CISA Instagram Privacy Policy and Notice

Cybersecurity & Infrastructure Security Agency (CISA or Agency) will use this Instagram page for external relations (communications/outreach/public dialogue), to make photos and images widely available to the general public, and promote transparency and accountability. CISA External Affairs serves as the executive agent for the CISA Instagram page and controls who at the Agency has access to make changes to the page.

Instagram is a third-party social networking photo and image sharing tool and its privacy policy can be found at The CISA privacy policy governs CISA’s use of Instagram from a privacy perspective. The CISA privacy policy can be found at CISA Website Privacy Policy | CISA.

Users engaging the CISA Instagram page expect privacy protections while interacting with the agency. CISA will only post photos and images and, to the extent possible, will not allow the posting of public comments associated with these images. CISA will not use this Instagram page to: 1) actively seek PII; 2) search Instagram for or by PII; and 3) “view” public users’ photos and images proactively (exclusion is made to “viewing” other U.S. federal, state, local, and tribal government agencies.) To the extent a user posts or sends PII to CISA’s Instagram page, CISA will use the minimum amount necessary to accomplish a purpose authorized by statute, executive order, or regulation.

CISA will use this Instagram page to: 1) establish user names and passwords to form profiles; 2) accept requests from public user accounts to view CISA photos and images; and 3) post photos and images on Instagram related to official CISA business. CISA may share photos and images posted on the CISA Instagram page if there is a demonstrated need to know, and will only post photos and images after it has been appropriately approved and vetted by CISA External Affairs.

The photos and images posted on the CISA Instagram page is available to the individual posting and to any and all users on the CISA Instagram page who are able to access the public-facing side of the account. To protect your privacy and the privacy of others, do not post photos and images that include your full name, date of birth, social security number, address, phone numbers, email addresses, case numbers, or any other sensitive PII.

This section was last reviewed / modified on July 16, 2021.