A privacy impact assessment (PIA) is an analysis of how personally identifiable information is handled to (i) ensure that handling conforms with applicable requirements, (ii) determine the privacy risks associated with an information system or activity, and (iii) evaluate ways to mitigate privacy risks. A PIA is both an analysis and a formal document detailing the process and the outcome of the analysis.
PIAs Related to CFTC’s Mission, including Regulatory and Enforcement Functions
- NFA Applications Suite System, November 6, 2018 (PDF)
- Data Loss Prevention (DLP) Tool, July 11, 2018 (PDF)
- LabCFTC, May 16, 2017 (PDF)
- General Support System (GSS), September 22, 2016 (PDF)
- Portal OPERA, Updated April 16, 2015 (PDF)
- Whistleblower Electronic Submission Portal, Updated April 16, 2015 (PDF)
- Swaps and Derivatives Database (SDDB), September 30, 2014 (PDF)
- Integrated Surveillance System (ISS), September 30, 2014 (PDF)
- Ownership and Control Reporting (OCR) System, February 24, 2015 (PDF)
PIAs Related to CFTC’s Public Engagement and Communications
- Comments Online, November 2, 2018 (PDF)
- Eventbrite, November 2, 2018 (PDF)
- Internet and Social Media Use, July 15, 2011 (PDF)
- Twitter, January 19, 2011 (PDF)
- Visitor Information System, February 20, 2007 (PDF)
PIAs Related to CFTC’s Employees and Contractors
- Mobile Device Management (MDM) System, March 1, 2019 (PDF)
- Management and Administrative Enterprise Database (MAED), May 10, 2019 (PDF)
- Enterprise Asset Management System, May 10, 2019 (PDF)
- Ethics Management and Tracking (EMAT) System, July 11, 2018 (PDF)
- Learning Management System (LMS), April 12, 2018 (PDF)
- PRISM, January 8, 2018 (PDF)
- eLaw System, Updated December 22, 2016 (PDF)
- Office of Inspector General (OIG) System, April 22, 2015 (PDF)
- Automated Hiring System, September 19, 2012 (PDF)
- Personnel Clearance System, April 25, 2012 (PDF)
- EBNS (Send Word Now), April 23, 2012 (PDF)
- e-Collaboration Tools, October 28, 2011 (PDF)