Plan for Reducing Personally Identifiable Information
FY16 Implementation Plan for reducing Personally Identifiable Information
EPA’s National Privacy Program (NPP) reviews Privacy Threshold Analysis (PTA) and Privacy Impact Assessments (PIA) at the beginning of the life cycle of a system to determine if the collection is necessary. The NPP also conducts a data call twice a year to identify the collection and uses of PII across the Agency. Once identified, collections are reviewed to determine if superfluous. If excessive elements are found, modifications are made to eliminate any superfluous uses. In the third quarter of FY2017, EPA will conduct a data call to review and update Agency forms and websites for PII collections. Moreover, second quarter FY2017 EPA will review and update Agency PIAs for all agency federal information systems (FIS).
| Action Item | Purpose | Outcome |
|---|---|---|
| Review Agency federal information systems. | To reassess the Agency's need to continue to collect the PII elements and to eliminate any elements, if no longer needed. |
|
| Review and update Agency PIAs for all Agency systems. | To reassess the Agency's need to collect PII elements or eliminate, if no longer needed. Identify any new risk associated with the collection. | Evaluation of Agency PII collections. Determination if data collections are accurate, relevant, timely and complete. Determination of the number of new PIAs: 2 |
| Review Agency SORNs | To reassess the Agency's need to eliminate any elements or the SORN, if no longer needed. | Elimination of unnecessary PII collections. Program offices directed to prepare paperwork to make the necessary changes. (i.e., modify or delete) the subject SORN. Determination of the number of new SORNs: 4 |
| Survey Agency forms that collect PII; determine current need for PII. | Ensure all forms used by the program has been included on the Agency inventory of forms. | Reduction in displaying of PII elements; increase in truncating of SSN; and the elimination of unnecessary collections of PII. Establishment of an inventory of Agency forms. Number of forms reviewed: TBC FY17 Number of forms modified: TBC FY17 |
| Review all Agency Websites to determine if PII is collected; determine if any/all PII elements are needed; ensure Privacy Notice (PN) is present; ensure adequacy of PN. |
|
Number of PII Elements reduced: 2