EXECUTIVE SUMMARY REPORT
This assessment shows that the EBSA is adhering to the Privacy Act of
1974 for PII contained in EFAST. All eight principles presented in the Privacy
Impact Methodology and Assessment are being followed or are in process of being
implemented.
PIA Results
The PIA questionnaire in Appendix A shows that EFAST contains a limited
amount of PII. This PII is stored for the exclusive purpose of performing the
duties of the EBSA and is collected directly from the individual whenever
possible. All PII is well protected by numerous security controls. The risk of
misuse or loss of this PII is minimal. In fact, special steps are taken to
delete PII from EFAST images prior to their distribution by the contactor to
the Agency.
Summary
Of the areas found to be in need of improvement, actions are already
being taken to remedy or mitigate the non-compliance. These items are
identified in the Plan of Actions and Milestones (POA&M) and will be
tracked until completion.
|
