Privacy Act Threshold Assessment (mobile app)

DI-4012 (9/2018)
U.S. Department of the Interior

U.S. Department of the Interior
PRIVACY THRESHOLD ANALYSIS

The DI-4012 Privacy Threshold Analysis (PTA) form helps Department of the Interior (DOI) Privacy
Officials determine whether a new or revised Privacy Impact Assessment (PIA) is required in
accordance with the E-Government Act, OMB policy, and the DOI PIA Guide, and identify other related
compliance requirements for the collection, maintenance, storage, use, processing, sharing or disposal of
personally identifiable information (PII) and any activities that may have privacy implications or
otherwise impact individual privacy. See the DOI PTA Guide for guidance on completing the PTA.
PTAs must be completed and submitted to the appropriate Bureau/Office Associate Privacy Officer for
review and compliance determination. Bureau/Office Associate Privacy Officers are responsible for
overseeing and managing PTAs for their organizations.

Section 1. General Information
Question

Response

A. Project, Program or System Name:

Regional Watercraft Inspection Decontamination Data
Sharing System Mobile Application

Provide the name for the project, program or system for
the PTA, which may be an IT system, a project title,
program area, information collection, or other
technology.

B. Bureau or Office:

National Park Service

Enter the bureau or office for the project, program or
system.

C. Program or Office:

Natural Resource Stewardship and Science

Provide the name of the program or office within the
bureau/office.

D. Project/Program Manager or System
Owner:
Name: John Wullschleger
Title: Fish Program and AIS Lead
Phone: 970.225.3572
E-mail: [email protected]

POC National Park Service
Name: John Wullschleger
Title: Fish Program Lead
Water Resources Division
Natural Resources Stewardship and Science
Phone: 970.225.3572
E-mail: [email protected]
POC State of Colorado
Name: Elizabeth Brown
Title: Aquatic Invasive Species Coordinator
Phone: 303.291.7362
E-mail: [email protected]

E. Routing Information:

_X_ New PTA

Indicate whether this is a new or updated PTA and enter
the date the PTA was completed and submitted to the
APO for privacy determination.

___ Updated PTA
Page 1 of 7

DI-4012 (9/2018)
U.S. Department of the Interior

Regional Watercraft Inspection Decontamination Data Sharing System Mobile Application

Question

Privacy Threshold Analysis

Response
Date of Submission: 04/17/2019

Section 2. Project, Program or System Summary
Question
A. General description of the project, program
or system.

Response
The watercraft inspection/decontamination mobile
application was developed by the State of Colorado and
has been made available to partners in the western
United States including NPS.

Please provide a description of the project or program,
including any background information to help
understand the project, program or system. If this is an
updated PTA, please describe the changes that
The mobile application allows staff on boat ramps or at
triggered the update to this PTA. Please also indicate
remote locations along highways to enter and retrieve
if the PTA is being updated as part of its annual
information on inspections/decontaminations, aquatic
review.

invasive species risk factors and points of origin and
destinations for trailered recreational watercraft. The
data is downloaded/uploaded from and to the Regional
Watercraft Inspection Decontamination Data Sharing
System.

The mobile application is only installed and utilized on
government issued mobile devices (cellphone, tablets,
etc.) These devices meet DOI requirements for IT
security and privacy protection.
B. What is the technology or format used for
the Project, Program or System?
Select all types of technology or sources that apply for
the PII that will be collected from or maintained on
individuals, including methods such as a paper or
electronic form or survey, website collection, social
media, or interviews over the phone or in person.

___ IT System
___ New Project or Program
___ Website
___ Web Form, Survey or Information Collection
___ Third-Party Website
___ Social Media Application
___ SharePoint
_X_ Mobile Application
___ Closed Circuit Television (CCTV)
___ Paper-based Collection
___ Other: Describe.

Page 2 of 7

DI-4012 (9/2018)
U.S. Department of the Interior

Regional Watercraft Inspection Decontamination Data Sharing System Mobile Application

C. Does this project, program or system
involve a form, survey or information
collection?
If this project, program or system uses a form, survey,
or other information collection, select “Yes” and
describe the specific method or format used. Include
titles and numbers or other identifying information.

Privacy Threshold Analysis

_X_ Yes: Please describe.
NPS collects information by asking four questions of
boat owners, which vary depending on whether they are
entering or leaving a water; other information is the
result of the observations of NPS boat ramp staff as they
inspect and/or decontaminate a boat.
No information is stored in any NPS database. Two of
the questions vary depending on whether a boater is
entering or leaving an NPS area; two of the questions
remain the same whether the boater is entering or
leaving.
Fields for all boats: 1) Does the boater have any live
aquatic bait? 2) What compartments or containers on the
boat, including ballast tanks, hold water
Fields for incoming boats: 1) Has the boat been out of
the state in the last 30 days (and where)? 2) Has the boat
been in any other waters in the last 30 days (and if so, in
which waters)?
Fields for departing boats: 1) What is the destination for
the boat? 2) Where and when will the boat be launched
next?
___ No

D. Is Office of Management and Budget
(OMB) approval required for the collection?
OMB approval is required for certain collections of
information from ten or more members of the public
under the Paperwork Reduction Act.

X Yes: Please provide the status of any information
collection clearance request related to this project, program
or system, and include all OMB Control Numbers and
Expiration Dates that are applicable.
NPS is seeking OMB approval to ask questions of boaters
and enter the answers into the database via the mobile
application.

___ No

Section 3. Personally Identifiable Information
Question

Response

A. What categories of individuals does the
Project, Program or System collect, maintain,
store, use, process, disseminate or dispose of
PII? Please select all that apply.

___ Federal employees
___ Contractors

Page 3 of 7

DI-4012 (9/2018)
U.S. Department of the Interior

Regional Watercraft Inspection Decontamination Data Sharing System Mobile Application

Privacy Threshold Analysis

Question

Response

Indicate whether the project, program or system
collects, contains, uses or disseminates PII
information about members of the general public,
Federal employees, contractors, or volunteers; or if
the system does not contain any information that is
identifiable to individuals (e.g., statistical,
geographic, financial).

_X_ Members of the public

B. What specific information about
individuals will be created, collected, used,
processed, maintained or disseminated?

The only information that is collected that may be
linkable to an individual or a corporation and other
business entities is the boat registration number or boat
trailer license plate number.

Describe all the types of information about
individuals that will be created, collected, used,
processed, maintained, or disseminated. Include any
new information that may be created, such as an
analysis or report. Describe the purpose of that
collection or use of information.

C. Is information retrieved by a unique
identifier assigned to the individual?
Describe how information is retrieved for the
project, program or system.

_X_ Other: Describe. Commercial boat haulers.
___ This project, program or system does not collect,
maintain or process PII.
The system links information about specific watercraft to
a boat registration number or boat trailer license plate
number. The boat registration number or boat trailer
license plate number may be linkable to and individual or
a corporation and other business entities, which are not
subject to the Privacy Act. However, records pertaining
to individuals acting on behalf of corporations and other
business entities may reflect personal information.

NPS is a system user but not the system manager or the
system owner. In addition, the NPS will not be
distributing or processing the information. The database
is owed by the State of Colorado and is maintained by a
contractor to the State of Colorado.
_X_ Yes: Please describe.
The system links information about specific watercraft to
boat registration number or boat trailer license plate
number. When a boat is inspected and decontaminated,
and leaves a particular inspection station, that
information is entered into the database. This makes
possible for another inspection station, somewhere else,
to enter the registration number at that station and see
where the boat came from and how it was handled.
___ No

Page 4 of 7

DI-4012 (9/2018)
U.S. Department of the Interior

Regional Watercraft Inspection Decontamination Data Sharing System Mobile Application

Privacy Threshold Analysis

Question

Response

D. Is the information covered by a System of
Records Notice (SORN)?

___ Yes: Please provide the title, date, and Federal
Register citation.

The Privacy Act requires that agencies publish a
SORN in the Federal Register upon the establishment
of a new, or modification of an existing, system of
records. For new SORNS being developed, select
“Yes” and provide a detailed explanation. For
existing systems of records, identify the applicable
government-wide, DOI, or bureau SORN(s) that
covers the system of records with the SORN identifier
and Federal Register citation.

E. Does the Project, Program or System
collect or use Social Security Numbers
(SSNs)?
List the statutory and regulatory authority and
Executive Orders that authorizes the collection or
use of SSNs to meet an official program mission or
goal.

_X No

___ Yes: Please provide the legal authority for the
collection of SSNs and describe the uses of the SSNs
within the Project, Program or System.

_X No

Does this Project, Program or System receive
or share PII with any other internal DOI
programs or systems?

___ Yes: Please describe the PII shared and purpose of
the sharing.

Indicate whether PII will be shared with or from
internal organizations within DOI.

_X No

G. Does this Project, Program or System
receive or share PII with any external (nonDOI) partners or systems?

X Yes: Please describe the PII shared and purpose of
the sharing.

Indicate whether PII will be shared with agencies or
organizations external to DOI. This could be other
federal, state and local government agencies, private
sector entities, contractors or other external third
parties. For Privacy Act systems, identify the
applicable SORN and describe how an accounting of
the disclosure is maintained.

The mobile application can be used to transmit contact
information associated with boats coming from
contaminated waters with entities at a destination. That
information is not retained or stored. This feature of the
mobile application is optional although considered
desirable by state partners. NPS is not using this feature
at this time.
___ No

Page 5 of 7

DI-4012 (9/2018)
U.S. Department of the Interior

Regional Watercraft Inspection Decontamination Data Sharing System Mobile Application

Privacy Threshold Analysis

Question

Response

H. Is this external sharing pursuant to new
or existing information sharing agreement
(Memorandum of Understanding,
Memorandum of Agreement, Letters of
Intent, etc.)?

___ Yes: Please describe applicable information
sharing agreement(s) in place.

Information sharing agreements are generally
documented in Memorandums of Understanding,
Memorandums of Agreement, Letters of Intent, or
other documents, and outline the purpose, roles of
the parties, data ownership, authorized uses, policy,
scope, standards, procedures, practices, limitations
on re-dissemination, and safeguard requirements for
the transfer, maintenance and disposal of PII to
ensure all parties understand and adhere to the
mutually established terms of the agreement.

__X No

Section 4. PTA Review and Recommendation
Question

Response

Privacy Compliance Determination:

_X_ PTA is sufficient at this time
___ Privacy Impact Assessment (PIA) required
___ Adapted PIA required
___ System of Records Notice (SORN) required
___ Notice of Proposed Rulemaking/Final Rule required
___ Computer Matching Notice required
___ Computer Matching Agreement required
___ Privacy Act Statement required
___ Privacy Notice required
___ Specialized role-based training required
___ Information sharing agreement required
___ Further privacy compliance review is required
___ Refer for Security Compliance Assessment
_X_ Refer for Information Collection Clearance Review
___ Refer for Records Review
___ Other: Describe.

This determination is to be completed by the
Associate Privacy Officer (APO). See DOI PTA
Guide, DOI PIA Guide, related Federal laws and
policies, and Departmental guidance on privacy
requirements.

Bureau Associate Privacy Officer Comments:
Provide comments or additional guidance on privacy
compliance requirements.

PTA is sufficient at this time. NPS is a system user but
not the system manager or the system owner. In addition,
the NPS will not be distributing or processing the
information. The State of Colorado owns the database
and maintained by a contractor to the State of Colorado.
Page 6 of 7

DI-4012 (9/2018)
U.S. Department of the Interior

Regional Watercraft Inspection Decontamination Data Sharing System Mobile Application

Privacy Threshold Analysis

The State of Colorado is the owner of the Mobile
application used to enter the information is not a DOI
Mobile Application. It was not developed by, on behalf
of, or in coordination with DOI or NPS. The mobile
application should only be installed and utilized on
government issued smartphones. These devices meet
DOI requirements for IT security and privacy protection.
The state is the owner of the information collected. The
mobile application should only be installed and utilized
on government issued mobile devices (cellphone, tablets,
etc.) These devices meet DOI requirements for IT
security and privacy protection.
Associate Privacy Officer Name:

FELIX URIBE

FELIX URIBE
Bureau/Office:
Date:

Digitally signed by FELIX
URIBE
Date: 2019.09.13 16:48:26
-04'00'

NATIONAL PARK SERVICE
9-13-19
DOI Privacy Office Comments

N/A

Page 7 of 7