Administration for Children & Families Privacy Impact Assessments
06.3 HHS PIA Summary for Posting (Form) / ACF CB Adoption and Foster Care Analysis and Reporting System
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? No
If this is an existing PIA, please provide a reason for revision: Initial PIA Migration to ProSight
1. Date of this Submission: Nov 24, 2003
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: 009-70-01-08-02-1001-00-101-003
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): Not applicable
5. OMB Information Collection Approval Number: 0980-0267
6. Other Identifying Number(s): ACYF-CB-001
7. System Name (Align with system Item name): Adoption and Foster Care Analysis and Reporting System (AFCARS)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: David Jenkins
10. Provide an overview of the system: Section 479 of title IV-E of the Social Security Act and Federal regulations at 45 CFR 1355.40 directs States to establish and implement a system to collect data on children in foster care and those who have been adopted under the auspices of the State child welfare agency.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): No
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): Not applicable
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: The data provide information about foster care placements, adoptive parents, length of time in care, delays in termination of parental rights and placement for adoption. The purpose of the data collected is to inform State/Federal policy decisions, program management, and respond to Congressional and Departmental inquiries. Specifically, the data is used for short/long-term budget projections, trend analysis, and to target areas for improved technical assistance. ACF uses AFCARS data for a number of reasons, including:
· responding to Congressional requests for current data on children in foster care or those who have been adopted;
· responding to questions and requests from other Federal departments and agencies, including the General Accounting Office (GAO), the Office of Management and Budget (OMB), the DHHS Office of Inspector General (OIG), national advocacy organizations, States, and other interested organizations;
· short and long-term budget projections;
· trend analyses and short and long-term planning;
· targeting areas for greater or potential technical assistance efforts, for discretionary service grants, research and evaluation, and regulatory change;
· determining and assessing outcomes for children and families.
Additionally, the AFCARS data are used specifically in the:
· Adoption Incentives Program;
· Child Welfare Outcomes Report;
· Child and Family Services (CFS) Reviews;
· Title IV- E Eligibility Reviews; and
· Allotment of funds in the Chafee Foster Care Independence Program (CFCIP).
The data required by AFCARS is information that would normally be collected during the course of a social worker’s assessment, planning, and service provision, so that additional information does not need to be collected solely for the purpose of meeting AFCARS requirements.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) Not applicable
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): No
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: Not applicable.
PIA Approval
PIA Reviewer Approval: Promote
PIA Reviewer Name: -
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: Jun 30, 2006
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
06.3 HHS PIA Summary for Posting (Form) / ACF CCB Federal Child Care Information System (CCIS)(ACF-801)
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? No
If this is an existing PIA, please provide a reason for revision: Initial PIA Migration to ProSight
1. Date of this Submission: Jul 28, 2005
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: 009-70-01-08-02-1002-00-101-003
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): Not Applicable
5. OMB Information Collection Approval Number: 0980-0267
6. Other Identifying Number(s): Not applicable.
7. System Name (Align with system Item name): Child Care Bureau Information System (CCBIS)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: David Jenkins
10. Provide an overview of the system: The state case level report, or ACF-801, is one of the data collections undertaken by the Child Care Bureau pursuant to the requirements of the Child Care and Development Block Grant of 1990 (42 USC 9801 et seq.) as amended by the Personal Responsibility and Work Opportunity Reconciliation Act of 1996 (PL 104-93) and the Balanced Budget Act of 1997 (PL 105-33). All Child Care and Development Fund (CCDF) lead agencies in the states, the District of Columbia, and territories (including Puerto Rico, American Samoa, Guam, Northern Mariana Islands, and the US Virgin Islands) are responsible for completing the ACF-801
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): No
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): Not applicable.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: The information is collected in an electronic format, which is transmitted directly to the National Institute of Health’s National Information Center. The data are collected from all Child Care and Development Fund (CCDF) lead agencies in the states, the District of Columbia, and territories (including Puerto Rico, American Samoa, Guam, Northern Marianna Islands, and the US Virgin Islands). The CCDF lead agencies are responsible for completing the ACF-801. Consent is not required.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) Not applicable.
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): No
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: Not applicable.
PIA Approval
PIA Reviewer Approval: Promote
PIA Reviewer Name: -
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: Jun 30, 2006
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
06.3 HHS PIA Summary for Posting (Form) / ACF OA GrantSolutions.gov/Grants Administration Tracking & Evaluation System (GATES)
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? No
If this is an existing PIA, please provide a reason for revision: Initial PIA Migration to ProSight
1. Date of this Submission: Aug 18, 2005
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: 009-70-04-00-01-1300-00-101-003
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): Not applicable.
5. OMB Information Collection Approval Number: Not applicable.
6. Other Identifying Number(s): OA-OFS-001
7. System Name (Align with system Item name): Grants Administration Tracking and Evaluation System (GATES)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Paul Hasz
10. Provide an overview of the system: GATES is a software application designed to automate the process of awarding discretionary, formula, block and entitlement grants. GATES maintains a nationwide database of grant program and fiscal information provides management reports; compiles post-award monitoring information: safeguards Federal funds through management of funding limits and facilitates the closeout of grants and the archiving of program and fiscal performance information.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): No
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): Not shared with other than HHS internal organizations.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: This application contains proprietary business information and other financial information and is used to allow ACF to oversee grants that fund a range of social services for low-income individuals across the country. Social security numbers are used for matching only and are not displayed to users of the system. Telephone, address and email addresses are work numbers, not home or personal and are publicly accessible elsewhere on government sites.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) All Grantee information is voluntarily provided (e.g., names, telephone, number, addresses, and e-mail addresses of grantees).
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): Yes
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): No
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: Implementation and testing of controls (including Identification and Authentication, Access Controls) in accordance with NIST SP800-53/53A and other applicable Federal and Departmental regulations.
PIA Approval
PIA Reviewer Approval: Promote
PIA Reviewer Name: -
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: Jun 30, 2006
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
06.3 HHS PIA Summary for Posting (Form) / ACF OCSE Federal Parent Locator Services (FPLS)
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? No
If this is an existing PIA, please provide a reason for revision: PIA Validation
1. Date of this Submission: Jul 23, 2008
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: 009-70-01-07-01-1000-00-101-003 (970014101100000)
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): LCS: 09-90-0074, FCR: 09-80-0202
5. OMB Information Collection Approval Number: LCS: National Directory of New Hires, OMB NO: 0970-0166, Expiration 6/30/2010; Federal Tax Refund Offset and Administrative Offset Program and Federal Offset Passport Denial, OMB NO: 0970-0161, Expiration 6/30/2010; Financial Institution Data Match, OMB NO: 0970-0196, Expiration 11/1/2009; Insurance Match, OMB No. 0970-0342 expiration 6/30/2011
FCR: 0980-0271
6. Other Identifying Number(s): N/A
7. System Name (Align with system Item name): ACF OCSE Federal Parent Locator Services (FPLS)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Donna Bonar
10. Provide an overview of the system: The primary purpose of the Location and Collection System (LCS) is to provide state child support programs with data to locate parents and collect child support, especially in cases where parents reside in different states. The LCS is comprised of the following: - National Directory of New Hires (NDNH); - Federal Tax Refund Offset and Administrative Offset Program (TROP) and Federal Passport Denial; - Multistate Financial Institution Data Match and Insurance Match Program. Information is also used by authorized Federal agencies to prevent and recoup erroneous payments under Federal benefit programs. These activities are authorized by Title IV, Part D, of the Social Security Act and the Federal Privacy Act.
The primary purpose of the Federal Case Registry of Child Support Orders (FCR) is to improve states abilities to locate parents and collect child support. Legal authority for maintenance of the system is contained in sections 452 and 453 of the Social Security Act
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): Yes
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): Yes
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): Location and Collection System (LCS):
State Child Support Enforcement Agencies - Provide locate information, establish paternity, establish, set, modify, or enforce child support obligations. - Court with authority to issue a child support order - Establish parentage or establish the amount. Federal law authorizes that specified types of collected information may be shared with specified entities for specified purposes. In summary, the collected information is shared with the following entities. State CSE agencies; a court with authority to issue a child support order; a resident parent, legal guardian, attorney, or agent of a child who is not receiving Temporary Assistance for Needy Families (TANF); a State agency administering specified child welfare or foster care programs; a State agency administering the Unemployment Compensation program; an agent or attorney of a state, with an agreement, who has the duty or authority under state law to enforce a child custody or visitation determination; a court having jurisdiction to make or enforce a child custody or visitation determination; and an agent or attorney of a state or the United States with responsibility for matters involving the unlawful taking or restraint of a child. Information is shared with insurers (or their agents) and state IV-D child support agencies pertaining to individuals owing past-due child support to identify individuals with insurance claims, settlements, awards and payments for the purpose of collecting past-due child support. Specified information is also shared with the following Federal agencies for the authorized purposes specified in Federal law: Department of the Treasury; Department of State; Department of Education; Department of Housing and Urban Development; and the Social Security Administration.
Federal Case Registry (FCR):
State Child Support Enforcement Agencies - Provide locate information, establish paternity, establish, set, modify or enforce child support obligations. Internal Revenue Service (IRS) - The IRS matches the FCR data file against profiled IRS tax records of payers claiming Earned Income Tax Credit (EITC) on dependents.
Federal law authorizes that specified types of collected information may be shared with specified entities for specified purposes. In summary, the collected information is shared with the following entities. - State CSE agencies; - A court with authority to issue a child support order; - A resident parent, legal guardian, attorney, or agent of a child who is not receiving Temporary Assistance for Needy Families (TANF); - A State agency administering specified child welfare or foster care programs; - An agent or attorney of a state, with an agreement, who has the duty or authority under state law to enforce a child custody or visitation determination; - A court having jurisdiction to make or enforce a child custody or visitation determination; - An agent or attorney of a state or the United States with responsibility for matters involving the unlawful taking or restraint of a child. Specified information may also be shared with the following Federal agencies for the authorized purposes specified in Federal law: Department of the Treasury and Department of State. The Secretary of Health and Human Services may also share collected information, without personal identifiers, for research purposes found by the Secretary to be likely to contribute to achieving the purposes of the TANF program or the child support program.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: Location and Collection System (LCS):
Information in the NDNH portion of the LCS pertaining to quarterly wages and unemployment insurance is collected from state workforce agencies. Information pertaining to newly hired employees is collected from each states Directory of New Hires. Federal agencies report directly to the NDNH. The information collected is used to locate individuals for the purpose of establishing parentage, establishing, setting the amount of, modifying, or enforcing child support obligations, or enforcing child custody and visitation orders. The information collected is also used by authorized Federal and State agencies to prevent and recoup erroneous payments under Federal benefit programs. The LCS also collects from state Child Support Enforcement (CSE) agencies information pertaining to past-due child support owed by noncustodial parents. This information is compared against information pertaining to Federal tax refunds, Federal administrative payments, and U.S. passports to collect past-due support. Information collected from state CSE agencies on individuals with past-due child support is also compared with information maintained by insurers (or their agents) and state Workman's Compensation agencies concerning insurance claims, settlements, awards, and payments to collect child support. The data collected is mandatory. Federal law requires the collection of information for child support and other authorized purposes.
Federal Case Registry (FCR):
As required by Federal law, each state child support enforcement (CSE) agency maintains, within its automated system, a State Case Registry (SCR). The records in the SCR include information pertaining to all child support cases and orders established or modified in the state on or after October 1, 1998. The FCR includes abstracts of this information, provided by each CSE agency. The FCR system of records contains the following information: names (including alternative names); social security numbers (including alternative numbers); birth dates; participant type (custodial party, noncustodial parent, putative father, child); sex; case type (IVD, referring to a case in which the family is receiving services from the CSE agency, or non-IVD); indication of an order; family violence indicator (domestic violence or child abuse); state Federal Information Processing Standard code; county code; state case identification number; and state member identification number. Information maintained in the FCR is matched against information maintained in the National Directory of New Hires (NDNH), another component of the Federal Parent Locator Service, to determine if a newly hired employee included in the NDNH is a participant in a child support case anywhere in the country. Within two business days after a comparison reveals a match with respect to an individual, the information regarding the individuals current employment and address is reported back to the State agency or agencies responsible for the case. States are also alerted when another state has registered the same individual on the FCR.The data collected is mandatory. Federal law requires the collection of information for child support and other authorized purposes.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) Location and Collection System (LCS):
Information is collected from the following sources. Information pertaining to newly-hired employees is collected from each State Directory of New Hires, which receives the information from employers. Quarterly wage and unemployment insurance information is collected from the State Workforce Agencies. Federal agencies report information directly to the NDNH. Information pertaining to past-due child support owed by noncustodial parents and individuals is collected from state CSE agencies. State CSE agencies can obtain access, subject to privacy safeguards, to government and private records, including information about assets held by financial instiutions (including insurance companies), and records held by private entities with respect to individuals who owe child support (42 USC 666 (c)1D). Information contained in the system is not directly collected from individuals and is for the routine uses specified in the system of records notice pertaining to the LCS. 5 U.S.C. 552a(b)(3). Information required by Federal law is supplied by state CSE agencies. 42 U.S.C. 652 (k) and (l), 653, 664 and 666(a)(17).
Note that The back of the W-4 is this notification of use of the data in the NDNH:
Privacy Act and Paperwork Reduction Act Notice. We ask for the information
on this form to carry out the Internal Revenue laws of the United States. The
Internal Revenue Code requires this information under sections 3402(f)(2)(A) and
6109 and their regulations. Failure to provide a properly completed form will
result in your being treated as a single person who claims no withholding
allowances; providing fraudulent information may also subject you to penalties.
Routine uses of this information include giving it to the Department of Justice for
civil and criminal litigation, to cities, states, and the District of Columbia for use in
administering their tax laws, and using it in the National Directory of New Hires.
We may also disclose this information to other countries under a tax treaty, to
federal and state agencies to enforce federal nontax criminal laws, or to federal
law enforcement and intelligence agencies to combat terrorism.
Any changes in routine use of the data or in the recipients of the data is published in the Federal Registry with appropriate comment periods before implementation.
Federal Case Registry (FCR):
As required by Federal law, the FCR information is collected from each state CSE agency, which maintains the information in its State Case Registry. Information contained in the FCR is not directly collected from individuals and is for the routine uses specified in the system of records notice pertaining to the FCR.
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): Yes
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: The information is secured in accordance with the security controls specified in an up-to-date security plan. This plan restricts access and disclosure to persons as authorized in the statute, provides administrative, physical, and technical system controls, requires monitored access and promotes security training. All personnel with access to the system are required to take a non-disclosure oath and attend annual security awareness training.
PIA Approval
PIA Reviewer Approval: Promote
PIA Reviewer Name: Secure One HHS Migration
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: Jun 30, 2006
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
06.3 HHS PIA Summary for Posting (Form) / ACF OCSE Federal Parent Locator Services 2 (FPLS2)
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? No
If this is an existing PIA, please provide a reason for revision: Initial PIA Migration to ProSight
1. Date of this Submission: Oct 14, 2005
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: 9.700141011e+014
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): 09-80-0202
5. OMB Information Collection Approval Number: 0980-0271
6. Other Identifying Number(s): N/A
7. System Name (Align with system Item name): Federal Case Registry of Child Support Orders (FCR), HHS, OCSE
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Margot Bean
10. Provide an overview of the system: The primary purpose of the FCR is to improve States abilities to locate parents and collect child support.
The primary purpose of the Federal Case Registry of Child Support Orders (FCR) is to improve states abilities to locate parents and collect child support. Legal authority for maintenance of the system is contained in sections 452 and 453 of the Social Security Act.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): Yes
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): Yes
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): State Child Support Enforcement Agencies - Provide locate information, establish paternity, establish, set, modify or enforce child support obligations. Internal Revenue Service (IRS) - The IRS matches the FCR data file against profiled IRS tax records of payers claiming Earned Income Tax Credit (EITC) on dependents.
Federal law authorizes that specified types of collected information may be shared with specified entities for specified purposes. In summary, the collected information is shared with the following entities. - State CSE agencies; - A court with authority to issue a child support order; - A resident parent, legal guardian, attorney, or agent of a child who is not receiving Temporary Assistance for Needy Families (TANF); - A State agency administering specified child welfare or foster care programs; - An agent or attorney of a state, with an agreement, who has the duty or authority under state law to enforce a child custody or visitation determination; - A court having jurisdiction to make or enforce a child custody or visitation determination; - An agent or attorney of a state or the United States with responsibility for matters involving the unlawful taking or restraint of a child. Specified information may also be shared with the following Federal agencies for the authorized purposes specified in Federal law: Department of the Treasury and Department of State. The Secretary of Health and Human Services may also share collected information, without personal identifiers, for research purposes found by the Secretary to be likely to contribute to achieving the purposes of the TANF program or the child support program.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: As required by Federal law, each state child support enforcement (CSE) agency maintains, within its automated system, a State Case Registry (SCR). The records in the SCR include information pertaining to all child support cases and orders established or modified in the state on or after October 1, 1998. The FCR includes abstracts of this information, provided by each CSE agency. The FCR system of records contains the following information: names (including alternative names); social security numbers (including alternative numbers); birth dates; participant type (custodial party, noncustodial parent, putative father, child); sex; case type (IVD, referring to a case in which the family is receiving services from the CSE agency, or non-IVD); indication of an order; family violence indicator (domestic violence or child abuse); state Federal Information Processing Standard code; county code; state case identification number; and state member identification number. Information maintained in the FCR is matched against information maintained in the National Directory of New Hires (NDNH), another component of the Federal Parent Locator Service, to determine if a newly hired employee included in the NDNH is a participant in a child support case anywhere in the country. Within two business days after a comparison reveals a match with respect to an individual, the information regarding the individuals current employment and address is reported back to the State agency or agencies responsible for the case. States are also alerted when another state has registered the same individual on the FCR.The data collected is mandatory. Federal law requires the collection of information for child support and other authorized purposes.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) As required by Federal law, the FCR information is collected from each state CSE agency, which maintains the information in its State Case Registry. Information contained in the FCR is not directly collected from individuals and is for the routine uses specified in the system of records notice pertaining to the FCR.
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): Yes
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: The information is secured in accordance with an up-to-date security plan that restricts access and disclosure to persons as authorized in the statute, provides administrative, physical, and technical system controls, requires monitored access and promotes security training. All personnel with access to the system are required to take a non-disclosure oath and attend annual security awareness training.
PIA Approval
PIA Reviewer Approval: Promote
PIA Reviewer Name: Secure One HHS Migration
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: Jun 30, 2006
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
06.3 HHS PIA Summary for Posting (Form) / ACF OCSE OCSENet
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? Yes
If this is an existing PIA, please provide a reason for revision: -
1. Date of this Submission: May 5, 2009
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: -
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): N/A
5. OMB Information Collection Approval Number: N/A
6. Other Identifying Number(s): N/A
7. System Name (Align with system Item name): ACF OCSE OCSENet
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: David Jenkins
10. Provide an overview of the system: OCSE, in conjunction with Regional Offices, provides direction, guidance and oversight to State and tribal Child Support Enforcement (CSE) program offices about activities that have been authorized and directed by Title IV-D of the Social Security Act and other pertinent legislation. The general purpose of the CSE legislation is to permit States and tribes to develop programs to:
· establish and enforce support obligations by locating non-custodial parents,
· establish paternity when necessary,
· obtain child support orders, and
· enforce those orders.
Within the scope of these activities is the exchange of interstate case information between States. The OCSE Network and QUICK were created pursuant to these objectives.
QUICK communicates with CSE computer systems in 50 States, the District of Columbia, and three territories over the OCSE Network using frame-relay technology.
13. Indicate if the system is new or an existing one being modified: New
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): No
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): N/A
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: none
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) N/A
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): Yes
37. Does the website have any information or pages directed at children under the age of thirteen?: -
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): -
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: No PII
PIA Approval
PIA Reviewer Approval: Promote
PIA Reviewer Name: David Jenkins
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: May 31, 2009
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
06.3 HHS PIA Summary for Posting (Form) / ACF OCSE State Systems Approval Infomation System (SSAIS)
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? No
If this is an existing PIA, please provide a reason for revision: Initial PIA Migration to ProSight
1. Date of this Submission: Nov 21, 2003
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: 009-70-01-07-02-1006-00-101-003
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): Not applicable.
5. OMB Information Collection Approval Number: Not applicable.
6. Other Identifying Number(s): OCSE-DSS-001
7. System Name (Align with system Item name): State Systems Approval Information System (SSAIS)
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: David Jenkins
10. Provide an overview of the system: SSAIS is a management information system that tracks the approval and monitors the status of state automation projects funded by the Administration for Children and Families (ACF) under Titles I, IV-A, IV-B, IV-C, IV-D, IV-E, X, XIV, XVI (AABD), or XIX of the Social Security Act and Title IV Chapter 2 of the Immigration and Nationality Act. The related programs include Adoption Assistance, Adult Protective Services, Child Care, Child Protective Services, Child Support Enforcement, Foster Care, Juvenile Justice, Medicaid, and Social Service. State projects may be funded by a single ACF operating division (OPDIV) or multiple OPDIVs and also the Centers for Medicare and Medicaid Services (CMS). SSAIS also maintains current and historic information related to state systems and projects.
The ACF Administration on Children, Youth, and Families (ACYF) coordinates the development, implementation, and certification of Statewide Automated Child Welfare Information Systems (SACWIS). The Office of Child Support Enforcement (OCSE) performs similar functions for computerized state systems for collecting and disbursing child support payments.
SSAIS provides capabilities to track the flow and approval of documentation and correspondence received from the states, as well as capabilities to initiate and edit replies by e-mail and/or word processing linkages. Documents received from states include Advance Planning Documents (APDs), annual APD updates (APDUs), Implementation APDs, and other documents and correspondence related to approval of Federal Financial Participation (FFP). Capabilities are also provided to generate reports related to specific projects and programs and their funding status.
While SSAIS does not have specific authorizing legislation, the system is an internal administrative tool intended to support program requirements. SSAIS is only used by ACF employees and authorized contractors; it is not accessed by the public.
13. Indicate if the system is new or an existing one being modified: Existing
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): No
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): Not applicable.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: SSAIS supports the creation, tracking, and close-out of document controls. A SSAIS document control is a mechanism to track and process incoming documents related to the approval of state automation projects funded by ACF and/or CMS. These documents include Advanced Planning Documents (APDs), Advanced Planning Document Updates (APDUs), and any other reports and correspondence received from a grantee concerning a state automation project. The incoming documents are not directly entered into SSAIS, but sufficient information is key entered to support document tracking and the monitoring, review, and authorization or disapproval of grantee project phases and funding. The information entered is for internal ACF use and is not available for direct access by the public.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) Not applicable.
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): No
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): No
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: Not applicable.
PIA Approval
PIA Reviewer Approval: Promote
PIA Reviewer Name: -
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: Jun 30, 2006
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
06.3 HHS PIA Summary for Posting (Form) / ACF OHS Head Start Enterprise System (HSES)
PIA SUMMARY AND APPROVAL COMBINED
PIA Summary
Is this a new PIA? Yes
If this is an existing PIA, please provide a reason for revision: -
1. Date of this Submission: May 5, 2008
2. OPDIV Name: ACF
3. Unique Project Identifier (UPI) Number: 009-70-01-04-02-1009-00
4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): n/a
5. OMB Information Collection Approval Number: n/a
6. Other Identifying Number(s): n/a
7. System Name (Align with system Item name): Head Start Enterprise System
9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Fran Majestic
10. Provide an overview of the system: HSES supports enterbrise functions for the Office of Head Start. Consolidates data across all OHS applications.
13. Indicate if the system is new or an existing one being modified: New
17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): Yes
21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No
23. If the system shares or discloses IIF please specify with whom and for what purpose(s): HSES is a system meant for public use.
30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: OHS collects grant information from grant administrators for Head Start grants. HSES does not collect information from the public.
31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.
(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) HSES does not collect information from the public.
32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): Yes
37. Does the website have any information or pages directed at children under the age of thirteen?: No
50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): Yes
54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: HSES follows OMB and Department requirements, as well as NIST SP800-53 and SP800-53A guidance for securing IIF.
PIA Approval
PIA Reviewer Approval: -
PIA Reviewer Name: -
Sr. Official for Privacy Approval: Promote
Sr. Official for Privacy Name: David Jenkins
Sign-off Date: May 15, 2008
Approved for Web Publishing: Yes
Date Published: September 1, 2009
_____________________________________________________________________________
|