Att 10_PIA

Save

Privacy Impact Assessment Form
v 1.47.4
Status Draft

Form Number

F-42562

Form Date

Question

Answer

1

OPDIV:

CDC

2

PIA Unique Identifier:

P-4137467-241083

2a Name:

5/21/2018 10:22:25 AM

Maternity Practices in Infant Feeding and Care (mPINC)
General Support System (GSS)
Major Application

3

Minor Application (stand-alone)

The subject of this PIA is which of the following?

Minor Application (child)
Electronic Information Collection
Unknown

3a

Identify the Enterprise Performance Lifecycle Phase
of the system.

Operations and Maintenance
Yes

3b Is this a FISMA-Reportable system?

4

Does the system include a Website or online
application available to and for the use of the general
public?

5

Identify the operator.

6

Point of Contact (POC):

7

Is this a new or existing system?

8

Does the system have Security Authorization (SA)?

8b Planned Date of Security Authorization

No
Yes
No
Agency
Contractor
POC Title

Info Systems Security Officer

POC Name

Cindy Allen

POC Organization NCCDPHP
POC Email

[email protected]

POC Phone

770-488-5388
New
Existing
Yes
No
July 27, 2018
Not Applicable

Page 1 of 5

Save

11 Describe the purpose of the system.

CDC's Maternity Practices in Infant Nutrition and Care (mPINC)
is a web-based surveillance system designed as a survey
platform used to gather information about breastfeedingrelated maternity care practices in hospitals providing
intrapartum care in the United States and Territories, and to
analyze trends and changes in these breastfeeding-related
maternity practices over time. mPINC enables CDC and state
health departments to provide informed programmatic
activities. The system also assists hospitals in improving their
breastfeeding-related maternity care practices.

Page 2 of 5

Save
mPINC maintains information gathered from survey responses
about specific hospitals providing intrapartum care and how
these policies and practices influence breastfeeding. The
information collected is facility-level data and not individuallevel data. Much of the information collected from the survey
and maintained by the system is in the form of responses to
multiple-choice items about hospital practices and policies,
with the remaining information consisting of fill-in-the blank
items in which survey respondents report how often certain
activities or patient types occur at their facility.
The information collected by the survey and subsequently
maintained by the system can be best described as hospital
level data rather than individual level data. It includes facility
size; number of annual births; and other hospital/birth center
characteristics such as type of facility and level of neonatal care
provided; number of full time breastfeeding experts devoted
exclusively to providing breastfeeding support; prevalence of
maternity practices such as the percent of newborns in
uninterrupted skin to skin contact with their mother
immediately after birth; percent of newborns that stay in the
room with their mothers for at least 23 hours per day, and how
Describe the type of information the system will
and what healthy newborns are fed; the nature of prenatal
collect, maintain (store), or share. (Subsequent
breastfeeding education and discharge support that the
12
questions will identify if this information is PII and ask hospital makes available to mothers; amount and type of
about the specific data elements.)
training that staff and health care providers have, and how
often staff and health care providers receive training; and the
prevalence of specific hospital policies that have been
identified as influential for breastfeeding and maternal and
infant health, e.g., if hospitals have written policies that require
staff to teach mothers how to express breast milk and
strategies for safe sleep while rooming in/at the hospital. No
individual names are included on the survey itself; the only
identifier for the survey responses is an assigned Facility ID that
relates to that hospital and not to any one individual.
Hospitals and birth centers are sent a pre-assigned user ID and
password to be used to access the survey. These credentials
do not identify the individual staff member who responds, but
rather links to the facility. The passwords and user ids are
stored temporarily, until the survey is completed.
Individuals (contractors) performing data entry (survey
responses) are identified and authenticated via their Active
Directory.
mPINC does not require nor request PII.

Page 3 of 5

Save
mPINC is used to manage survey data gathered from hospitals
and free-standing birth centers in the United States and
Territories. The data is about specific hospital practices and
policies in maternity care that affect how well patients are able
to begin and continue breastfeeding. The survey is sent to
every hospital and free-standing birth center in the United
States and Territories that routinely provide maternity care
services, on average, every two years. At each facility, a single
health care professional is designated by the facility's
administration to complete the survey on behalf of his or her
hospital/birth center, and describes the usual activities
undertaken by staff that relate to a set of specific
organizational practices and policies. Because the health care
professional is responding on behalf of the facility where they
work, no individual names are included the survey itself; the
only identifier for the survey responses is an assigned Facility
ID that relates to that facility and not to any individual (or
groups of individuals).

Provide an overview of the system and describe the
13 information it will collect, maintain (store), or share,
either permanently or temporarily.

Much of the information processed from this survey is in the
form of responses to multiple-choice items about hospital
practices and policies, with the remaining information
consisting of fill-in-the blank items in which respondents
report how often certain activities or patient types occur at
their facility. The information collected by the survey and
subsequently maintained by the system can be best described
as hospital level data rather than individual level data.
For the mPINC web surveys each hospital and birth center is
assigned a unique username and password that the staff
member completing the survey uses to access the survey. This
staff member is determined by the hospital administration. The
usernames and passwords are temporarily stored in the system
until the survey is completed.
Contractors using the system to input the survey data are
identified and authorized by the project director. These
individuals authenticate to the system through their Active
Directory.
CDC uses information from the mPINC survey to identify,
document, and share information related to incremental
changes in practices and care processes over time at the
hospital, state, and national levels. Through data sharing
agreements, data may also be used by researchers to better
understand the relationships between hospital characteristics,
maternity-care practices, state level factors, and breastfeeding
initiation and continuation rates.

14 Does the system collect, maintain, use or share PII?

Yes
No

General Comments

Page 4 of 5

Save
OPDIV Senior Official
for Privacy Signature

Beverly E.
Walker -S

Digitally signed by
Beverly E. Walker -S
Date: 2018.05.30 19:05:31
-04'00'

Page 5 of 5