Every year. PII (Personal Identifiable Information) is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Organizations are required to report this annually under the Privacy Act of 1974.