Arc Geographic Information System
Privacy Impact Assessment (PIA) published by CMS as an Operating Division of the U.S. Department of Health and Human Services
Date signed: 1/10/2025
| PIA Questions | PIA Answers |
|---|---|
| OPDIV: | CMS |
| PIA Unique Identifier: | P-7514704-275516 |
| Name: | Arc Geographic Information System |
| The subject of this PIA is which of the following? | Major Application |
| Identify the Enterprise Performance Lifecycle Phase of the system. | Operate |
| Is this a FISMA-Reportable system? | Yes |
| Does the system include a Website or online application available to and for the use of the general public? | No |
| Identify the operator: | Agency |
| Is this a new or existing system? | Existing |
| Does the system have Security Authorization (SA)? | Yes |
| Date of Security Authorization | 2/9/2023 |
| Indicate the following reason(s) for updating this PIA. Choose from the following options. | Alteration in Character of Data |
| Describe in further detail any changes to the system that have occurred since the last PIA. | Arc Geographical Information System does not store, or share stored personally identifiable information. It was erroneously detailed in the past and has since been corrected. |
| Describe the purpose of the system | The purpose of the Arc Geographical Information System is to provide the Centers for Medicare & Medicaid Services with an enterprise solution that will enable geographic mapping and analysis to the Center for Program Integrity to help meet its business objective of finding and reducing waste, fraud, and abuse in Medicaid and Medicare. The Arc Geographical Information System tool will use data from the Integrated Data Repository and will enhance it beyond longitude and latitude points currently stored at the zip code level to also include coordinates at the street-address level. Please note that all systems named here are covered under their own Authority to Operate and Privacy Impact Assessment. |
| Describe the type of information the system will collect, maintain (store), or share. (Subsequent questions will identify if this information is PII and ask about the specific data elements) | Arc Geographical Information System does not store or share personally identifiable information and has never stored personally identifiable information. Arc Geographical Information System queries files/ geocodes files received by adding latitude and longitude information. Information received is address line1/2/3/state/postal code/ country. Arc Geographical Information System still use job code to verify users access control. |
| Provide an overview of the system and describe the information it will collect, maintain (store), or share, either permanently or temporarily. | Arc Geographical Information System does not store or share personally identifiable information and has never stored personally identifiable information.
Arc Geographical Information System queries files/ geocodes files received by adding latitude and longitude information. Information received is address line1/2/3/state/postal code/ country. |
| Does the system collect, maintain, use or share PII? | No |