Privacy
The DHS Privacy Office is responsible for evaluating the Department programs, systems, and initiatives for potential privacy impacts, and providing strategies to reduce the privacy impact.
-
S&T FOIA Logs
This log contains the incoming Freedom of Information Act (FOIA) requests to the Department of Homeland Security Science and Technology Directorate (S&T) for each fiscal year.
-
DHS Science and Technology Laboratory Fact Sheet
DHS S&T Laboratory Fact Sheet: created the Chemical Security Analysis Center (CSAC) in 2006 to assess and identify vulnerabilities.
-
DHS/USCG/PIA-006 Vessel Requirements for Notices of Arrival and Departure (NOAD) and Automatic Identification System (AIS)
Vessel Requirements for the Notice of Arrival and Departure (NOAD) and Automatic Identification System (AIS) Rulemaking, April 28, 2015. The United States Coast Guard (USCG) is updating this Privacy Impact Assessment (PIA) following a recently published final rule after considering comments received on the notice of proposed rulemaking (NPRM) published December 16, 2008. The USCG prepared this PIA update because the Notice of Arrival (NOA) portion of this final rule requires an expansion of an existing collection of personally identifiable information (PII).
-
Enhanced Cybersecurity Services Program Privacy Compliance Review
The Enhanced Cybersecurity Services Program (ECS) is a voluntary Department of Homeland Security (DHS) program in which the National Protection and Programs Directorate’s (NPPD) Cybersecurity and Communications provides indicators of malicious cyber activity to participating commercial service providers. The purpose of the program is to assist the owners and operators of critical infrastructure in enhancing their ability to protect their systems from unauthorized access, exploitation, or data exfiltration through a voluntary information sharing program. In performing the Privacy Compliance Review (PCR), the DHS Privacy Office found that NPPD developed the ECS Program and its related processes with privacy-protective objectives in mind. NPPD continues to operate the ECS Program and its related processes with strong privacy oversight, which allows NPPD to identify and mitigate privacy risks as the program evolves and matures.
-
DHS/ICE/PIA-039 Acquisition and Use of License Plate Reader Data from a Commercial Service
The Department of Homeland Security, U.S. Immigration and Customs Enforcement (ICE) has procured query-based access to a vendor-owned commercial License Plate Reader (LPR) data service that stores recorded vehicle license plate data from cameras equipped with license plate reader technology. ICE uses LPR data from this service in support of its criminal and administrative law enforcement missions. In March 2015, ICE published a Privacy Impact Assessment (PIA) announcing ICE’s intention to procure access to a commercial LPR database and describing the controls ICE would put in place to ensure the agency complies with privacy and civil liberties requirements when using the service. This PIA Update explains ICE’s operational use of the service it has procured and describes the privacy and civil liberties protections that have been implemented by the agency and the vendor.
-
DHS/FEMA/PIA-013 Grant Management Programs
The Federal Emergency Management Agency (FEMA) administers and manages grants to enhance the level of preparedness of its customers and stakeholders, and the public’s ability to prevent, mitigate, respond to and recover from all hazards. FEMA determines awards for both disaster and non-disaster grants, and manages the grant lifecycle for all grantees, as well as internal and external partners, and ensures critical and measurable results. FEMA updated and republished this Privacy Impact Assessment (PIA) because FEMA collects personally identifiable information (PII) from grant applicants as part of the grant application process.
-
DHS/CISA/PIA-020 State, Local, Tribal and Private Sector Clearance Program for Critical Infrastructure
The Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA) is updating the Private Sector Clearance Program for Critical Infrastructure’s (PSCP) Privacy Impact Assessment (PIA) to account for the organizational changes that have taken place in the administration of the program at CISA. This update outlines changes to the program clearance process and to DHS Form 9014, State, Local, Tribal and Private Sector Clearance Request Form, since the publication of the Privacy Impact Assessment Update in April 2018.
-
Presidential Policy Directive 28 (PPD-28) Signals Intelligence Activities
This Policy Instruction states the policies and procedures governing the safeguarding l&A employees of pii collected from signals intelligence activities.
-
CRCL FOIA Logs
These logs contain Office of Civil Rights and Civil Liberties (CRCL) incoming Freedom of Information Act (FOIA) requests for each fiscal year.
-
DHS-ALL-049 Performance and Learning Management System (PALMS)
DHS-ALL-049 Performance and Learning Management System (PALMS)