32 CFR 806b.35 - Balancing protection.
Balance additional protection against sensitivity, risk and cost. In some situations, a password may be enough protection for an automated system with a log-on protocol. Others may require more sophisticated security protection based on the sensitivity of the information. Classified computer systems or those with established audit and password systems are obviously less vulnerable than unprotected files. Follow Air Force Instruction 33-202, Computer Security, 5 for procedures on safeguarding personal information in automated records.
(a) AF Form 3227, Privacy Act Cover Sheet, 6 is optional and available for use with Privacy Act material. Use it to cover and protect personal information that you are using in office environments that are widely unprotected and accessible to many individuals. After use, such information should be protected as outlined in DoD 5400.7-R/Air Force Supp.
(b) Privacy Act Labels. Use of Air Force Visual Aid 33-276, Privacy Act Label, is optional to assist in protecting Privacy Act information on compact disks, diskettes, and tapes.