PIA - signed

Save

Privacy Impact Assessment Form
v 1.47.4
Status Draft

Form Number

F-47453

Form Date

Question

Answer

1

OPDIV:

CDC

2

PIA Unique Identifier:

P-3176297-121973

2a Name:

4/30/2018 1:10:59 PM

Epi Info Web Survey (EIWS)
General Support System (GSS)
Major Application

3

Minor Application (stand-alone)

The subject of this PIA is which of the following?

Minor Application (child)
Electronic Information Collection
Unknown

3a

Identify the Enterprise Performance Lifecycle Phase
of the system.

Operations and Maintenance
Yes

3b Is this a FISMA-Reportable system?

4

Does the system include a Website or online
application available to and for the use of the general
public?

5

Identify the operator.

6

Point of Contact (POC):

7

Is this a new or existing system?

8

Does the system have Security Authorization (SA)?

8a Date of Security Authorization

No
Yes
No
Agency
Contractor
POC Title

Computer Scientist

POC Name

Leslyn McNabb

POC Organization CDC/OPHSS/CSELS
POC Email

[email protected]

POC Phone

404-498-2286
New
Existing
Yes
No

Dec 28, 2018

Page 1 of 3

Save

11 Describe the purpose of the system.

The vision of Epi Info Web Survey product is to use Epi Info
desktop application to create online surveys to help CDC
programs conduct surveys, gather useful information for
analysis, and further expand CDC’s public health mission. Epi
Info Web Survey will enable surveys created using Epi Info
desktop application on the web. The survey can be distributed
to the targeted audience using emails or any other electronic
form. Each survey is accessed using the URL that is unique to a
given survey. The survey application will allow a survey
participant to take a survey. An epidemiologist will be able to
download the survey responses from web and analyze the
survey data any time during the period the survey is open or
after the survey has closed using Epi Info desktop application.
The Epi Info Web Survey product provides services to allow
publishing a survey created using Epi Info Desktop on the web
and dynamically reproduces the survey on the web that has
been created and published from Epi Info desktop. The Epi Info
Web Survey product supports the surveys created using the
following controls: label, single line text box, multi-line text
box, numeric text box, date picker, check box and group box.
The Epi Info Web Survey product supports skip logic by its
ability to hide, unhide, highlight, un-highlight, enable and
disable survey questions. It also supports navigation logic. A
survey participant is able to access the survey; complete the
survey in one session; or save the responses and complete it a
later time. They can submit the survey upon completion. One
can download the survey responses collected on the web into
Epi Info Desktop for analysis. The Epi Info Web Survey system
comprises of multiple infrastructure components. Manager
Service enables Epi Info desktop to allow publishing the survey
on the web and download the survey responses. Data Service
provides the web application data to create surveys at run time
and to manage data collected from the survey participant.
Web Survey application creates the survey on the web using
the Meta data in the database. It allows survey participant to
participate in the survey and provide their response. Finally,
Web Survey database consists of a relational database that will
store the survey published on the web and store the survey
responses provided by the survey participant.

CDC programs use the system to collect public health data for
investigations and research studies. The data collected varies
because each user is allowed to build her own unique form
Describe the type of information the system will
and publish at her will. The data collected is temporarily stored
collect, maintain (store), or share. (Subsequent
12
questions will identify if this information is PII and ask for up to 45 days then deleted. There is no PII collected by this
system. Programs that use this system must acknowledge
about the specific data elements.)
there will be no collection of PII through it and must sign an
agreement after reading the Rules of Behavior document that
explicitly indicates as such. NO user ids or passwords required.

Page 2 of 3

Save

Provide an overview of the system and describe the
13 information it will collect, maintain (store), or share,
either permanently or temporarily.

The Epi Info Web Survey system allows CDC users with
authorized access to the Epi Info system to create, distribute,
and receive completed online surveys to gather information
for analysis.
CDC programs use the system to collect public health data for
investigations and research studies.
Below are examples of the kind of surveys the systems can be
used for and data collected:
1. Influenza vaccine survey - The survey has questions about
Flu vaccine knowledge, attitudes and beliefs.
2. OSHA work place hazard analysis - The survey has questions
about knowledge and use of personal protective equipment.
Multiple choice answers to these questions for each study are
being collected to be used in investigations and research
studies. These multiple choice answers that the user chooses
from consist of answers like, Not sure/dont know, Decreased
slightly, stayed about the same, etc. which are generic answers.
Survey data is retained for 30-45 days following the survey, and
then deleted.
Yes

14 Does the system collect, maintain, use or share PII?
39 Identify the publicly-available URL:

No
http://www.cdc.gov/EpiInfo

40 Does the website have a posted privacy notice?

Yes
No

40a

Is the privacy policy available in a machine-readable
format?

Yes

41

Does the website use web measurement and
customization technology?

Yes

42

Does the website have any information or pages
directed at children under the age of thirteen?

Yes

43

Does the website contain links to non- federal
government websites external to HHS?

Yes

General Comments

OPDIV Senior Official
for Privacy Signature

No
No

No

No

Q40a: In accordance with HHS’s “Rescission of Office of the Chief Information Officer/Superseded Policy
for Machine Readable Privacy Policies and Related Guidance Documents” memo. MRPP cannot be
validated due to obsolete technology and the suspension of work on P3P by the Platform for Privacy
Preferences Project workgroup.
Note: each survey has a unique url, which can be used by anyone via the internet as long as the survey is
still accessible via the EIWS system. The url above is for the Epi Info website.
signed by Jarell
Jarell Oshodi Digitally
Oshodi -S
Date: 2018.12.28 09:11:28
-S
-05'00'

Page 3 of 3