2026-19684NoticeWallet

Peace Corps builds volunteer stalker-file under Privacy Act

Published Date: 9/25/2026

Notice

Summary

The Peace Corps is launching a new system to track and manage info about people interested in volunteering, from their first website visit to their entire volunteer journey. This change affects applicants, current volunteers, and anyone interacting with Peace Corps online. The system starts on October 26, 2026, and helps the agency work smarter without costing extra money.

Analyzed Economic Effects

5 provisions identified: 2 benefits, 3 costs, 0 mixed.

Extensive personal and sensitive data collected

The Peace Corps' new CRM will collect a wide range of personal information about website visitors, applicants, trainees, volunteers, and returned volunteers including name, email, home address, telephone number, Social Security Number, demographic data (race, ethnicity, disabilities), birth date, fingerprints, criminal and medical history, and the Google Analytics Client ID. This collection applies from first website/social media contact through the entire volunteer service and after completion of service.

Long, specified retention schedules for different records

The notice specifies retention times for multiple record types: Volunteer Information Database Application (VIDA) records destroyed 6 years after cutoff; Recruitment records destroyed 6 years after cutoff; Security Incident Management System (SIMS) destroyed no sooner than 10 years after cutoff; Returned Peace Corps Volunteer Career Link master file destroyed 6 years after cutoff; Database of Volunteer Experience (DOVE) destroyed 6 years after cutoff; MAXx medical records destroyed 50 years after cutoff; Applicant Medical Case Files destroyed 7 years after final decision or Close of Service; Volunteer Reporting and Grants (VRG) destroyed 10 years if successful, 3 years if unsuccessful; Executive Correspondence Log transferred to National Archives 20 years after the end of a presidential administration; Google Analytics retains Client IDs up to 26 months. The CRM itself is currently unscheduled and no CRM data is authorized for destruction until NARA approves a disposition schedule.

Tracking across your whole volunteer journey

The system will link and track interactions from the time someone visits Peace Corps websites or social media, through applying, training, service, and post-service in order to support recruitment, onboarding, retention, and program evaluation. The agency states this will optimize recruitment strategies and assess applicant and volunteer retention and outcomes.

Records can be shared without consent for many routine uses

The notice lists routine uses where Peace Corps may disclose records without the subject's consent, including to law enforcement, other Federal/State/local agencies, OMB, congressional offices, contractors, the National Archives, U.S. Ambassadors, and in litigation or breach response. Disclosures may be made when considered compatible with the record's purpose or necessary to respond to breaches or investigations.

Data stored in FedRAMP High cloud with encryption and restricted access

The system will store electronic records in a FedRAMP Certified Class D (High) SaaS cloud environment with encryption at rest and in transit using FIPS 140-3 standards. Access is limited to authorized personnel with Personal Identity Verification (PIV) credentials and technical safeguards (firewalls, vulnerability scans, access logs) are in place.

Personalized for You

How does this regulation affect your finances?

Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Key Dates

Published Date
Comments Due
9/25/2026
10/26/2026

Department and Agencies

Department
Independent Agency
Agency
Peace Corps
Source: View HTML

Related Federal Register Documents

Previous / Next Documents

Back to Federal Register