This guidance specifically concerns itself with data rights and personally identifiable information, with is related to the CARES Act by means of the PPP and the Section 7(a) loans. The following is directly from SBA's website here and the guidance is at

This is an assessment of all SBA information systems containing personally identifiable information (PII). SBA values its employees’ and contractors’ personal information contained in records or information systems, and will continue to do all it can to protect it in accordance with the E-government Act of 2002. This Act requires all Federal agencies to assess the impact of all new and revised information systems. PIAs also allow us to clearly articulate to the public how the agency handles its information. In addition the PIA discusses how we address privacy concerns and safeguard our information.

The attached file contains the privacy impact assessments of the following SBA information systems: Business Development Management Information Systems, Contract Management Systems, Disaster Credit Management System, HUBZone, Loan Accounting System, Loan/Lender Monitoring System, Loan Management and Accounting System, Microloan Data Entry System, TechNet, TeamMate Automated Audit Documentation System, HSPD-12, eVersity EEO Management System, iComplaints EEO Management System, Auditing Information Management System, GoalOwner, Investigations Management Information System, 7(a) Loan Guaranty Processing System, CRM - Correspondence Management, Oracle Administrative Accounting System/JAAMS, E8(a), Customer Relationship Management (CRM), Financial Management System (FMS), Customer Service Center Telecommunication System (CSCTCS), Office of Hearings & Appeals Case Tracking System (OHACTS), Paycheck Protection Program Lender Gateway, Surety Bond Gurantee/Preferred Surety Bond, Freedom of Information Act (FOIA) Case Tracking System, Central Servicing Agent/Fiscal Transfer Agent Secondary Market System (CSA/FTA), E-Lending, SBA LAN/WAN, Third Party Social Media Websites and Applications