| HHS Privacy Impact Assessment (PIA) Summary |
| AHRQ: AHRQ CHIRI Extranet |
| Summary of PIA Required Questions |
| The following required questions represent the information necessary to complete the PIA Summary for transmission to the Office of Management and |
| Budget. Note: If a question or its response is not applicable, please answer “No” to that question. |
1
System:
AHRQ CHIRI Extranet
2
Is this a new PIA?
No
3
| If this is an existing PIA, please provide a reason |
| for revision: |
PIA Validation
4
Date of this Submission:
Jun 21, 2006
5
OPDIV Name:
AHRQ
6
Unique Project Identifier (UPI) Number:
NA
7
Privacy Act System of Records (SOR) Number:
NA
8
OMB Information Collection Approval Number:
NA
9
Other Identifying Number(s):
NA
10
System Name:
CHIRI Extranet
11
| System Point of Contact (POC). The System POC |
| is the person to whom questions about the system |
| and the responses to this PIA may be addressed: |
Tim Erny
12
Provide an overview of the system:
| This is an Extranet site designed to promote coordination and |
| collaboration among grantees of the Child Health Insurance |
| Research Initiative (CHIRI), and their project officers from AHRQ, |
| the David and Lucile Packard Foundation, and HRSA. |
13
| Indicate if the system is new or an existing one |
| being modified: |
Existing
14
| Does/Will the system collect, maintain (store), |
| disseminate and/or pass through IIF within any |
| database(s), record(s), file(s) or website(s) hosted |
| by this system? |
Yes
15
Is the system subject to the Privacy Act?
No
16
| If the system shares or discloses IIF please specify |
| with whom and for what purpose(s): |
| CHIRI participants and project officers, AHRQ OPART-IT (which |
| maintains the system), and CHIRI support contractors who |
| substantively maintain the Extranet and disseminate CHIRI |
| projects. |
17
| Describe in detail the information the agency will |
| collect, maintain, or disseminate and why and for |
| what purpose the agency will use the information: |
| Contact information (name, address, phone, fax, and email) were |
| obtained for Principal Investigators from their grant applications. |
| They supplied information for other members of their research |
| team. So that participants in CHIRI. could send things to |
18
Describe the consent process:
| No additional data collection is being conducted. Extranet users |
| supply updates to the contract information. At the inception of the |
| site, which was established at the request of the grantees to |
| facilitate collaboration, users were told that the site woul |
19
Does the system host a website?
Yes
20
| Does the website have any information or pages |
| directed at children under the age of thirteen? |
No
21
| Are there policies or guidelines in place with regard |
| to the retention and destruction of IIF? |
Yes
22
Are there technical controls present?
Yes
23
Describe the IIF security controls:
| All Extranet users have their own user login name and password. |
| AHRQ OPART-IT maintains security for the site. |
24
Sr Official of Privacy Signature:
Tim Erny
25
Sr Official of Privacy Signoff Date:
Jun 28, 2006
| Note on IIF: Any question about IIF seeks to identify any, and all, personal information associated with the system. This includes any IIF, whether or not it |
| is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily |
| or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or |
| other legislation. Note: If no IIF is contained in the system, please answer the remaining required questions, then promote the PIA to the Sr. Privacy |
| Official who will authorize the PIA. Note: If this system contains IIF, all remaining questions on the PIA Form Tabs must be completed prior to signature |
| and promotion. |
