UNITED STATES ENVIRONMENTAL PROTECTION AGENCY WSG 116 Date Signed: March 23, 1999 MEMORANDUM SUBJECT: Safeguarding Latitude/Longitude Data in SDWIS/FED Database FROM: Janet L. Auerbach, Chief Information Management Branch TO: Regional Branch Chiefs, Office of Ground Water and Drinking Water EPA Regions I - X The purpose of this memorandum is to provide you with information about recent Agency safeguards concerning access and/or receipt of latitude/longitude data maintained in information management systems. Utilities have raised concerns to OGWDW about national security implications of making information in SDWIS/FED on the exact location of source water intakes readily available on the Internet. The Agency's critical infrastructure plan also identifies this area as one of concern. OGWDW has responded to these concerns by implementing the policy discussed below. To ensure that SDWIS/FED latitude/longitude data is kept safeguarded, we have taken the following measures: Access to Latitude/longitude Table in SDWIS/FED 1. Before your staff authorizes access, they should request and receive justification for why access is needed (See attached "OGWDW Latitude/Longitude Application Form" currently being used by OGWDW). When you send the requestor the application form, please also send the attached paragraph explaining the sensitivity of the information. The application form may be modified for your regional ADP Coordinator's use and record keeping. Please be aware that my staff will grant access for only 30 days. Any justification which the requestor submits will be accepted. The procedure is intended to educate the user to the sensitivity of the information and limit impromptu access rather than establish a subjective approval process. NOTE: This procedure does not apply to Federal, State and OGWDW Contractor Support Personnel. These persons have automatically been given unlimited access. Dissemination of Latitude/longitude Data in SDWIS/FED 1. Requests for latitude/longitude data under the Freedom of Information Act (FOIA), need to follow the same procedures. Please send an interim response asking requesters to provide justification for why data is needed. 1 ------- WSG 116 2. EPA will not put latitude/longitude data on Envirofacts or any other web site. As part of the process, we are asking the regions to follow the same security procedures listed above. Therefore, please pass this memorandum to the ADP Coordinators, the SDWIS/FED Coordinators within your region and other persons handling FOIA requests. With much effort on the parts of both the program, regional and The National Computer Center, I believe we have taken positive steps to prevent data vulnerabilities. I ask for your full support in implementing these actions that are necessary to safeguard drinking water intakes around the country. If you have any questions regarding these initiatives, I may be reached on (202) 260- 5274 or contact Towana Dorsey on (202) 260-2805. Attachments ------- WSG 116 Attachment 1 CAUTION This is a United States Environmental Protection Agency (U.S. EPA) computer system, and the information contained in it may be accessed and used for official Government business or by use of authorized persons. You have been given specific authorization to receive latitude/longitude information contained in this database. Unauthorized access or use of latitude/longitude information may subject violators to criminal, civil and/or administrative action. You may not share these data with users who have not received their own authorization to use it. Latitude/longitude data are sensitive and must be used with extreme care. Please aggregate or generalize data wherever possible. Please avoid making public specific locational information. Your password is good for 30 days beginning (insert today's date). You will need to re- apply at least 2 weeks prior to the lapse date if you wish access after 30 days from (today's date). You will not receive notice that your password is about to lapse. ------- WSG 116 Latitude/Longitude Application Form This form is a request to the ADP Coordinator, Office of Ground Water and Drinking Water for Obtaining Drinking Water Facility Latitude/Longitude Information from the Safe Drinking Water Information System (SDWIS/FED). DATE; NAME; ORGANIZATION; PHONE NUMBER; FAX NUMBER; E-MAIL ADDRESS; Please provide justification for why you need access to water facility latitude/longitude data maintained in the SDWIS/FED Database. ------- WSG 116 Please submit form to: Attention: Towana J. Dorsey ADP Coordinator, OGWDW MC: 4606 Telephone: (202) 260-2805 Fax: (202)401-3041 Internet: dorsev.towana@epamail.epa.gov Access Granted: Towana J. Dorsey, ADP Coordinator, OGWDW Date: Note: Access will be granted for 30 days from the effective date. Users should notify EPA of their need to continue using the information before the date of expiration. Effective Date: User I.D. Password: ------- |