Documents/DHSFACA21492/1: Recommandations/1: Make, Accept, Implement/Indicator:3

Indicator: 3

[Outcome]

Measurements in/of Recommendations Partially Accepted

Relationships:

Department of Homeland Security - Narrower_Than

Other Information:

Data Privacy and Integrity Advisory Committee

Type Target Actual
StartDate 2010-10-01 2010-10-01
EndDate 2011-09-30 2011-09-30
Percentage n/a 24
Description There are sometimes a few proposals which were not funded in their entirety, those few being scaled back from their original level of requested funding (allowable under the program). Report No. 2006-01 (“Framework for Privacy Analysis of Programs, Technologies, and Applications”): The DPIAC employs the Framework set forth in this report to provide transparency to the public on how it reviews Department programs and systems.Report No. 2007-01 (“Notice of Proposed Rulemaking for Implementation of the REAL ID Act”): Some of the Committee’s recommendations regarding state security policies and procedures are addressed in guidance provided to the States by the Department pursuant to the Final Real ID Rule.Report No. 2010-01 (“The Elements of effective Redress Programs”) (March 28, 2010) includes nine recommendations on developing, deploying, and monitoring effective privacy redress programs. In response, the Department has (1) clarified lines of authority and accountability for its traveler redress process; (2)refined its process for ensuring that corrected personal information is disseminated to those with a need to know it; and (3) improved its website for the Traveler Redress Inquiry Program (DHS TRIP),which provides transparency by explaining the process in plain language and in an easy to read format, as well as linking to the Privacy Impact Assessment and System of Records Notice for the Department’s redress and response records system. The Report remains a valuable resource for the Department’s ongoing efforts to enhance its redress programs.Report No. 2010-02 ("Recommendations for the PIA Process for Enterprise Services Bus Development") (March 18, 2010) includes six recommendations for taking privacy considerations into account in the development, implementation, and deployment of an Enterprise Service Bus. The Department's review and implementation of these recommendations is ongoing. The DHS Privacy Office plans to use the Committee’s recommendations on improving the Privacy Impact Assessment (PIA) process for Service Oriented Architecture to (1)create a new Privacy Threshold Analysis (PTA) document to conduct initial assessments of the privacy impacts of Department Enterprise Service Buses and (2) a template PIA to standardize privacy protections for ESBs used across the Department.