Administration on Aging Privacy Impact Assessments

06.3 HHS PIA Summary for Posting (Form) / AoA Eldercare Locator Web Application (ECLW)

PIA SUMMARY AND APPROVAL COMBINED

PIA Summary

Is this a new PIA? No

If this is an existing PIA, please provide a reason for revision: PIA Validation

1. Date of this Submission: Nov 14, 2008

2. OPDIV Name: AOA

3. Unique Project Identifier (UPI) Number: 009-75-01-07-02-1005-00-305-109

4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): N/A

5. OMB Information Collection Approval Number: No

6. Other Identifying Number(s): No

7. System Name (Align with system Item name): Eldercare Locator

9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Sue Banning

10. Provide an overview of the system: The Eldercare Locator is a public service offered by AoA. The website connects older Americans and their caregivers with sources of information on senior services. The service links those who need assistance with state and local area agencies on aging and community-based organizations that serve older adults and their caregivers.

13. Indicate if the system is new or an existing one being modified: Existing

17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): No

21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No

23. If the system shares or discloses IIF please specify with whom and for what purpose(s): No personal or private data is collected, shared, or disclosed by the system.

30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: The Eldercare Locator data is contact information (address, phone number, e-mail) for state and local eldercare services ranging from general information, health insurance, legal assistance, long term care, Ombudsman, and prescription drug assistance. There is no personal data on the website.

31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.

(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) No personal or private data is collected, shared, or disclosed by the system.

32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): Yes

37. Does the website have any information or pages directed at children under the age of thirteen?: No

50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): Yes

54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: No personal or private data is collected, shared, or disclosed by the system.

PIA Approval

PIA Reviewer Approval: Promote

PIA Reviewer Name: Secure One HHS Migration

Sr. Official for Privacy Approval: Promote

Sr. Official for Privacy Name: Harry Posman

Sign-off Date: Jul 5, 2006

Approved for Web Publishing: Yes

Date Published: September 1, 2009

_____________________________________________________________________________

06.3 HHS PIA Summary for Posting (Form) / AoA National Aging Program Information System (NAPIS)

PIA SUMMARY AND APPROVAL COMBINED

PIA Summary

Is this a new PIA? No

If this is an existing PIA, please provide a reason for revision: PIA Validation

1. Date of this Submission: May 5, 2009

2. OPDIV Name: AOA

3. Unique Project Identifier (UPI) Number: 009-75-01-07-02-1002-00-101-003

4. Privacy Act System of Records (SOR) Number (If response to Q.21 is Yes, a SORN number is required for Q.4): N/A

5. OMB Information Collection Approval Number: No

6. Other Identifying Number(s): No

7. System Name (Align with system Item name): National Aging Program Information System (NAPIS)

9. System Point of Contact (POC). The System POC is the person to whom questions about the system and the responses to this PIA may be addressed: Sue Banning

10. Provide an overview of the system: The system compiles a collection of numeric data as specified and collected in questionnaires to State Ombudsmen and State Directors regarding monies allocated through grant funding and resulting impact of that funding. No personally identifiable information is collected or maintained in this system.

13. Indicate if the system is new or an existing one being modified: Existing

17. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system? (Note: This question seeks to identify any, and all, personal information associated with the system. This includes any PII, whether or not it is subject to the Privacy Act, whether the individuals are employees, the public, research subjects, or business partners, and whether provided voluntarily or collected by mandate. Later questions will try to understand the character of the data and its applicability to the requirements under the Privacy Act or other legislation. Does/Will the system collect, maintain (store), disseminate and/or pass through PII within any database(s), record(s), file(s) or website(s) hosted by this system?): No

21. Is the system subject to the Privacy Act? (If response to Q.19 is Yes, response to Q.21 must be Yes and a SORN number is required for Q.4): No

23. If the system shares or discloses IIF please specify with whom and for what purpose(s): No personally identifiable information is collected or maintained in this system.

30. Please describe in detail: (1) the information the agency will collect, maintain, or disseminate; (2) why and for what purpose the agency will use the information; (3) in this description, explicitly indicate whether the information contains PII; and (4) whether submission of personal information is voluntary or mandatory: The system is not a database of personal information, but a repository of numerical data collected from the states and tribal organizations about monies allocated through grant funding under the Older Americans Act of 1965. No personally identifiable information is collected or maintained in this system.

31. Please describe in detail any processes in place to: (1) notify and obtain consent from the individuals whose PII is in the system when major changes occur to the system (e.g., disclosure and/or data uses have changed since the notice at the time of the original collection); (2) notify and obtain consent from individuals regarding what PII is being collected from them; and (3) how the information will be used or shared.

(Note: Please describe in what format individuals will be given notice of consent [e.g., written notice, electronic notice, etc.]) No PII is collected. No personally identifiable information is collected or maintained in this system.

32. Does the system host a website? (Note: If the system hosts a website, the Website Hosting Practices section is required to be completed regardless of the presence of PII): No

37. Does the website have any information or pages directed at children under the age of thirteen?: No

50. Are there policies or guidelines in place with regard to the retention and destruction of PII? (Refer to the C&A package and/or the Records Retention and Destruction section in SORN): Yes

54. Briefly describe in detail how the IIF will be secured on the system using administrative, technical, and physical controls.: No PII is contained in the system. It contains numerical data only. No personally identifiable information is collected or maintained in this system.

PIA Approval

PIA Reviewer Approval: Promote

PIA Reviewer Name: Secure One HHS Migration

Sr. Official for Privacy Approval: Promote

Sr. Official for Privacy Name: Harry Posman

Sign-off Date: Jul 5, 2006

Approved for Web Publishing: Yes

Date Published: September 1, 2009

_____________________________________________________________________________