Skip to main content

Website Database Discovery Stakeholder Engagement (WDDSE) 2022

Date signed: 1/13/2023

TPWA PIA info for Website Database Discovery Stakeholder Engagement (WDDSE) 2022
TPWA PIA QuestionsTPWA PIA Answers
OPDIV:CMS
TPWA Unique Identifier (UID):T-9471021-578652
Is this a new TPWA?Yes
Please provide the reason for revisionNot Applicable
Will the use of a third-party Website or application create a new or modify an existing HHS/OPDIV System of Records Notice (SORN) under the Privacy Act?No
Indicate the SORN number (or identify plans to put one in place.)Not applicable.
Will the use of a third-party Website or application create an information collection subject to OMB clearance under the Paperwork Reduction Act (PRA)?No
Indicate the OMB approval number and approval number expiration date (or describe the plans to obtain OMB clearance.)Not applicable. 
Does the third-party Website or application contain Federal Records?Yes
Describe the specific purpose for the OPDIV use of the third-party Website or application:

The Looker dashboard will be an additional tool for users to visualize Medicare enrollment data across the U.S. and territories. The tool will be hosted on this website: 
https://data.cms.gov/summary-statistics-on-beneficiary-enrollment/medicare-and-medicaid-reports/medicare-monthly-enrollment

https://datastudio.google.com/reporting/2db94d0a-6dbc-41eb-82cd-4ba59bd5bf73/page/Lf6wC


Users will be able to see a map, interact with it, and apply filters to see enrollment by different breakdowns.

Have the third-party privacy policies been reviewed to evaluate any risks and to determine whether the Website or application is appropriate for OPDIV use?Yes
Describe alternative means by which the public can obtain comparable information or services if they choose not to use the third-party Website or application:Users can examine the data manually to see enrollment numbers. Users can access the data on the website, either through using the interactive table or downloading the data directly.
Does the third-party Website or application have appropriate branding to distinguish the OPDIV activities from those of nongovernmental actors?No
How does the public navigate to the third party Website or application from the OPIDIV?An external hyperlink from an HHS Website or Website operated on behalf of HHS
Please describe how the public navigate to the third-party website or application:Users will have a link that will open the application in a new tab. The link will be posted on the website.
If the public navigate to the third-party website or application via an external hyperlink, is there an alert to notify the public that they are being directed to a nongovernmental Website?No
Has the OPDIV Privacy Policy been updated to describe the use of a third-party Website or application?Yes
Provide a hyperlink to the OPDIV Privacy Policy:https://www.cms.gov/privacy-policy/
https://www.medicare.gov/privacy-policy/ 
Is an OPDIV Privacy Notice posted on the third-party Website or application?

 

No

Is PII collected by the OPDIV from the third-party Website or application? No
Will the third-party Website or application make PII available to the OPDIV?No
Describe the PII that will be collected by the OPDIV from the third-party Website or application and/or the PII which the public could make available to the OPDIV through the use of the third-party Website or application and the intended or expected use of the PII:No Personally Identifiable Information (PII) collected. 
Describe the type of PII from the third-party Website or application that will be shared, with whom the PII will be shared, and the purpose of the information sharing:No PII is present.
If PII is shared, how are the risks of sharing PII mitigated?No PII is present.
Will the PII from the third-party Website or application be maintained by the OPDIV?No
Describe how PII that is used or maintained will be secured:No PII is present.
What other privacy risks exist and how will they be mitigated?There are zero privacy risks identified; this site displays public data and does not collect any PII, Personal Health Information (PHI), or sensitive information.  This site is simply a read only to analyze Medicare enrollment data.  

Third-Party Web and Application (TPWA) Privacy Impact Assessment (PIA) published by CMS as an Operating Division of the U.S. Department of Health and Human Services