include information about PIAs

[afeld]

Took it out because https://before-you-ship.18f.gov/privacy/ was largely GSA-focused. Also, at GSA, the PIA wasn't officially part of the ATO process; per @trevorbryant in Slack, it usually is.

[afeld]

Examples:

• https://www.gsa.gov/reference/gsa-privacy-program/privacy-impact-assessments-pia
• https://www.state.gov/privacy-impact-assessments-privacy-office/

Maybe it's common for agencies to post these...?

[trevorbryant]

It's actually required! Using the below Googlefu can find an agency's PIA listing.
privacy impact assessment site:.gov

The Privacy Act requires that all agencies make this information public.