Privacy
The DHS Privacy Office is responsible for evaluating the Department programs, systems, and initiatives for potential privacy impacts, and providing strategies to reduce the privacy impact.
-
DHS/TSA/PIA-042 TSA OIA Technology Infrastructure Modernization Program
The Transportation Security Administration (TSA)’s Office of Intelligence and Analysis (OIA) Technology Infrastructure Modernization (TIM) Program is an enterprise architecture designed to align TSA security threat assessment (STA) with credentialing activities for individuals. These individuals require access to transportation facilities, infrastructure, assets, Sensitive Security Information (SSI), or related security credentials or clearances. TIM integrates several vetting programs and systems and facilitates STA adjudication, credentialing, and redress processes. TIM accesses the same Personally Identifiable Information (PII) that is already collected for the underlying STA programs. TIM performs credentialing activities utilizing the PII that the underlying programs collect for the STAs. In light of this new information technology framework involving existing PII, TSA is conducted this Privacy Impact Assessment (PIA) pursuant to the privacy provisions of the E-Government Act of 2002.
-
DHS/TSA/PIA-043 Travel Protocol Office Program
The Transportation Security Administration (TSA) established the Travel Protocol Office (TPO) to support and facilitate the movement of eligible travelers whose presence at a security screening checkpoint may distract other travelers and/or reduce the efficiency of the screening process. TSA plans to collect limited Personally Identifiable Information (PII) on these individuals in order to facilitate airport transit and to conduct security screening operations. The TPO Program applies to commercial airports within the continental United States and its territories. Because this program entails collecting information about members of the public in identifiable form, the E-Government Act of 2002 requires that TSA conduct a Privacy Impact Assessment.
-
Customer Scheduling and Services
U.S. Citizenship and Immigration Services (USCIS) allows customers to schedule appointments with an Immigration Service Officer (ISO) to discuss the specifics of their benefit application and petition through the infopass.uscis.gov website and customer service kiosks. This Privacy Impact Assessment (PIA) discusses the USCIS systems associated with scheduling and managing appointments and evaluates the privacy risks and mitigation strategies built into the systems. These systems include InfoPass and the Customer Management Information System (CMIS). USCIS is updating and reissuing this PIA, originally published on June 6, 2013, because CMIS may collect, use, and maintain not only Alien Number, but also USCIS Electronic Immigration System Numbers and Receipt Numbers. USCIS also removed references to a planned automated process for an individual to check in for his or her appointment at a USCIS field office through bar code scanners that was not implemented, and updated the system’s Authority to Operate.
-
DHS/CBP/PIA–024 Arrival and Departure Information System
The Department of Homeland Security (DHS), U.S. Customs and Border Protection (CBP) Arrival and Departure Information System (ADIS) consolidates data from a variety of systems to create a unique person-centric record with complete travel history. Originally, CBP created ADIS to identify individuals who had overstayed their class of admission (“visa overstays”); however, due to ADIS’s unique abilities to conduct biographic matching, data-tagging, and filtering, CBP is broadening its use of ADIS for all traveler encounters regardless of citizenship. CBP is republishing this Privacy Impact Assessment (PIA) to provide notice, and assess the privacy risks, of expanding ADIS beyond its original visa overstay mission. As the primary CBP system used to determine person-centric travel history and immigration status, ADIS supports a variety of non-law enforcement use cases that often require U.S. citizen travel history. CBP is reissuing this PIA to document the expanded uses of ADIS and its maintenance of all CBP travel records, including those of U.S. citizens.
-
DHS/OBIM/PIA-001 Automated Biometric Identification System
The Automated Biometric Identification System (IDENT) is the central DHS-wide system for storage and processing of biometric and associated biographic information for national security; law enforcement; immigration and border management; intelligence; background investigations for national security positions and certain positions of public trust; and associated testing, training, management reporting, planning and analysis, or other administrative uses. This Privacy Impact Assessment (PIA) and the attached appendices provide transparency into how the system uses Personally Identifiable Information (PII) and details the system’s sharing partners and functions.
-
DHS Data Mining Reports
The Data Mining Report is published annually pursuant to the Federal Agency Data Mining Reporting Act of 2007, which requires DHS to report to Congress on DHS activities that meet the Act’s definition of data mining. The report summarizes DHS programs that conduct pattern-based queries, searches, or analyses of one or more electronic databases to discover or locate a predictive pattern or anomaly indicative of terrorist or criminal activities.
-
DHS/FEMA/PIA-035 Customer Satisfaction Analysis System (CSAS)
The FEMA Recovery Directorate, Customer Satisfaction Analysis (CSA) Section owns and administers the Customer Satisfaction Analysis System (CSAS). CSAS collects, stores, and reports on responses received through surveys, questionnaires, focus groups, and/or one-on-one interviews designed to assess customer satisfaction and improving FEMA services. FEMA conducted this Privacy Impact Assessment (PIA) because CSAS stores Personally Identifiable Information (PII) from FEMA employees and members of the public in order to conduct CSA’s customer service satisfaction assessments.
-
Biographic Visa and Immigration Information Sharing with Canada
DHS/CBP/PIA-023 Biographic Visa and Immigration Information Sharing with Canada
-
DHS/TSA/PIA-034 – TSA Enterprise Performance Management Platform (EPMP)
The Enterprise Performance Management Platform (EPMP) is a Transportation Security Administration (TSA) system is designed to assist in performing security management functions using a wide variety of data associated with security, equipment, and screening processes from TSA’s security activities. EPMP maintains Personally Identifiable Information (PII) on members of the public in excess of basic contact information, which triggered the requirement to conduct the original EPMP Privacy Impact Assessment (PIA) dated May 10, 2011. TSA updated this PIA to reflect 1) the inclusion of the Visible Information Management System (VIMS), a data management module within the EPMP framework that supports the Visible Intermodal Prevention and Response (VIPR) Program; 2) the transfer of payroll transactions for Transportation Security Officers (TSO) from the Performance Management Information System (PMIS) to the Airport Information Management (AIM) System; and 3) the storing of PII on individuals identified in the Terrorist Screening Database (TSDB) as posing a threat to transportation or national security in the AIM System.
-
Export Information System (EIS)
DHS/CBP/PIA-020 Export Information System (EIS)