What are the Senior Agency Official for Privacy's responsibilities, and how do they differ from the records officer's?

The Senior Agency Official for Privacy (SAOP) and the agency records officer both help safeguard information, but they answer different questions. The SAOP asks, “Are we collecting, using, and protecting personal information responsibly and lawfully?” The records officer asks, “Are we creating, keeping, and disposing of records properly, for the right amount of time?” The two roles overlap most where records contain personal data, which is why they must coordinate closely.

What the SAOP Does

The SAOP is the senior leader accountable for an organization’s privacy program. In the federal context, this is typically a high-level official with agency-wide authority. Core responsibilities generally include:

• Setting privacy policy and strategy for how personally identifiable information (PII) is collected, used, shared, and protected.
• Ensuring legal compliance, including obligations under the Privacy Act of 1974 and related privacy requirements.
• Overseeing privacy impact assessments and reviewing programs, systems, and rulemakings that touch personal data.
• Managing privacy risk, breach response, and workforce privacy training.
• Reporting and accountability to leadership and oversight bodies on the state of the privacy program.

The SAOP’s lens is the individual and their data: minimizing collection, limiting use to authorized purposes, and protecting against unauthorized disclosure.

What the Records Officer Does

The records officer leads the records and information management program. Their lens is the record as evidence of activity. Core duties include:

• Developing and applying records schedules that define how long records are kept and when they may be destroyed or transferred.
• Ensuring records are created, captured, and maintained so they remain authentic, reliable, and usable.
• Coordinating disposition, including transfer of permanent records to an archives and lawful destruction of temporary records.
• Supporting access requests and legal holds.

Where They Differ — and Connect

The clearest difference is purpose. The SAOP governs privacy outcomes; the records officer governs the records lifecycle. Tension can arise when privacy favors minimization and timely deletion, while recordkeeping requires retaining records for a fixed period. Neither role can unilaterally decide: a record containing PII must meet its retention schedule and its privacy protections.

In practice, strong programs treat these as partners. Records schedules should reflect privacy requirements, and privacy assessments should account for retention and disposition.

Learn more on the privacy and PII topic hub.