Privacy Impact Assessment

Save

Privacy Impact Assessment Form
v 1.47.4
Status Draft

Form Number

F-18375

Form Date

Question

Answer

1

OPDIV:

CDC

2

PIA Unique Identifier:

P-1465598-999917

2a Name:

6/9/2020 10:50:50 AM

CryptoNet (CryptoNet)
General Support System (GSS)
Major Application

3

Minor Application (stand-alone)

The subject of this PIA is which of the following?

Minor Application (child)
Electronic Information Collection
Unknown

3a

Identify the Enterprise Performance Lifecycle Phase
of the system.

Operations and Maintenance
Yes

3b Is this a FISMA-Reportable system?

4

Does the system include a Website or online
application available to and for the use of the general
public?

5

Identify the operator.

6

Point of Contact (POC):

7

Is this a new or existing system?

8

Does the system have Security Authorization (SA)?

8b Planned Date of Security Authorization

No
Yes
No
Agency
Contractor
POC Title

Branch Chief

POC Name

Vincent Hill

POC Organization NCEZID
POC Email

[email protected]

POC Phone

404.718.4151
New
Existing
Yes
No
August 28, 2020
Not Applicable

Page 1 of 2

Save

11 Describe the purpose of the system.

CryptoNet is a surveillance system used to identify and
compare deoxyribonucleic (DNA) patterns of the
cryptosporidium parasite. The system builds on the existing
CDC laboratory surveillance system for bacteria, and uses
bioinformatics software, BioNumerics, for storing and sharing
DNA sequence data for cryptosporidium subtypes in humans,
animals, food and water. The CryptoNet system facilitates
laboratory data sharing among state and local public health
laboratories, promote laboratory-based surveillance of
cryptosporidiosis in the United States, and improves the
investigations of foodborne and waterborne outbreaks of
cryptosporidiosis in the United States.
The system stores and shares DNA patterns and sequences of
cryptoporidium parasites.

Describe the type of information the system will
collect, maintain (store), or share. (Subsequent
12
questions will identify if this information is PII and ask It is an internal access database where users are authenticated
using Active Directory (AD) and a Personal Identity Verification
about the specific data elements.)
(PIV) card. No user credentials are stored in the system. AD is a
separate system covered by a separate PIA.

Provide an overview of the system and describe the
13 information it will collect, maintain (store), or share,
either permanently or temporarily.

CryptoNet is used to analyze and maintain surveillance on
cryptosporidium parasitic bacteria as it relates to foodborne
and waterborne illness outbreaks. The system identifies and
compares DNA pattens of the Cryptosporidium parasite.
It is an internal access database where users are authenticated
using Active Directory (AD) and a Personal Identity Verification
(PIV) card. No user credentials are stored in the system. AD is a
separate system covered by a separate PIA.

14 Does the system collect, maintain, use or share PII?

Yes
No

General Comments

OPDIV Senior Official
for Privacy Signature

signed by Jarell
Jarell Oshodi Digitally
Oshodi -S
Date: 2020.06.09 15:31:11
-S
-04'00'

Page 2 of 2