Download:
pdf |
pdfPrivacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 1 of 11
PRIVACY THRESHOLD ANALYSIS (PTA)
This form is used to determine whether
a Privacy Impact Assessment is required.
Please use the attached form to determine whether a Privacy Impact Assessment (PIA) is required under
the E-Government Act of 2002 and the Homeland Security Act of 2002.
Please complete this form and send it to your component Privacy Office. If you do not have a component
Privacy Office, please send the PTA to the DHS Privacy Office:
Senior Director, Privacy Compliance
The Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
Tel: 202-343-1717
[email protected]
Upon receipt from your component Privacy Office, the DHS Privacy Office will review this form. If a
PIA is required, the DHS Privacy Office will send you a copy of the Official Privacy Impact Assessment
Guide and accompanying Template to complete and return.
A copy of the Guide and Template is available on the DHS Privacy Office website,
www.dhs.gov/privacy, on DHSConnect and directly from the DHS Privacy Office via email:
[email protected], phone: 202-343-1717.
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 2 of 11
PRIVACY THRESHOLD ANALYSIS (PTA)
SUMMARY INFORMATION
Project or
Program Name:
Form I-600A, Application for Advance Processing of Orphan Petition (OMB No.
1615-0028)
Component:
U.S. Citizenship and
Immigration Services (USCIS)
Office or
Program:
Click here to enter text.
Xacta FISMA
Name (if
applicable):
N/A
Xacta FISMA
Number (if
applicable):
N/A
Type of Project or
Program:
Form or other Information
Collection
Project or
program
status:
Update
Date first
developed:
Date of last PTA
update
August 9, 2012
Pilot launch
date:
N/A
May 10, 2016
Pilot end date:
N/A
ATO Status (if
applicable)
N/A
ATO
expiration date
(if applicable):
N/A
PROJECT OR PROGRAM MANAGER
Name:
Kelley Miller
Office:
RAIO/International Operations
Division
Title:
Acting Branch Chief
Phone:
(202) 272-0903
Email:
[email protected]
INFORMATION SYSTEM SECURITY OFFICER (ISSO) (IF APPLICABLE)
Name:
N/A
Phone:
N/A
Email:
N/A
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 3 of 11
SPECIFIC PTA QUESTIONS
1. Reason for submitting the PTA: Updated PTA
USCIS previously revised this form given the passage and signature of the Intercountry Universal
Accreditation Act of 2012 (UAA). OMB approved these revisions and the new form went live on uscis.gov
in February 2015. This form is currently up for extension with no changes requested.
Background on previous Form I-600A revisions:
On January 14, 2013, the President signed the Intercountry Adoption Universal Accreditation Act of 2012
(UAA), which will become effective July 14, 2014. As of that date, all agencies or persons proving adoption
services in support of Form I-600A, Application for Advance Processing of an Orphan Petition or Form I600, Petition to Classify Orphan as an Immediate Relative, must be accredited or approved, or be a
supervised or exempted provider, in accordance with the Intercountry Adoption Act of 2000 and the
Department of State accreditation regulations at 22 CFR 96 for Hague Convention on Protection of Children
and Co-operation in Respect of Intercountry Adoption (Hague Convention, Hague, or Convention) cases.
The UAA requires that adoption service providers (ASPs) handling non-Hague Convention adoption cases
that fall under the Immigration and Nationality Act (INA) section 101(b)(1)(F) follow the same
accreditation or approval process required of ASPs that handle Hague Convention cases under INA section
101(b)(1)(G). The UAA assures families pursuing an intercountry adoption that, regardless of the country
from which they intend to adopt, the ASP they choose will need to comply with the same ethical standards
of practice and conduct.
Effective July 14, 2014, cases that do not meet certain grandfathering criteria will be required to comply
with the UAA requirements. Among them, the main requirement necessitating modifications to this
Supplement is an ongoing duty of candor or disclosure, which is a result of OCC’s determination that the
UAA requires Hague-compliant home studies that satisfy 8 CFR 204.311.
Under 8 CFR Part 204.311(d), an applicant or petitioner, his/her spouse (if married), and any adult members
of their household have a duty of candor in completing Form I-600A (if applicable), Form I-600, during
the home study process, and an ongoing duty of disclosure throughout the adoption process to:
1. Provide true and complete information to the home study preparer;
2. Disclose other relevant information, such as physical, mental, or emotional health problems or behavioral
issues;
3. Disclose any arrest, conviction, or other adverse criminal history, whether in the United States or abroad,
even if the record of the arrest, conviction, or other adverse criminal history has been expunged, sealed,
pardoned, or the subject of any other amelioration;
4. Disclose any history of substance abuse, sexual abuse or child abuse, and/or family violence as an
offender under 8 CFR 204.309(a)(1); and
5. Notify the home study preparer and USCIS of any new event or information that might warrant
submission of an amended or updated home study.
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 4 of 11
Though an applicant (and his or her spouse, if married) is currently required to sign and certify this form,
given the UAA, we need to specifically ask the applicant (and spouse, if married) questions related to
items 3 and 4 and add in an applicant (and spouse, if married) duty of disclosure certification box.
Form I-600A, Application for Advance Processing of Orphan Petition
A U.S. citizen who plans to adopt a foreign-born child from a non-Hague Adoption Convention country,
but does not have a specific child in mind uses this form. Form I-600A enables USCIS to adjudicate the
application that relates to the qualification of the applicant(s) as prospective adoptive parent(s).
Additionally, this form may be used in cases whether the child is known and the prospective adoptive
parent(s) plan to travel to the country where the child is located during the adoption process. However, it
is important that prospective adoptive parent(s) be aware that the processing of Form I-600A does not
authorize the removal of a child from the foreign country where he/she is located. A child cannot
immigrate to the U.S. until a Form I-600 petition has been approved on his/her behalf and the child has
obtained an immigrant visa.
Under 8 CFR 204.3, a prospective adoptive parent has the option to:
File Form I-600A, then file Form I-600 (either while Form I-600A is still pending or after Form I600A approval); OR
File Form I-600 and simultaneously request a suitability and eligibility determination as part of
the Form I-600 adjudication by submitting all required supporting documentation for both Form
I-600A and Form I-600.
Note: Form I-600A is not a petition to classify an orphan as an immediate relative. Form I-600, Petition
to Classify Orphan as an Immediate Relative, is used for that purpose.
This form may include Form I-600A/Form I-600, Supplement 1, Listing of Adult Member of the Household
to collect information on every adult member of the household age 18 and older who lives in the home of
the prospective adoptive parent(s) except for the spouse of the applicant/petitioner.
IT SYSTEM
Domestic Form I-600A and Form I-600 filings are received in at the USCIS lockbox; international filings
are accepted by USCIS international offices. Petitioners and Applicants submit the Supplement 1 with the
Form I-600A or Form I-600 – not through a stand- alone filing.
The NBC uses NPWR/ACMS to track and process adoption cases filed domestically including Supp 1. IO
uses CAMINO to track and process adoption cases filed abroad with USCIS, but currently does not record
Form I-600A/Form I-600, Supp 1 filings.
2. Does this system employ any of the
following technologies:
If you are using any of these technologies and
want coverage under the respective PIA for that
Closed Circuit Television (CCTV)
Social Media
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 5 of 11
technology please stop here and contact the DHS
Privacy Office for further guidance.
Web portal 1 (e.g., SharePoint)
Contact Lists
None of these
3. From whom does the Project or
Program collect, maintain, use, or
disseminate information?
Please check all that apply.
This program does not collect any personally
identifiable information 2
Members of the public
DHS employees/contractors (list components):
Contractors working on behalf of DHS
Employees of other federal agencies
4. What specific information about individuals is collected, generated or retained?
Form I-600A collects the following information:
•
1
Applicant:
o
Last name
o
First name
o
Middle name
o
Aliases, maiden name, nickname (if any)
o
U.S. Mailing address, Physical address, and Address abroad (if any)
o
Date of birth
o
City, Town or Village of Birth
o
State or Province of Birth
o
Country of Birth
Informational and collaboration-based portals in operation at DHS and its components that collect, use, maintain, and share
limited personally identifiable information (PII) about individuals who are “members” of the portal or “potential members” who
seek to gain access to the portal.
2
DHS defines personal information as “Personally Identifiable Information” or PII, which is any information that permits the
identity of an individual to be directly or indirectly inferred, including any information that is linked or linkable to that individual,
regardless of whether the individual is a U.S. citizen, lawful permanent resident, visitor to the U.S., or employee or contractor to
the Department. “Sensitive PII” is PII, which if lost, compromised, or disclosed without authorization, could result in substantial
harm, embarrassment, inconvenience, or unfairness to an individual. For the purposes of this PTA, SPII and PII are treated the
same.
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 6 of 11
•
o
U.S. Citizenship status
o
Certificate of Citizenship or Certificate of Naturalization number
o
A-Number, if any
o
Marital status
o
Number of marriages
o
Criminal History
o
History of substance abuse, sexual abuse or child abuse, and/or family violence
o
Information on current spouse (if married):
Date and place of marriage
Spouse last name, first name, and middle name
Aliases, maiden name, nicknames (if any)
Date of birth
A-Number, if any
City, Town or Village of Birth
State or Province of Birth
Country of Birth
Spouse’s immigration status
How many times spouse has been married
Spouse’s Physical address (if not residing with applicant)
Duty of disclosure items
History of substance abuse, sexual abuse or child abuse, and/or family violence
Criminal History
Statement, certification, signature, and contact information (telephone number
and email address)
Duty of disclosure certification and signature
o
Duty of disclosure items
o
Statement, certification, USCIS ASC Acknowledgment, signature, and contact
information (telephone & mobile number and email address)
o
Duty of disclosure certification and signature
Home study preparer and/or adoption service provider:
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 7 of 11
o
Whether the home study is attached to the application, is not attached, or will be
submitted within 1 year
o
Whether the adoption service provider responsible for the home study or is the Primary
Adoption Service Provider
o
Name
o
Point of contact
o
Mailing address
o
Telephone number, fax number and email address
•
Whether the applicant plans to travel abroad to locate or adopt, and if so, when and where
•
Whether the applicant (or spouse, if married) plans to personally see the child
•
Whether any preadoption requirements need to be met
•
Intended country of adoption
•
Where the applicant plans to file Form I-600 (which USCIS office or U.S. Embassy or consulate)
•
How many children the applicant plans to adopt
•
How many adult members of the household (besides a spouse, if any) reside with the applicant
•
Accommodations for individuals with disabilities or impairments
•
Interpreter name, organization, mailing address, telephone number, email address, certification,
and signature
•
Preparer name, organization, mailing address, telephone number, fax number, email address,
certification, and signature
4(a) Does the project, program, or system
retrieve information by personal identifier?
4(b) Does the project, program, or system
use Social Security Numbers (SSN)?
4(c) If yes, please provide the specific legal
basis and purpose for the collection of
SSNs:
No. Please continue to next question.
Yes. If yes, please list all personal identifiers
used: NBC stores information in applicant’s receipt
files and may be retrieved by the receipt number
associated with the file. IO stores information in
CAMINO and may be retrieved by the applicant
name associated with the file.
No.
Yes.
N/A
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 8 of 11
4(d) If yes, please describe the uses of the
SSNs within the project, program, or
system:
4(e) If this project, program, or system is
an information technology/system, does it
relate solely to infrastructure?
N/A
No. Please continue to next question.
Yes. If a log kept of communication traffic,
please answer the following question.
For example, is the system a Local Area Network
(LAN) or Wide Area Network (WAN)?
4(f) If header or payload data 3 is stored in the communication traffic log, please detail the data
elements stored.
Click here to enter text.
5. Does this project, program, or system
connect, receive, or share PII with any
other DHS programs or systems 4?
No.
Yes. If yes, please list:
This form is processed in CAMINO and
NPWR/ACMS
6. Does this project, program, or system
connect, receive, or share PII with any
external (non-DHS) partners or
systems?
6(a) Is this external sharing pursuant to
new or existing information sharing
access agreement (MOU, MOA, LOI,
etc.)?
7. Does the project, program, or system
provide role-based training for
3
No.
Yes. If yes, please list:
Department of State, and occasionally Department
of Health and Human Services.
Existing
Please describe applicable information sharing
governance in place:
A Memorandum of Understanding (MOU) exists
between DHS and DOS that fully covers the sharing
of information.
No.
When data is sent over the Internet, each unit transmitted includes both header information and the actual data being sent. The
header identifies the source and destination of the packet, while the actual data is referred to as the payload. Because header
information, or overhead data, is only used in the transmission process, it is stripped from the packet when it reaches its destination.
Therefore, the payload is the only data received by the destination system.
4
PII may be shared, received, or connected to other DHS systems directly, automatically, or by manual processes. Often, these
systems are listed as “interconnected systems” in Xacta.
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 9 of 11
personnel who have access in addition
to annual privacy training required of
all DHS personnel?
8. Per NIST SP 800-53 Rev. 4, Appendix
J, does the project, program, or system
maintain an accounting of disclosures
of PII to individuals who have
requested access to their PII?
9. Is there a FIPS 199 determination? 4
Yes. If yes, please list:
In addition to privacy training, we provide adoption
training throughout the year including use of
NPWR/ACMS and/or CAMINO.
Not applicable.
No. What steps will be taken to develop and
maintain the accounting:
Yes. In what format is the accounting
maintained:
Unknown.
No.
Yes. Please indicate the determinations for each
of the following:
Confidentiality:
Low
Moderate
High
Undefined
Integrity:
Low
Moderate
High
Undefined
Availability:
Low
Moderate
High
Undefined
PRIVACY THRESHOLD REVIEW
(TO BE COMPLETED BY COMPONENT PRIVACY OFFICE)
4
Component Privacy Office Reviewer:
Catherine Catanzaro Shorten
Date submitted to Component Privacy
Office:
May 10, 2016
FIPS 199 is the Federal Information Processing Standard Publication 199, Standards for Security Categorization of Federal
Information and Information Systems and is used to establish security categories of information systems.
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 10 of 11
Date submitted to DHS Privacy Office:
May 27, 2016
Component Privacy Office Recommendation:
Please include recommendation below, including what new privacy compliance documentation is needed.
The USCIS recommendation is to designate Form I-600 as a privacy sensitive form with coverage under
the forthcoming International Adoptions Process PIA and DHS/USCIS/PIA-051 CAMINO PIA.
Furthermore, USCIS Office of Privacy is in the process of updating the DHS/USCIS-005 - Inter-Country
Adoptions Security June 5, 2007, 72 FR 31086. DHS/USCIS/ICE/CBP-001 – Alien File, Index, and
National File Tracking System of Records, November 21, 2013, 78 FR 69864, also provides coverage.
USCIS also recommends adding a routine use in the Adoptions SORN to permit sharing of information to
HHS.
(TO BE COMPLETED BY THE DHS PRIVACY OFFICE)
DHS Privacy Office Reviewer:
Max Binstock
PCTS Workflow Number:
1125382
Date approved by DHS Privacy Office:
June 9, 2016
PTA Expiration Date
June 9, 2017
DESIGNATION
Privacy Sensitive System:
Category of System:
Determination:
Yes
If “no” PTA adjudication is complete.
Form/Information Collection
If “other” is selected, please describe: Click here to enter text.
PTA sufficient at this time.
Privacy compliance documentation determination in progress.
New information sharing arrangement is required.
DHS Policy for Computer-Readable Extracts Containing Sensitive PII
applies.
Privacy Act Statement required.
Privacy Impact Assessment (PIA) required.
System of Records Notice (SORN) required.
Paperwork Reduction Act (PRA) Clearance may be required. Contact
your component PRA Officer.
A Records Schedule may be required. Contact your component Records
Officer.
Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy
Privacy Threshold Analysis
Version number: 01-2014
Page 11 of 11
New PIA is required.
PIA:
If covered by existing PIA, please list: Forthcoming International Adoptions Process PIA;
DHS/USCIS/PIA-051 Case and Activity Management for International Operations
(CAMINO)
SORN update is required.
If covered by existing SORN, please list: Update to DHS/USCIS-005 Inter-Country
Adoptions Security; DHS/USCIS/ICE/CBP-001 Alien File, Index, and National File
Tracking System of Records, November 21, 2013, 78 FR 69864
DHS Privacy Office Comments:
Please describe rationale for privacy compliance determination above.
USCIS is submitting this PTA because Form I-600A enables USCIS to adjudicate the application that
relates to the qualification of the applicant(s) as prospective adoptive parent(s).
SORN:
PRIV finds that is a privacy sensitive system because Form I-600A collects PII from members of the
public.
PRIV agrees with USCIS that PIA coverage will be provided by the Forthcoming International Adoptions
(ACMS) PIA and CAMINO PIA.
ACMS collects and maintains information on U.S. citizen prospective adoptive parents, spouses, adult
members of the household, adoptive beneficiaries, adoption service providers, home study preparers,
attorneys, and form preparers to determine the prospective adoptive parents’ suitability and eligibility to
adopt and the child’s eligibility to immigrate to the United States as an immediate relative.
CAMINO maintains information from applications for immigration benefits adjudicated or processed by
USCIS IO offices located both overseas and domestically.
PRIV agrees that DHS/USCIS-005 SORN covers the collection of some of the data elements that I -600A
captures; however, additional elements i.e. gender, reason for orphan status, orphan custodian
information, physical and mental affliction, and form preparer information should be added to the SORN
update to adequately cover the elements that USCIS will collect using Form 1-600A. Additionally, this
program contemplates sharing information with HHS. PRIV agrees with USCIS that the DHS/USCIS005 update should include adding a routine use to permit sharing of information to HHS.
PRIV agrees that Form I-600A will be covered by the DHS/USCIS/ICE/CBP-001 SORN, because
information collected is maintained in A-File and it documents the applicant’s benefits as they pass
through the immigration process.
File Type | application/pdf |
File Title | DHS PRIVACY OFFICE |
Author | marilyn.powell |
File Modified | 2016-06-09 |
File Created | 2016-06-09 |