OPIM will use this form to determine whether a new or updated Privacy Impact Assessment (PIA) is required and whether a new or updated System of Records Notice (SORN) is required under the Privacy Act of 1974. OPIM will also use it to document the continuous monitoring of privacy risk and mitigation for the project, program, or system.