As part of our ATO process, we found that NIST AC-8 is not being met.
This would have (until a few days ago) required a pop-up with a large, scary banner.
Now, we need to add a privacy policy link to the footer of our static site and app (GSA guidance).
### We'll know we're done when
- [ ] We've added the link to GSA privacy policy in the footer of the static site
- [ ] We've added the link to GSA privacy policy in the footer of the app
As part of our ATO process, we found that NIST AC-8 is not being met.
This would have (until a few days ago) required a pop-up with a large, scary banner.
Now, we need to add a privacy policy link to the footer of our static site and app (GSA guidance).