|
06.3 HHS PIA Summary for Posting (Form) / OIG Audit & Evaluation Analysis System (TeraSys) (Item)
|
|
PIA SUMMARY AND APPROVAL COMBINED
|
|
Is this a new PIA 2008?: No
If this is an existing PIA, please provide a reason for revision: PIA Validation
1. Date of this Submission: Aug 16, 2007
2. OPDIV Name: OIG
3. Unique Project Identifier (UPI) Number: 009-92-01-47-02-0001-00-301-093
4. Privacy Act System of Records (SOR) Number: 09-70-0005
5. OMB Information Collection Approval Number: No
6. Other Identifying Number(s): No
7. System Name: Audit and Evaluation System (TeraSys)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Lynn Melton
0. Provide an overview of the system: The Audit & Evaluation Analysis System maintains an extract of Medicare paid claims data from the CMS National Claims History Data Base sufficient to conduct the data analyses underlying OIG's audits, inspections, and investigations of the Medicare program. The OIG obtains this information under the authority of the Inspector General Act of 1978, 5 U.S.C. App. 3.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through IIF within any database(s), record(s), file(s) or website(s) hosted by this system?: Yes
Note: This question seeks to identify any, and all, personal information associated with the system. This includes any IIF, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation
Note: If no IIF is contained in the system, please answer questions 21, 23, 30, 31, 37, 50 and 54, then promote the PIA to the Sr. Privacy Official who will authorize the PIA.
If this system contains IIF, all remaining questions on the PIA Form Tabs must be completed prior to signature and promotion.
21. Is the system subject to the Privacy Act?: Yes
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): The information is maintained for OIG internal use. However, information may be provided to entities outside the OIG where it is essential to conduct audit, inspection, and investigative activities. For example, personally identifiable information may be selectively provided to a healthcare provider or Medicare contractor in order to obtain additional medical information essential to an audit, inspection, or investigation. The OIG may also provide information to the Department of Justice to support an ongoing criminal investigation or court case.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) In this description, indicate whether the information contains IIF; and (4) whether submission of personal information is voluntary or mandatory: The information contained in the database documents paid claims information submitted by health care providers for inpatient, outpatient, home health, hospice, skilled nursing facility, physician and supplier, and durable medical equipment. The information contained within contains the necessary data elements to retrieve source documentation from Medicare contractors and providers in the course of audits, inspections, and investigations. The OIG obtains this information under the authority of the Inspector General Act of 1978, 5 U.S.C. App. 3. This system provides the source information required to effectively and efficiently execute the mission of the OIG. This includes conducting audits, inspections, and investigations of the Medicare program.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose IIF is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); and (2) notify and obtain consent from individuals regarding what IIF is being collected from them and how the information will be used or shared: The information is an extract of the CMS National Claims History Data Base obtained from the Centers for Medicare & Medicaid Services. The OIG obtains this information under the authority of the Inspector General Act of 1978, 5 U.S.C. App. 3.
32. Does the system host a website?: No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of IIF?: Yes
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: The information is maintained on a centrally managed OIG computer system. Access is restricted by physical and computer-based access controls. Access is strictly limited to authorized OIG staff members via a two level authentication process. Users must be initially authenticated as valid OIG staff and are then authenticated to the Audit & Evaluation System by an independent second level authentication system. All computer files and printed listings are safeguarded in accordance with the provisions of the National Institute of Standards and Technology Federal Information Processing Standard 31, and the HHS Information Resources Management Manual, Part 6, "ADP Systems Security."
PIA Reviewer Approval:
Comments:
PIA Reviewer Name: Lynn Melton
Sr. Official for Privacy Approval: Promote
Comments: The Senior Official for Privacy is the Chief Information Officer.
Sr. Official for Privacy Name: Christopher Ballister
Sign-off Date: Jul 24, 2006
Date Published: Jun 26, 2008
|
|
06.3 HHS PIA Summary for Posting (Form) / OIG Audit Work System (TeamMate) (Item)
|
|
PIA SUMMARY AND APPROVAL COMBINED
|
|
Is this a new PIA 2008?: No
If this is an existing PIA, please provide a reason for revision: PIA Validation
1. Date of this Submission: Aug 16, 2007
2. OPDIV Name: OIG
3. Unique Project Identifier (UPI) Number: 009-92-01-47-02-0001-00-301-093
4. Privacy Act System of Records (SOR) Number: None
5. OMB Information Collection Approval Number: No
6. Other Identifying Number(s): No
7. System Name: Audit Work System (TeamMate)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Lynn Melton
10. Provide an overview of the system: The Audit Work System is a distributed information system supporting the OIG's audit responsibilities authorized by the Inspector General Act of 1978, 5 U.S.C. App. 3. The system is maintained to increase the efficiency and productivity of the audit process by automating working paper preparation, internal review, report generation, and retention. The system utilizes the commercial software product, TeamMate, to manage and integrate working papers prepared with various standard office automation products.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through IIF within any database(s), record(s), file(s) or website(s) hosted by this system?: Yes
Note: This question seeks to identify any, and all, personal information associated with the system. This includes any IIF, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation
Note: If no IIF is contained in the system, please answer questions 21, 23, 30, 31, 37, 50 and 54, then promote the PIA to the Sr. Privacy Official who will authorize the PIA.
If this system contains IIF, all remaining questions on the PIA Form Tabs must be completed prior to signature and promotion.
21. Is the system subject to the Privacy Act?: No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): Only authorized staff conducting or reviewing audits use TeamMate. Access to information for individual audits is limited to staff assigned to the audit. Other offices within the OIG, such as the Office of Investigations or the Office of Counsel to the Inspector General, may have a need on a case-by-case basis to review audits conducted using TeamMate. Other law enforcement agencies may be provided the information based on the scope and findings of an audit; information may also be shared with auditees and other third parties when necessary to obtain information relevant to the audit. Triennially, the OIG's audit process is subject to a quality control review conducted by the Inspector General of another agency.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) In this description, indicate whether the information contains IIF; and (4) whether submission of personal information is voluntary or mandatory: The system is used in conducting audit work of the Department of Health and Human Services programs and in preparing related reports on behalf of the OIG. It is a vertical application that documents the audit process - planning preparation, review, report generation and storage - in an electronic format. The nature and scope of the information is determined by the objectives of the audit. Therefore, the information pertaining to a specific audit may or may not contain personally identifiable information. The conduct of audits and the issuance of audit reports are integral to OIG's mission.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose IIF is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); and (2) notify and obtain consent from individuals regarding what IIF is being collected from them and how the information will be used or shared: Personally identifiable information is not directly retrievable from the Audit Work System. Such information is generally peripheral to the audit and obtained from the auditee. An audit start notice is provided to the auditee containing the description and objectives of the audit. Sufficient background is included to inform the reader of the audit process. In addition to the audit start notice, auditors send a notification letter to the auditee on all audits and reviews. A notification letter provides a means of formalizing the understanding between the OIG and the auditee concerning the objectives of the audit as well as apprising auditees of the documents and records which it should make available to auditors.
32. Does the system host a website?: No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of IIF?: Yes
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: Access to audit working papers is restricted by physical and computer-based access controls. Access within OIG is strictly limited to authorized staff members. Access to information on specific audits is further restricted based on role-based security features that limit access to assigned auditors, reviewers, and managers. All computer files and printed listings are safeguarded in accordance with the provisions of the National Institute of Standards and Technology Federal Information Processing Standard 31, and the HHS Information Resources Management Manual, Part 6, "ADP Systems Security."
PIA Reviewer Approval:
Comments:
PIA Reviewer Name: Lynn Melton
Sr. Official for Privacy Approval: Promote
Comments: The Senior Official for Privacy is the Chief Information Officer.
Sr. Official for Privacy Name: Christopher Ballister
Sign-off Date: Aug 17, 2006
Date Published: Jun 26, 2008
|
|
06.3 HHS PIA Summary for Posting (Form) / OIG Corporate Management System (CorpView) (Item)
|
|
PIA SUMMARY AND APPROVAL COMBINED
|
|
Is this a new PIA 2008?: NoIf this is an existing PIA, please provide a reason for revision: PIA Validation
1. Date of this Submission: Aug 16, 2007
2. OPDIV Name: OIG
3. Unique Project Identifier (UPI) Number: 009-92-01-47-02-0001-00-301-093
4. Privacy Act System of Records (SOR) Number: 09-90-0003; 09-90-0100
5. OMB Information Collection Approval Number: No
6. Other Identifying Number(s): No
7. System Name: Corporate Management System (CorpView)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Lynn Melton
10. Provide an overview of the system: The OIG Corporate Management System is a centralized information system supporting the OIG's mission and administrative operations authorized by the Inspector General Act of 1978, 5 U.S.C. App 3. The system is maintained for the purpose of documenting, tracking, and reporting OIG's audit, inspection, and investigative activities. The investigative reporting subsystem is used to document the outcome of OIG reviews of allegations and complaints received concerning HHS programs and operations; aid in prosecutions brought against the subjects of OIG investigations; maintain a record of OIG investigations to other Departmental components for their use in operating and evaluating their programs and in imposition of civil and administrative sanctions; and serve as a repository and source for information necessary to fulfill its statutory reporting requirements. The audit information subsystem is used to maximize staff resources and to provide audit cost summary data; to track staff hours allocated towards audit preparation and active audit projects which will allow for more effective scheduling of unassigned personnel and to categorize indirect time expended for end-of-year reporting; to plan workloads; to schedule travel and to control travel costs on assigned audit projects; to assist in providing time and attendance to the centralized payroll system; and to schedule and track training.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through IIF within any database(s), record(s), file(s) or website(s) hosted by this system?: Yes
Note: This question seeks to identify any, and all, personal information associated with the system. This includes any IIF, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation
Note: If no IIF is contained in the system, please answer questions 21, 23, 30, 31, 37, 50 and 54, then promote the PIA to the Sr. Privacy Official who will authorize the PIA.
If this system contains IIF, all remaining questions on the PIA Form Tabs must be completed prior to signature and promotion.
21. Is the system subject to the Privacy Act?: Yes
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): a. Information from this system may be disclosed to any other federal agency or any foreign, state, or local government agency responsible for enforcing, investigating, or prosecuting violations of administrative, civil, or criminal law or regulation where that information is relevant to an enforcement proceeding, investigation, or prosecution within the agency's jurisdiction. b. Information from this system may be disclosed to (1) the Department of Justice in connection with requests for legal advice and in connection with actual or potential criminal prosecutions or civil litigation pertaining to the Office of Inspector General, and (2) a Federal or State grand jury, a Federal or State court, administrative tribunal, opposing counsel, or witnesses in the course of civil or criminal proceedings pertaining to the Office of Inspector General. c. Information from this system may be disclosed to a federal, state, or local agency maintaining civil, criminal or other relevant enforcement records or other pertinent records such as current licenses, if necessary to obtain a record relevant to an agency decision concerning the hiring or retention of an employee, the insurance of a license, grant or other benefit. d. Information from this system may be disclosed to a federal agency in response to its request in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the record is relevant and necessary to the requesting agency's decision on the matter. e. Relevant information may be disclosed from this system to the news media and general public where there exists a legitimate public interest, e.g. to provide information on events in the criminal process, such as indictments, and where necessary for protection from imminent threat to life or property. f. Where federal agencies having the power to subpoena other federal agencies' records, such as the Internal Revenue Service, issue a subpoena to the Department for records in this system, the Department will make such records available. g. When the Department contemplates that it will contract with a private firm for the purpose of collating, analyzing, aggregating or otherwise refining records in this system, relevant records will be disclosed to such contractor. The contractor shall be required to maintain Privacy Act safeguards with respect to such records. h. Disclosures may be made to organizations deemed qualified by the Secretary to carry out quality assessments. i. Information from this system may be disclosed in the course of employee discipline of competence determination proceedings. j. Disclosures may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual. k. Information from this system may be disclosed to the Department of Justice, to a judicial or administrative tribunal, opposing counsel, and witnesses, in the course of proceedings involving HHS, an HHS employee (where the matter pertains to the employee's official duties), or the United States, or any agency thereof where the litigation is likely to affect HHS, or HHS is a party or has an interest in the litigation and the use of the information is relevant and necessary to the litigation. l. Information from this system may be disclosed to a Federal, State of local agency maintaining pertinent records, if necessary to obtain a record relevant to a Department decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant, or other benefit. m. Information from this system may be disclosed to third party contacts, including public and private organizations, in order to obtain information relevant and necessary to the investigation of potential
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) In this description, indicate whether the information contains IIF; and (4) whether submission of personal information is voluntary or mandatory: No. 23 cont. violations in HHS programs and operations, or where disclosure would enable the OIG to identify violations in HHS programs or operations or otherwise assist the OIG in pursuing on-going investigations. n. Records may be disclosed to student volunteers, individuals working under a personal services contract, and other individuals performing functions for the Department but technically not having the status of agency employees, if they need access to the records in order to perform their assigned agency functions.
No. 30. Categories of individuals covered by the system: Individuals relevant to OIG's audit, inspection, and investigative activities, including but not limited to the subjects of an investigation, complainants, and key witnesses where necessary for documentary identification purposes. Categories of records in the System: Criminal investigative files and extracts from that file consisting of a computerized case management and tracking file. The system aggregates the management information required to effectively and efficiently execute the mission of the OIG. This includes supporting audit, inspection, and investigative management activities and day-to-day administrative management needs.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose IIF is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); and (2) notify and obtain consent from individuals regarding what IIF is being collected from them and how the information will be used or shared: The OIG obtains information from a wide variety of sources during the conduct of its activities, including information from the Department and other Federal, State, and local agencies, witnesses, complainants and other nongovernmental sources. Pursuant to subsection (j)(2) of the Privacy Act, 5 U.S.C. 552a(j)(2), the Secretary has exempted the criminal investigative files of this system from the access, amendment, correction, and notification provisions of the Act, 5 U.S.C. 552a(c)(3), (d)(1)-(4), (e)(4)(G) and (H). The civil and administrative investigative files are exempted from certain provisions of the Act under 5 U.S.C. 552a(k)(2). Pursuant to 45 CFR 5b.11(b)(2)(ii)(D), the files are exempt from the following subsections of the Act: (c)(3), (d) (1)-(4), and (e)(4) (G) and (H).
32. Does the system host a website?: Yes
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of IIF?: Yes
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: Records are maintained in a restricted area and accessed only by Department personnel. Access within OIG is strictly limited to authorized staff members. All employees are given instructions on the sensitivity of such files and the restrictions on disclosure. Access within HHS is strictly limited to management officials and employees on a need-to-know basis. All computer files and printed listings are safeguarded in accordance with the provisions of the National Institute of Standards and Technology Federal Information Processing Standards 31, and the HHS Information Resources Management Manual, Part 6, "ADP Systems Security."
PIA Reviewer Approval:
Comments:
PIA Reviewer Name: Lynn Melton
Sr. Official for Privacy Approval: Promote
Comments: The Senior Official for Privacy is the Chief Information Officer.
Sr. Official for Privacy Name: Christopher Ballister
Sign-off Date: Jul 24, 2006
Date Published: Jun 26, 2008
|
|
06.3 HHS PIA Summary for Posting (Form) / OIG Infrastructure Services (Item)
|
|
PIA SUMMARY AND APPROVAL COMBINED
|
|
Is this a new PIA 2008?: No
If this is an existing PIA, please provide a reason for revision: PIA Validation
1. Date of this Submission: Aug 16, 2007
2. OPDIV Name: OIG
3. Unique Project Identifier (UPI) Number: 009-92-02-00-02-0002-00-404-139
4. Privacy Act System of Records (SOR) Number: None
5. OMB Information Collection Approval Number: No
6. Other Identifying Number(s): No
7. System Name: Corporate Mission Support System (IGSS)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Lynn Melton
10. Provide an overview of the system: The Corporate Mission Support System provides the computing and communications infrastructure for OIG offices nationwide. It supports all OIG direct mission and administrative activities performed by the OIG under the authority of the Inspector General Act of 1978, 5 U.S.C. App. 3.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through IIF within any database(s), record(s), file(s) or website(s) hosted by this system?: Yes
Note: This question seeks to identify any, and all, personal information associated with the system. This includes any IIF, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation
Note: If no IIF is contained in the system, please answer questions 21, 23, 30, 31, 37, 50 and 54, then promote the PIA to the Sr. Privacy Official who will authorize the PIA.
If this system contains IIF, all remaining questions on the PIA Form Tabs must be completed prior to signature and promotion.
21. Is the system subject to the Privacy Act?: No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): The information is maintained for OIG internal use. The OIG may provide information to the Department of Justice to support ongoing criminal investigation or court cases.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) In this description, indicate whether the information contains IIF; and (4) whether submission of personal information is voluntary or mandatory: The Corporate Mission Support System is not an information system in itself. It provides the computing and communications foundation for and integrates with OIG's information systems. In that capacity, it provides the first level of identification and authentication of OIG staff authorized access to OIG systems and their information. To accomplish this function, it maintains basic identify and organizational assignment information on OIG staff extracted from the Department's Enterprise Human Resource and Payroll (EHRP) System. The information maintained by the Corporate Mission Support System assures the OIG that only OIG staff are authenticated and provided access to OIG's computing and communications infrastructure.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose IIF is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); and (2) notify and obtain consent from individuals regarding what IIF is being collected from them and how the information will be used or shared: None
32. Does the system host a website?: No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of IIF?: Yes
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: The information is maintained on a centrally managed OIG computer system. Access is restricted by physical and computer-based access controls. Access is strictly limited to authorized OIG staff members based on role-based security features that limit access to system administrators, designated administrative personnel, and senior management officials. All computer files and printed listings are safeguarded in accordance with the provisions of the National Institute of Standards and Technology Federal Information Processing Standard 31, and the HHS Information Resources Management Manual, Part 6, "ADP Systems Security."
PIA Reviewer Approval:
Comments:
PIA Reviewer Name: Lynn Melton
Sr. Official for Privacy Approval: Promote
Comments: The Senior Official for Privacy is the Chief Information Officer.
Sr. Official for Privacy Name: Christopher Ballister
Sign-off Date: Aug 17, 2006
Date Published: Jun 26, 2008
|
|
06.3 HHS PIA Summary for Posting (Form) / OIG Security Program (Item)
|
|
PIA SUMMARY AND APPROVAL COMBINED
|
|
Is this a new PIA 2008?: No
If this is an existing PIA, please provide a reason for revision:
1. Date of this Submission: Aug 1, 2006
2. OPDIV Name: OIG
3. Unique Project Identifier (UPI) Number: None
4. Privacy Act System of Records (SOR) Number: No Value
5. OMB Information Collection Approval Number: No Value
6. Other Identifying Number(s): No Value
7. System Name: No Value
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Lynn Melton
10. Provide an overview of the system: No Value
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through IIF within any database(s), record(s), file(s) or website(s) hosted by this system?: No
Note: This question seeks to identify any, and all, personal information associated with the system. This includes any IIF, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation
Note: If no IIF is contained in the system, please answer questions 21, 23, 30, 31, 37, 50 and 54, then promote the PIA to the Sr. Privacy Official who will authorize the PIA.
If this system contains IIF, all remaining questions on the PIA Form Tabs must be completed prior to signature and promotion.
21. Is the system subject to the Privacy Act?: No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): No Value
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) In this description, indicate whether the information contains IIF; and (4) whether submission of personal information is voluntary or mandatory: No Value
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose IIF is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); and (2) notify and obtain consent from individuals regarding what IIF is being collected from them and how the information will be used or shared: No Value
32. Does the system host a website?: No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of IIF?: No
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: No Value
PIA Reviewer Approval:
Comments:
PIA Reviewer Name: Lynn Melton
Sr. Official for Privacy Approval:
Comments: The Information Privacy Officer is the Chief Information Officer.
Sr. Official for Privacy Name: Christopher Ballister
Sign-off Date: Aug 1, 2006
Date Published: Jun 26, 2008
|
|
|
Print
Download Reader
HHS Home|HHS News|About HHS
