HSIN-Intelligence Portal - Center for Investigative Reporting
HSIN-Intelligence Portal - Center for Investigative Reporting
HSIN-Intelligence Portal - Center for Investigative Reporting
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
5.7 Privacy Impact AnalysisFOROFFICIALUSEONLYPrivacy Impact Assessment<strong>Intelligence</strong>&Analysis,<strong>HSIN</strong><strong>Intelligence</strong>Page18<strong>HSIN</strong>-<strong>Intelligence</strong> mitigates privacy risks caused by inappropriate external access and/or sharing byprohibiting the use of PII except in certain areas of the plat<strong>for</strong>m, limiting who has access to <strong>HSIN</strong>-<strong>Intelligence</strong> generally, and specifically with respect to those restricted areas of the HSLIC compartment, anddefining terms <strong>for</strong> the proper use of system in<strong>for</strong>mation. This is particularly true <strong>for</strong> the HS SLICcompartment of <strong>HSIN</strong>-<strong>Intelligence</strong>, where all intelligence products containing U.S. person in<strong>for</strong>mation orPII will reside. Through the auditing and technical measures of the system, the potential <strong>for</strong> misuse of datais minimized ((see section 8.6, below). The <strong>HSIN</strong>-<strong>Intelligence</strong> portal, in restricting the disclosure ofsensitive PII in<strong>for</strong>mation only to authorized HS SLIC members with the statutory responsibility and amission need to know such in<strong>for</strong>mation, further ensures the necessary privacy protections. Theseprotections are further rein<strong>for</strong>ced by the minimization process through which I&A, prior to disseminationwithin the HS SLIC compartment, assesses all in<strong>for</strong>mation, including intelligence and other relevantproducts and reports, concerning U.S. Persons to determine whether disclosure of the PII is necessary inorder <strong>for</strong> the recipients to otherwise understand and use the product or report.Section 6.0 Notice6.1 Was notice provided to the individual prior to collection ofin<strong>for</strong>mation? If yes, please provide a copy of the notice as anappendix. A notice may include a posted privacy policy, a PrivacyAct notice on <strong>for</strong>ms, or a system of records notice published in theFederal Register Notice. If notice was not provided, why not?General notice to the public of in<strong>for</strong>mation collected, maintained, used in, and disclosed from, allplat<strong>for</strong>ms within the collective records system within which I&A currently operates was published in theFederal Register on April 18, 2005, under the title “HSOC Database”. The collection of in<strong>for</strong>mation into<strong>HSIN</strong> <strong>Intelligence</strong> is covered by that SORN. Publication of notice <strong>for</strong> a new stand alone Privacy Act recordssystem framework <strong>for</strong> I&A, including notice of exemptions to be claimed, is imminent. Among otherthings, this new I&A SORN will reflect the intervening reorganization of offices <strong>for</strong>merly within the DHSIn<strong>for</strong>mation and Analysis and Infrastructure Protection Directorate, including both I&A and what hadpreviously been known as the Homeland Security Operations <strong>Center</strong>, or HSOC (the conduit through whichI&A and other IAIP offices had historically exchanged in<strong>for</strong>mation with relevant stakeholders).The System of Records Notice <strong>for</strong> the registration in<strong>for</strong>mation and subsequent user verification iscovered by DHS ALL 004, General In<strong>for</strong>mation Technology Access Accounts.6.2 Do individuals have an opportunity and/or right to decline toprovide in<strong>for</strong>mation?In<strong>for</strong>mation collected on individuals in support of an intelligence support mission does not includean opportunity <strong>for</strong> said individuals the right to decline the collection of this in<strong>for</strong>mation. In<strong>for</strong>mation maybe collected arbitrary of knowledge by the individual and the collection, retention, dissemination andFOROFFICIALUSEONLY