Privacy Impact Assessment

Angel, Karen C. (CDC/ONDIEH/NCIPC)
From:
Sent:
To:
Subject:

Angel, Karen C. (CDC/ONDIEH/NCIPC)
Tuesday, July 25, 2017 9:32 AM
NCIPC OMB (CDC)
NVDRS OMB package-close to complete

From: Wade, Danny (CDC/ONDIEH/NCIPC)  
Sent: Monday, July 24, 2017 9:05 AM 
To: NCIPC OMB (CDC)  
Cc: Blair, Janet (CDC/ONDIEH/NCIPC) ; Jack, Shane P. Davis (CDC/ONDIEH/NCIPC) ; 
Angel, Karen C. (CDC/ONDIEH/NCIPC) ; Simpson, Gayle (CDC/ONDIEH/NCIPC) ; NCIPC IT 
Security (CDC)  
Subject: RE: NVDRS OMB package‐close to complete 

Good Morning,
NVDRS doesn’t contain PII so the Privacy Act is not applicable since it is only applicable when data is
retrieved by a personal identifiable. A privacy impact assessment (PIA) is required for all systems; even when
there is no PII. Please let us know if you have any questions or need any additional information.
Very Respectfully,

____________________________________
Danny Wade, MBA‐ISM, CISSP, CAP, CRISC, CIPP/G

Information Systems Security Officer (ISSO)
Informatics Systems & Security Team (ISST)
Statistics, Programming, and Economics Branch (SPEB)
Division of Analysis, Research, and Practice Integration (DARPI)
National Center for Injury Prevention and Control (NCIPC)
Centers for Disease Control and Prevention (CDC)
Email: [email protected] 

4770 Buford Hwy, N.E., Mailstop F‐62, Bldg. 106, Room 08109, Atlanta, GA. 30341‐3717

(Office) 770‐488‐4152
"Using Computers & Technology to Improve the Health & Safety of the Nation"

1

Save

Privacy Impact Assessment Form
v 1.47.4
Status Draft

Form Number

F-23523

Form Date

Question

Answer

1

OPDIV:

CDC

2

PIA Unique Identifier:

P-2298498-043985

2a Name:

7/5/2016 9:23:03 AM

National Violent Death Reporting System Web Enablement
(NVDRS Web)
General Support System (GSS)
Major Application

3

Minor Application (stand-alone)

The subject of this PIA is which of the following?

Minor Application (child)
Electronic Information Collection
Unknown
3a

Identify the Enterprise Performance Lifecycle Phase
of the system.

Operations and Maintenance
Yes

3b Is this a FISMA-Reportable system?

4

Does the system include a Website or online
application available to and for the use of the general
public?

5

Identify the operator.

6

Point of Contact (POC):

7

Is this a new or existing system?

8

Does the system have Security Authorization (SA)?

No
Yes
No
Agency
Contractor
POC Title

Deputy Branch Chief

POC Name

Leroy Frazier

POC Organization NCIPC/DVP/Surveillance Branch
POC Email

[email protected]

POC Phone

(770) 488 1507
New
Existing
Yes
No

8b Planned Date of Security Authorization

July 13, 2016
Not Applicable

Page 1 of 3

Save

11 Describe the purpose of the system.

Describe the type of information the system will
collect, maintain (store), or share. (Subsequent
12
questions will identify if this information is PII and ask
about the specific data elements.)
Provide an overview of the system and describe the
13 information it will collect, maintain (store), or share,
either permanently or temporarily.
14 Does the system collect, maintain, use or share PII?

The National Violent Death Reporting System (NVDRS) is an
incident-based system designed to capture data on violent
deaths (suicides, homicides, deaths of undetermined intent,
and unintentional firearm deaths) in a relational database. This
system allows data from law enforcement reports, death
certificates, and coroner/medical examiner reports to be
combined into one cohesive data base allowing a variety of
public health professionals and decision-makers to analyze
and understand the nature of and trends of violence in the
United States. NVDRS is the only state-based surveillance
(reporting) system that pools data on violent deaths from
multiple sources into a usable, anonymous database.
NVDRS Web collects information on victims (deceased
persons) and alleged perpetrators (deceased or live suspects).
Details are collected on a large number of socio-demographic
characteristics of deceased persons and basic demographic
NVDRS is an incident-based system designed to capture data
on violent deaths (suicides, homicides, deaths of
undetermined intent and unintentional firearm deaths) in a
Yes
No
http://www.cdc.gov/violenceprevention/nvdrs/

39 Identify the publicly-available URL:
Yes

40 Does the website have a posted privacy notice?

No

40a

Is the privacy policy available in a machine-readable
format?

Yes

41

Does the website use web measurement and
customization technology?

Yes

No

No
Technologies

Yes

Web beacons

No
Yes

Web bugs
Select the type of website measurement and
41a customization technologies is in use and if it is used
to collect PII. (Select all that apply)

Collects PII?

No

Session Cookies

Persistent Cookies

Yes
No
Yes
No
Yes

Other...

No

42

Does the website have any information or pages
directed at children under the age of thirteen?

Yes

43

Does the website contain links to non- federal
government websites external to HHS?

Yes

No

No

Page 2 of 3

Save

General Comments

OPDIV Senior Official
for Privacy Signature

Beverly E.
Walker -S

Digitally signed by Beverly E. Walker -S
DN: c=US, o=U.S. Government,
ou=HHS, ou=CDC, ou=People,
0.9.2342.19200300.100.1.1=10014403
43, cn=Beverly E. Walker -S
Date: 2016.07.05 11:39:17 -04'00'

Page 3 of 3