This certificate program covers the three sets of rules that govern sensitive information in federal work. Privacy and PII/PHI Protection Awareness works through the Privacy Act of 1974, the difference between ordinary PII, sensitive PII, and protected health information, and what to do in the first hour after a suspected breach. CUI Handling and Data Classification covers the CUI Registry, CUI Basic versus CUI Specified, assembling and placing banner and portion markings, and safe storage, transmission, and destruction. Records and Information Governance closes the program with what makes something a federal record, how retention schedules work, why an unscheduled record cannot lawfully be destroyed, and how litigation holds suspend disposition.
The three were built to be taken together. Where the subject matter overlapped, the material was removed rather than repeated, so the records course does not re-teach privacy, FOIA, or CUI — it explains how one record can carry several obligations at once and has learners practice deciding which applies. The program also covers ground most compliance training skips: protected health information as non-clinical staff actually meet it in occupational health and workers' compensation files, chat platforms as a source of federal records, and current government-wide expectations for using CUI with AI tools. It suits federal employees, contractors, and detailees who handle sensitive information routinely, and assumes no prior background.
