Privacy Impact Assessment (PIA) | Homeland Security
U.S. flag

An official website of the United States government

  1. Home
  2. About DHS
  3. Site Links
  4. Keywords
  5. Privacy Impact Assessment (PIA)

Privacy Impact Assessment (PIA)

Last Updated: | Publication

DHS/OIDO/PIA-001 Immigration Detention Case Management System

The U.S. Department of Homeland Security’s (DHS) Office of the Immigration Detention Ombudsman (OIDO or Office) is an independent office responsible for objectively and impartially reviewing cases submitted by, or on behalf of, individuals affected by potential misconduct, excessive force, violations of rights of individual detainees, or violations of law, standards of professional conduct, contract terms, policy related to immigration detention, or detention standards that occurred while in immigration detention by DHS officers, or other contracted, subcontracted, or cooperating entity personnel. Thereafter OIDO seeks to resolve the matter or provide redress as appropriate.

Last Updated: | Publication

DHS/OIG/PIA-002 Office of Inspector General Video Management System

The U.S. Department of Homeland Security (DHS) Office of Inspector General (OIG) is establishing the Video Management System (VMS), which is a system hosted within the Microsoft Azure cloud environment. VMS is storage solution for receiving, storing, and reviewing audio and video data in support of the investigations conducted by DHS OIG criminal investigators (Special Agents).

Last Updated: | Publication

DHS/CBP/PIA-030 Departure Information Systems Test

U.S. Customs and Border Protection (CBP) will operate the Departure Information Systems Test in order to identify reliable and cost-effective border management capabilities that can be deployed nationwide and across multiple modes of travel. The Test will seek to test CBP’s ability to verify the biometrics of departing travelers. Photos of travelers taken during boarding will be compared against photos taken previously (U.S. passport, U.S. visa, and other DHS encounters) and stored in existing CBP systems.

Last Updated: | Publication

DHS/CISA/PIA-038 Use of Administrative Subpoenas for Cybersecurity Vulnerability Identification and Notification

The U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) Cybersecurity Division (CSD) has established a process that permits CISA, pursuant to statutory authority, the use of administrative subpoenas for cybersecurity vulnerability identification and notification. This process allows CISA to issue administrative subpoenas and receive customer or subscriber contact information from service providers to identify and notify owners or operators of covered systems and devices related to critical infrastructure that have a specific security vulnerability. CISA is conducting this Privacy Impact Assessment (PIA) because responses to administrative subpoenas will include the personally identifiable information (PII) of individuals identified by subpoenaed service providers, such as Internet Service Providers (ISPs), as relevant points of contact.

Last Updated: | Publication

DHS/CBP/PIA-070 Processing Individuals Subject to Migrant Protection Protocols (MPP)

U.S. Customs and Border Protection (CBP) is tasked with safeguarding America’s borders while enhancing the nation’s global economic competitiveness by enabling legitimate trade and travel. As of February 2021, there were approximately 25,000 individuals enrolled in Migrant Protection Protocols (MPP) outside of the United States awaiting adjudication of their removal proceedings. CBP will leverage technology solutions, including facial recognition technology, to verify MPP enrollment and case status, and streamline these individuals’ processing into the United States. CBP is conducting this Privacy Impact Assessment (PIA) to assess the privacy risks and mitigations associated with the biometric and biographic information collected to process individuals enrolled in MPP.

Last Updated: | Publication

DHS/CBP/PIA-069 CBP Translate Application

The U.S. Department of Homeland Security (DHS), U.S. Customs and Border Protection (CBP), Office of Field Operations (OFO) inspects and processes travelers from all over the world. The diversity of languages spoken by travelers can pose linguistic challenges throughout the inspection process. To assist CBP Officers (CBPO) in meeting these translation challenges, CBP developed CBP Translate, a mobile and web application that will assist CBPOs in communicating with travelers. CBP is submitting this new Privacy Impact Assessment (PIA) to assess the privacy risks and provide notice of CBP Translate, which captures and stores written transcripts and audio recordings of translated conversations, images of documents containing text, and travel document information from travelers encountered at U.S. Ports of Entry (POE).

Last Updated: | Publication

DHS/CBP/PIA-068 CBP One™ Mobile Application

The U.S. Department of Homeland Security (DHS), U.S. Customs and Border Protection (CBP), launched a new public-facing application, CBP OneTM, to provide the public a single portal to a variety of CBP services. The application is available on both web and mobile devices. CBP OneTM will eventually replace and upgrade existing CBP public-facing mobile applications to improve user interaction and services. CBP OneTM includes different functionality for travelers, importers, brokers, carriers, International Organizations, and other entities under a single consolidated log-in and uses guided questions to help users determine the correct services, forms, or applications needed. CBP is conducting this Privacy Impact Assessment (PIA) to address privacy risks in the deployment and use of the CBP OneTM mobile application. CBP has also issued an update to clarify that CBP OneTM stores information locally on a user's device. (January 2025) 

 

Last Updated: | Publication

DHS/CBP/PIA-066 CBP Support of CDC for Public Health Contact Tracing

U.S. Customs and Border Protection (CBP) continues to assist the Department of Health and Human Services (HHS), Centers for Disease Control and Prevention (CDC) with its public health response efforts. In December 2020, CBP issued a Privacy Impact Assessment (PIA) documenting CBP efforts to support CDC public health efforts.

Last Updated: | Publication

DHS/CISA/PIA-037 CyberSentry

The U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) has developed the voluntary CyberSentry program to enhance the cyber resilience of organizations that own or operate critical infrastructure. CyberSentry uses sensors to monitor the Information Technology and Operational Technology networks of a participating Critical Infrastructure (CI) partner for cybersecurity threats. CISA is conducting this Privacy Impact Assessment (PIA) because CyberSentry’s network monitoring capabilities may create the potential for disclosure of personally identifiable information (PII).

Last Updated: | Publication

DHS/ICE/PIA-059 Information Technology Service Management - ServiceNow

The U.S. Immigration and Customs Enforcement (ICE) Office of the Chief Information Officer (OCIO) operates the Information Technology Service Management (ITSM) - ServiceNow enterprise solution (ServiceNow). To better support its mission of streamlining the management of time-sensitive service requests, OCIO implemented a software as a service (SaaS) cloud-based tool that can be customized based on the needs of ICE program offices to provide support to ICE personnel (i.e., employees, contractors) and non-ICE personnel who have access to ICE systems for official business. ICE is publishing this Privacy Impact Assessment (PIA) to provide a thorough analysis of the privacy risks associated with ServiceNow’s collection, use, and maintenance of personally identifiable information (PII).