Privacy Threshold Analysis

DI-4012 (9/2018)
U.S. Department of the Interior

U.S. Department of the Interior
PRIVACY THRESHOLD ANALYSIS

The DI-4012 Privacy Threshold Analysis (PTA) form helps Department of the Interior (DOI) Privacy
Officials determine whether a new or revised Privacy Impact Assessment (PIA) is required in
accordance with the E-Government Act, OMB policy, and the DOI PIA Guide, and identify other related
compliance requirements for the collection, maintenance, storage, use, processing, sharing or disposal of
personally identifiable information (PII) and any activities that may have privacy implications or
otherwise impact individual privacy. See the DOI PTA Guide for guidance on completing the PTA.
PTAs must be completed and submitted to the appropriate Bureau/Office Associate Privacy Officer for
review and compliance determination. Bureau/Office Associate Privacy Officers are responsible for
overseeing and managing PTAs for their organizations.

Section 1. General Information
Question

Response

A. Project, Program or System Name:

Regional Watercraft Inspection Decontamination Data
Sharing System

B. Bureau or Office:
.

National Park Service, Bureau of Reclamation, Bureau
of Land Management, and U.S. Fish and Wildlife
Services

C. Program or Office:

Office of the Secretary, Office of Policy Analysis

D. Project/Program Manager or System
Owner:

Name: Hilary Smith
Title: Senior Advisor for Invasive Species
Phone:202-208-4103
E-mail:Hilary_Smith@ios.doi.gov

E. Routing Information:

_X_ New PTA
___ Updated PTA
Date of Submission: April 20, 2021

Page 1 of 7

WID
Privacy Threshold Analysis

DI-4012 (9/2018)
U.S. Department of the Interior

Section 2. Project, Program or System Summary
Question

Response

A. General description of the project, program
or system.

The Regional Watercraft Inspection Decontamination
Data Sharing System is a database that was developed
by the State of Colorado and has been made available to
partners in the western United States who are
conducting watercraft inspection / decontamination
programs.
The database was designed to share information on the
origins and destinations of trailered watercraft, the
presence of aquatic invasive species (AIS) and AIS risk
factors, and decontamination measures and results.
Information entered by watercraft inspection /
decontamination (WID) crews at one location is quickly
available to WID crews in other locations allowing them
to assess the risk associated with watercraft and treat
them accordingly. The database was developed in
response to quagga and zebra mussels but the actions
taken to address these two species are effective for other
AIS as well.
Information is entered into the Colorado State database
and the personnel query information from the database
is accessed and entered via a mobile application on a
government furnished smartphone or tablet. The mobile
application was developed by the State of Colorado and
they are the owner of the information collected by the
users of the application.

B. What is the technology or format used for
the Project, Program or System?

___ IT System
___ New Project or Program
___ Website
_X_ Web Form, Survey or Information Collection
Page 2 of 7

WID
Privacy Threshold Analysis

DI-4012 (9/2018)
U.S. Department of the Interior

___ Third-Party Website
___ Social Media Application
___ SharePoint
_X_ Mobile Application
___ Closed Circuit Television (CCTV)
___ Paper-based Collection
___ Other: Describe.

C. Does this project, program or system
involve a form, survey or information
collection?

_X_ Yes:
DOI bureaus collect information by asking four
questions of boat owners, which vary depending on
whether they are entering or leaving a water; other
information is the result of the observations of the WID
crews as they inspect and/or decontaminate a boat.
No information is stored in any DOI database. Two of
the questions vary depending on whether a boater is
entering or leaving a DOI managed area; two of the
questions remain the same whether the boater is entering
or leaving.
Questions for all boats: 1) Does the boater have any live
aquatic bait? 2) What compartments or containers on the
boat, including ballast tanks, hold water?
Questions for incoming boats: 1) Has the boat been out
of the state in the last 30 days (and where)? 2) Has the
boat been in any other waters in the last 30 days (and if
so, in which waters)?
Questions for departing boats: 1) What is the destination
for the boat? 2) Where and when will the boat be
launched next?
___ No

D. Is Office of Management and Budget
(OMB) approval required for the collection?

_X_ Yes:
Awaiting OMB approval to ask four questions of
boaters and enter the answers into the State of Colorado
database.
___ No

Page 3 of 7

WID
Privacy Threshold Analysis

DI-4012 (9/2018)
U.S. Department of the Interior

Section 3. Personally Identifiable Information
Question

Response

A. What categories of individuals does the
Project, Program or System collect, maintain,
store, use, process, disseminate or dispose of
PII? Please select all that apply.

___ Federal employees
___ Contractors
_X_ Members of the public
_X_ Other: Describe.
___ This project, program or system does not collect,
maintain or process PII
The data collected is owned and maintained by the State
of Colorado.

B. What specific information about
individuals will be created, collected, used,
processed, maintained or disseminated?

The only information that is collected that may be
linkable to an individual or a corporation and other
business entities is the boat registration number or boat
trailer license plate number.
The four bureaus are system users but not the system
manager or the system owner. In addition, the bureaus
will not be distributing or processing the information.
The database is owned by the State of Colorado and is
maintained by a contractor to the State of Colorado.

C. Is information retrieved by a unique
identifier assigned to the individual?
.

_X_ Yes
The system links information about specific watercraft to
boat registration number or boat trailer license plate
number. When a boat is inspected and decontaminated,
and leaves a particular inspection station, that
information is entered into the database. This makes it
possible for another inspection station, somewhere else,
to enter the registration number at that station and see
where the boat came from and how it was handled.
___ No

Page 4 of 7

WID
Privacy Threshold Analysis

DI-4012 (9/2018)
U.S. Department of the Interior

Question

Response

D. Is the information covered by a System of
Records Notice (SORN)?

___ Yes:
_X_ No: This system is not a DOI system. This system
is owned and maintained by the State of Colorado.

E. Does the Project, Program or System
collect or use Social Security Numbers
(SSNs)?

___ Yes:

Does this Project, Program or System receive
or share PII with any other internal DOI
programs or systems?

___ Yes:

__X_ No

_X_ No
G. Does this Project, Program or System
receive or share PII with any external (nonDOI) partners or systems?

___ Yes:
_X_ No

Page 5 of 7

WID
Privacy Threshold Analysis

DI-4012 (9/2018)
U.S. Department of the Interior

Question

Response

H. Is this external sharing pursuant to new
or existing information sharing agreement
(Memorandum of Understanding,
Memorandum of Agreement, Letters of
Intent, etc.)?

___ Yes:
_X_ No

Section 4. PTA Review and Recommendation
Question

Response

Privacy Compliance Determination:

_X_ PTA is sufficient at this time
___ Privacy Impact Assessment (PIA) required
___ Adapted PIA required
___ System of Records Notice (SORN) required
___ Notice of Proposed Rulemaking/Final Rule required
___ Computer Matching Notice required
___ Computer Matching Agreement required
___ Privacy Act Statement required
___ Privacy Notice required
___ Specialized role-based training required
___ Information sharing agreement required
___ Further privacy compliance review is required
___ Refer for Security Compliance Assessment
_X_ Refer for Information Collection Clearance Review
___ Refer for Records Review
___ Other: Describe.

Bureau Associate Privacy Officer Comments:

PTA is sufficient at this time. The four bureaus are
system users but not the system managers or system
owners. In addition, the four bureaus will not be
distributing or processing the information. The State of
Page 6 of 7

WID
Privacy Threshold Analysis

DI-4012 (9/2018)
U.S. Department of the Interior

Colorado owns the database and the information
collected.
The State of Colorado is the owner of the mobile
application used to enter the information; it is not a DOI
mobile application. It was not developed by, on behalf
of, or in coordination with DOI. The mobile application
should only be installed and utilized on government
issued smartphones. These devices meet DOI
requirements for IT security and privacy protection.

Associate Privacy Officer Name:
Danna Mingo
Bureau/Office:
Date:

DANNA
MINGO

Digitally signed by DANNA
MINGO
Date: 2021.04.20 12:34:46
-04'00'

OS Departmental Offices
April 20, 2021
DOI Privacy Office Comments

Page 7 of 7