Privacy Narrative

Privacy Narrative

Monitoring and Reporting System for the National and State Tobacco Control Program
Title: _______________________________________________________________________________________

Henraya F. McGruder
Point of Contact: _____________________________________________________________________________
The Performance Monitoring and Budget Reporting Tool will collect a limited amount of
information in identifiable form (IIF) for key program staff (e.g., Program Director). However,
no personal contact information will be collected. All data will be reported in aggregate form,
with no identifying information included. Because data is maintained in a secure, password
protected system, and information will be reported in aggregate form, there is no impact on
respondent privacy.

The information collected in the the Budget Reporting Tool and the Component Model of
Infrastructure Tool, will collect a limited amount of information in identifiable form (IIF) for key
program staff. The information in the Budget Reporting Tool is limited to the individual's name,
position title, and salary/wage information. The Component Model of Infrastructure (CMI) tool
also collects professional information, such as state, individual's name, position title, and time in
position. Information regarding salaries is collected for the awardee's staff whose salaries are
funded through federal funds (e.g., this cooperative agreement) in order to ensure
accountability of these funds. Personal information from these tools will not be reported or
shared. No system of records will be created under the Privacy Act.
The completed templates are uploaded to an MS Access database, which is referenced in Section
10.1 of the SSA. Aggregated information will be stored on an internal CDC SQL server subject to
CDC's information security guidelines. The reporting tools will be hosted on NCCDPHP's
Intranet Application platforms, which undergo security certification and accreditation through
CDC's Office of the Chief Information Security Officer. CDC staff, evaluation and technical
assistance, and training contractors will have varying levels of access to the system with
role-appropriate security training, based on the requirements of their position(s).
While consent is not required to report aggregate data, awardee consent will be obtained if
specific state data is used for publications, reports or other publicly disseminated information.

C/I/O Approvals:
Information Systems Security Officer

Associate Director for Science