The Foreign Affairs Manual section 5 Information Management provides the rules of behavior governing the use and protection of Personally Identifiable Information (PII). 5 FAM 469.2 (c) indicates that workforce members are responsible for protecting PII by accessing only records for which they have a “need to know”; and not disclosing PII information to outside entities unless authorized to do so or in accordance with the provisions of the Privacy Act of 1974.