vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Privacy & Security - My HealtheVet - My HealtheVet
This government computer system uses software programs to create anonymous, summary statistics, which are used for such purposes as assessing what information and My HealtheVet services are the most and least useful to users. For site security purposes and to ensure that this service remains available to all users, this government computer system employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. Unauthorized attempts to upload information or change information on this service are strictly prohibited and may be punishable under Federal law.
My HealtheVet is a Department of Veterans Affairs (VA) computer system. This computer system, including all related equipment, networks, and network devices (specifically including Internet access) are provided for only authorized uses. VA computer systems are monitored for security purposes and unauthorized access. During monitoring, information may be examined, recorded, and copied.
The Use of Cookies
A Persistent Cookie is a line of text that is saved to a file on your hard drive and is called up the next time you visit that website. This permits the website to remember information about your previous visits and use of the website. My HealtheVet uses Cookies and Tracking Technologies in accordance with the VA Privacy Notice (http://www.va.gov/Privacy/).
Security of Information
At all times, security maintenance and administration is an essential element of web site operation. My HealtheVet employs several levels of security to protect the personal identifiable information of registered users. When you enter in your personal information, My HealtheVet establishes a secure connection with your browser so your information is 'encrypted' or scrambled for transmission and viewing while you access your information. In addition, these security measures comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule.
Password Protection
Your identification and password are protected using a security protocol which provides a transmission level of encryption between your browser and My HealtheVet servers. The connection icon area on your browser will change to "HTTPS" instead of "HTTP" when this security feature is invoked. Your browser may also display a lock symbol on the task bar at the bottom of your screen to indicate this secure transmission is in place.
Personal Responsibility for Personal Information
Vulnerability Disclosure Policy | HHS.gov
Accordingly, we require that you refrain from sharing information about discovered vulnerabilities for 90 calendar days after you have received our acknowledgement of receipt of your report. If you believe others should be informed of the vulnerability prior to our implementation of corrective actions, we require that you coordinate in advance with us.
We may share vulnerability reports with the Cybersecurity and Infrastructure Security Agency (CISA), as well as any affected vendors. We will not share names or contact data of security researchers unless given explicit permission.
Acknowledgments
For HHS Vulnerability Disclosure Policy Program Acknowledgments please visit https://www.hhs.gov/vulnerability-disclosure-policy/acknowledgments
Questions
Questions regarding this policy may be sent to HHS.Cybersecurity@hhs.gov. We also invite you to contact us with suggestions for improving this policy.

 Content created by Office of the Chief Information Officer (OCIO) Content last reviewed February 23, 2024

Back to top

Contact HHS

Careers

HHS FAQs

Nondiscrimination Notice

HHS Archive

Accessibility Statement

Privacy Policy

Viewers & Players

Budget/Performance

Inspector General

Web Site Disclaimers

EEO/No Fear Act

FOIA

The White House

USA.gov

Vulnerability Disclosure Policy

Sign Up for Email Updates
Receive the latest updates from the Secretary, Blogs, and News Releases.
Sign Up

 HHS Headquarters
 

200 Independence Avenue, S.W.
 Washington, D.C. 20201
 Toll Free Call Center: 1-877-696-6775​
Vulnerability Disclosure Policy | HHS.gov
We have developed this policy to reflect our values and uphold our sense of responsibility to security researchers who share their expertise with us in good faith.
Authorization
If you make a good faith effort to comply with this policy during your security research, we will consider your research to be authorized, we will work with you to understand and resolve the issue quickly, and HHS will not recommend or pursue legal action related to your research.
Guidelines
Under this policy, “research” means activities in which you:
Notify us as soon as possible after you discover a real or potential security issue.
Make every effort to avoid privacy violations, degradation of user experience, disruption to production systems, and destruction or manipulation of data.
Only use exploits to the extent necessary to confirm a vulnerability’s presence. Do not use an exploit to compromise or exfiltrate data, establish command line access and/or persistence, or use the exploit to “pivot” to other systems.
Provide us a reasonable amount of time to resolve the issue before you disclose it publicly.
You do not intentionally compromise the privacy or safety of HHS personnel (e.g. civilian employees or military members), or any third parties.
You do not intentionally compromise the intellectual property or other commercial or financial interests of any HHS personnel or entities, or any third parties.
Once you’ve established that a vulnerability exists or encounter any sensitive data (including personally identifiable information, financial information, or proprietary information or trade secrets of any party), you must stop your test, notify us immediately, and not disclose this data to anyone else.
Scope
All systems and services associated with domains listed below are in scope.  Likewise, subdomains of each listing, unless explicitly excluded, are always in scope.  Additionally, any website published with a link to this policy shall be considered in scope.  Vulnerabilities found in non-federal systems from our vendors fall outside of this policy’s scope and should be reported directly to the vendor according to their disclosure policy (if any). If you aren’t sure whether a system or endpoint is in scope or not, contact support@responsibledisclosure.com before starting your research or at the security contact for the system’s domain name listed in the .gov WHOIS.
Vulnerability Disclosure Policy | HHS.gov
We do not support PGP-encrypted emails at this time.
Information submitted under this policy will be used for defensive purposes only – to mitigate or remediate vulnerabilities. If your findings include newly discovered vulnerabilities that affect all users of a product or service and not solely HHS, we may share your report with the Cybersecurity and Infrastructure Security Agency, where it will be handled under their coordinated vulnerability disclosure process. We will not share your name or contact information without express permission.
By clicking “Submit Report,” you are indicating that you have read, understand, and agree to the guidelines described in this policy for the conduct of security research and disclosure of vulnerabilities or indicators of vulnerabilities related to HHS information systems, and consent to having the contents of the communication and follow-up communications stored on a U.S. Government information system.
In order to help us triage and prioritize submissions, we recommend that your reports:

Adhere to all legal terms and conditions outlined at https://www.hhs.gov/vulnerability-disclosure-policy and the HHS Responsible Disclosure Terms of Service.
Describe the vulnerability, where it was discovered, and the potential impact of exploitation.
Offer a detailed description of the steps needed to reproduce the vulnerability (proof of concept scripts or screenshots are helpful).

Disclosure
HHS is committed to timely correction of vulnerabilities. However, we recognize that public disclosure of a vulnerability in absence of a readily available corrective action likely increases versus decreases risk. Accordingly, we require that you refrain from sharing information about discovered vulnerabilities for 90 calendar days after you have received our acknowledgement of receipt of your report. If you believe others should be informed of the vulnerability prior to our implementation of corrective actions, we require that you coordinate in advance with us.
We may share vulnerability reports with the Cybersecurity and Infrastructure Security Agency (CISA), as well as any affected vendors. We will not share names or contact data of security researchers unless given explicit permission.
Acknowledgments
NASA Web Privacy Policy and Important Notices - NASA
When you visit a website that has partnered with the Google Display Network, Google stores a number in your browser using a persistent cookie to remember your visits. This number uniquely identifies a web browser, not a specific person. Browsers may be associated with a demographic category, such as gender or age range, based on the sites that were visited. This demographic information is used to help us better understand our visitors’ interests and needs to more effectively develop content to serve you.

This information is generally used to help us make our site more useful for you. With this data we learn about the number of visitors to our site and the types of technology our visitors use.  Although the primary purpose of automatically collecting this kind of information is not to track individuals who visit this site, in certain circumstances and consistent with Federal law, NASA may take additional steps to identify you using this information and may share this information, including your identity, with other agencies. 
Except for authorized law enforcement investigations, no attempts are made to identify individual users or their usage habits. Raw data logs are retained temporarily as required for security and site management purposes only.

Information Collected for Tracking and Customization (Cookies)
A cookie is a small file that a Web site transfers to your computer to allow it to remember specific information about your session while you are connected. Your computer will only share the information in the cookie with the Web site that provided it, and no other Web site can request it. There are two types of cookies, session and persistent. Session cookies last only as long as your Web browser is open. Once you close your browser, the cookie disappears. Persistent cookies store information on your computer for longer periods of time.
NASA Web sites may use session cookies for technical purposes such as to enable better navigation through the site, or to allow you to customize your preferences for interacting with the site. A few NASA Web sites may also make use of persistent cookies to remember you between visits so, for example, you can save your customized preference settings for future visits. Each NASA site using persistent cookies identifies itself as doing so. If you do not wish to have session or persistent cookies stored on your machine, you can turn them off in your browser. However, this may affect the functioning of some NASA Web sites.
Vulnerability Disclosure Policy Page
Once VA sees it is authorized research, the Department wants to focus on quickly working to resolve the vulnerability you have identified and is not interested in pursuing legal action. Should legal action be initiated by a third party against you for activities that were conducted in accordance with this policy, VA will make this authorization known.
These Guidelines Require that You/a Researcher:

Access a VA information system in a way that follows this VDP.
If you discovered a vulnerability, reported it by following the instructions in this VDP.
Make every effort to avoid privacy violations, degradation of user experience, disruption to production systems, and destruction or manipulation of data.
Limit the use of discovered exploits to the extent necessary to confirm a vulnerabilityâs presence.
Do not use an exploit to compromise or exfiltrate data, establish command line access and/or persistence, or use the exploit to pivot to other systems.
Provide VA a reasonable amount of time to resolve the issue before you disclose it publicly.
Do not submit a high volume of low-quality vulnerability reports.

If you established that a vulnerability or security weakness exists or encounter any sensitive data or data belonging to individuals with their financial information, medical information, contract information or proprietary information which might be a trade secret, you must stop your test, notify VA immediately, and not disclose this data to anyone else.
Test Methods
The following test methods are not authorized or considered good faith/authorized research:

Network denial of service (DoS or DDoS) tests or other tests that impair access to or damage a system or data
Physical testing (e.g. office access, open doors, tailgating), social engineering (e.g. phishing, vishing), or any other non-technical vulnerability testing

Scope
This policy applies to the following systems and services:

*.va.gov
www.vets.gov
www.veteranscrisisline.net
www.reach.gov
www.vaitcampus.com
www.vavmc.com
ehr.gov
www.vaoig.gov

Any service not expressly listed above, such as any connected services, are excluded from scope and are not authorized for testing.
Privacy and Security Notice | US EPA
In addition, persistent cookies can identify return visitors to EPA's website by setting a small file in internet web browsers. Unless you first opt-out (see below), the Google Analytics code used will automatically set a persistent cookie in the browser of the computer you are using to access EPA's website.
Traffic statistics for EPA's website are only reported to us anonymously and in the aggregate, and no information provided by Google Analytics is traceable to any specific individual. We use the information that we automatically collect to measure the number of visitors to the different areas of our sites, and to help us make our pages more useful to visitors. This includes analyzing web traffic to determine the types of devices and browsers that view EPA Web pages most often and the level of demand for specific pages and topics of interest.
You can opt-out by changing the cookie settings in your browser. See instructions on how to disable cookies in some of the most popular web browsers. Google also provides an Opt-Out Browser Add-on for newer browsers. Opting-out will not prevent you from obtaining information from EPA websites.
For more information about the federal government's use of persistent cookies, please refer to the Office of Management and Budget's (OMB) Memo Guidance for the Online Use of Web Measurement and Customization Technologies (PDF).
How Long the Information is Retained
The logs for each day, with no personal information, are maintained in accordance with Records Schedule 095.
Cookies
Cookies are small files that web servers place on a user's hard drive. They can serve several functions, depending upon how they are designed:
they allow the website to identify you as a previous visitor each time you access a site;
they track what information you view at a site (important to us for trying to determine your information needs);
in the more advanced cases they track your movements through many websites but not the whole web; and
they can be used to help a website tailor screens for each customer's preference.
EPA pages have "session cookies," to facilitate use of a particular page and to identify the number and type of pages viewed during visits to www.epa.gov. Session cookies disappear when the web user terminates a Web session and closes the browser.
FAQs • Civic Permits
Sensitive information, such as passwords, are stored with SHA-256 encryption and cannot be read by Civic Permits staff. All customer information is backed up hourly and securely transferred and stored with military grade AES-256 encryption to multiple off-site locations for disaster recovery.                        Finally, all services are remotely monitored from 61 locations located throughout 14 different countries, to track uptime and response times and alert Civic Permits of any abnormalities in service or performance, all in real-time. 

Live Edit

 

 

 

 

 

FACEBOOK

TWITTER

INSTAGRAM

RSS FEED

 
 
 

 

Facebook

Twitter

Instagram

RSS feed

 
 
 

Facebook
Twitter
Pinterest
Delicious
Blogger
LinkedIn

 
 

Home
My Account
Printer Friendly
Email Page
Contact Us
RSS
Site Map
Translate Page
Notifications
Documents

 
 
 

 

 Your browser does not support iFrames
 

 
 
 

 

Loading


	Loading
	

Do Not Show Again
Close

 

Arrow Left

Arrow Right

[]

Slideshow Left Arrow

Slideshow Right Arrow
Vulnerability Disclosure Policy | HHS.gov
Test any system other than the systems set forth in the ‘Scope’ section above,
disclose vulnerability information except as set forth in the ‘Reporting a Vulnerability’ and ‘Disclosure’ sections below,
engage in physical testing of facilities or resources,
engage in social engineering,
send unsolicited electronic mail to HHS users, including “phishing” messages,
execute or attempt to execute “Denial of Service” or “Resource Exhaustion” attacks,
introduce malicious software,
test in a manner which could degrade the operation of HHS systems; or intentionally impair, disrupt, or disable HHS systems,
test third-party applications, websites, or services that integrate with or link to or from HHS systems,
delete, alter, share, retain, or destroy HHS data, or render HHS data inaccessible, or,
use an exploit to exfiltrate data, establish command line access, establish a persistent presence on HHS systems, or “pivot” to other HHS systems.

Security researchers may:

View or store HHS nonpublic data only to the extent necessary to document the presence of a potential vulnerability.

Security researchers must:

cease testing and notify us immediately upon discovery of a vulnerability,
cease testing and notify us immediately upon discovery of an exposure of nonpublic data, and,
purge any stored HHS nonpublic data upon reporting a vulnerability.

Reporting a Vulnerability
We accept vulnerability reports at https://hhs.responsibledisclosure.com. Reports may be submitted anonymously.  We do not support PGP-encrypted emails at this time.
Information submitted under this policy will be used for defensive purposes only – to mitigate or remediate vulnerabilities. If your findings include newly discovered vulnerabilities that affect all users of a product or service and not solely HHS, we may share your report with the Cybersecurity and Infrastructure Security Agency, where it will be handled under their coordinated vulnerability disclosure process. We will not share your name or contact information without express permission.
NASA Web Privacy Policy and Important Notices - NASA
NASA will only share your information with another government agency if it relates to that agency, or as otherwise required by law. We may share information with private organizations as part of a service that provides NASA.gov users with increased capabilities or functionality on the site. NASA never creates individual profiles.

Automatically Collected Information
This website uses Google Analytics Premium. Please refer to the following policies on Google’s website for more information:

Google’s main privacy policy
Cookies & Google Analytics on Websites
Opt out of Google Analytics Cookies

We collect and temporarily store certain technical information about your visit for use in site management and security purposes. This information includes:

The Internet domain from which you access our Web site (for example, “xcompany.com” if you use a private Internet access account, or “yourschool.edu” if you connect from an educational domain);
The IP address (a unique number for each computer connected to the Internet) from which you access our Web site;
The type of browser (e.g., Chrome, Firefox, Internet Explorer) used to access our site;
The operating system (Windows, Mac) used to access our site;
The date and time you access our site;
The URLs of the pages you visit;
Your username, if it was used to log in to the Web site; and
If you visited this NASA Web site from another Web site, the URL of the forwarding site.
Anonymous summary demographic information about our visitors such as gender, age range, and areas of interest for adults over the age of 18. We do this by using Google Demographic and Interests reports. When you visit a website that has partnered with the Google Display Network, Google stores a number in your browser using a persistent cookie to remember your visits. This number uniquely identifies a web browser, not a specific person. Browsers may be associated with a demographic category, such as gender or age range, based on the sites that were visited. This demographic information is used to help us better understand our visitors’ interests and needs to more effectively develop content to serve you.

This information is generally used to help us make our site more useful for you.
Privacy and Security Notice | US EPA
Unauthorized attempts to upload or change information on this site are strictly prohibited and may be punishable under the Computer Fraud and Abuse Act of 1986 and the National Information Infrastructure Protection Act. Except for these authorized law enforcement investigations, no other attempts are made to identify individual users or their usage habits
Vulnerability Disclosure Policy
To improve our ability to identify security issues that could lead to the compromise of sensitive data or the disruption of services, the EPA has implemented a vulnerability disclosure program which encourages cyber security researchers to report any vulnerabilities they have discovered so that the EPA can take appropriate actions to mitigate or fix those vulnerabilities in a timely manner. The EPA’s Vulnerability Disclosure Policy describes “good faith” expectations between the EPA and the researcher, what types of testing are authorized for which systems, how to report vulnerabilities, and what communication to expect once vulnerabilities are reported. For more information, review the EPA's Vulnerability Disclosure Policy.
 

Privacy Act Home

Overview

Federal Information Systems

Laws, Policies & Resources

Privacy & Security Notice

Submit Privacy Request

Contact Us to ask a question, provide feedback, or report a problem.
Last updated on May 29, 2023

Discover.

Accessibility Statement

Budget & Performance

Contracting

EPA www Web Snapshot

Grants

No FEAR Act Data

Plain Writing

Privacy

Privacy and Security Notice

Connect.

Data

Inspector General

Jobs

Newsroom

Regulations.gov

Subscribe

USA.gov

White House

Ask.

Contact EPA

EPA Disclaimers

Hotlines

FOIA Requests

Frequent Questions

Follow.