1625-new_IC_PTA_MTSR_CG-11410

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

PRIVACY THRESHOLD ANALYSIS (PTA)
This form serves as the official determination by the DHS Privacy Office to
identify the privacy compliance requirements for all Departmental uses of
personally identifiable information (PII).
A Privacy Threshold Analysis (PTA) serves as the document used to identify
information technology (IT) systems, information collections/forms, technologies,
rulemakings, programs, information sharing arrangements, or pilot projects that involve
PII and other activities that otherwise impact the privacy of individuals as determined by
the Chief Privacy Officer, pursuant to Section 222 of the Homeland Security Act, and to
assess whether there is a need for additional Privacy Compliance Documentation. A PTA
includes a general description of the IT system, information collection, form, technology,
rulemaking, program, pilot project, information sharing arrangement, or other Department
activity and describes what PII is collected (and from whom) and how that information is
used and managed.
Please complete the attached Privacy Threshold Analysis and submit it to your
component Privacy Office. After review by your component Privacy Officer the PTA is sent
to the Department’s Senior Director for Privacy Compliance for action. If you do not have a
component Privacy Office, please send the PTA to the DHS Privacy Office:
Senior Director, Privacy Compliance
The Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
Tel: 202-343-1717
[email protected]

Upon receipt from your component Privacy Office, the DHS Privacy Office will review this
form and assess whether any privacy compliance documentation is required. If compliance
documentation is required – such as Privacy Impact Assessment (PIA), System of Records
Notice (SORN), Privacy Act Statement, or Computer Matching Agreement (CMA) – the DHS
Privacy Office or component Privacy Office will send you a copy of the relevant compliance
template to complete and return.
Privacy Threshold Analysis – IC/Form

Page 1 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

Privacy Threshold Analysis (PTA)

Specialized Template for
Information Collections (IC) and Forms
The Forms-PTA is a specialized template for Information Collections and Forms.
This specialized PTA must accompany all Information Collections submitted as part of the
Paperwork Reduction Act process (any instrument for collection (form, survey,
questionnaire, etc.) from ten or more members of the public). Components may use this
PTA to assess internal, component-specific forms as well.

Form Number:

CG11410

Form Title:

Marine Transportation System Recovery Essential Elements of
Information
U.S. Coast Guard (USCG) Office:
Atlantic Area (L-544)

Component:

IF COVERED BY THE PAPERWORK REDUCTION ACT:
Collection Title:
OMB Control
Number:
Collection status:

Name:
Office:
Phone:

Marine Transportation System Recovery Essential Elements of
Information
1625-NEW
MM/DD/YYYY
OMB Expiration
Date:
New Collection
Date of last PTA (if
N/A.
applicable):

PROJECT OR PROGRAM MANAGER
Timothy Mann
Atlantic Area (L-544)
Title:
Port Security Specialist
850-279-6372
Email:
[email protected]

Privacy Threshold Analysis – IC/Form

Page 2 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

Name:
Office:
Phone:

COMPONENT INFORMATION COLLECTION/FORMS CONTACT
Anthony Smith
CG-612
Title:
PRA Manager
202-475-3532
[email protected]
Email:
SPECIFIC IC/Forms PTA QUESTIONS

1. Purpose of the Information Collection or Form
a. Describe the purpose of the information collection or form. Please provide a general
description of the project and its purpose, including how it supports the DHS mission,
in a way a non-technical person could understand (you may use information from the
Supporting Statement).
If this is an updated PTA, please specifically describe what changes or upgrades are
triggering the update to this PTA.
The U.S. Coast Guard is required to take action to prevent damage to, or the destruction of,
bridges, other structures, on or in navigable waters or shore area adjacent; to minimize damage
from and respond to a transportation security incident; and to safeguard against destruction of
vessels, harbors, ports and waterfront facilities in the United States and all territorial waters
during a national emergency. To be prepared to execute these responsibilities, the U.S. Coast
Guard needs to establish the normal fully functioning condition of a port prior to a port
disruption. Then, following a port disruption, the USCG may be able to compare the normal port
condition to the disrupted port condition, to assist in prioritizing recovery efforts, and gauge the
effectiveness of the response.
b. List the DHS (or component) authorities to collect, store, and use this information. If
this information will be stored and used by a specific DHS component, list the
component-specific authorities.
USCG Authorities: 33 U.S.C. §1225, 46 U.S.C. §70103, and 50 U.S.C. §191.

2. Describe the IC/Form
a. Does this form collect
any Personally
Identifiable
Information” (PII 1)?

x Yes
☐ No

1
Personally identifiable information means any information that permits the identity of an individual to be directly or indirectly inferred,
including any other information which is linked or linkable to that individual regardless of whether the individual is a U.S. citizen, lawful
permanent resident, visitor to the U.S., or employee or contractor to the Department.

Privacy Threshold Analysis – IC/Form

Page 3 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

b. From which type(s) of
individuals does this
form collect
information? (Check all
that apply.)
c. Who will complete and
submit this form?
(Check all that apply.)

d. How do individuals
complete the form?
Check all that apply.

x Members of the public
x U.S. citizens or lawful permanent residents
☐ Non-U.S. Persons.
☐ DHS Employees
☐ DHS Contractors
☐ Other federal employees or contractors.

☐ The record subject of the form (e.g., the individual
applicant).
☐ Legal Representative (preparer, attorney, etc.).
x Business entity.
If a business entity, is the only information
collected business contact information?
x Yes
☐ No
☐ Law enforcement.
☐ DHS employee or contractor.
☐ Other individual/entity/organization that is NOT
the record subject. Please describe.
Click here to enter text.

x Paper.
x Electronic. (ex: fillable PDF)
x Online web form. (available and submitted via the
internet)
Provide link:
https://cg.portal.uscg.mil/units/lantarea/lant5/LANT54/LANT544/LANT544%20Documents/MTS%
20Recovery/CG11410.pdf

e. What information will DHS collect on the form? List all PII data elements on the form.
If the form will collect information from more than one type of individual, please break
down list of data elements collected by type of individual.
Business point of contact information (i.e., name, work telephone, and work email
information) and vessel and cargo information. This information is requested on a
voluntary basis. There is no regulatory requirement compelling the business to provide
the information.
Privacy Threshold Analysis – IC/Form

Page 4 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

f. Does this form collect Social Security number (SSN) or other element that is standalone Sensitive Personally Identifiable Information (SPII)? N/A.
☐ Social Security
number
☐ Alien Number (ANumber)
☐ Tax Identification
Number
☐ Visa Number
☐ Passport Number
☐ Bank Account, Credit
Card, or other financial
account number
☐ Other. Please list:

☐ DHS Electronic Data Interchange Personal Identifier
(EDIPI)
☐ Social Media Handle/ID
☐ Known Traveler Number
☐ Trusted Traveler Number (Global Entry, Pre-Check,
etc.)
☐ Driver’s License Number
☐ Biometrics

g. List the specific authority to collect SSN or these other SPII elements.
N/A.
h. How will this information be used? What is the purpose of the collection? Describe
why this collection of SPII is the minimum amount of information necessary to
accomplish the purpose of the program.
N/A.
i. Are
x Yes. Please describe how notice is provided.
individ
The form is marked with a Privacy Act Statement on the bottom. It is
uals
clearly visible to the Business POC who is voluntarily providing the
provid
information.
ed
☐ No.
notice
at the
time of
collecti
on by
DHS
(Does
the
records
subject
Privacy Threshold Analysis – IC/Form

Page 5 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

have
notice
of the
collecti
on or is
form
filled
out by
third
party)?

3. How will DHS store the IC/form responses?
a. How will DHS store
☐ Paper. Please describe.
the original,
Click here to enter text.
completed IC/forms?
x Electronic. Please describe the IT system that will
store the data from the form.

Only the facility information is stored in a CG data base
(CART, Common Assessment Reporting Tool)
accessible to USCG personnel and other Federal agency
personnel with a need to know following a port
disruption. The business POC information is not stored
in the data bank. The POC information is only used
upon receipt of the Essential Elements of Information
(EEI) data to allow the CG to ask follow-up questions (if
necessary) prior to entry of the facility info into the data
base.

b. If electronic, how
does DHS input the
responses into the IT
system?

Privacy Threshold Analysis – IC/Form

☐ Scanned forms (completed forms are scanned into
an electronic repository). Please describe the
electronic repository.
x Manually (data elements manually entered). Please
describe.
A port recovery planner inputs the facility data
manually and saves it as the Ports Baseline data.
Page 6 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

☐ Automatically. Please describe.
Click here to enter text.

c. How would a user
☐ By a unique identifier. 2 Please describe. If
search the
information is retrieved by personal identifier, please
information
submit a Privacy Act Statement with this PTA.
submitted on the
Click here to enter text.
forms, i.e., how is the
x By a non-personal identifier. Please describe.
information
Information is retrieved by the facility/ business name.
retrieved?
NARA retention schedule number N1-026-05-015
d. What is the records
retention
schedule(s)? Include
the records schedule
number.
As records are maintained in the CART database,
e. How do you ensure
disposal/deletion is in accordance with the business rules
that records are
for the database.
disposed of or deleted
in accordance with
the retention
schedule?
f. Is any of this information shared outside of the original program/office? If yes,
describe where (other offices or DHS components or external entities) and why.
What are the authorities of the receiving party?
x Yes, information is shared with other DHS components or offices. Please describe.

Only facility information is shared-no PII information from the business POC is retained
in the data base.
x Yes, information is shared external to DHS with other federal agencies, state/local
partners, international partners, or non-governmental entities. Please describe.
Only facility information is shared-no PII information from the business POC is

2

Generally, a unique identifier is considered any type of “personally identifiable information,” meaning any information that permits the identity
of an individual to be directly or indirectly inferred, including any other information which is linked or linkable to that individual regardless of
whether the individual is a U.S. citizen, lawful permanent resident, visitor to the U.S., or employee or contractor to the Department.

Privacy Threshold Analysis – IC/Form

Page 7 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

retained in the data base. Information is only shared with Federal, State, and local
agencies with a need to know following a port disruption.
☐ No. Information on this form is not shared outside of the collecting office.

Please include a copy of the referenced form and Privacy Act Statement (if
applicable) with this PTA upon submission.

Privacy Threshold Analysis – IC/Form

Page 8 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

PRIVACY THRESHOLD REVIEW
(TO BE COMPLETED BY COMPONENT PRIVACY OFFICE)
Component Privacy Office
Reviewer:
Date submitted to component
Privacy Office:
Date submitted to DHS Privacy
Office:
Have you approved a Privacy Act
Statement for this form? (Only
applicable if you have received a
waiver from the DHS Chief Privacy
Officer to approve component
Privacy Act Statements.)

Kenlinishia Tyler
October 4, 2016

October 26, 2016

☐ Yes. Please include it with this PTA
submission.
X No. Please describe why not.
This form has been in previous existence.
The PAS can be found at the bottom of the
form.

Component Privacy Office Recommendation:

CG-Form 11410 (i.e. Marine Transportation System Recovery Essential Elements of
Information) is used to determine the status vessels and cargo within a port following a
man-made or natural disaster. USCG uses this information to prioritize recovery efforts,
gauge response effectiveness and measure the disrupted condition of a port against the
normal baseline in order to provide critical input to those entities (e.g. federal, state, or local
response organizations) responsible for restoring the port to its previous condition.
Authorized USCG officials input facility data into the Common Assessment Reporting Tool
(CART) which is only accessible to USCG personnel and federal agency personnel with a
need to know.
This collection is covered by DHS/USCG/PIA-022 and DHS/USCG-013.

Privacy Threshold Analysis – IC/Form

Page 9 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

PRIVACY THRESHOLD ADJUDICATION
(TO BE COMPLETED BY THE DHS PRIVACY OFFICE)
DHS Privacy Office Reviewer:

Michael Capparra

PCTS Workflow Number:
Date approved by DHS Privacy
Office:
PTA Expiration Date

1134045
November 3, 2016
November 3, 2019

DESIGNATION
Privacy Sensitive IC or
Form:
Determination:

Yes. If “no” PTA adjudication is complete.
☐ PTA sufficient at this time.

☐ Privacy compliance documentation determination in progress.
☐ New information sharing arrangement is required.

☐ DHS Policy for Computer-Readable Extracts Containing SPII
applies.
☒ Privacy Act Statement required.

☒ Privacy Impact Assessment (PIA) required.

☒ System of Records Notice (SORN) required.
☐ Specialized training required.

☐ Other. Click here to enter text.
DHS IC/Forms Review: DHS PRIV has approved this ICR/Form.
Date IC/Form
November 3, 2016
Approved by PRIV:
1134045
IC/Form PCTS
Number:
Privacy Act
Choose an item.
Statement:
Click here to enter text.
PTA:
Choose an item

Privacy Threshold Analysis – IC/Form

Page 10 of 11

Version number: 04-2016

Privacy Office
U.S. Department of Homeland Security
Washington, DC 20528
202-343-1717, [email protected]
www.dhs.gov/privacy

PIA:

System covered by existing PIA
If covered by existing PIA, please list: DHS/USCG/PIA-022 Coast Guard
Maritime Information eXchange, July 2015
If a PIA update is required, please list: Click here to enter text.
SORN:
System covered by existing SORN
If covered by existing SORN, please list: DHS/USCG-013 - Marine
Information for Safety and Law Enforcement (MISLE)
If a SORN update is required, please list: Click here to enter text.
DHS Privacy Office Comments:
Please describe rationale for privacy compliance determination above.
The DHS Privacy Office finds that the Marine Transportation System Recovery Essential
Elements of Information form, which collects business contact information (including
related PII) in order to determine the status vessels and cargo within a port following a
man-made or natural disaster, represents a privacy sensitive collection of information and
requires both PIA and SORN coverage. The form contains a Privacy Act statement. PIA
coverage is provided DHS/USCG/PIA-022 Coast Guard Maritime Information eXchange,
which describes the Coast Guards use of PII as part of its provision of maritime-related
information the public, as well as federal, state, and local governments. SORN coverage is
provided by DHS/USCG-013 - Marine Information for Safety and Law Enforcement
(MISLE), which outlines the Coast Guard’s collection and maintenance of safety, security,
and law enforcement performance history of vessels, facilities, people and organizations
engaged in marine transportation, including enforcement action, that can be used to
identify and address safety, security and environmental risks and to establish vessel
eligibility for documentation as a U.S. flag vessel.

Privacy Threshold Analysis – IC/Form

Page 11 of 11

Version number: 04-2016