11.07.2015 Views

HSIN-Intelligence Portal - Center for Investigative Reporting

HSIN-Intelligence Portal - Center for Investigative Reporting

HSIN-Intelligence Portal - Center for Investigative Reporting

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

5.7 Privacy Impact AnalysisFOROFFICIALUSEONLYPrivacy Impact Assessment<strong>Intelligence</strong>&Analysis,<strong>HSIN</strong><strong>Intelligence</strong>Page18<strong>HSIN</strong>-<strong>Intelligence</strong> mitigates privacy risks caused by inappropriate external access and/or sharing byprohibiting the use of PII except in certain areas of the plat<strong>for</strong>m, limiting who has access to <strong>HSIN</strong>-<strong>Intelligence</strong> generally, and specifically with respect to those restricted areas of the HSLIC compartment, anddefining terms <strong>for</strong> the proper use of system in<strong>for</strong>mation. This is particularly true <strong>for</strong> the HS SLICcompartment of <strong>HSIN</strong>-<strong>Intelligence</strong>, where all intelligence products containing U.S. person in<strong>for</strong>mation orPII will reside. Through the auditing and technical measures of the system, the potential <strong>for</strong> misuse of datais minimized ((see section 8.6, below). The <strong>HSIN</strong>-<strong>Intelligence</strong> portal, in restricting the disclosure ofsensitive PII in<strong>for</strong>mation only to authorized HS SLIC members with the statutory responsibility and amission need to know such in<strong>for</strong>mation, further ensures the necessary privacy protections. Theseprotections are further rein<strong>for</strong>ced by the minimization process through which I&A, prior to disseminationwithin the HS SLIC compartment, assesses all in<strong>for</strong>mation, including intelligence and other relevantproducts and reports, concerning U.S. Persons to determine whether disclosure of the PII is necessary inorder <strong>for</strong> the recipients to otherwise understand and use the product or report.Section 6.0 Notice6.1 Was notice provided to the individual prior to collection ofin<strong>for</strong>mation? If yes, please provide a copy of the notice as anappendix. A notice may include a posted privacy policy, a PrivacyAct notice on <strong>for</strong>ms, or a system of records notice published in theFederal Register Notice. If notice was not provided, why not?General notice to the public of in<strong>for</strong>mation collected, maintained, used in, and disclosed from, allplat<strong>for</strong>ms within the collective records system within which I&A currently operates was published in theFederal Register on April 18, 2005, under the title “HSOC Database”. The collection of in<strong>for</strong>mation into<strong>HSIN</strong> <strong>Intelligence</strong> is covered by that SORN. Publication of notice <strong>for</strong> a new stand alone Privacy Act recordssystem framework <strong>for</strong> I&A, including notice of exemptions to be claimed, is imminent. Among otherthings, this new I&A SORN will reflect the intervening reorganization of offices <strong>for</strong>merly within the DHSIn<strong>for</strong>mation and Analysis and Infrastructure Protection Directorate, including both I&A and what hadpreviously been known as the Homeland Security Operations <strong>Center</strong>, or HSOC (the conduit through whichI&A and other IAIP offices had historically exchanged in<strong>for</strong>mation with relevant stakeholders).The System of Records Notice <strong>for</strong> the registration in<strong>for</strong>mation and subsequent user verification iscovered by DHS ALL 004, General In<strong>for</strong>mation Technology Access Accounts.6.2 Do individuals have an opportunity and/or right to decline toprovide in<strong>for</strong>mation?In<strong>for</strong>mation collected on individuals in support of an intelligence support mission does not includean opportunity <strong>for</strong> said individuals the right to decline the collection of this in<strong>for</strong>mation. In<strong>for</strong>mation maybe collected arbitrary of knowledge by the individual and the collection, retention, dissemination andFOROFFICIALUSEONLY

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!