EXECUTIVE SUMMARY REPORT
INTRODUCTION TO THE PIA
Purpose
The purpose of this document is to describe the Privacy Impact
Assessment (PIA) conducted for the Foreign Labor Certification (FLC) System.
The Department of Labor (DOL) is responsible for ensuring proper protections of
the information contained within its information systems, including personally
identifiable information (PII).
One objective of the PIA is to assist the Employment and Training
Administration (ETA) in identifying personal information and addressing
information privacy when planning, developing, implementing, and operating
individual agency information management systems and integrated DOL information
systems.
The following DOL ETA organizational subcomponents are responsible for
the system: Office of National Programs, Division of Foreign Labor
Certification (DFLC); and the Office of Performance and Technology (PROTECH),
Division of Technology Application Support.
The FLC System consists of the H1-B (Certification for Professional
Workers), H-2A (Certification for Temporary or Seasonal Agricultural Workers),
PERM Backlog and PERM (Permanent Certification), and H-2B (Certification for
Temporary Non-Agricultural Work) modules. The FLC System's primary purpose is
to facilitate the application process (for employers, attorneys, and individual
foreign workers) when applying for nonimmigrant visas to work in the United
States.
PIA APPROACH
This PIA was conducted in collaboration with the Program Office,
Application Security Officers, ETA Privacy Officer, and was overseen by the
Information Technology Security Manager (ITSM). Participants included System
Administrators, Business Analysts, Information Technology Managers and the
Information Systems Security Officer. The System Security Plan and the Federal
Register Part II volume 67 dated April 8, 2003, was also used to complete this
assessment.
PIA RESULTS
Based on the results of this assessment, strong administrative,
technical, and management security controls are implemented for FLC to ensure
the protection of PII.
|