Privacy
The DHS Privacy Office is responsible for evaluating the Department programs, systems, and initiatives for potential privacy impacts, and providing strategies to reduce the privacy impact.
-
DHS/ALL/PIA-009 Web Time & Attendance System
The Department of Homeland Security (DHS) Office of the Chief Human Capital Officer (OCHO) has procured a COTS application and customized it to meet DHS standard requirements. This system is designed to implement an enterprise system that can efficiently automate the timesheet collection process and provide robust reporting features and a labor distribution capability.
-
DPIAC April Meeting Materials
Materials for the Data Privacy and Integrity Advisory Committee held a public meeting on April 26, 2022.
-
DHS/USCIS/PIA 009 Central Index System
The Department of Homeland Security (DHS) U.S. Citizenship and Immigration Services (USCIS) maintains the Central Index System (CIS). CIS is a repository of electronic data that contains an index of basic data elements related to an individual as he or she passes through the immigration process. CIS contains information on the status of applicants and petitioners seeking immigrant and non-immigrant benefits, including: lawful permanent residents, naturalized citizens, United States border crossers, aliens who illegally entered the United States, aliens who have been issued employment authorization documents, individuals who petitioned for benefits on behalf of family members, and other individuals subject to the provisions of the Immigration and Nationality Act (INA). Recently USCIS migrated records from a legacy mainframe database to a cloud platform and renamed legacy CIS to CIS 2. CIS2 continues to look and function like the CIS mainframe application, with subtle formatting enhancements.
-
Chief FOIA Officer Reports
These reports summarize DHS’s accomplishments in achieving its strategic goals related to transparency, openness, and implementing FOIA.
-
Validation Instrument for Business Enterprises (VIBE)
U.S. Citizenship and Immigration Services (USCIS) Service Center Operations Directorate (SCOPS) developed the Validation Instrument for Business Enterprises (VIBE) system. SCOPS uses VIBE to (1) validate the business operations and financial viability of organizations seeking to employ foreign workers; and (2) identify benefit fraud based on the Fraud Detection and National Security Directorate (FDNS) findings and other government agencies’ referrals. USCIS conducted this Privacy Impact Assessment (PIA) because VIBE collects, uses, and disseminates Personally Identifiable Information (PII).
-
FOIA Annual Reports
DHS FOIA Annual Reports to the Attorney General and the Office of Government Information Services
-
USCIS Retired PIAs
USCIS Retired PIAs - DHS/USCIS/PIA-001, 002, 004, 005, 006(a), 006(b), 006, 006(c), 011, 014, 014(a), 020, 024, 025, 026, 028
-
DHS/USCIS-027 USCIS Asylum Division
System of Records Notices (SORNs) and Privacy Impact Statements (PIAs) regarding the Asylum Division of the U.S. Citizenship and Immigration Services (USCIS).
-
DPIAC February Meeting Materials
Materials for the February 22, 2022 DPIAC
-
DHS/S&T/PIA-043 S&T Operations and Requirements Analysis Division
The U.S. Department of Homeland Security (DHS, or the Department) Science and Technology Directorate (S&T) Operations and Requirements Analysis Division (ORA) provides analytical expertise by conducting capabilities, requirements, operations, and alternatives analyses to maximize efficiency and effectiveness for the Homeland Security Enterprise. S&T ORA uses Systems of Systems Operational Analytics, hereinafter referred to as SoSOA, a virtual, web-based environment that meets DHS and Homeland Security Enterprise critical mission and operational needs, to help DHS improve its structured analytics, data integration, and data collaboration. S&T is publishing this Privacy Impact Assessment (PIA) because ORA uses systems, such as SoSOA, containing personally identifiable information (PII) and privacy-sensitive information to perform analysis and to assess the privacy risks associated with the use, maintenance, dissemination, and disposal of privacy-sensitive data stored in systems or cloud environments and used to make operational decisions.