Attachment E - Privacy checklist

Early Aberration Reporting System (EARS)

OMB Control No. 0920-10XX

Privacy Act Checklist

• This is a new information collection request to have a new registration module component added to the current Early Aberration Reporting System (EARS).

• This new data collection will consist of an electronic registration form, which will be required before the EARS download. The registration information collected from the form will assist CDC in:

  • User tracking

  • Broadcasting messages regarding future application releases and/or user survey purposes

• The Privacy Act does not apply to this data collection.

• Respondents are organizations that use the EARS application to analyze public health surveillance data and provide early identification of outbreaks on infectious diseases as well as other abnormal public health trends (e.g. bioterrorism events).

• While the data collection forms include the name and job title of the individual who completes the forms on behalf of the respondent organization, that individual is responding in their role as a staff person knowledgeable about performance testing and laboratory practices, and does not provide personal information.

• Response data is primarily treated in a secure manner and will not be disclosed, unless otherwise compelled by law.

• No personal identifying information (PII) and personal health information (PHI) are collected. All facility data are protected through access control and personnel and physical facility security policies and procedures.

• The information collected will be stored in a database on a secure server within the MidTier Data Center (MTDC). The MDTC is a secure server environment within the CDC firewall, is supported 24/7 (e.g. file backups on a scheduled basis), and is not directly accessible via computers outside of the network. Backup procedures are in place to ensure that accidental or natural occurrences will not result in loss of data.