NASA Privacy Impact Assessment (PIA) Summary - ivan.esportals.com
Date of this Submission: Oct 14, 2009
NASA Center: NC4 Merrifield Office
System Name: https:liivan.esportals.com
Is this application or information collection new or is an existing one being modified? Not New
Does this application collect, maintain, and/or disseminate information in identifiable form (IIF)? Yes
Mission Program/Project Supported: Office of Protective Services
Identifying Numbers (Use N/A, where appropriate)
Privacy Act System of Records Number: NASA 10FNMS
OMS Information Collection Approval Number and Expiration Date: 2700-0122
Other Identifying Number(s): N/A
- Provide an overview of the application or collection and indicate the legislation authorizing this activity:
The National Aeronautics and Space Administration Foreign National Management System is collection of a system of records to document, track, analyze, and/or report on foreign nationals or U.S. citizens representing foreign entities who visit NASA facilities andlor access a NASA Information Technology (IT) system or resource. Use of this system will provide NASA management the ability to determine if a particular foreign national or U.S. citizen representing a foreign entity has ever visited a NASA facility and/or accessed a NASA IT system or resource. Authority for this activity is derived from Section 304(a) of the National Aeronautics and Space Act of 1958, codified at 42 U.S.C. 2455; Federal Property Management Regulation, 41 CFR Chapter 101; 14 CFR parts 1203 through 1203b; 14 CFR 1213; 15 CFR 744; 22 CFR 62; 22 CFR 120-130; 40 U.S.C.1441, and 44 U.S.C. 3101 and Executive Order 9397.
- Describe the information the agency will collect, maintain, or disseminate and how the agency will use the information. In this description, indicate whether the information contains IIF and whether submission is voluntary or mandatory:
Information in this system of records will include but not be limited to: name, date of birth, place of birth, social security number, citizenship, visa/passport information, employer information, education status, and reason and length of proposed NASA access. Routine use of this system of records will be to determine eligibility of foreign nationals, and U.S. citizens representing foreign entities to access NASA facilities and resources. The records in this system of records are intended for the sole use of the U.S. Government and its contractors who support U.S. Government operations, policies, laws and regulations, as well as State, local and foreign law enforcement representatives seeking confirmation of identity of persons under investigation.
- Explain how the IIF is collected, maintained, and/or disseminated is the minimum necessary to accomplish the purpose for this effort:
The information is collected by a NASA employee or contractor from the individual or their representative. The NASA employee or contractor manually enters information into the system for processing. The information is maintained at NASA facilities or NASA contract facilities and available only to authorized NASA employees or contractors. This information may be shared or disseminated to other federal, sta te, local and foreign government agencies as authorized by applicable laws.
- Explain why the IIF is being collected, maintained, or disseminated:
There exist numerous NASA partnerships and research collaborations in the aeronautical, and space exploration field involving citizens of foreign countries, including those countries with which the United States has no formal or diplomatic relations. Additionally, records are collected and maintained pursuant to the National Aeronautics and Space Act of 1958 and 42 U.S.C. part 2455 to provide positive identification of foreign nationals, permanent resident aliens, and U.S. citizens representing foreign entities. The information may be disseminated to other government agencies as authorized by applicable laws, statues, and regulations.
- Identify with whom the agency will share the IIF:
Upon an official inquiry or request, information may be shared with the white house, congress, federal law enforcement, state law enforcement, local law enforcement and foreign law enforcement agencies.
- Describe how the IIF will be obtained, from whom it will be collected, what the suppliers of the information and the subjects will be told about the information collection, and how this message will be conveyed to them (e.g. written notice, electronic notice if a Web-based collection). Describe any opportunities for consent provided to individuals regarding what information is collected and how the information will be shared:
The information is obtained from the individual or their representative and personal data required for the visit or assignment request is normally faxed to the NASA requester or sponsor. Individuals providing information are advised that the information being furnished will be used for official purpose only. Individuals grant consent to the collection by providing the requested information.
- State whether the personal information will be collected from children under age 13 on the Internet and, if so, how parental or guardian approval will be obtained. (Reference: Children's Online Privacy Protection Act of 1998):
Information will not be collected from children.
- Describe how the IIF will be secured:
The IIF will be secured using procedures set forth in NIST SP 800-18, NIST SP 800-53, NIST SP 800-30 and NASA Procedural Requirements 1600.1.
- Describe plans for retention and desctruction on IIF:
Information stored in the system will be retained and disposed of in accordance with guidelines defined in NASA Procedural Requirements (NPR) 1441-1D, NASA Records Retention Schedule, Schedule 1, item 35
- Identify whether a system of records is being created under section 552a of Title 5, United States Code (the Privacy Act), or identify the existing Privacy Act system of records notice under which the records will be maintained:
Existing system of records is NASA 10FNMS
Point of contact to whom a member of the public can address questions concerning this information system and the privacy concerns associated with it: Theresa Conroy
Concurrence Credentials on File
THERESA L. CONROY
Concurrence Credentials on File
Teresa M. Fryer
NASA Privacy Program Manager
Concurrence Credentials on File
BRYAN D. MCCALL
Center Privacy Manager
[ Signature ]
LINDA Y. CURETON