A Privacy Impact Assessment (PIA) explains how HHS collects, uses, shares, and protects personal information. Federal law requires agencies to complete PIAs when they develop or operate systems that collect personally identifiable information (PII).
PIAs help identify and reduce privacy risks before and during the operation of these systems. They also promote transparency by informing the public about how their information is handled.
There are two main types of PIAs:
- System Privacy Impact Assessments review HHS information systems that collect or maintain personal information. These assessments describe what data is collected, why it is needed, how it is protected, and who has access to it.
- Third-Party Website and Application PIAs apply when HHS uses websites or digital tools that are not operated by the federal government, such as social media platforms or other external services. These assessments explain what information may be shared with the third party and how privacy risks are managed.
Together, these assessments promote transparency and help ensure that personal information is handled responsibly and in accordance with federal law.
System Privacy Impact Assessments
Titles II and III of the E Government Act of 2002 require federal agencies to evaluate systems that collect PII and assess the privacy risks. Agencies meet this requirement by completing a Privacy Impact Assessment (PIA). At HHS, each division is responsible for completing and maintaining PIAs for all of its systems, whether they are still being developed or already in use. Once a PIA is completed, it must be made publicly available to support transparency and accountability.
Amyotrophic Lateral Sclerosis Web Portal
Download* | Download
Application Lifecycle Management
Download* | Download
ATSDR GRASP ArcGIS Cloud
Download* | Download
CDC ILLiad
Download* | Download
CDC Pathology Report Information
Download* | Download
CDC Public Access Platform
Download* | Download
CDC-INFO Contact Center Data
Download* | Download
CDC-INFO-Web Form Validator
Download* | Download
Childhood Blood Lead Surveillance System
Download* | Download
Credit Card Purchasing System
Download* | Download
CSPO Endpoint Detection and Response
Download* | Download
CSPO IT Infrastructure
Download* | Download
CSPO Vulnerability and Threat Management
Download* | Download
Dengue Laboratory Sample Database
Download* | Download
Drug Activity Reporting System
Download* | Download
Drug Activity Reporting System 2
Download* | Download
DVBID Reagent Ordering System
Download* | Download
Electronic Security Systems
Download* | Download
electronic Federal Select Agent Program - Cloud
Download* | Download
electronic Import Permit Program
Download* | Download
Employee Support Services System
Download* | Download
Enterprise Electronic Quality Management System
Download* | Download
Enterprise Systems Catalog
Download* | Download
Epi Info Web Tools
Download* | Download
EvaluationWeb 2.0
Download* | Download
Freedom of Information Act Tracking System
Download* | Download
Health Physics Assistant
Download* | Download
Healthcare Electronic Health Records
Download* | Download
Influenza Associated Pediatric Death Surveillance System (PedFlu)
Download* | Download
Laboratory Animal Management System
Download* | Download
Local Travel System
Download* | Download
Lucid Govsuite
Download* | Download
MISO Business Application Support System
Download* | Download
National Arboviral Surveillance System (ArboNET)
Download* | Download
National Cancer Detection Data Processing System
Download* | Download
National Diabetes Prevention Program Customer Service Center
Download* | Download
National Health and Nutrition Examination Survey
Download* | Download
NCHS Rapid Surveys System
Download* | Download
OC Office 365
Download* | Download
OHE Qualtrics System
Download* | Download
OID Infectious Diseases Enterprise LIMS
Download* | Download
Pathogen Discovery and Detection Application
Download* | Download
Performance Management Appraisal System
Download* | Download
Plain Language System
Download* | Download
Poxvirus and Rabies Freezerworks Inventory
Download* | Download
Public Health Law Investigation Platform
Download* | Download
Publication Warehouse System
Download* | Download
Pulse Check
Download* | Download
Safety Survival Skills Training and Tracking System
Download* | Download
SampleGuard
Download* | Download
SEAD 3 Self Reporting System
Download* | Download
System for Animal Facility Electronic Tracking of Quarantine
Download* | Download
Telework Management System
Download* | Download
Travel Risk Assessment, Accountability, Clearance and Incident Reporting
Download* | Download
Training and Continuing Education Online 2
Download* | Download
Vaccine Preventable Disease
Download* | Download
Visiting Fellows Payroll System
Download* | Download
CBER Biologics Investigational and Related Application Management Systems
Download* | Download
CBER IdeaScale
Download* | Download
CDER Drug Quality and Compliance Portal
Download* | Download
CDER Electronic Listing System
Download* | Download
CDER Institutional Review Board Site Selection Tool
Download* | Download
CDER Real World Application Platform for Innovation and Development
Download* | Download
CDRH Global Unique Device Identifier Database
Download* | Download
CDRH Medical Device Single Audit Program Regulatory Exchange Platform-secure
Download* | Download
CTP RTI Monthly Implementation Assessment
Download* | Download
CVM Pharmacovigilance Workflow Manager
Download* | Download
HFP CORE Analytics Research Application
Download* | Download
OC Cority GX2
Download* | Download
OC Enterprise EDiscovery System
Download* | Download
OC Event Management System
Download* | Download
Annual Report on Possible Research Misconduct System – Cloud
Download* | Download
ASFR Present Responsibility and Integrity Management System
Download* | Download
ASPR Disaster Telemedicine Platform
Download* | Download
ASTP WordPress VIP
Download* | Download
Commissioned Corps Payroll - Cloud
Download* | Download
Debt Management and Collection System
Download* | Download
Disaster Medical Information Suite
Download* | Download
Enterprise Human Capital Management
Download* | Download
FedHR Navigator
Download* | Download
Grants.gov Cloud
Download* | Download
HHS Office 365
Download* | Download
HHS OGC Matter and Time Tracking Cloud System
Download* | Download
IBx Connect Smartsheets
Download* | Download
Identity and Access Management System at HHS
Download* | Download
Interactive Service Management
Download* | Download
Managed Application Hosting Center
Download* | Download
Managing & Accounting Credit Card System
Download* | Download
OASH-Force
Download* | Download
OASH Smartsheet
Download* | Download
OASH Unified Web
Download* | Download
Office Acquisitions (OA) Document Routing Tool
Download* | Download
Office on Women's Health Websites
Download* | Download
ONC JIRA Service Manager
Download* | Download
Program Information Management System
Download* | Download
PSC-WS: Customer Agreement Module
Download* | Download
PSC-WS Acquisition Reporting System
Download* | Download
Revenue, Invoicing, and Cost Estimation System
Download* | Download
Robotic Process Automation System
Download* | Download
Secretary Policy System
Download* | Download
Third Party Websites and Applications Privacy Impact Assessments
Office of Management and Budget (OMB) Memorandum M-10-23 requires federal agencies to evaluate their use of third party websites and applications to ensure personal information is protected. Agencies meet this requirement by completing a Privacy Impact Assessment (PIA). At HHS, each division is responsible for completing and maintaining PIAs for the third party websites and applications it uses. Once completed, these PIAs are made publicly available to promote transparency and accountability.
PIA is still undergoing Section 508 conformance changes. If you need assistance, please reach out to PrivacyProgramMailbox@hhs.gov.