entitled to a financial prize or other tangible reward, the agency sponsoring that challenge may ask the user to provide personal information necessary to make payment, such as an address or bank account number. This information is provided at the discretion of the user. In these cases, it is the sole responsibility of the agency or agencies sponsoring the challenge to ensure proper safeguards exist around their collection and retention of that personal information. 3. b. How will data be checked for completeness? E-mails will be verified for complete format only. Before access is permitted a return e-mail will be sent to verify that the e-mail address is a functioning e-mail address. This is a spam reduction measure. 3. c. Is the data current? How do you know? It is a tool made available for voluntary use. Visiting participants will be responsible for accurately submitting an e-mail address. Before access is permitted, a return will be sent to verify that the e-mail address is a functioning e-mail address and is in fact owned by the user who performed the registration process. This is a spam reduction measure. 4. Are the data elements described in detail and documented? If yes, what is the name of the document? The privacy statement will display messaging confirming to the visiting user the limited use of the e-mail for authentication purposes. The privacy policy will also indicate that providing a profile image that includes one’s own photograph is
for eliminating the data at the end of the retention period? Where are the procedures documented? voluntarily by the user who originally submitted it, which they may do at any time via the platform's online interface. This is a standard feature of websites in which the creation of a unique, persistent user account is a requirement for participation. Participation data will not be eliminated. 2. c. While the data is retained in the system, what are the requirements for determining if the data is still sufficiently accurate, relevant, timely, and complete to ensure fairness in making determinations? The individual will be responsible for ensuring that the information is complete, accurate, and up-to-date when they first use the tool via authentication of a valid address. Thereafter, they may keep aspects of their user profile current via the platform's online interface. 3. a. Is the system using technologies in ways that Federal agencies have not previously employed (e.g. Caller-ID)? No. Although this particular platform is new, the technologies that support it are all previously established in government and have been used for similar purposes. 3. b. How does the use of this technology affect individuals’ privacy? No effect on individual privacy. The only impact is the storage of an e-mail address and name. The e-mail address is submitted voluntarily for authentication purposes only, and after being provided with appropriate notices on the web site. The name is not displayed publicly without individuals' explicit permission. In addition, the persistent cookies used by this site do not collect or store any PII, nor can they be used
to track individual users' activities across other websites other than those within Challenge.gov. Google Analytics provides reporting on "referring sites" but this data is only recorded anonymously and reported in the aggregate. Some cookies may be stored for up to two years. 4. a. Will this system provide the capability to identify, locate, and monitor individuals? If yes, explain. No. Individuals are asked to provide "location" but this is a free-form text box. It can contain any level of specificity (e.g., "Minnesota" or "the Earth"), and is not independently verified. No individual visitor's activities, on or off this website, can be specifically monitored. 4. b. Will this system provide the capability to identify, locate, and monitor groups of people? If yes, explain. No 4. c. What controls will be used to prevent unauthorized monitoring? The information that would be required for such monitoring is never solicited or entered into the system. 5. a. Under which Privacy Act System of Records notice (SOR) does the system operate? Provide number and name. This challenge platform tool is not a System of Record. The sole purpose is to establish a mechanism for citizens to browse, support, discuss, and challenges posed publicly by agencies. No information is retrieved by a unique identifier and so this database does not meet the definition of a System of Record. 5. b. If the system is being modified, will the Not applicable; new system.