Overview
Section 208 of the E-Government Act of 2002 helps to ensure that agencies put in place sufficient protections for the privacy of personal information in implementing a citizen-centered electronic government. It requires agencies to conduct Privacy Impact Assessments (PIAs) for information technology (IT) systems or projects that collect, maintain or disseminate information in identifiable form from or about members of the public or when initiating a new electronic collection of information in identifiable form for 10 or more persons (excluding agencies, instrumentalities, or employees of the federal government).
Among other things, the PIA process requires agencies to review what information is collected, why the information is collected, how the information will be used by the agency, with whom the information will be shared, and how the information is handled and secured when using IT to collect new information or when developing or buying new IT systems to handle collections of personally identifiable information. PIAs conducted for " major information systems," as defined in OMB Circular A-130 (Section 6.u.) and OMB Circular A-11 (section 300-4 (2003)), reflect more extensive analysis of the consequences of collection and flow of information, the alternatives to the collection and handling as designed, the appropriate measures to reduce risks identified for each alternative, and the rationale for the final design choice or business process.
In general, agencies are required to make PIAs publicly available through publication in the Federal Register or through posting on agency websites.
Objectives
The objectives of a PIA include:
- Provide a tool to make informed policy and system design or procurement decisions based on an understanding of privacy risks and options available for mitigating these risks.
- Ensure that system and program managers are accountable for the proper handling of privacy issues.
- Establish a consistent format and structured process for analyzing both technical and legal compliance with applicable privacy laws and regulations, as well as accepted privacy policy.
- Provide basic documentation on the flow of personal information within systems for use and review by policy, program, and management staff; systems analysts; and security specialists.
- Provide the public with assurances that their personal information is protected.
Privacy Impact Assessments
The following are official Privacy Impact Assessments (PIAs) of significant initiatives at the U.S. Department of Education (listed by Principal Office).
Federal Student Aid (FSA)
Institute of Education Sciences (IES)
Office of the Chief Financial Officer (OCFO)
Office of the Chief Information Officer (OCIO)
Office of Communications and Outreach (OCO)
Office for Civil Rights (OCR)
Office of Elementary and Secondary Education (OESE)
Office of the General Counsel (OGC)
Office of Inspector General (OIG)
Office of Innovation and Improvement (OII)
Office of Management (OM)
Office of Postsecondary Education (OPE)
Office of Planning, Evaluation and Policy Development (OPEPD)
Office of the Secretary (OS)
Office of Special Educational and Rehabilitative Services (OSERS)
Federal Student Aid (FSA)
- Account Control Technology Data System, March 13, 2009
- ACS Education Servicing System (ACES), June 20, 2011
- Allied Interstate Intellione System, March 20, 2009
- Aspire Resources, Inc. (NFP-ARI), January 12, 2012
- Automated Reconciliation System (ARS), December 30, 2010
- BFrame Collection System (PCA-BCS), June 30, 2009
- CCA Flexible Automated Collection System (PCA-CCA-FACS), June 30, 2009
- Central Processing System (CPS)/FASFA on the Web, March 9, 2010
- Coast Account Receivables Database (CARD), March 18, 2009
- Collectcorp Receivables Management System, March 9, 2009
- Collection Resource System (CRS) and Supporting Systems, March 12, 2009
- Collection Technology, Inc. System (PCA-CTI), August, 8, 2011
- College.gov Facebook Fan Page, December 9, 2009
- Common Origination and Disbursement (COD), February 3, 2005
- Common Services for Borrowers (CSB), June 23, 2006
- Conditional Disability Discharge Tracking System (CDDTS), June 10, 2008
- Conserve Collection Management System (CCMS), March 16, 2009
- Cornerstone System, December 2, 2011
- Debt Management and Collection System (DMCS), June 10, 2008
- Delta Management Debt Collection System, March 9, 2009
- Direct Loan Consolidation System (DLCS), February 7, 2011
- Direct Loan Servicing System (DLSS), June 10, 2008
- Diversified Collection Services (DCS) Collection System, March 18, 2009
- eCampus-Based System (e/CB), June 22, 2010
- Educational Services of America (NFP-ESA), October 31, 2011
- Electronic Cohort Default Rate Appeals (eCDRA Appeals), December 7, 2007
- Enterprise Management Support System (EMSS), April 3, 2006
- Enterprise Recovery Systems (ERS) Safenet, March 20, 2009
- EZ Audit, February 25, 2010
- FFELP Student Loan Servicing System, September 29, 2010
- Financial Management System (FMS), January 6, 2011
- Financial Partners Data Mart (FPDM), December 3, 2009
- Granite State Management and Resources (GSMR) New Hampshire (NFP-NH), June 8, 2012
- Immediate Credit Recovery (ICR) Debt Collection System (IDCS), March 18, 2009
- Missouri Higher Education Loan Authority (NFP-MOHELA), June 8, 2012
- National Student Loan Data System (NSLDS), November 16, 2007
- NCO Financial Systems, March 19, 2009
- Not-For-Profit College Foundation, Inc. (NFPCFI), Not-For-Profit North Carolina, May 31, 2012
- Not-For-Profit Kentucky (NFP Kentucky), May 31, 2012
- Not-For-Profit Montana (NFP Montana), Amicus, Tru Student, Inc., May 8, 2012
- Not-For-Profit Vermont Student Assistance Corporation (NFPVSAC), May 15, 2012
- NRI-ED Debt Collection System (NDCS), March 20, 2009
- Oklahoma Student Loan Authority (NFP-OSLA), June 8, 2012
- Ombudsman Case Tracking System (OCTSv3.0), July 19, 2006
- Pennsylvania Computer System (PHCS),
Pennsylvania Higher Education Assistance Authority (PHEAA), July 20, 2012 - Portfolio and Debt Management Architecture (PADMA), March 12, 2009
- Postsecondary Educational Participants System (PEPS), March 17, 2008
- Private Collection Agency Premiere Credit (PCA-PC), March 15, 2009
- Progressive Financial Services Collection System (PCA-PFS), February 18, 2009
- South Carolina (NFP-SC), June 8, 2012
- Sallie Mae Commercial System (SMCS), September 11, 2009
- Student Aid Internet Gateway (SAIG), May 1, 2008
- Student Aid Internet Gateway Participation Management (SAIG PM), May 27, 2010
- Student Aid on the Web (SAOTW), September 5, 2003
- System to Automate Recovery (STAR), March 13, 2009
- The CBE Group Collection System (CCS), February 20, 2009
- Van Ru Credit Collection System (PCA-VRC), February 20, 2009
- Virtual Data Center (VDC), August 1, 2007
- West Asset Management Flexible Automated Collection System (PCA-WAM), September 13, 2009
- Windham Professionals Collections Platform (PCA-WPI), March 18, 2009
Institute of Education Sciences (IES)
- Adult English as a Second Language (ESL) Literacy Impact Study, April 25, 2008
- DC Choice Program Evaluation, April 23, 2004
- Early Reading First National Evaluation, November 15, 2006
- Educational Resources Information Center (ERIC), April 29, 2011
- Evaluation of Conversion Magnet Schools, January 16, 2009
- Evaluation of Moving High-Performing Teachers to Low-Performing Schools, March 24, 2009
- Evaluation of the Impact of Supplemental Literacy Interventions in Freshman Academies (The Adolescent Literacy Project), June 21, 2005
- Evaluation of the Impact of Teacher Induction Programs, June 17, 2005
- Even Start Classroom Literacy Interventions and Outcomes (CLIO) Study, December 6, 2006
- IES Predoctoral and Postdoctoral Fellows Survey, August 5, 2008
- Impact Evaluation of a School-based Violence Prevention Program, May 15, 2006
- Impact Evaluation of Academic Instruction for After School Programs, June 21, 2005
- Impact Evaluation of Mandatory-Random Student Drug Testing, March 30, 2007
- Impact Evaluation of Teacher Preparation Models, August 5, 2005
- Impact Evaluation of the U.S. Department of Education's Student Mentoring Program, May 15, 2006
- Impact Evaluation of Title I Supplemental Educational Services, January 16, 2009
- Impact Evaluation of Upward Bound's Increased Focus on Higher Risk, June 15, 2007
- National Longitudinal Transition Study-2 (NLTS2), November 3, 2009
- Teacher Survey Response Incentive, April 28, 2009
- What Works Clearinghouse Database, March 1, 2004
Office of the Chief Financial Officer (OCFO)
- Grants Administration and Payment System (GAPS), January 4, 2005
- Travel Manager System (TMS), January 4, 2005
Office of the Chief Information Officer (OCIO)
- Educate, October 28, 2009
- Education's Central Automated Processing System (EDCAPS), January 19, 2012
- Security Touch, December 28, 2010
Office of Communications and Outreach (OCO)
- “I Am What I Learn” Video Contest, September 4, 2009
- ED Youth Voice Facebook Fan Page, December 20, 2010
- OCO On-Line Registration System (cVent Event Solutions), January 15, 2012
- OCO Regional Office Contact List, August 9, 2012
- Presidential Scholars Program Electronic Application (PSAonline), November 1, 2006
- Secretary of Education Arne Duncan's Facebook Page, November 12, 2009
- Secretary's Blog, August 6, 2008
Office for Civil Rights (OCR)
- Case and Activity Management System (CAMS), August 10, 2007
Office of Elementary and Secondary Education (OESE)
- Migrant Education Bypass Program Student Database, August 11, 2011
- Migrant Student Information Exchange (MSIX), August 27, 2010
- You for Youth Professional Development Web Portal, February 28, 2011
Office of the General Counsel (OGC)
- Department of Education Federal Docket Management System (EDFDMS), November 27, 2007
- OGC Case and Activity Management System (OGC-CAMS), June 3, 2010
Office of Inspector General (OIG)
- OIG Data Analytic System (ODAS), April 2, 2012
- OIG LAN, August 6, 2008
Office of Innovation and Improvement (OII)
- Open Innovation Web Portal - Investing in Innovation (i3) Fund, January 26, 2010
Office of Management (OM)
- ED Pubs, December 12, 2008
- Education Security Tracking and Reporting System (EDSTAR), September 1, 2007
- Freedom of Information Act Tracking and Reporting System (FOIAXpress), August 27, 2007
- Social Media Websites and Applications, May 1, 2011
Office of Postsecondary Education (OPE)
- Erma Byrd Scholarship Program (EBSP) System, August 4, 2009
- Grants Electronic Monitoring System (GEMS), August 28, 2009
- Institutional Development and Undergraduate Education Services (IDUES) Endowment Financial Reports (IEFRS), July 1, 2008
- International Resource Information System (IRIS), April 29, 2010
- Jacob K. Javits Fellowship System, September 28, 2007
- TEACH Supplemental Data Collection (TEACH SDC), June 15, 2011
- TRIO Programs Annual Performance Reports (APR), May 20, 2008
Office of Planning, Evaluation and Policy Development (OPEPD)
Back to TopOffice of the Secretary (OS)
- Secretary's Communications Control System, April 21, 2008
- Teach.gov Web Site, September 2, 2010
Office of Special Educational and Rehabilitative Services (OSERS)
- OSEP Customer Service Tracking System, August 11, 2003
- RSA-911 Case Service Report, April 14, 2008
- Special Education – Individual Reporting on Regulatory Compliance Related to the Personnel Development Program's Service Obligation and the GRPA of 1993, March 21, 2011
|
|
|||||||||||