Privacy Narrative

Date

Information Collection Request - Privacy Narrative
NCCDPHP: Work Plans, Progress Monitoring, and Evaluation Reporting
Title: ______________________________________________________________________________________
Rachel Kaufmann, PhD, MPH
Point of Contact: _____________________________________________________________________________

Description

Data will be collected electronically and submitted via email or through the online Awards
Management Platform (AMP). The templates approved under this ICR can be programmed for direct
data entry into AMP. CDC awardees can enter their information electronically via a secure server.
The NCCDPHP Information Systems Security Officer has reviewed this Information Collection
Request and determined that the Privacy Act is not applicable. Individual information will not be used
to retrieve records. No system of records will be created under the Privacy Act. The forms can collect
a limited amount of information identifying key program staff (e.g., Program Director) and their phone
number and/or email address. This is business contact information which is often publicly available
and which will usually be familiar to the CDC project officer. Because responses will be maintained in
a secure system, and individuals' information will not be reported, there is no impact on respondent
privacy. No proprietary information is collected.
CDC complies with the National Institute of Standards and Technology (NIST) standards and
guidelines for managing data and information systems, including the protection of sensitive
information. There are several safeguards in place to keep collected information secure. All data is
stored in US based data centers following a least-privilege access model. Users are granted access only
to the data and systems required to perform their duties. Data collected by CDC or CDC contractors
are stored and managed based on CDC's information protection requirements and standards which also
includes the process for handling security incidents and the event monitoring and incident response.

Does this ICR request any PII?

✔ Yes

No

Names of key program staff and their phone
If yes, describe: _____________________________________
numbers and e-mail addresses

Does this ICR include a form that requires a Privacy Act Statement?
Does this ICR require a PIA?

Yes

✔

No

Yes

✔

No

If yes, does a signed PIA already exist?

C/I/O Approval
Associate Director for Science

Comments:

Information Systems Security Officer

Yes

No