FoodNet PIA

Save

Privacy Impact Assessment Form
v 1.47.4
Status Draft

Form Number

F-62555

Form Date

Question

Answer

1

OPDIV:

CDC

2

PIA Unique Identifier:

P-4642648-436701

2a Name:

4/3/2018 10:03:34 AM

National Outbreak Reporting System Public (NORS Public)
General Support System (GSS)
Major Application

3

Minor Application (stand-alone)

The subject of this PIA is which of the following?

Minor Application (child)
Electronic Information Collection
Unknown

3a

Identify the Enterprise Performance Lifecycle Phase
of the system.

Operations and Maintenance
Yes

3b Is this a FISMA-Reportable system?

4

Does the system include a Website or online
application available to and for the use of the general
public?

5

Identify the operator.

6

Point of Contact (POC):

7

Is this a new or existing system?

8

Does the system have Security Authorization (SA)?

8a Date of Security Authorization

No
Yes
No
Agency
Contractor
POC Title

Business Steward

POC Name

Patricia Griffin

POC Organization CDC / NCEZID / DFWED
POC Email

[email protected]

POC Phone

404.639.3384
New
Existing
Yes
No

Jun 7, 2018

Page 1 of 3

Save

11 Describe the purpose of the system.

National Outbreak Reporting System Public (NORS Public) is a
is a website (also known as the Foodborne Outbreaks Online
Database) that posts certain surveillance data for public access.
NORS Public enables the public to view a small subset of
filtered enteric and foodborne outbreak data captured by the
National Outbreak Reporting System (NORS) and select
pathogens transmitted commonly through food captured by
the Foodborne Diseases Active Surveillance Network
(FoodNet). From this data, individuals can see how rates of
illnesses have changed over the past 20 years for nine
pathogens transmitted commonly through food.

National Outbreak Reporting System Public (NORS Public) has
no PII data entry capability. It is a searchable, subset of filtered
food-borne outbreak data to include food-borne, waterborne,
and enteric (intestinal) diseases spread by human contact,
Describe the type of information the system will
environmental contamination, animal contact, and other
collect, maintain (store), or share. (Subsequent
12
questions will identify if this information is PII and ask means, and select pathogens transmitted commonly through
food. The searchable dataset contains non-sensitive publicly
about the specific data elements.)
available data and does not contain PII.
This is an external, publicly facing website that does not
require authentication.

Provide an overview of the system and describe the
13 information it will collect, maintain (store), or share,
either permanently or temporarily.

14 Does the system collect, maintain, use or share PII?
39 Identify the publicly-available URL:
40 Does the website have a posted privacy notice?
40a

Is the privacy policy available in a machine-readable
format?

NORS Public is a visual representation of the annually
published, and publicly accessible, National Outbreak
Reporting System report. It allows summarized views of
Foodborne, Waterborne, and Person to person outbreaks. This
summarized information includes the location of outbreaks (at
a state level), number of outbreaks per year/month, the mode
of transmission, and the etiology of an outbreak. There is no
individual level data in the system. Additionally, no data is
collected nor maintained in the system.
This system is a static analysis data set that is made available
annually. The data contained in the system is presented to and
can be used by the general public to communicate general
information related to foodborne diseases via graphs and
charts. The source data is from the Division of Foodborne,
Waterborne, and Environmental Diseases. There is no PII data
contained within the system. The application graphs and
charts and the capability to filter the data. There is no data
entry or other mechanism to save data to the system. This is
an external, publicly facing website that does not require
authentication.
Yes
No
https://wwwn.cdc.gov/foodnetfast
Yes
No
Yes
No

Page 2 of 3

Save
41

Yes

Does the website use web measurement and
customization technology?

No
Technologies

Yes

Web beacons

No
Yes

Web bugs
Select the type of website measurement and
41a customization technologies is in use and if it is used
to collect PII. (Select all that apply)

Collects PII?

No

Session Cookies
Persistent Cookies

Yes
No
Yes
No
Yes

Other...

No

42

Does the website have any information or pages
directed at children under the age of thirteen?

Yes

43

Does the website contain links to non- federal
government websites external to HHS?

Yes

No

No

General Comments

OPDIV Senior Official
for Privacy Signature

Beverly E.
Walker -S

Digitally signed by
Beverly E. Walker -S
Date: 2018.04.27 10:51:29
-04'00'

Page 3 of 3