Laws & Regulations

WebEOC PIA

A July 2015 Privacy Impact Assessment (PIA) for WebEOC, a system providing spill notifications relating to oil and hazardous materials received from the United States Coast Guard’s National Response Center. WebEOC does not contain sensitive PII.

Privacy Training Program

Recognizing that training and awareness are critical to protecting agency Personally Identifiable Information (PII) in Q1 of FY14, the EPA is developing a mandatory general awareness privacy training for all EPA employees.

Plan for Reducing Personally Identifiable Information

Learn about National Privacy Program's (NPP) action items for FY16, including assessment of Agency federal information systems, Agency PIAs, Agency SORNs, Agency forms, and PII on Agency websites.

System Life Cycle Management Policy

The System Life Cycle Management Policy (SLCM) ensures consistency with federal statutes, regulations, EPA’s System Life Cycle (SLC), Enterprise Architecture (EA), Capital Planning and Investment Control (CPIC), and quality and security requirements.

RR3 OSHA MOU

The purpose of this interagency Memorandum of Understanding (MOU) is to establish the working relationship between the EPA, Region 3 (EPA) and Region 3, Philadelphia of the Occupational Safety and Health Administration (OSHA) of the Department of Labor.

Conducting Privacy On-Site Reviews

To ensure the EPA is compliant with privacy and security requirements, National Privacy Program (NPP) will coordinate on-site reviews with Agency information security staff, Information Management Officials (IMO) and Liaison Privacy Officials (LPO).

Processing Privacy Act Requests Procedure

This procedure provides the instructions for processing requests for records contained in Agency Privacy Act (PA) systems. The PA provides individuals the right to request access to their records maintained in Agency System of Records (SOR).

Responding to Breaches of Personally Identifiable Information (PII) Issued by the EPA Chief Information Officer

The procedure identifies the steps EPA employees will take to respond to breaches of Personally Identifiable Information (PII), setting out the roles and responsibilities for quickly and effectively reporting and responding to PII breaches.

How Contractors Will Respond to a Suspected or Confirmed PII Breach

The procedure for contractors to follow during a breach of personally identifiable information (PII) includes informing the EPA Call Center, and their Contracting Officer (CO) and Contracting Officer Representative (COR).

Plan for Reducing Unnecessary use of Social Security Numbers

In accordance with OMB Memorandum M-07-16, EPA's National Privacy Program (NPP) is reviewing FY16 instances in which the collection or use of the SSN is superfluous in Agency forms, systems, and websites.

Computer Matching Agreement Procedure

A computer matching agreement is required for any computerized comparison of two or more electronic systems of records or non-federal record system for the purpose of establishing or verifying eligibility or compliance with federal benefit programs.

Battery Collection Best Practices Toolkit

temp metadata

EPA Plan for Reducing Personally Identifiable Information, January 2013

Learn about the Agency's action items in January 2013, including review of Agency SORNs, Agency forms and Agency systems for PII elements, as well as developing online privacy trainings.

Section 401 of the Clean Water Act

Chromium in Drinking Water

Learn about chromium regulation in public drinking water systems and the potential that the regulation may be amended in the future to better address chromium-6.

Alternative Dispute Resolution (ADR) References and Guidance Documents

The EPA's Conflict Prevention and Resolution Center (CPRC) provides alternative dispute resolution (ADR) services to the entire Agency.

Frequently Asked Questions about Environmental Collaboration and Conflict Resolution

The EPA's Conflict Prevention and Resolution Center (CPRC) provides alternative dispute resolution (ADR) services to the entire Agency.

Services offered by the Conflict Prevention and Resolution Center (CPRC)

The EPA's Conflict Prevention and Resolution Center (CPRC) provides alternative dispute resolution (ADR) services to the entire Agency.

Report: Management Implication Report: Terms and Conditions Listed Within the EPA’s Subaward Policy

East Valley Water District: State Disaster Funding from 2005 Floods

The following resource is an example funding application from East Valley Water District – State Funding.