Documents/DHSFACA21492/1: Recommandations/1: Make, Accept, Implement/Indicator:1

Indicator: 1

[Output]

Measurements in/of Recommendations Made

Relationships:

Department of Homeland Security - Narrower_Than

Other Information:

Data Privacy and Integrity Advisory Committee

Type Target Actual
StartDate 2010-10-01 2010-10-01
EndDate 2011-09-30 2011-09-30
Number n/a 75
Description Unspecified Since its inception in 2005, the Committee has issued approximately 75 recommendations, as follows:Report No. 2005-01 (“The Use of Commercial Data to Reduce False Positives in Screening Programs”) (September 28, 2005) recommends that the Department use commercial data in screening programs only where enumerated privacy and security criteria are satisfied. Report No. 2005-02 (“Recommendations on the Secure Flight Program”) (December 6, 2005) includes five recommendations to enhance the transparency of the Secure Flight Program and to protect the privacy of individuals whose personal information is collected under the Program’s auspices.Report No. 2006-01 (“Framework for Privacy Analysis of Programs, Technologies, and Applications”) (March 7, 2006) recommends a five-step process for (1) identifying and assessing current or potential privacy impacts of Department systems and programs, and (2) developing ways to mitigate identified privacy impacts.Report No. 2006-02 (“The Use of RFID for Human Identity Verification”) (December 6, 2006) recommends (1) an analytical framework for evaluating the use of Radio Frequency Identification (RFID)-enabled credentials at border crossings and (2) best practices for using RFID-enabled credentials to identify individuals.Report No. 2006-03 (“The Use of Commercial Data”) (December 6, 2006) includes seven recommendations for using commercial data in a privacy-protective manner in Department programs generally, building upon the specific guidance for use of commercial data in screening programs set out in Report No. 2005-01.Report No. 2007-01 (“Notice of Proposed Rulemaking for Implementation of the REAL ID Act”) includes twelve recommended changes in or additions to the proposed REAL ID Rule, submitted in response to the Department’s Notice of Proposed Rulemaking. The recommendations focus on security issues, accountability for personal information, notice, individual access to information, and the types of information required to be stored in the machine-readable zone on REAL-ID-compliant driver’s licenses and identification cards.Report No. 2008-01 (“Recommendations on Addressing Privacy Impacts in Department of Homeland Security Grants to State, Local, and Tribal Governments and other Organizations”) (September 17, 2008) recommends that certain enumerated questions concerning prospective grantees’ collection and use of personal information be added to Department grant application forms.Report No. 2008-02 (“Options for Verifying the EIN or Otherwise Authenticating the Employer in the E-Verify Program”) (December 3, 2008) includes seven recommendations on enhancing the DHS E-Verify Program’s ability to authenticate the identity of employers who use the E-Verify system.Letter to DHS Secretary Napolitano and Acting Chief Privacy Officer John W. Kropf (February 3, 2009) includes sixteen recommendations for the Obama Administration on DHS Privacy Office operations and structure, as well as current and proposed privacy initiatives for the Department.Report No. 2009-01 (“A White Paper: DHS Information Sharing and Access Agreements”) (May 14, 2009) includes seven recommendations on DHS oversight of Information Sharing Access Agreements (ISAA), ISAA preparation and review, communications supporting ISAAs, and audit procedures related to the information sharing process and ISAA terms.Report No. 2010-01 ("The Elements of effective Redress Programs")(March 28, 2010) includes nine recommendations on developing, deploying, and monitoring effective privacy redress programs. The recommendations focus on accountability; effective notice; employee training; assuring appropirate correction or annotation of personal information, where warranted; auditing; and transparent, impartial appeals processes.Report No. 2010-02 ("Recommendations for the PIA Process for Enterprise Services Bus Development")(Marh 18, 2010) includes six recommendations for taking privacy considerations into account in the development, implementation, and deployment of an Enterprise Service Bus.Report N0.2011-01 (Privacy Policy and Technology Recommendations for a Federated Information-Sharing System)(TBD) The Committee is in the process of completing this report. It will be issued to the Department in early FY2012.