Privacy Act Applicability

2014 Ebola Virus Response

Applicability of the Privacy Act to This Information Collection Request (ICR)

ICR Name: Data Collection for Ebola Virus Disease Patients Treated Outside of West Africa

OMB/CDC ID: 0920-NEW

ICR Classification: New, Emergency Request

Requested Expiration Date: One month from approval date

On 01/08/2015, the Incident Management System OMB PRA Advisor conducted this review and has agreed that the Privacy Act does apply.

The applicable System of Records Notice is SORN No. 09-20-0113 titled “Epidemic Investigation Case Records Systems Notice,” for which records are retrievable by Social Security Number (SSN) or by name. See Federal Register: November 24, 1986 (Volume 51, Number 226); Page 42466-42468.

The Privacy Act Checklist (include a brief narrative addressing):

1. The data collection involves collecting sensitive and/or personally identifiable information.

   1. Personal information will be maintained in locked file cabinet, password protected files.

   2. Persons who will have access to personal information include employees only.

2. The personal information will be maintained according to the CDC Records Control Schedule. If sensitive identifiable information is maintained for even one day, the Privacy Act will apply.

3. The consent/advisement language in the ICR is located in.

   1. Appendix B. Email Invitation and Consent

   2. The consent includes language on the:

[NO] - Authority for collecting the data.

[YES] - Purpose for collecting the data.

[YES] - With whom aggregate information will be shared.

[YES] - Voluntary nature of the information collection.

[YES] - Effect upon respondent for not participating.