data security The OIG recommended that FEMA implement controls to ensure that the agency only sends required data elements of registered disaster survivors to contractors. (Image: Shutterstock)

The Office of Inspector General of the U.S. Department of Homeland Security (OIG), while auditing the Transitional Sheltering Assistance (TSA) program of the Federal Emergency Management Agency (FEMA), has determined that FEMA violated the Privacy Act of 1974 and Department of Homeland Security policy by releasing personally identifiable information (PII) and sensitive personally identifiable information (SPII) of 2.3 million survivors of hurricanes Harvey, Irma, and Maria and the California wildfires in 2017.

Disaster survivors at risk for ID theft, fraud

Without corrective action, the OIG said, the disaster survivors involved in the privacy incident "are at increased risk of identity theft and fraud."

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Steven A. Meyerowitz

Steven A. Meyerowitz, a Harvard Law School graduate, is the founder and president of Meyerowitz Communications Inc., a law firm marketing communications consulting company. He may be contacted at [email protected].