0 - Privacy Act Checklist MIDRS Rev 20220125

NCEH/ATSDR Office of Science

Privacy Act and Information Collection Request (ICR) Certification Checklists

ICR Name: Maritime Illness Database Illness and Reporting System Database (MIDRS)

OMB ID: 0920-1260

ICR Classification: Revision

Requested Expiration Date: Three years from approval date

PRIVACY ACT DETERMINATION

On 03/23/2018, the CDC Chief Privacy Officer conducted this review and has determined that the Privacy Act does not apply. A System of Records Notice is not applicable.

In 2022, the Vessel Sanitation Program (VSP) attests that MIDRS has not undergone major system changes; therefore, the NCEH/ATSDR Information Systems Security Officer (ISSO) has agreed that a Privacy Threshold Assessment (PTA) reassessment is not necessary.

If a major change occurs in the future, the VSP will submit a new request for a PTA or a Privacy Impact Assessment (PIA), as applicable.

The Privacy Act Checklist (include a brief narrative addressing):

1. The data collection involves collecting sensitive but not personally identifiable information (PII) [see OMB Circular No. A-130. Please consult with your agency's privacy program when making this determination.].

2. There is no consent/advisement language for mandatory reporting.

Under Section 361(a) of the Public Health Service Act (42 USC Section 264[a]) (Attachment 1a), the U.S. Secretary of Health and Human Services is authorized to make and enforce regulations necessary to prevent the introduction, transmission, or spread of communicable diseases into the U.S. from a foreign country. The authority for carrying out these functions on a daily basis has been delegated to CDC. VSP operates under the authority of the Public Health Service Act (42 U.S.C. Section 264 Quarantine and Inspection Regulations to Control Communicable Diseases) (Attachment 1a). In addition, Section 366(c) of the Public Health Service Act (42 USC Section 269[c]) (Attachment 1b) authorizes the promulgation of regulations applicable to vessels for preventing the introduction into the U.S. of "any communicable disease by securing the best sanitary condition of such vessels, their cargoes, passengers, and crews.”

ICR CERTIFICATION

The following checklist indicates whether statements on the required elements of certification are addressed in the ICR. For all “NO” responses, indicate whether a justification has been provided in the Supporting Statement(s):

1. (YES) - Necessary for the proper performance of agency functions

2. (YES) - Avoids unnecessary duplication

3. (YES) - Reduces burden on small entities

4. (YES) - Uses plain, coherent, and unambiguous terminology that is understandable to respondents

5. (YES) - Consistent and compatible with current reporting and recordkeeping practices

6. (YES) - Written to indicate the retention period for recordkeeping requirements

7. (YES) - Written to inform respondents of the information called for under 5 CFR 1320.8(b)(3):

   1. (YES) - Why the information is being collected

   2. (YES) - Use of information

   3. (YES) - Burden estimate

   4. (YES) - Nature of response (mandatory)

   5. (YES) - Nature and extent of confidentiality

   6. (YES) - Need to display currently valid OMB control number

8. (YES) - Developed by an office that has planned and allocated resources for the efficient and effective management and use of the information to be collected

9. (NO) – Does not make use of effective and efficient statistical survey methodology (because not applicable)

10. (YES) - Makes appropriate use of information technology