Management Assessment (OMA), Office of the Chief Information Officer (OCIO), and Office of Communications and Public Liaison (OCPL).

2. Frequency of Review:

Reviews will be ongoing. Appropriate internal controls shall be in place before a Web page may be activated. Webmasters, content mangers, and developers responsible for NIH Web pages and products are responsible for ensuring compliance with NIH policy.

3. Method of Review:

Each year, a workgroup of members from OMA, OCIO and OCPL will survey a sample of NIH Web sites for compliance with NIH policy. External reviews may be used as alternative reviews for this purpose.

4. Review Reports:

Reports will be sent to the NIH Deputy Director for Management (DDM), and circulated to NIH privacy stakeholders, as deemed appropriate by OMA, OCIO and OCPL. Reports should indicate that controls are in place and working well, or indicate any internal management control issues that require the attention of the report recipient(s).

J. References

Laws and Regulations

1. Privacy Act of 1974, 5 United States Code, Section 552a:

http://www.justice.gov/opcl/privstat.htm

2. Privacy Act Regulations, Code of Federal Regulations (CFR) Title 45, part 5:

http://law.justia.com/cfr/title45/45-1.0.1.1.7.html

3. Freedom of Information Regulations, Code of Federal Regulations (CFR) Title 45, part

5 (FOIA):

http://www.access.gpo.gov/nara/cfr/waisidx_10/45cfr5_10.html

4. Freedom of Information Act, 5 U.S.C. Section 552:

http://www.usdoj.gov/oip/foia_guide07/text_foia.pdf (PDF Document, 13 pages)

5. Department of Justice Executive Order 13166 (Limited English Proficiency):

http://www.justice.gov/crt/lep/13166/eo13166.html http://www.justice.gov/opcl/privstat.htm http://law.justia.com/cfr/title45/45-1.0.1.1.7.html http://www.access.gpo.gov/nara/cfr/waisidx_10/45cfr5_10.html http://www.usdoj.gov/oip/foia_guide07/text_foia.pdf http://www.justice.gov/crt/lep/13166/eo13166.html

6. Government Paperwork Elimination Act (GPEA)/Paperwork Reduction Act, 44 U.S.C.

Section 3501:

http://www.archives.gov/federal-register/laws/paperwork-reduction/

7. Memorandum from the Office of the Attorney General; March 19, 2009:

www.usdoj.gov/ag/foia-memo-march2009.pdf (PDF Document, 3 pages)

8. Section 207(f)(1)(b)(iv) of the E-Gov Act of 2002, Public Law 107–347:

http://www.archives.gov/about/laws/egov-act-section-207.html

9. OMB Circular A-130:

http://www.whitehouse.gov/omb/circulars/a130/a130trans4.html

10. Open Government Directive:

http://www.whitehouse.gov/open/documents/open-government-directive

11. OMB Implementation of the Government Paperwork Elimination Act:

http://www.whitehouse.gov/omb/fedreg/gpea2.html

12. Prohibition of Lobbying, Title 18 U.S.C. Section 1913:

http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=browse_usc&docid=Cite:+18USC1913

13. Section 508 of the Rehabilitation Act, 29 U.S.C. Section 794d:

http://www.section508.gov/

Policies, Guidance, and Office Contacts

14. NIH FOIA Office:

http://www.nih.gov/icd/od/foia/index.htm

15. NIH Information Security Policies, Guidelines and Regulations:

https://ocio.nih.gov/InfoSecurity/Policy/Pages/default.aspx

16. HHS Policy for Internet Domain Names:

http://www.hhs.gov/policies/webpolicies/200501.html

17. HHS Web Records Management Policy:

http://www.hhs.gov/web/policies/webpolicies/webrecords.html and http://www.newmedia.hhs.gov/standards/

18. OMB Memo on Policies for Federal Agency Public Web Sites:

http://www.whitehouse.gov/omb/memoranda/fy2005/m05-04.pdf (PDF Document, 5 pages)

Manual Chapters:

19. NIH Manual Chapter 2805, “NIH Web Privacy Policy”

20. NIH Manual Chapter 2809, “NIH Social and New Media Policy”

21. NIH Manual Chapter 1743, “Keeping and Destroying Records:”

http://www.archives.gov/federal-register/laws/paperwork-reduction/ http://www.usdoj.gov/ag/foia-memo-march2009.pdf http://www.archives.gov/about/laws/egov-act-section-207.html http://www.whitehouse.gov/omb/circulars/a130/a130trans4.html http://www.whitehouse.gov/open/documents/open-government-directive http://www.whitehouse.gov/omb/fedreg/gpea2.html http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=browse_usc&docid=Cite:+18USC1913 http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=browse_usc&docid=Cite:+18USC1913 http://www.section508.gov/ http://www.nih.gov/icd/od/foia/index.htm https://ocio.nih.gov/InfoSecurity/Policy/Pages/default.aspx http://www.hhs.gov/policies/webpolicies/200501.html http://www.hhs.gov/web/policies/webpolicies/webrecords.html http://www.newmedia.hhs.gov/standards/ http://www.whitehouse.gov/omb/memoranda/fy2005/m05-04.pdf