|
Process Name |
PrivacyDataComplaintProcess |
1.0 |
Owner |
|
|
Primary Functional Area |
NCCS User Services |
|
Primary Owner(s) of Process |
NCCS User Services Group |
|
Title |
User Privacy Data Complaint Process |
2.0 |
Frequency |
|
|
How Often does the Process Occur |
As needed |
|
Approximate Amount of Time to Complete |
Variable |
|
Are there SLA (Service Level Agreements) or Deadlines Associated with this Process |
No |
3.0 |
Purpose |
|
|
What Drives this Process-Why |
This process is required as per Agency direction that requires a complaint process be in place for NCCS users who believe their "information in identifiable form" (IIF) has been inappropriately obtained, used, or disclosed, or that the IIF is inaccurate. |
|
What Service does this Process Support |
NCCS User Services, privacy data management, compliance with Agency policy. |
4.0 |
Dependencies/Input |
|
|
HW/SW Required for Process |
None |
|
Information or Data required for Process |
Name of user |
|
Labor or Resources Required |
NCCS User Services Group, access to NCCS user database |
5.0 |
Impact |
|
|
Machines Impacted |
None |
|
Users Impacted |
Yes, user originating complaint |
|
Processes Impacted |
None |
6.0 |
Output |
|
|
What is the Output of this Process |
Resolution of complaint for inappropriate acquisition, disclosure or use, or correction of inaccurate data. Possible modification to user services procedures or mechanisms should there have been inappropriate acquisition, disclosure or use. |
|
Who Receives this Output |
NCCS User Services Group, NCCS user database, user originating complaint. |
|
Validation Done |
Confirmation of corrected data if necessary, validation of modifiied process if necessary. |
|
Requires Request for Change |
No |
7.0 |
Steps |
|
|
List of Steps Involved for Process
(These Steps must be detailed enough that someone with a reasonably similar
background could follow these steps. For example if files are saved in a
specific directory, then that directory must be listed in the steps)
|
- If a process or mechanism complaint concerning inappropriate acquisition, disclosure or use then the process in question must be examined for flaws.
- Correct the flaw in process or mechanism and verify correct.
- If data incorrect, then obtain correct data from user and update the user database and verify correct.
- Once complete, inform NCCS user support team and user originating complaint.
|