PIA Form

Save

Privacy Impact Assessment Form
v 1.47.4
Status Draft

Form Number

F-54648

Form Date

Question

Answer

1

OPDIV:

CDC

2

PIA Unique Identifier:

P-7355147-229382

2a Name:

10/11/2016 1:43:25 PM

National Outbreak Reporting System (NORS)
General Support System (GSS)
Major Application

3

Minor Application (stand-alone)

The subject of this PIA is which of the following?

Minor Application (child)
Electronic Information Collection
Unknown

3a

Identify the Enterprise Performance Lifecycle Phase
of the system.

Operations and Maintenance
Yes

3b Is this a FISMA-Reportable system?

4

Does the system include a Website or online
application available to and for the use of the general
public?

5

Identify the operator.

6

Point of Contact (POC):

7

Is this a new or existing system?

8

Does the system have Security Authorization (SA)?

8a Date of Security Authorization

No
Yes
No
Agency
Contractor
POC Title

Business Steward

POC Name

Patricia Griffin

POC Organization CDC / NCEZID / DFWED
POC Email

PMG1@CDC.GOV

POC Phone

404.639.3384
New
Existing
Yes
No

Dec 20, 2013

Page 1 of 2

Save
The National Outbreak Reporting System (NORS) supports
outbreak reporting by partners in state, local, and territorial
public health agencies. The system provides State and local
health departments in all 50 states, the District of Columbia,
Puerto Rico, and territories, the ability to enter data about
enteric disease outbreaks caused by food, water, animal
contact, person-to-person contact, and the environment.

11 Describe the purpose of the system.

Through NORS, CDC collects reports of enteric disease
outbreaks caused by bacterial, viral, parasitic, chemical, toxin,
and unknown agents, as well as waterborne outbreaks of nonDescribe the type of information the system will
enteric disease. Outbreaks are reported to CDC using NORS,
collect, maintain (store), or share. (Subsequent
12
questions will identify if this information is PII and ask which collects information such as date and location of the
outbreak, the number of people who became ill and their
about the specific data elements.)
symptoms, and the pathogen that caused the outbreak.

Provide an overview of the system and describe the
13 information it will collect, maintain (store), or share,
either permanently or temporarily.

The National Outbreak Reporting System (NORS) is a webbased platform used by local, state, and territorial health
departments in the United States to report all waterborne and
food borne disease outbreaks and enteric disease outbreaks
transmitted by contact with environmental sources, infected
persons or animals, or unknown modes of transmission to CDC.
NORS launched in 2009 following a four-year effort to design
and develop the electronic system. This system is not used by
members of the general public to report an outbreak; the
general public is advised to contact their state or local health
department.
NORS captures aggregate information about an outbreak. This
includes information about the mode of transmission,
implicated foods, symptoms, etc. The data from outbreak
investigations are checked for accuracy and analyzed by CDC
to provide information about national outbreak trends and
learning lessons for preventing future outbreaks. No sensitive
or personally identifiable information is captured or stored.

14 Does the system collect, maintain, use or share PII?

Yes
No

General Comments

OPDIV Senior Official
for Privacy Signature

Beverly E.
Walker -S

Digitally signed by Beverly E. Walker -S
DN: c=US, o=U.S. Government,
ou=HHS, ou=CDC, ou=People,
0.9.2342.19200300.100.1.1=10014403
43, cn=Beverly E. Walker -S
Date: 2016.10.11 16:46:50 -04'00'

Page 2 of 2