You are on page 1of 125

From: Kb)(6); l(CTR)

Sent: 9 Jul 2019 16:51:36 +0000


To: b)(6); (b)(7)(C)
Cc:
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

Hi Mr. (b)(6); (b)(7)(C)

Apologies for the delayed response; we looked into your case and have referred it to OPR. They will be
in contact you directly.

Please let me know if you have any questions or concerns.

Thank you,

Kb)(6); I
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Cust oms Enforcement {ICE)
l(b)(6); (b)(7)(C) I
202-73 (b)(6);
fh\/7\tr'\

From¥b)(6); (b)(7)(C) I
Sent: Tuesday, July 9, 2019 12:15 PM
To:Kb)(6); (b)(7)(C)
Cc:I.__ _________________ _,
Subject: RE: Inappropriate interagency, intra-agency and ext ernal wide-distribution of PII

Good afternoo b)(6);


1,..\/7 \/t"\

Has there been any new developments?

Thank you,

(b)(6);
fh\17\fr\

From:Kb)(6); (b)(7)(C)
Date: Wednesday, Jun 19, 2019, 13:55
To:l(b)(6); (b)(7)(C)
________________
Cc: ,....._ __.
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PI I

Any day and any time is fine with me.

2020-ICLl-00023 1400
My work cell is 703-400j(b)(6 I and my personal cell is 202-560~(b)(6I.

Thank you,

Fromkb)(6): (b)(7)(C)
Date: Wednesday, Jun 19, 2019, 13:29
To: Kb)(6); (b)(7)(C) I
Subject: FW: Inappropriate interagency, intra-agency and external wide-distribution of PII

Good afternoon M (b)(5); (b)(?)(C)

I am with the ICE Privacy Office and have been t asked with following up on this reported incident. I
would need to speak with you for more details on the incident. Please respond with the best day and
t ime to call you.

Thank you so much!

t?~~~t__ I
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
Kb)(6); (b)(7)(C) I
202-73tb)(6); .I

Sent: n ay, une , 019 9:25 AM


To: Privacy Incident Response Center Kb)(6); (b)(7)(C) f;
Privacylncident,
OIG !(b)(6); (b)(7)(C) IICE Anti-Harassment Program <l(b)(6):
i(b)(6): (b)(7)(C) !: JOINT INTAKE (b)(6): (b)(7)(C) ; CRCL
b)(6); (b)(7)(C) ICE Privacy-General Mailbox b)(6); (b)(7)(C)
Cc: (b)(6); (b)(7)(C)
b)(6); (b)(7)(C)
Subject: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

Good morning,

Over the last week and a half, it has come to my attention that , my PII has been
inappropriately disseminated.

2020-ICLl-00023 1401
The PII consists of my full name, photo, DOB, age, race, home address, height,
weight, vehicle description and tag numbers.

Along with that PII, are unconfirmed and false allegations made by afb><5>;(bl<7><c>
(b)(6); (b)(7)(C)

This information was widely distributed within and outside ICE without any
encryption, control or corroboration of the information.

At this point, it has been so widely and recklessly shared that, it would be
impossible to correct these egregious handling errors.

I look forward to your response.

Thank you,

l(b)(6); (b)(7)(C)

2020-ICLl-00023 1402
From : Kb)(6); (b)(7)(C)
Sent: 9 Ju l 2019 16:14:37 +0000
To: b)(6); (b)(7)(C)
Cc:
Subject: RE: Inappropriate interagency, intra-agency and external wide-
distribution of PII

Good afternoon b)(6);


b)(?)(C)

Has there been any new developments?

Thank you,
(b )(6);
(b)(?)(C)

From: Kb)(6); (b)(7)(C)


Date: Wednesday, Jun 19, 2019, 13:55
~~~r b)(6); (b)(7)(C)
1
Subject: RE: lnappropnafe mferagency, mfra-agency and external wide-distribution of PII

Any day and any time is fine with me.

My work cell is 703-400J~?~~~~~land my personal cell is 202-560K?~~~~;,J

Thank you,

b)(6);
b)(7)(C)

From: Kb )(6); (b)(7)(C)


Date: Wednesday, Jun 19, 2019, 13:29
To: l(b)(6); (b)(?)(C) I
Subject: FW: lnappropnate mteragency, mtra-agency and external wide-distribution of PII

Good afternoon Mr. b)(6); (b)(?)(C)

I am with the ICE Privacy Office and have been tasked with following up on this reported
incident. I would need to speak with you for more details on t he incident. Please respond w ith
the best day and time to call you.

Thank you so much!

2020-ICLl-00023 1403
l(b)(6);
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
!(b)(6); (b)(?)(C) !
202-73#b)(6); I

From:l<b)(6): (b)(?)(C)!
Sent: Friday, June 14, 2019 9:25 AM
To: Privacy Incident Response Center (b)(6); (b)(?)(C)
Privacylncident, OIG b)(6); (b)(7)(C) ; ICE Anti-Harassment Program
fb)(6): (b)(?)(C) !>; JOINT INTAK~(b)(6); (b)(?)(C)
CRCL ~fh)fn)· fh)f7)(C:) ~; ICE Privacy-General Mailbox 1
!rh)/R)· /h)/7)/r.) I ~--------~
Cc (b)(6); (b)(?)(C)
(b)(6): (b)(?)(C)
Subject: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

Good morning,

Over the last week and a half, it has come to my attention that, my PII has
been inappropriately disseminated.

The PII consists of my full name, photo, DOB, age, race, home address,
height, weight, vehicle description and tag numbers.

Along with that PII, a~e unconfirmed ~nd false allegations made by ~bl(6J; (bJ(?J(cJ I
b)(6); (b)(?)(C)

2020-ICLl-00023 1404
This information was widely distributed within and outside ICE without any
encryption, control or corroboration of the information.

At this point, it has been so widely and recklessly shared that, it would be
impossible to correct these egregious handling errors.

I look forward to your response.

Thank you,

rb)(6); (b)(7)(C)

2020-ICLl-00023 1405
From: !r...,_h....,_1..,,,
rn,_,_,._ _jCTR)

Sent: 20 Jun 2019 18:08:56 +0000


To: ~b)(6); (b)(7)(C)I
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

Thank you Mr......


l(b_)(_6_); _ __.

We wi ll look into the case and get back to you.

Best regards,

!rb)(6):
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
(b)(6); (b)(7)(C)
202-732 b)(6);

From:Kb)(6): (b)(7)(C)
Sent : Thursday, June 20, 2019 1:43 PM
To: b)(6); (b)(7)(C)
Subject: RE: Inappropriate interagency, intra-agency an external wide-distribution of PII

Pa sswo r~(b)(7)(E)

From!<b)(6): ICTR)
Sent: Wednesday, June 19, 2019 1:29 PM
To: ~b)(6): (b)(7)(C)
Subject: FW: Inappropriate interagency, intra-agency and external wide-dist ribution of PII
Importance: High

Good afternoon Mr b)(6);


h)(7)(r,)

I am with the ICE Privacy Office and have been t asked with following up on this reported incident . I
would need to speak with you for more details on the incident. Please respond with the best day and
time to call you.

Thank you so much!

l(b)(6);
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
b)(6); (b)(7)(C)
202-732 b)(6);

2020-ICLl-00023 1406
Sent: n ay, une , 019 9 :25 AM
To: Privacy Incident Response Center (b)(6): (b)(7)(C) Privacylncident,
OIG j(b)(6); (b)(7)(C) p;ICE Anti-Harassment Program b)(~); _
b 6· b 7 C ; JOINT INTAKE fh)fR)· fh)f7 )fr.) CRCL
(b)(6); (b)(?)(C) ; ICE Privacy-General Mailbox b)(6); (b)(?)(C)
Cc (b)(6); (b)(?)(C) (b)(6); (b)(7)(C)
b)(6); (b)(?)(C)
Subject: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

Good morning,

Over the last week and a half, it has come to my attention that, my PII has been
inappropriately disseminated.

The PII consists of my full name, photo, DOB, age, race, home address, height,
weight, vehicle description and tag numbers.

Along with that PII, are unconfirmed and false allegations made by afb)(5);(b)(7)(C)
b)(6); (b)(7)(C)

This information was widely distributed within and outside ICE w ithout any
encryption, control or corroboration of the information.

At this point, it has been so widely and recklessly shared that, it would be
impossible to correct these egregious handling errors.

I look forward to your response.

2020-ICLl-00023 1407
r
Thank you,

)(6); (b )(7)(C)

2020-ICLl-00023 1408
From: i(b)(6); (b)(7)(C)
Sent: 20 Jun 2019 17:43:16 +0000
To: ~~~~~t _, FTR)
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

Pa sswo rf.....b_)(_7_
)(_E)_ ___.

From ~~~~~t _, CTR)

Subject: FW: Inappropriate interagency, intra-agency and external wide-distribution of PII


Importance: High

Good afternoon Mr.(b)(6);


=" ~-' ~'....~" ~""~
'-~

I am with the ICE Privacy Office and have been t asked with following up on this reported incident. I
would need to speak with you for more detai ls on the incident. Please respond with the best day and
time to call you.

Thank you so much!

Kb )(6); - I
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
kb)(6): (b)(7)(C) I
202-732 (b)(6);
/1,..\/7 \/r"'

Fromj(b)(6); (b)(7)(C) I
Sent: Friday, June 14, 2019 9:25 AM
To: Privacy Incident Response Cente r j(b)(6); (b)(7)(C) l Privacylncident,
OIG Kb)(6); (b)(7)(C) f;
ICE Anti-Harassment Program b)(6);
b 6 ; b 7 C OINT INTAKE b)(6); (b)(7)(C) ; CRCL
(b)(6); (b)(7)(C) ICE Privacy-General Mailbox b)(6); (b)(7)(C)
Cc: b)(6); (b)(7)(C)
!(b)(6); (b)(7)(C)
Subject: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

Good morning,

Over the last week and a half, it has come to my attention that, my PII has been
inappropriately disseminated.

The PII consists of my full name, photo, DOB, age, race, home address, height,
weight, vehicle description and tag numbers.

2020-ICLl-00023 1409
Along with that PII, are unconfirmed and false allegations made by j<bl<5l; (bl<7J<cJ I
b)(6); (b)(7)(C)

This information was widely distributed within and outside ICE without any
encryption, control or corroboration of the information.

At this point, it has been so widely and recklessly shared that, it would be
impossible to correct these egregious handling errors.

I look forward to your response.

Thank you,

rb)(6); (b)(7)(C)

2020-ICLl-00023 1410
From: I
l(b)(6): (b)(7)(C)
Sent: 19 Jun 2019 17:55:43 +0000
To: l(b)(6); l(CTR)
Cc: Kb)(6); (b)(7)(C)
Subject: RE: Inappropriate interagency, intra-agency and external wide-
distribution of PII

Any day and any time is fine with me.

My work cell is 703-400!(b)(6); land my personal cell is 202-5 60~(b)(6); I


Thank you,

l(b)(6); _

From: l(b)(6); (b)(7)(C)


Date: Wednesda~, Jun 19, 2019, 13:29
To: fo)(6): (b)(7){.C)
Subject: FW: Inappropriate interagency, intra-agency and external w ide-distribution of PII

Good afternoon Mr.K


=b~)(=6~); ~ - ~

I am with the ICE Privacy Office and have been tasked w ith following up on this reported
incident. I would need to speak with you for more details on the incident. Please respond w ith
the best day and time to call you.

Thank you so much!

l(b)(6);
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
b)(6); (b)(7)(C)
202-732 (b)(6);
/1,...\/'7\/I""

Fromfb)(6): (b)(7)(C) I
Sent: Friday, June 14, 2019 9:25 AM
To: Privacy Incident Response Center b)(6): (b)(7)(C)
Privacylncident, OIG ,........:..------------
b)(6); (b)(7)(C) _____
~---=------=-----l""""""""""""""""""""""""""""""""""' --------------------------'
.........
___. ; ICE Anti-Harassment Program
~(b~)('-j
6)__
; (. _
b...,
)(7...,
)(.C
_..._
) - - - - - . . . . - - - - ~; JOINT INTAKE tb)(6); (b)(7)(C)
~C_R_C_L ._b_)(_6_ ); _(b_)(_7_ ) (_
C)_ __.__,
· ICE Privacy-General Mai lbox l(b)(6); I
(b)(6); (b)(7)(C)

~====:::::::::::::::::::::::::::::::::::::::====:-------------------'!>;
Cc!<b)(6): (b)(7)(C)
l(b)(6); (b)(7)(C)

2020-ICLl-00023 1411
From: l(b)(6); (b)(7)(C) ~TR)
Sent: 14 Jun 2019 14:22:53 +0000
To: ICE Privacy-General Mailbmd~
(b-)(-6-
): -~!(CTR)
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

Thanks (b)(6);
IL-..\1'7\ lr'- \

From: ICE Privacy-General Mailbox


Sent: Friday, June 14, 2019 10:21 AM
~To_,:l....
(b.....
)(6)
__....
; (_.
b)...
(7....
)(__C)_______..-_ _ _ _ _ _ _ _ _ _ ___.lCTR)
kb)(6); (b)(7)(C)
Subject: FW: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

HiKb)(6~nd b)(6);
h\/7 \ /f"' \

See below for a potential privacy incident.

Best,
(b)(6);
/ L \ /~ \ fl""' \

From:Kb)(6); (b)(7)(C)
Sent: Friday, June 14, 2019 9:25 AM
To: Privacy Incident Response Center ~(b)(6): (b)(7)(C) I Privacylncident,
OIG l(b)(6); (b)(7)(C) ~ ; ICE Anti-Harassment Program !(b)(6); I
(b)(6); (b)(7)(C) JOINT INTAKE 4(b)(6); (b)(7)(C) ~; CRCL
'"';::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::====:..:...._----,
b)(6); (b)(7)(C) ICE Privacy-General Mailboxkb)(6): (b)(7)(C)
Cc (b)(6); (b)(7)(C)
(b)(6); (b)(7)(C)
Subject: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

Good morning,

Over th e last week and a half, it has come to my attention that, my PII has been
inappropriately disseminated.

The PII consists of my full name, photo, DOB, age, race, home address, height,
weight, vehicle description and tag numbers.

Along with that PII, are unconfirmed and false allegations made by afb><5>;<b><7><c>
(b)(6); (b)(7)(C)

2020-ICLl-00023 1413
From: Kb)(6); (b)(?)(C) I
Se nt: 9 Jul 2019 17:04:18 +0000
To: l(b)(6); (b)(?)(C)
Cc:
Subje ct: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

I'm so glad you followed up on this. They may assign this to the same investigators that
are doing the other investigation. Interested to see when that is going to move forward.

From:l(b)(6); (b)(?)(C)
Se nt: Tuesday, July 9, 2019 11:52 AM
To:l(b)(6); (b)(?)(C)
Cc:
'----------------------'
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

Apologies for the delayed response; we looked into your case and have referred it to OPR. They will be
in contact you directly.

Please let me know if you have any questions or concerns.

Thank you,

l(b)(6);
Supporting the Office of Information Governance and Privacy (IGP)
U.S. lmmi ration and Customs Enforcement (ICE)
(b)(6); (b)(?)(C)
202-73 (b)(6);
(b)(7)(C)

From:kb)(6): (b)(7)(C) I
Se nt: Tuesday, July 9, 2019 12:15 PM
To:l(b)(6); (b)(?)(C)
Cc:
----------------------
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

Good afternoon~b)(6); J
Has there been any new developments?

Thank you,

(b )(6);
( b )(7) (C

2020-ICLl-00023 1415
From~(b)(6): (b)(7)(C)
Date: Wednesday, Jun 19, 2019, 13:55
To:l(b)(6); (b)(7)(C)
Cc:
~----------------~
Subject: RE: Inappropriate interagency, intra-agency and external wide-distribution of PII

Any day and any time is fine with me.

My work cell is 703-400~b)(6)I and my personal cell is 202-560f?~~~~;, I


Thank you,

(b)(6);
lk \ II \ /

Fromfb)(6); (b)(7)(C)
Date: Wednesda , Jun 19, 2019, 13:29
To (b)(6); (b)(7)(C)
: nappropnate interagency, intra-agency and external wide-distribution of PII

I am with the ICE Privacy Office and have been tasked with following up on this reported incident. I
would need to speak with you for more details on the incident. Please respond with the best day and
time to call you.

Thank you so much!

l(b)(6);
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
Kb)(6); (b)(7)(C) I
202-7 32~?~~~~;, _I

From:Kb)(6); (b)(7)(C)
Sent: Friday, June 14, 2019 9:25 AM
To: Privacy Incident Response Center (b)(6); (b)(7)(C) ; Privacylncident,
OIG b)(6); (b)(7)(C) ; ICE Anti-Ha rassment Program (b)(6);
b)(6); (b)(7)(C) ; JOINT INTAKE =(b"-;:
)(=6=
): =(b=)(=7)=(C=)====::::!.'......:...:...:....::-=-------.
l(b)(6); (b)(7)(C) I; ICE Privacy-General Mailbox ¥b)(6); (b)(7)(C)
Cc: b )(6); (b)(7)(C)
(b)(6); (b)(7)(C)
Subject: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

2020-ICLl-00023 1416
Good morning,

Over the last week and a half, it has come to my attention that, my PII has been
inappropriately disseminated.

The PII consists of my full name, photo, DOB, age, race, home address, height,
weight, vehicle description and tag numbers.

Along with that PII, are unconfirmed and false allegations made by ~(blC5 l; (blC7 lCCl I
b)(6); (b)(? )(C)

This information was widely distributed within and outside ICE without any
encryption, control or corroboration of the information.

At this point, it has been so widely and recklessly shared that, it would be
impossible to correct these egregious handling errors.

I look forward to your response.

Thank you,

b)(6); (b)(7)(C)

2020-ICLl-00023 1417
From: l(b)(6); (b)(7)(q
Sent: 3 Dec 2018 14:53:45 +0000
To: l(b)(6); (b)(7)(C) I
Subject: RE: LESC Privacy Question

Hij(b)(6);

There may be a privacy concern with notification being sent from the DHS network or system to
personal emails or cellphones outside of the network. The question does not indicate what information
will be included in the notification, but if it is related to law enforcement related, it may involve sensitive
information, which must be password protected or encrypted.

Also, wou ld this question also need to go through the bargaining unit/Union?

Kb)(6); (b)(7)(C) I
Privacy Analyst
Office oflnformation Governance and Privacy
U.S. Immigration and Customs Enforcement (detailed to)

....b_)_
Questions? Please visit our website a« (7_
) (_E_
) _ _ _ _ _ _ _ _ _ _ _ _ _ ___,

From: ~l
<b~)(~6)~; - ~
Sent: Monday, December 3, 2018 9:22 AM
To:l(b)(6); (b)(7)(C)
Subject: FW: LESC Privacy Question

Hi b)(6);
L-.\/"7\ /1"' \

Would you be able to review this one today?

(b)(6); (b)(7)(C)
epu y nvacy Officer
Office of Informat ion Governance and Privacy
U.S. Immigration and Customs Enforcement
Desk: 202-7321(b)(6); I
Mobile: 202-7011fh)fn)·
Main: 202-732l(b)(6); I
....b_)_
Questions? Please visit our website af (7_
) (_E_
) _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __.

From: ICE Privacy-General Mailbox


Sent: Thursday, November 29, 2018 11:20 AM
To:fb)(6): (b)(7)(C) I
Subject: FW: LESC Privacy Question

2020-ICLl-00023 1418
I wanted to run this by you before responding. The question is if t here are any privacy issues involved
with notifying off duty personnel of overt ime opportunities on t heir personal emails or phone numbers.
I would assume(b)(S)

Best,
l(b)(6); I
From:Kb)(6); (b)(7)(C)
Sent: Wednesday, November 28, 2018 10:53 AM
To:!rh)fn)· fh)f7)r~ , I
Subject: LESC Privacy Question

Good morning,
Can you advise on this please? (see the below message) I was referred to you b (b)(6);
/h\/7\/r\
(Senior Attorney) i:...:....:..:;'-'--'-',.:........:..._ _.

Thanks
l(b )(§); - . I
b)(6); (b)(7)(C)
uperv1sory aw n orcement Specialist
Law Enforcement Support Center
Im migration & Customs Enforcement
188 Harvest Lane
Williston, VT 05495
(802) 872 b)(6); Desk)
(802) 503 ~)(?)( Cell)

From:Kb)(6); __
Se nt: M onday, November 26, 2018 6:38 PM

Cc: . _ _______________
To:l(b)(6); (b)(7)(C)
__,

Subject: RE: Question

Hello SLES(b)(6); !Your question below should be routed to the Employee Relations Specialst
who serves LESC (I am traveling and not sure who it is off hand; but if you aren't sure either, I
will find out for you). Employee Relations has the " lead" on advising managers on workplace
issues, whereas OPLA has the lead in employment litigation.

Sincerely,
Kb)(6);
Senior Attorney
U.S. Immigration and Customs Enforcement

2 020-ICLl-00023 1419
4050 Alpha Road, Suit ~~i~
~i;, ,. .,
Farmers Branch, TX 75244
(972) 455* b)(6)1
!(b)(6): (b)(7)(C)

***Warning*** Attorney/Client Privilege*** Attorney Work Product***


This communication and any attachments may contain confidential and/or sensitive
attorney/client privileged information or attorney work product and/or law enforcement sensitive
information. It is not for release, review, retransmission, dissemination, or use by anyone other
than the intended recipient. Please notify the sender if this email has been misdirected and
immediately destroy all originals and copies. Furthermore do not print, copy, re-transmit,
disseminate, or otherwise use this information. Any disclosure of this communication or its
attachments must be approved by the Office of the Principal Legal Advisor, U.S. Immigration
and Customs Enforcement. This document is for INTERNAL GOVERNMENT USE ONLY and
may be exempt from disclosure under the Freedom oflnformation Act, 5 USC§§ 552(b)(5),
(b)(7).
FromJb)(6); (b)(7)(C)
Date: Monday, Nov 26, 2018, 4:53 PM
To:Kb)(6); (b)(?)(C)
Subject: Question

Good afternoon,
I was assigned to direct a workgroup regarding a new, proposed overtime notification system at t he
LESC. The proposed new system would notify off duty LES' with a email notification and/or text message
to their personal email addresses and cellphones. The q uestion is, would there be any privacy issues or
potential off duty tasking liabilities to the agency, by notifying off duty personnel of OT by email or text
messages?
Respectfully submitted,

Kb)(6); (b)(7)(C)
Supervisory Law Enforcement Specialist
Law Enforcement Support Center
Immigration & Customs Enforcement
188 Harvest Lane
Williston, VT 05495
(802) 8721(b)(6)1(Desk)
(802) 503 ; (Cell)

2020-ICLl-00023 1420
From: ~b)(6): (b)(7)(C)
Se nt: 12 Dec 2018 15:11:45 +0000
To: l(b)(6); (b)(7)(C)
/ h \/R\· / h \ /7\/r.\
Cc: ..,_
(b....,.
)(--'-
6)"'""'
; (__.
b)_,_
(7....,.
)(C _ ,)_ _ _ _ _ _ _ _ ____,
Subject: RE: PII and LES redactions for EEO Investigations
Attachme nts: PII, LES and Redactions Working Group Agenda.docx, ICE Affidavit -
Complainant.docx, ICE Affidavit - Witness.docx, ICE Privacy Act for Witnesses.pdf, PRIVACY NOTICE ICE
Form 30-032 - Revised August 2018.pdf

Good Morning:

Attached are the areas of concerns for tomorrow's meeting. I am also attaching Privacy Act Notices
used for EEO investigat ions and reasonable accommodat ion requests that we would like reviewed to
ensure compliance with the Privacy Act.

Thank you

l(b)(6); (b)(7)(C)
Attorney
Office of the Principal Legal Advisor
Embed/ Detailee At the Office of Diversity and Civil Rights
Immigration and Customs Enforcement
Phone: 202-732~(b)(6); I
Email: f b)(6); (b)(7)(C)

*** Warning*** Attorney/Client Privilege *** Attorney Work Product***


This communication and any attachments may contain confidential and/or sensitive
attorney/client privileged information or attorney work product and/or law enforcement
sensitive information. It is not for release, review, retransmission, dissemination, or use by
anyone other than the intended r ecipient. Please notify the sender if this email has been
misdirected and immediately destroy all originals and copies. Furthermore do not print,
copy, re-transmit, disseminate, or otherwise use this information. Any disclosure of this
communication or its attachments must be approved by the Office of the Principal Legal
Advisor, U.S. Immigration and Customs Enforcement. This document is for INTERNAL
GOVERNMENT USE ONLY and may be exempt from disclosure under the Freedom of
Information Act, 5 USC§§ 552(b)(S), (b)(7).

From:Kb)(6); (b)(7)(C) I
Se nt: Thursday, November 15, 2018 8:38 AM
To:l(b)(6); (b)(7)(C) I,
(b)(6); (b)(7)(C)

Subject: RE: PII and LES redactions

2020-ICLl-00023 1421
My schedule looks pretty open from 9am-noon.

kb)(6):
Deputy Privacy Officer
Office of Information Governance and Privacy
U.S. Immigration and Customs Enforcement
Desk: 202-732kb)(6): I
Mobile: 202-701 b)(6);
Main: 202-732 (b)(6):

Questions? Please visit our website aK~b~


)(~7~)(~E~
)---------------~

From:kh)fR)· fh)f7 )(r. , I


Sent: Thursday, November 15, 2018 8:35 AM
To: l(b)(6); (b)(7)(C)
l'b)(6); (b)(7)(CJ

Subject: RE: Pll and LES redactions

What time that day would be good for Privacy?

From: l(b)(6); (b)(?)(C) j


Sent: Thursday, November 15, 2018 8:34 AM
To:l(b)(6); (b)(7)(C)
[ b)(6); (b)(7)(C)

Subject: RE: Pll and LES redactions

Hil(b)(6); I
Privacy has an all-hands meeting during this time. Is there a way we can resched ule for another
day/time?

l<b )(6): (b )(7 )(Cj


Deputy Privacy Officer
Office of Information Governance and Privacy
U.S. Immigration and Customs Enforcement
Desk: 202-732 (b)(6);
Mobile: 202-701(h)fn)·
Main: 202-73JfhVn1P

Questions? Please visit our website at l~


<b~)~
<?~)<~E~
)- - - - - - - - - - - - - - - ~

2020-ICLl-00023 1422
-----Original Appointment-----
From:!(b)(6); (b)(7)(C)
Sent: Wednesday, November 14, 2018 5:21 PM
To: Kb)(6); (b)(7)(C)
Kb)(6): (b)(7)(C)
Subject: FW: PII and LES redactions
When: Tuesday, December 4, 2018 1:30 PM-3:00 PM (UTC-05:00) East ern Time (US & Canada).
Where: ODCR, 801 1Street, NW, Washignton, DC room 801

kb)(6): (b)(7)(C) !
Ph.D.
Deput y Assistant Executive Director
U.S. Immigration and Customs Enforcement
(202)732l b)(6) f PCN)
(202) 440 , Cell)
l(b )(6); (b )(7)(C)

From:kh)fn)· fh)f7)fr,)
Date: Wednesday, Nov 14, 2018, 2:30 PM
To: (b)(6): (b)(7)(C)
(b)(6); (b)(7)(C)

Subject: PII and LES redactions

2020-ICLl-00023 1423
PWLES/Redactions Working Group

1. Develop detailed written guidance for ODCR, EEO contractors, and witnesses who are providing
documentation and testimony in EEO investigations;
2. Develop appropriate Privacy and Rehabilitation Act waivers and notices for witnesses to sign
(currently there is a mix of USPS waivers citing to 39 USC which governs the USPS and what
appear to be waivers used by DHS for third party complaints);
3. Present training to ODCR and its attorneys on redactions.

Current Areas of Concern:

(b )(5)

2020-ICLl-00023 1424
(b)(5)

2020-ICLl-00023 1425
Page Number Number of Pages Case Number

EEO Investigative Affidavit (Complainant) 1


1. Affiant's Name (First, Middle, Last) 2. Employing Facility

3. Position Title 4. Position Level 5. Postal Address and ZIP+ 4 6. Unit Assigned

Privacy Act Statement

Privacy Act Statement: This information is provided pursuant to Public to any agency of the Federal Government having a working relationship with
Law 93-579 (Privacy Act of 1974 ), December 31, 1974 ), for individuals regard to DHS activities, to the intelligence agencies of the Federal
supplying information for inclusion in a system of records. Government or to others for uses as published in the Federal Register.

Authority: The authority to collect the information requested by this Effects of Nondisclosure: Disclosure of the information sought is voluntary;
interview is derived from one or more of the following: Title 5, Code of however, failure on the part of DHS employees to furnish the information will
Federal Regulations, Section 5.2 and 5.3; Title 29, Code of Federal result in a direction by the head of the agency, or his/her designated
Regulations, Section 1614; Title 5, United States Code, Sections 1303 and representative, to produce or provide such information as is available.
1304; Title 42, United States Code, Section 2000e-16; and Executive Order Failure to provide the information at that lime may result in the initiation of
11478, as amended. disciplinary proceedings against you, up to and including termination.
Applicants in such cases may be refused employment.
Purpose and Uses: The information you supply will be used along with
data developed to resolve or otherwise determine the merits of the Disclosure of information by present or prospective Government contractors
complaint of discrimination in the delivery of federally assisted or federally is also voluntary, although failure to furnish the above requested information
conducted programs or services. This information may be furnished to where the contract so provides may result in administrative sanctions,
designated officers and employees of agencies and departments of the including disqualification to enter into a contract or termination of an existing
Federal Government in order to resolve or otherwise determine the merits contract.
of the complaint of discrimination. The information may also be disclosed

Important Information Regarding Your Complaint

This EEO Investigative Affidavit (Complainant), and the other form mentioned below, are being provided for you to use to fully respond to the accompanying
questions. Mail or deliver your completed statement to the EEO complaints investigator within 15 calendar days of the date you received the forms.
Use EEO Investigative Affidavit (Continuation Sheet) as needed to complete your written statement. Remember to number the top of each page and sign
and date the bottom of each page of your statement. If you return your statement by mail, the return envelope must be postmarked on or before the 15th
calendar day after the date that you received the affidavit forms. Failure to complete your statement and return the forms within the allotted time period
could result in your complaint being dismissed based upon your failure to proceed. EEOC complaints processing regulation, 29 C.F.R. 1614.107(a)(7),
states, in part, [A complaint may be dismissed) "Where the agency has provided the complainant with the written request to provide relevant information
or otherwise proceed with the complaint, and the complainant has failed to respond to the request within 15 days of its receipt, or the complainant's response
does not address the agency's request, provided that the request included a notice of the proposed dismissal."

7. Statement

I declare under penalty of perjury that the foregoing is true and correct.
Affiant's Signature IDate s ;gmad
October 2015
2020-ICLl-00023 1426
EEO Investigative Affidavit (Witness)
Page Number Number of Pages Case Number

1
1. Affiant's Name (First, Middle, Last) 2. Employing Facility

3. Position Title 4. Position Level 5. Postal Address and ZIP + 4 6. Unit Assigned

Privacy Act Statement

Privacy Act Statement: This information is provided pursuant to Public to any agency of the Federal Government having a working relationship
Law 93-579 (Privacy Act of 1974), December 31, 1974), for individuals with regard to OHS activities, to the intelligence agencies of the Federal
supplying information for inclusion in a system of records. Government or to others for uses as published in the Federal Register.

Authority: The authority to collect the information requested by this Effects of Nondisclosure: Disclosure of the information sought is
interview is derived from one or more of the following: Title 5, Code of voluntary; however, failure on the part of OHS employees to furnish the
Federal Regulations, Section 5.2 and 5.3; Title 29, Code of Federal information will result in a direction by the head of the agency, or his/her
Regulations, Section 1614; Title 5, United States Code, Sections 1303 and designated representative, to produce or provide such information as is
1304; Title 42, United States Code, Section 2000e-16; and Executive available. Failure to provide the information at that time may result in the
Order 11478, as amended. initiation of disciplinary proceedings against you, up to and including
termination. Applicants in such cases may be refused employment.
Purpose and Uses: The information you supply will be used along with
Disclosure of information by present or prospective Government
data developed to resolve or otherwise determine the merits of the
contractors is also voluntary, although failure to furnish the above
complaint of discrimination in the delivery of federally assisted or federally
requested information where the contract so provides may result in
conducted programs or services. This information may be furn ished to
designated officers and employees of agencies and departments of the administrative sanctions, including disqualification to enter into a contract
Federal Government in order to resolve or otherwise determine the merits or termination of an existing contract
of the complaint of discrimination. The information may also be disclosed

Response to Complaint

7. Statement

Regulations require all employees to cooperate in any EEO investigation.

I declare under penalty of perjury that the foregoing is true and correct.
Affiant's Signature IDate s;goed
October 2015

2020-ICLl-00023 1427
PRIVACY ACT NOTICE TO COMPLAINANT INTERVIEW WITNESSES
FOR EMPLOYMENT DISCRIMINATION COMPLAINT INVESTIGATIONS

GENERAL

This information is provided pursuant to Public Law 93-579 (Privacy Act of 1974),
December 31, 1974), for individuals supplying information for inclusion in a system of
records.

AUTHORITY

The authority to collect the information requested by this interview is derived from one or
more of the following:

Title 5, Code of Federal Regulations, Section 5.2 and 5.3; Title 29, Code of Federal
Regulations, Section 1614; Title 5, United States Code, Sections 1303 and 1304; Title 42,
United States Code, Section 2000e-16; and Executive Order 11478, as amended.

PURPOSES AND USES

The information you supply will be used along with data developed to resolve or otherwise
determine the merits of the complaint of discrimination in the delivery of federally assisted or
federally conducted programs or services. This information may be furnished to designated
officers and employees of agencies and departments of the Federal Government in order to
resolve or otherwise determine the merits of the complaint of discrimination. The
information may also be disclosed to any agency of the Federal Government having a
working relationship with regard to DHS activities, to the intelligence agencies of the Federal
Government or to others for uses as published in the Federal Register.

EFFECTS OF NONDISCLOSURE

Disclosure of the information sought is voluntary; however, failure on the part of DHS
employees to furnish the information will result in a direction by the head of the agency, or
his/her designated representative, to produce or provide such information as is available.
Failure to provide the information at that time may result in the initiation of disciplinary
proceedings against you, up to and including termination. Applicants in such cases may be
refused employment.

Disclosure of information by present or prospective Government contractors is also


voluntary, although failure to furnish the above requested information where the contract so
provides may result in administrative sanctions, including disqualification to enter into a
contract or termination of an existing contract.

Signature of Interviewer Signature of Witness

Place: _ _ _ _ _ _ _ __ Date: _ _ _ _ _ _ _ __

2020-ICLl-00023 1428
Privacy And Rehabilitation Act Notice
DEPARTMENT OF HOMELAND SECURITY
U.S. Immigration and Customs Enforcement
PRIVACY AND REHABILITATION ACT NOTICE REGARDING
THE COLLECTION OF YOUR MEDICAL INFORMATION
TO PROCESS YOUR REASONABLE ACCOMMODATION REQUEST
What la ICE'a legal authority for collecting this Information? The collection of your information by ICE is
authorized by Title I of the Americans with Disabilities Act of 1990, as amended (42 U.S.C. §12112, Pub. L.
101-336); Section 501 of the Rehabilitation Act, as amended; and 29 C.F.R. §1630. ICE has the legal authority
to provide reasonable accommodation to ICE employees and applicants for employment with disabilities. In
doing so, ICE has the legal authority to assess an employee's disability and determine what reasonable
accommodation, or modification or adjustment to the work environment or circumstance under which a position
is performed, will enable the individual to perform their position and/or enjoy equal benefits of employment.

Why la this Information being collected? Information about you is being collected as part of the reasonable
accommodation process. A reasonable accommodation is any change in the work environment or in the way
things are customarily done that enables an individual with a disability to enjoy equal employment opportunities.
There are three categories of reasonable accommodations: (i) modifications or adjustments to a job application
process that enable a qualified applicant with a disability to be considered for a position; (ii) modifications or
adjustmenlll to the work environment, or to the manner or circumstances under which the position held or
desired is customarily performed, that enable a qualified individual with a disability to perform the essential
functions of that position or a position to which they are reassigned; or (iii) modifications or adjustments that
enable an individual with a disability to enjoy equal benefilll and privileges of employment as are enjoyed by
similarly situated employees without disabilities. Reassignment to another position may be a possible
accommodation if a reasonable accommodation within your current job is not possible. Your information will be
used by the Reasonable Accommodation Coordinator and Disability Program Manager within the Office of
Diversity and Civil Righlll (ODCR) at ICE to determine if you are an individual with a disability, your limitations in
the workplace and what, if any, reasonable accommodation should be provided. ICE may collect your
information in various ways, including through medical records that you provide or through an evaluation with an
Independent Medical Examining (IME) doctor.

How will the Information be used and with whom will It be shared? Under the Rehabilitation Act, medical
information is confidential and may only be requested or disclosed in very limited circumstances. Your
information is used by ODCR to make the assessments described above. In the event ODCR requires medical
expertise to process your reasonable accommodation request or determines an independent medical exam is
required in your case, ODCR will share your information with the ICE Medical Officer to conduct an assessment
of your reasonable accommodation request and/or arrange a medical exam with the appointed IME doctor(s).
Finally, if your medical information becomes relevant to an EEO complaint or legal proceeding, it may be shared
with EEO investigators, officials with a need to review EEO investigations, the Department of Justice, the United
States Courts, the Merit Systems Protection Board, an arbitrator, or the Equal Employment Opportunity
Commission.

Am I required to provide this Information? Furnishing this information is voluntary. However, if you choose
not to provide the requested information it will result in the processing of your reasonable accommodation
request without the requested medical information to substantiate your disability and need for accommodation.

IMPORTANT NOTE: The Genetic Information Nondiscrimination Act of 2008 (GINA) prohibits employers and
other entities covered by GINA Title II from requesting or requiring genetic information of employees or their
family members. In order to comply with this law, OHS requests that you not provide any genetic information
when responding to this request for medical information. "Genetic information," as defined by GINA, includes an
individual's family medical history, the results of an individual's or family member's genetic tests, the fact that an
individual or an individual's family member sought or received genetic services, and genetic information of a
fetus carried by an individual or an individual's family member or an embryo lawfully held by an individual or
family member receiving assistive reproductive services.
Name: Signature: Date:
ICE Form 30-032 (9/14)
Page 1 of 1

2020-ICLl-00023 1429
From: Kb)(6); (b)(?)(C)
Se nt: 17 Apr 201817:42:03 +0000
To: kb)(6); I
Subject: RE: PII Disclosure Question

This is very helpful. Usually the consulates are requesting the location of an alien. I usually just let them
know where the alien is detained or if they have already been removed. In that case, the only PII I might
provide is the A-number so they can reference it later if they have further questions. We often have to
provide consulates the A#'s anyway when we request travel documents for removal.

From;Kb)(6);
Se nt: Tuesday, April 17, 2018 12:06 PM
To: kb)(6); (b)(7)(C)
Subject: Re: PII Disclosure Question

Hi (b)(6);
fh\(7)1('\

( 1) Regarding your first question, we have routine uses in our system of records notices
(SORNs) that permit us to share certain types of information with foreign governments. For
example, in the CARIER SORN that covers EID and all of its subsystemfb)(?)( E)
etc.), we have a provision that a llows us to share information: .__ _ _ _ _ _ _ __.

"To foreign governments for the purpose of coordinating and conducting the removals of aliens
from the US to other nations under the INA."

We have the same routine use in the A-File SORN if the infonnation is being retrieved from the
alien file itself. Therefore, you are permitted to share the information that is relevant for
coordinating removal with the foreign government. Please note that if you are sharing any
criminal history information, you must limit that disclosure to only the crime(s) that pertains to
the removal itself. If the foreign government wants an entire rap sheet or full criminal history,
they would have to contact the FBI for that information or get a privacy waiver from the subject.

(2) Can you clarify what type of information the consulates request? My advice could differ
depending upon what information they're looking for, as I would have to check whether we have
an applicable SORN routine use.

2020-ICLl-00023 1430
(3) If you email any PII outside the DHS network (i.e., to a non-OHS.gov email address), then
yes you must encrypt the file with password protection. We strongly recommended providing
the password either by phone or in a fo llow-up email, just in case you sent the initial email to the
wrong recipient. We understand that ERO often sends several files containing PII to foreign
governments and creating several passwords could be burdensome. What you can do is create
one password that you use with a particular recipient, and in future communications you can say,
"It's the regular password to unlock the document" or something to that effect.

Let me know if that helps.

(b)(6);
fhH7\fr.\

From:1,... ,,,,,. ''-""7",...'


;

Sent: Tuesday, April 17, 2018 12:55:05 PM


To: Kb)(6); I
Subject: RE : PII Disclosure Quest ion

(b)(6);
(b)(7)(C)

We often have to notify foreign law enforcement officials when we remove aliens wanted in the home
country. They need awareness of where and when the aliens is being removed so they can take
appropriate action upon arrival in t he destination country.

Also, I receive questions from foreign consulates at times requesting information on their citizens who
have been arrested or detained by ICE.

I'm assuming I can share name, dob and alien number? Also, any PII information shared via email with
outside entities should be encrypted, correct?

Thanks,

Kb)(6); (b)(7)(C)
Deputy Chief of Staff
ERO Dallas Field Office
8101 N. Stemmons Fwy
Dallas, TX 75247

2020-ICLl-00023 1431
214.424](b)(6ll(O) I 443.S8tj(b)(6)l(C)

NOTICE: This communication may contain privileged or otherwise confidential information . If you are
not an intended recipient or believe you have received this communication in error, please do not print,
copy, retransmit, disseminate, or otherwise use this information . Please inform the sender that you
received this message in error and delete the message from your system .

From: ~l ); _ _~
<b~)(~6~
Sent: Tuesday, April 17, 2018 10:32 AM
To:Kb)(6); (b)(?)(C)
Subject: PII Disclosure Question

Good mornin (b)(6); /L,..\/"7\ /1""\

I saw that you sent an email to our general mailbox about guidelines for disclosing alien Pll to a
foreign law enforcement official. Because the answer depends what information we're looking to
share and the purpose for disclosure, could you provide some more information so I can best
advise you?

Thanks in advance.

l(b )(6); (b )(7)(C)

Senior Privacy Compliance Specialist

Office of Information Governance and Privacy

U.S. Immigration and Customs Enforcement

Desk: 20 2-732l(b)(6); I
Mobile: 202-701 ~~~~~~c
Main: 202-732 (b)(6);
f h \ f7\fl'.

Questions? Please visit our website atK._b_)_


(?_
) (_E_
) _ _ _ _ _ _ _ _ _ _ _ _ _ ___,

2020-ICLl-00023 1432
From: l(b)(6); (b)(7)(C)
Se nt: 17 Apr 201817:59:25 +0000
To: l(b)(6); I
Subject: RE: PII Disclosure Question

If you could send me a PDF of the training materials, that would be great. Thanks again!

From:l(b)(6); I
Se nt: Tuesday, April 17, 2018 12:49 PM
To:l(b)(6); (b)(7)(C)
Subject: Re: PII Disclosure Question

That makes sense. That's essentially the same information that anyone could get from using the
ODLS system if they know either the detainee's full name and country of birth or A# and country
of birth. Assuming that the consulate is providing you with the name of the alien, then we are
allowed to confim1 custodial status (including facility location) and/or if the alien has already
been removed.

You should also make sure to check if the alien has any pending or approved claims under
VAWA, or for a T or U visa. If any of those claims exist, then we are not allowed to disclose
any information regarding the alien. I'm actually givin a privacy trainin to the ERO Removal
(C_)_ _ _ _ _ _ _ _ _ _ _~
Division in the next couple weeks (the groups under ~b_)(_6_);_(b_)_(7_)_
l(b)(6); I
I'm not sure if that's your office, but I can send you details when we've finalized
dates/times or send you a PDF of the training materials. The training will also cover several
disclosure scenarios that I hope will help.

Let me know if you need any other information.

From: l(b)(6); (b)(7)(C) I


Sent: Tuesday, April 17, 2018 1:42:03 PM
To: l(b)(6): I
Subject: RE: PII Disclosure Question

This is very helpful. Usually the consulates are requesting the location of an alien. I usually just let them
know where the alien is detained or if they have already been removed. In that case, the only PII I might
provide is the A-number so they can reference it later if they have further questions. We often have to
provide consulates the A#'s anyway when we request travel documents for removal.

Fromtb)(6); (b)(7)(C) I
Se nt: Tuesday, April 17, 2018 12:06 PM
To:Kb)(6); (b)(7)(C)
Subject: Re: PII Disclosure Question

2020-ICLl-00023 1433
HiKb)(6);

( 1) Regarding your first question, we have routine uses in our system of records notices
(SORNs) that permit us to share ce1tain types of information with foreign governments. For
example, in the CARIER SORN that covers EID and all of its subsystems (e.g.~b)(7)(E)
etc.), we have a provision that a llows us to share information: .___ _ _ _ ____,

"To foreign governments for the purpose of coordinating and conducting the removals of aliens
from the US to other nations under the INA."

We have the same routine use in the A-File SORN if the information is being retrieved from the
alien file itself. Therefore, you are permitted to share the information that is relevant for
coordinating removal with the foreign government. Please note that if you are sharing any
criminal history information, you must limit that disclosure to only the crime(s) that pertains to
the removal itself. If the foreign government wants an entire rap sheet or full criminal history,
they would have to contact the FBI for that infonnation or get a privacy waiver from the subject.

(2) Can you clarify what type of information the consulates request? My advice could differ
depending upon what information they're looking for, as I would have to check whether we have
an applicable SORN routine use.

(3) If you email any PII outside the DHS network (i.e., to a non-DHS.gov email address), then
yes you must encrypt the file with password protection. We strongly recommended providing
the password either by phone or in a follow-up email, just in case you sent the initial email to the
wrong recipient. We understand that ERO often sends several files containing PII to foreign
governments and creating several passwords could be burdensome. What you can do is create
one password that you use with a particular recipient, and in future communications you can say,
"It's the regular password to unlock the document" or something to that effect.

Let me know if that helps.

l(b)(6); (b)(?)(C) I

2020-ICLl-00023 1434
Fromfb)(6): fp)(7)(C)
Sent: Tuesday, April 17, 2018 12:55:05 PM
To:!(b)(6): ( b )(7)(C)!
Subject: RE: PII Disclosure Question

Kb)(6);

We often have to notify foreign law enforcement officials when we remove aliens wanted in the home
country. They need awareness of where and when the aliens is being removed so they can take
appropriate action upon arrival in the destination country.

Also, I receive questions from foreign consulates at times requesting information on their citizens who
have been arrested or detained by ICE.

I'm assuming I can share name, dob and alien number? Also, any PII information shared via email with
outside entities should be encrypted, correct?

Thanks,

kb)(6); (b)(7)(C) !
Deputy Chief of Staff
ERO Dallas Field Office
8101 N. Stemmons Fwy
Dallas, TX 75247
214.424.!{h)fn! (0) I 443.S8tj(b)(6); 1C)

NOTICE: This communication may contain privileged or otherwise confidential information. If you are
not an intended recipient or believe you have received this communication in error, please do not print,
copy, retransmit, disseminate, or otherwise use this information. Please inform the sender that you
received this message in error and delete the message from your system.

From: """kb'-'-
)(:. .:.6.)::. :. _ __.
Sent: Tuesday, April 17, 2018 10:32 AM
Totb)(6); (b)(7)(C)
Subject: PII Disclosure Question

Good morning l(b)(6);

2020-ICLl-00023 1435
From: kb)(6): (b)(7)(C)
Se nt: 17 Apr 2018 16:55:05 +0000
To: b)(6); (b)(?)(C)
Subject: 1sc osure Question

(b)(6);
(b)(?)(C)
We often have to notify foreign law enforcement officials when we remove aliens wanted in the home
country. They need awareness of where and when the aliens is being removed so they can take
appropriate action upon arrival in the destination country.

Also, I receive questions from foreign consulates at times requesting information on their citizens who
have been arrested or detained by ICE.

I'm assuming I can share name, dob and alien number? Also, any PI I information shared via email with
outside entities should be encrypted, correct?

Thanks,

kb)(6); (b)(?)(C)
Deput y Chief of Staff
ERO Dallas Field Office
8101 N. Stemmons Fwy
Dallas, TX 75247
214.424.!{b)(61!{O) I 443.58~(b)(6); l(C)

NOTICE: This communication may contain privileged or otherwise confidential information. If you are
not an intended recipient or believe you have received this communication in error, please do not print,
copy, retransmit, disseminate, or otherwise use this information. Please inform the sender that you
received this message in error and delete the message from your system.

From: l(b)(6); (b)(?)(C) I


Sent: Tuesday, April 17, 2018 10:32 AM
To: b)(6); (b)(?)(C)
SubJect:

Good morningkb)(6);

I saw that you sent an email to our general mailbox about guidelines for disclosing alien PII to a
foreign law enforcement official. Because the answer depends what information we're looking to
share and the purpose for disclosure, could you provide some more information so I can best
advise you?

2020-ICLl-00023 1437
From: Kb)(6); (b)(?)(C)
Sent: 8 Feb 2018 12:17:36 -0500
To: Kb)(6): (b)(?)(C) I
Subject: RE: PII question - AUO documents

Ok I'll send it when I return to the office. And I'll be available by phone

From:l(b)(6); (b)(?)(C)
Date: Thursd~, Feb 08, 2018:12:16 PM
To:l(b)(6); (b)(?)(C)
SubJect: RE: I quest10n - A O documents

That would be great. I think I'll still need to ask a couple quick questions but it wou ld also help
to see a sample.

l(b)(6);
Senior Privacy Compliance Specialist
Office of Information Governance and Privacy
U.S. Immigration and Customs Enforcement
Desk: 202-732{b)(6): I
Mobile: 202-701Kb)(6):
Emaill(b)(6); (b)(7)(C)

from{b)(6); (b)(7)(C) I
Sent: Thursday, February 8, 2018 12: 15 PM
To:l(b)(6); (b)(7)(C) I
Subject: RE: PII question - AUO documents

Sure my number is 215-783{b)(6)~I can also send you a sample of one of the sheets if
you prefer.

From:Kb)(6); (b)(?)(C)
Date: Thursday, Feb 08, 2018, 12:13 PM
To: (b)(6); (b)(?)(C)
Suti1ec : ocuments

Thanks. Could I give you a quick call this afternoon to ask a few follow-up questions? I want to
make sure I get you the right answer.

!{h) (n)· (h)(7)(r,) I


Senior Privacy Compliance Specialist

2020-ICLl-00023 1439
Office of Information Governance and Privacy
U.S. Immigration and Customs Enforcement
Desk: 202-732-lfh)fn)· I
Mobile: 202-701 (b)(6);
Email: (b)(6); (b)(7)(C)

From: b)(6); (b)(7)(C)


Sent: urs a e ruary 8, 2018 11:23 AM
To b)(6): (b)(7)(C)
Subject: RE: PII question - AUO documents

Deportation officers are required to fully articulate the work that was performed during
auo hours, for example "completed notice to appear for A# 0123456789"They are
submitted each pay period when time and attendance is due.

From:!(b)(6); (b)(7)(C)
Date: Thursday, Feb 08, 2018, 11:18 AM
To~(b)(6): (b)(7)(C)
Subject: PII question - AUO documents

Good moming"""l
(b.....)('6-....
); _ __.

I received your question pertaining to the inclusion of A-numbers on AUO documents.


I'm not familiar with AUO documents in general, so if you could give me some
background on their purpose, why they're submitted, etc., I can get you an answer shortly.

Sent with BlackBerry Work


(www.blackberry.com)

2020-ICLl-00023 1440
From: kb)(6): (b)(7)(C)
Sent: 8 Feb 2018 12:15:10 -0500
To: l(b)(6); (b)(7)(C) i
Subject: RE: PII question - AUO documents

Sure my number is 215-783-Kb)(6);iI can also send you a sample of one of the sheets if
you prefer.

From:Kb)(6); (b)(?)(C)
Date: Thursday, Feb 08, 2018, 12:13 PM
To:!rhVR)· fh)f7)fr.)
Subject: RE: PU question - AUO documents

Thanks. Could I give you a quick call this afternoon to ask a few follow-up questions? I want to
make sure I get you the right answer.

Kb)(6); (b)(?)(C) i
Senior Privacy Compliance Specialist
Office of Information Governance and Privacy
U.S. Immigration and Customs Enforcement
Desk: 202-732 (b)(6):
Mobile: 202-701 ~?~~~t
Email (b)(6); (b)(?)(C)

From: !<b)(6): (b)(7)(C)


Sent: Thursda February 8, 2018 11:23 AM
To: b)(6); (b)(?)(C)
Subject: RE: PII question - AUO documents

Deportation officers are required to fully articulate the work that was performed during
auo hours, for example "completed notice to appear for A# 0123456789"They are
submitted each pay period when time and attendance is due.

From:l<b){6): {b){7){C)
Date: Thursday, Feb 08, 2018, 11: 18 AM
To:kb)(6); (b)(?)(C)
Subject: PD question - AUO documents

Good morningl(b)(6); __

2020-ICLl-00023 1441
From: Kb)(6); (b)(?)(C)
Sent: 17 Sep 2019 21:06:02 +0000
To: l(b)(6); (b)(?)(C) I
Subject: ICE Sharing of Third Party DHS Information

Good afternoon,

IGP has received a few inquiries in the last month regarding sharing information from USCIS or CBP with
our law enforcement partners. The data requested is data that we can access through preexisting
agreements. If we are working on a case that involves other partners and we have information from
another component, is that acceptable to share? In one case it is an individual under investigation by HSI
and the IRS. For the other it is an individual under investigation for murder by HSI and state and locals.

Best,
kb)(6); (b)(7)(C)
Privacy Compliance Specialist
ICE Office of Information Governance and Privacy

2020-ICLl-00023 1444
From: ICE Privacy-General Mailbox
Sent: 28 Jan 2019 21:55:08 +0000
To: !(b)(6); (b)(7)(C) I
Subject: RE: Federal Law Enforcement Request - Disclosure o1(b)(7)( pata to Third-Pa rty
LE Agency

Good afternoon,

Thank you for your email. We apologize for the delay, but almost all of the office has been fur loughed.
According to PCQS privacy documentation, you are permitted to shar~(b)(7)(1data for a valid law
enforcement reason with other law enforcement officers in other agencies/departments. If your
question is about the methods of transferring the records, beyond advising you to always encrypt any
records that are transmitted outside of DHS and to only send what is necessary, this office cannot advise
further.

If you have any further questions please do not hesitate to reach out.

Best,
l(b)(6); (b)(7)(C)
Privacy Compliance Specialist
ICE Office of Information Governance and Privacy

From:Kb)(6); (b)(7)(C)
Sent: Saturday, January 19, 2019 3:45 AM
To: ~b)(6); (b)(7)(C) I
Subject: Federal Law Enforcement Request - Disclosure ofkh)t7)! Data to Third-Party LE Agency

Hello,

I am a Special Agent with the Diplomatic Security Service, U.S. Department of State and I am assigned to
the U.S. Embassy in Kabul, Afghanistan. There is no Department of Homeland Security representation at
Post. I have access to DHS1(b)(7)(E) I
and I would like to share records of
an individual who is the subject of an ongoing law enforcement investigation with law enforcement
colleagues from the Department of Defense - can you p lease tell me what l need to do in order to share
Kb)(?)( r ecords with them?

Thank you,

I
kb)(6); (b)(7)(C) I Special Agent
Diplomatic Security Service, U.S. Department of State
Overseas Criminal Investigations (ARS0-1 Kabul)
United States Embass in Af hanistan
Office: 301-490- b)(6);
OpenNet: b)(6); (b)(7)(C)
ClassNet:

LAW ENFORCEMENT SENSTIIVE

2020-ICLl-00023 1445
From: ICE Privacy-General Mailbox
Sent: 2 Aug 2017 12:54:08 +0000
To: l(b)(6); (b)(7)(C) I
Cc: ICE Privacy-General Mailbox
Subject: RE: Information sharing guidance with MX Consulates

Thanks for responding back.

l<b )(6): i
Privacy Compliance Specialist
Information Governance and Privacy (IGP)
U.S. Immigration & Customs Enforcement
Direct: (202) 732-lih\/~\· I
Main: (202) 73~ (b)(6): I

From: ICE Privacy-General Mailbox


Sent: Tuesday, August 1, 2017 10:11 AM
I
To: kb)(6); (b)(7)(C) ICE Privacy-General Mailbox
Cc:kb)(6): (b)(7)(C) I
Subject: RE: Information sharing guidance with MX Consulates

Good mornind{b)(6);

Thank you for providing that information to us. I've looked through the CARI ER SORN and agree with
your assessment that there isn't a specific Routine Use that permits ICE to share the requested
information with the Mexican Government. However, I've outlined a few alternatives that may assist
Mexico in obtaining some (if not all) of the requested information.

• If the officials within the Mexican Government know the name and/or A-number of specific
individuals that they're looking to find, they can find the individual's custody status information
using the Online Detainee Locator System (ODLS).
• As you stated, ERO Officers can get the consent of the detainees in ICE custody who fit this
request to determine if we can release the information. We can use ICE Form 60-001 (the ICE
Privacy waiver form) to fulfill this request.
https://www.ice.gov/docl ib/news/1 ibra ry/forms/pdf/60-001.pdf. We understand th is option
may be cumbersome due to the large number of detainees who fall under the request.
• ICE also participates in the Criminal History Information Sharing (CHIS) initiative with Mexico.
l(b)(6); lhas been our POC for all CHIS-related matters, and I've copied him here so that he
can provide more specifics as to our ability to share information.

I hope that one of those options provides the requester with the information they're looking for. Feel
free to reach out with additional questions.

l<b)(6):
Senior Privacy Compliance Specialist
Information Governance and Privacy (IGP)
U.S. Immigration & Customs Enforcement

2020-ICLl-00023 1447
Direct: (202) 73,!rh )(fl\· I
Main: (202) 732Eb)(6);1

Questions? Please visit the Privacy & Records Office website at ~kb~)~<7~)~(=E)~ - - - - - - - - - - - - - - ~

From: l(b)(6); (b)(7)(C) I


Sent: Tuesday, August 01, 2017 8:07 AM
To: ICE Privacy-General Mailbox
Cc: kb )(6); (b )(7)(C) I
Subject: RE: Information sharing guidance with MX Consulates

Good morning,

Thank you for getting back to me so soon.

• The broad request came from staff at the Embassy of Mexico, that sit on the Repatriations
Technical Working Group (RTWG), which is a working group composed of DHS entities (CBP, ICE,
DHS Policy) and Mexican officials who meet periodically to discuss topics related to the removal
of Mexican nationals, among other things, that are of common interest of both governments.
The information would be provided directly to Mexican consular officials located in various
offices around the country.
• The local consular officials would use the information for general awareness of who has been
detained. This would help them respond to inquiries from family members and assist in their
visits to detention facilities to speak with detained Mexican nationals.
• The information is predominantly gathered during administrative processing to establish
identity. It could conceivably be considered to be compatible with the purpose of its collection.
We already routinely share this information prior to the removal of aliens to give the
Government of Mexico the opportunity to vet the upcoming removals to their country.
• Information would be shared on all Mexican citizens that ICE detains, even if they have Lawful
Permanent Resident status. No information about US citizens or dual citizens would be shared
pursuant to this request.
• I believe the EID is the system that holds this information. We collect and retain the information
as biographical information in our administrative case management system.
• I don't have a specific deadline, but the sooner the better. We have a series of meetings with
the Government of Mexico and information sharing has become a hot topic of late.

Thank you and let me know if you need any additional information.

fo)(6): (b)(7)(C) i
ERO Domestic Operations
Desk Officer ERO San Antonio, Dallas, Houston
202-732~( h \ {!(Desk) 202-20Wb)(6 !Mobile)

From: ICE Privacy-General Mailbox


Sent: Monday, July 31, 2017 4:29 PM
To: j(b)(6); (b)(7)(C) I
Cc: ICE Privacy-General Mailbox
Subject: RE: Information sharing guidance with MX Consulates

Good Afternoon M ~(b)(6);

2020-ICLl-00023 1448
Thank you for your email to the ICE Office of Information Governance and Privacy. We are currently
reviewing your request. In order to properly answer the information/disclosure request we would like
to understand: Who is the specific requestor/recipient of the information within the Mexican
Government that is requesting the information? What are all the purposes/uses of the information to be
shared/disclosed with the Mexican Government? Are the purposes/uses of the information compatible
for which the information was originally collected by ICE? Does any of the requested information pertain
the Lawful Permanent Residents, or U.S. Citizens who are also Mexican Citizens, or only aliens who are
Mexican Citizens? What is the ICE system retaining the information, and who is the owner of the
information. What is your deadline for your request?

Thanks.

ICE Information Governance and Privacy

From:kb)(6):; (b)(7)(C)
I
I
Sent: Friday, July 28, 2017 5:16 PM
To: ICE Privacy-General Mailbox
Subject: Information sharing guidance with MX Consulates
Importance: High

Good afternoon,

ICE has been in contact with the Government of Mexico regarding the sharing of information about
citizens of Mexico that have been detained. They are asking for the routine transmission of lists of
detainees in ICE custody. I know we are eager to cooperate with their request, however there has been
some concern about privacy issues as it relates to the detainees.

Specifically Mexico is looking for name, date of birth, A number, and on occasion, criminal history.

There are a number of countries that we are required to notify upon the arrest of one of their citizens.
Mexico is not one of those countries. As a part of administrative processing, the ICE officer is required to
notify the detainee that he or she has the right to speak to a consular official and to have ICE notify the
consulate that the detainee has been detained. If the alien says yes, we accommodate the request. If he
or she says no, we do not. There are also several other avenues for the detainees to follow in order to
communicate with their consular officers.

I've looked in the EARM SORN and found that the information inl(b)(7)( r,ay be transmitted to:

M. To fore ign governments for the


purpose of coordinating and conducting
the removal of aliens to other nations;
and to international, foreign, and
intergovernmental agencies, authorities,
and organizations in accordance with
law and formal or informal international
arrangements.

2020-ICLl-00023 1449
The issue is, at this point, the information is not being used for coordinating and conducting remova ls.

So the question is, would transmitting the information to the Government of Mexico violate any privacy
rules? We would not specifically address any asylum claims or issues, it would be purely a biographical
list of who is detained and where.

Thank you for your input. We'd like to get a response as soon as we can so we can move forward on
establishing guidance for the field offices as it relates to routinely sharing this information with the
Mexican consulates. Please let me know if you need any additional information.

l(b)(6); (b)(7)(C) I
ERO Domestic Operations
Desk Officer ERO San Antonio, Dallas, Ho11s to11
Enforcement and Removal Operations
U.S. Immigration and Customs Enforcement
U.S. Department of Homeland Security
202-732fiill]Desk) 202-200Kblli (Mobile)

2020-ICLl-00023 1450
From: ICE Privacy-General Mailbox
Se nt: 7 Nov 2018 22:17:15 +0000
To: l(b)(6); (b)(7)(C) I
Subject: RE: Information Sharing question

Good afternoon Kb)(6); I


Provided this law enforcement agency is using it for law enforcement purposes that kind of disclosure is
consistent with Routine Use G of the Criminal Arrest Records and Immigration Enforcement Records
System of Records Notice (CARIER SORN). You can disclose that information.

Best,
l(b)(6); (b)(7)(C) I
Privacy Compliance Specialist
ICE Office of Information Governance and Privacy
Phone: 202-732kb)(6): I
From!rhVR)· (h)(7)((".)
Se nt: Wednesday, November 7, 2018 12:11 PM
To: ICE Privacy-General Mailbox <¥,-b-)(-6-);-(b
- )-(7--)(-C_)_ _ _ _ _ _ _ _ __,
Subject: Information Sharing question

To whom it may concern:

Good morning. I'm writing to get clarification regarding the sharing of information wit h law
enforcement partners. Hopefully, you can help?

Today, we received a telephone call from a local law enforcement officer requesting the status of two
individuals whom he is investigating for voter fraud. He would like ICE to put something in writing. Can
we disclose immigration status with a law enforcement agency? If so, what is the best way for them to
request the information and what is the best way for us to share the information? I'm not sure if it
matters or not but one individual whom he is requesting information on is a legal permanent resident
and the other has not status in the U.S.

Please let me know if you have any questions. Any guidance you can provide is appreciated. We all just
want to make sure we are doing the right thing.

Thank you,

!(b)(6); (b)(7)(C) !
Supervisory Detention and Deportation Officer
ICE/ERO - St. Paul Field Office
I
(612) 843 l(b)(6);

2020-ICLl-00023 1451
From: l(b)(6); (b)(7)(C)
Sent: 20 Sep 2019 00:50:41 +0000
To: ICE Privacy-General Mailbox
Subject: RE: Sharing CBP records

Thank you,l(b)(6): !I do not have those agreements. If you could send those my way, I
would be grateful.

Have a great evening,

!fh)fR)·

Sent with BlackBen-y Work


(www.blackben-y.com)

From: JCE Privacy-General Mailbox t"-'~""").;..;:{6:..:.):..a


: (=b=
){.,_
7)a.:..(C
=)' - - - - - - - - - - - '
Date: Thursday, Sep 19, 2019, 16:40
To: Rb)(6); (b)(7)(C) F
Subject: RE: Shanng CBP records

Hello kb)(6): I
Information from CBP should only be shared in the manner allowed in any information sharing
agreement we have with them. Likewise, we should only share information with IRS in the
manner allowed in information sharing agreements with them. Do you have access to those
agreements? If not, I can forward them to you.

Best,
Kb)(6); (b)(7)(C) I
Privacy Compliance Specialist
ICE Office of Information Governance and Privacy

From:l(b)(6); (b)(7)(C)
Sent: Tuesday, September 17, 2019 4:25 PM
To: ICE Privacy-General Mailbox ~,...
(b-)-(6-);-(b-)-(7-
)(_C_) - - - - - - - - - - - - .
Subject: Sharing CBP records

To whom it may concern,

I have an open HSI case and have discovered that the target is also t he target of an IRS
investigation. Both HSI and IRS wish to work jointly and share informat ion. What protocol
should I follow when sharing CBP owned records that I obtain pursuant to the HSI case?

Thank you for your time,

2020-ICLl-00023 1452
Ehv i::,- rhv 7v dSpecial Agent
U.S. Department of Homeland Security
Homeland Security Investigations
Leo O'Brien Federal Build~
11A Clinton Square.Suite~
Albany, NY 12207

www.dhs.gov/blue-campaign

2020-ICLl-00023 1453
From: ICE Privacy-General Mailbox
Se nt: 5 Mar 2019 15:45:56 +0000
To: Kb)(6); (b)(7)(C) I
Subject: RE: Sharing Information with Treasury

Good morning,

As I was going through the IGP mailbox, I found this email that does not appear to have been answered.
Have you received an answer to your question?

Best,
kb)(6); (b)(7)(C)
Office of Information Governance and Privacy

From: ICE Information Governance


Se nt: Tuesday, January 29, 2019 1:49 PM
,------------------------,
To: ICE Privacy-General Mailbox (b)(6); (b)(7)(C)
Cc: (b)(6): (b)(7)(C) ICE In ormation Governance
,-
Kb....::
)(6=)=; (b=)(:::::::
7)=(C::::::::)=======:;--"~
Subject: FW: Sharing Information with Treasury

I am passing along this request for guidance related to sharing information. ICE Privacy should
be ab le to provide the best guidance for this request.

Information Governance

From:Kb)(6); (b)(7)(C)
Se nt: Tuesday, January 29, 2019 1:31 PM
,------------------,
To: ICE Information Governance (b)(6); (b)(7)(C)
Cc: b)(6); (b)(7)(C)
Subject: RE: Sharing Information with Treasury

I'm trying to find out ifl can share that information generally, though for a specific purpose. We are
looking at an EB-5 visa fraud scheme involving a substantial amount of money, and the USCIS
documents I'm interested in providing to the IRS relate to that.

!{b)(6): (b)(7)(C)
Group Supervisor
U.S. Immigration and Customs Enforcement
Homeland Security Investigations
I000 2nd Avenue, Suitd'b )(6): I
Seattle, Washin ton 98104
0: (206) 442 b)(6);
C: (202) 498 ~)(?)(
UNCL LAW ENFORCEMENT SENSITIVE //OFFICIAL USE ONLY
WARNING: This document/e-mai m w Enforcement Sensitive, Confidential, Proprietary and/or Privileged
Information that is the property of the Department of Home Homeland Security Investigations. Unauthorized
disclosure of the contents of this document/e-mail could adversely impact law en o ·vities. This document is FOR
OFFICIAL USE ONLY (FOUO) and contains information that may be exempt from public release under

2020-ICLl-00023 1454
Act (5 U.S.C. ent is to be controlled, handled, transmitted, distributed, and disposed of in accordance with OHS
policy relating to Sensitive but Unclass1 1e ation and is not to be released to the public or other personnel who do not
have a valid "need-to-know" without prior approval from the ongm· e not the intended recipient please contact the
originator for disposition instructions.

From: ICE Information Governance


Sent: Tuesday, January 29, 2019 9:30 AM
To:!<b)(6): (b)(7)(C)
Subject: RE: Sharing Information with Treasury

Mr.l(b)(6); (b)(7)(C)

Are you trying to find out whether you can share the information to the IRS generally or what the
process is to set up an agreement to allow for such sharing? We want to make sure we direct
your question to the right individual in our office.

Thank you,

Information Governance

From: kb)(6): (b)(7)(C)


Se nt: Tuesday, January 15, 2019 12:22 PM
To: ICE Information Governance 4~ (b-)-(6-);-(b
- )-(7-)(_C_
)---------~
Subject: Sharing Information with Treasury

To Whom it May Concern,

I am an HSI Group Supervisor and I have a question regarding sharing information from USCIS with the
IRS. Please call me at either number below to discuss.

Thank you,

Kb)(6); (b)(7)(C)
Group Supervisor
U.S. Immigration and Customs Enforcement
Homeland Security Investi ations
1000 2nd Avenue, Suite (b)(6)
Seattle, Washington 98104
0: (206) 442 b)(6);
C: (202) 498 b)(7)(
UNCt:A:~FIED / / LAW ENFORCEMENT SENSITIVE/ /OFFICIAL USE ONLY
ml!TTtfti;l.ll.-,Wi!l
ail may contain Law Enforcement Sensitive, Confidential, Proprietary and/or Privileged
Information that is the property of the n;:n:,,.,,._=t of Homeland Security, Homeland Security Investigations. Unauthorized
disclosure of the contents of this docurnent/e-mail could a act law enforcement activities. This document is FOR
OFFICIAL USE ONLY (FOUO) and contains information that may be exemp lie release under the Freedom of Information
Act (5 U.S.C. 552). This document is to be controlled, handled, transmitted, distributed, and 1sp · accordance with OHS
policy relating to Sensitive but Unclassified (SBU) information and is not to be released to the public or other pers<"mT"""'""w:io
have a valid "need-to-know" without prior approval from the originator. If you are not the intended recipient please contact the
originator for disposition instructions.

2020-ICLl-00023 1455
From: l(b)(6); (b)(7)(C) l(CTR)
Sent: 14 Jun 2019 14:29:56 +0000
To: l<b)(6): [CTR)
Subject: FW: Inappropriate interagency, intra-agency and external wide-distribution of
PII
Importance : High

Hi l<b)(6): !
Please process this as a Privacy Complaint and Incident. Also, please add to the Privacy Complain
tracker. I'm not sure if you already started one.

Also, the reporting party name sounds familiar. Please check POTs if we have processed an incident
involving him before.

Thanks.
!<b)<6)!

From: ICE Privacy-General Mailbox


Sent: Friday, June 14, 2019 10:21 AM
To:Kb)(6); (b)(?)(C) lcTR)
l,-
(b_.
)(-6)-; (-b)-(7-)(C
- )- - - - - - - - , - - - - - - - - - - - ~
Subject: FW: Inappropriate interagency, intra-agency and external wide-dist ribution of PII
Importance: High

See below for a potential privacy incident.

Best,
Kb)(6);

From:Kb)(6); (b)(?)(C) I
Sent: Friday, June 14, 2019 9:25 AM
To: Privacy Incident Response Center ; Privacylncident,
OIG b)(6); (b)(7)(C) ; ICE Anti-Harassment Program b)(6):
.-l<b-)(-6)=: =
( b=)(=7)=(C=)::::::::::::::=========,, ; -:-:
JO ~I.NT INTAKE (b)(6); (b)(7)(C) ; CRCL
Kb)(6); (b)(7)(C) I; ICE Privacy-General Mailbo~x...,.(-b-)(-6)-: (- b-)(-7)-(C_)_ _ ____..___ _ ___,
Cc:kb)(6): (b )(7)(C)
Kb)(6); (b)(7)(C)
Subject: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

Good morning,

2020-ICLl-00023 1463
Over the last week and a half, it has come to my attention that, my PII has been
inappropriately disseminated.

The PII consists of my full name, photo, DOB, age, race, home address, height,
weight, vehicle description and tag numbers.

Along with that PII, are unconfirmed and false allegations made byfbl(6);(b)(7)<CJ
(b)(6); (b)(7)(C)

This information was widely distributed within and outside ICE without any
encryption, control or corroboration of the information.

At this point, it has been so widely and recklessly shared that, it would be
impossible to correct these egregious handling errors.

I look forward to your response.

Thank you,

rb)(6); (b)(?)(C)

2020-ICLl-00023 1464
From: Kb)(6); (b)(7)(C) I(
CTR)
Sent: 26 Jun 2019 14:15:02 +0000
To: l(b)(6); I (CTR)
Subject: FW: Inappropriate interagency, intra-agency and external wide-distribution of
PII

FYSA. I referred the incident to OPR. Please update the spreadsheet

From:Kb)(6); (b)(7)(C)
Sent: Tuesday, June 25, 2019 4:59 PM
To:Kb)(6); (b)(7)(C)
Subject: RE: Inappropriate interagency, intra-agency and ext ernal w ide-distribution of PII

10-4, thank you.

Thanks-
Kb)(6); (b)(7)(C) I
Operations Chief
Investigations Unit
Office of Professional Responsibility
Immigration and Customs Enforcement
Washington, DC
202.732 b)(6); office
915.726 b)(?)( cell

From:Kb)(6); (b)(7)(C) l(CTR)


Sent: Tuesday, June 25, 2019 4:35 PM
To:!<b)(6): (b)(7)(C)
Subject: FW: Inappropriate interagency, intra-agency and external wide-distribution of PII
Importance: High

Good afternoonl(b)(6);

I am forwarding t he below privacy complaint and attachments to OPR/JIC for review. I will send the
password for de-encrypting the attachments under separate cover.

Thank you,

!<b)(6): (b)(7)(C)IMPH, CPH, CIPP/G


Privacy Analyst
Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
Office: 202-870khVR I
Mobile : 240-42~
Email: h)(R)· fh)f7)fr.)
Privacy Mailbox: fh)fR)· fh)f7 V r.)

Questions? Please visit our website at


~b_) _
( 7_ ) _ _ _ _ _ _ _ _ _ _ _ _ _ _ _~
) (_E_

2020-ICLl-00023 1465
Page 1468

Withheld pursuant to exemption

(b )(7 )(E )

of the Freedom of Information and Privacy Act


Page 1469

Withheld pursuant to exemption

(b )(7 )(E )

of the Freedom of Information and Privacy Act


Page 1470

Withheld pursuant to exemption

(b )(7)(E )

of the Freedom of Information and Privacy Act


Page 1471

Withheld pursuant to exemption

(b )(7)(E)

of the Freedom of Information and Privacy Act


Department of Homeland Security
DHS Directives System
Directive Number: 110-01
Revision Number: 00
Issue Date: 6/8/2012
PRIVACY POLICY FOR
OPERATIONAL USE OF SOCIAL
MEDIA

I. Purpose
This Directive establishes privacy policy for operational use of social media by the
Department of Homeland Security (OHS or Department).

II. Scope
This Directive applies throughout OHS regarding the access to and collection, use,
maintenance, retention, disclosure, deletion, and destruction of Personally Identifiable
Information (PII) in relation to operational use of social media, with the exception of
operational use of social media for: (a) communications and outreach with the public
authorized by the Office of Public Affairs; (b) situational awareness by the National
Operations Center; (c) situational awareness by Components other than the National
Operations Center, upon approval by the Chief Privacy Officer following completion of a
Social Media Operational Use Template; and (d) the conduct of authorized intelligence
activities carried out by the Office of Intelligence and Analysis, the intelligence and
counterintelligence elements of the United States Coast Guard, or any other
Component performing authorized foreign intelligence or counterintelligence functions,
in accordance with the provisions of Executive Order 12333, as amended. This
Directive does not apply to the Office of the Inspector General; however, the OIG will
comply with the spirit of the Directive.

Ill. Authorities
A. Public Law 107-347, "E-Government Act of 2002," as amended, Section
208 [44 U.S.C. § 3501 note]

B. Title 5, United States Code (U.S.C.), Section 552a, "Records Maintained


on Individuals" [The Privacy Act of 1974, as amended)

C. Title 6 U.S.C. Section 142, "Privacy officer"

-1-
Directive# 110-01
Revision # 00

2020-ICLl-00023 1472
D. Title 44, U.S.C., Chapter 35, Subchapter 111, "Information Security" [The
Federal Information Security Management Act of 2002, as amended (FISMA)]

E. Delegation 13001 , "Delegation to the Chief Privacy Officer"

IV. Responsibilities
A. The Chief Privacy Officer is responsible for establishing, overseeing the
implementation of, and issuing guidance and providing training on OHS privacy
policy for operational use of social media; and ensuring, in coordination with
Component heads, Component Privacy Officers, and Privacy Points of Contact
(PPOCs), that the Department follows OHS privacy policy, privacy laws
applicable to OHS, and federal government-wide privacy policies on operational
use of social media.

B. Component Heads are responsible for: determining that their respective


Components' intended operational use of social media is legally authorized prior
to use; establishing guidelines for determining which employees are permitted to
utilize social media for operational purposes during the performance of their
duties; implementing OHS privacy policy and procedures for operational use of
social media as established by the Chief Privacy Officer; ensuring adherence to
OHS privacy policy by employees who use social media for operational
purposes; ensuring adherence to applicable records retention schedules; and
coordinating with the Office of the Chief Procurement Officer to ensure that
Component contracts for activities that involve the operational use of social
media include appropriate language requiring that Department contractors follow
OHS privacy policy and this Directive.

V. Policy and Requirements


A. The Department engages in operational use of social media only as
authorized by OHS privacy policy, privacy laws applicable to OHS, applicable
federal government-wide policies, and other applicable statutory authorities.

B. The Chief Privacy Officer determines privacy policy and standards for the
Department's operational use of social media consistent with Directive 047-01,
Privacy Policy and Compliance; oversees compliance with OHS privacy policy,
privacy laws applicable to OHS, and federal government-wide policies as they
relate to the operational use of social media; and provides privacy guidance and
training to OHS personnel regarding operational use of social media. Component
heads work with the Chief Privacy Officer to ensure that Department operational
activities using social media follow OHS privacy policy and procedures, thereby
enhancing the overall consistency of privacy protections across OHS.

-2-
Directive# 110-01
Revision # 00

2020-ICLl-00023 1473
VI. Questions
Address any questions or concerns regarding this Directive to the DHS Privacy Office.

b)(6); (b)(7)(C)

Date

-3-
Directive# 110-01
Revision # 00

2020-ICLl-00023 1474
Department of Homeland Security
DHS Directives System
Instruction Number: 110-01-001
Revision Number: 00
Issue Date: 6/8/2012
PRIVACY POLICY FOR
OPERATIONAL USE OF SOCIAL
MEDIA

I. Purpose
This Instruction implements Department of Homeland Security (OHS) Directive 110-01 ,
Privacy Policy for Operational Use of Social Media.

II. Scope
This Instruction applies throughout OHS regarding the access to and collection, use,
maintenance, retention , disclosure, deletion, and destruction of Personally Identifiable
Information (PII) in relation to operational use of social media, with the exception of
operational use of social media for: (a) communications and outreach with the public
authorized by the Office of Public Affairs; (b) situational awareness by the National
Operations Center; (c) situational awareness by Components other than the National
Operations Center, upon approval by the Chief Privacy Officer following completion of a
Social Media Operational Use Template; and (d) the conduct of authorized intelligence
activities carried out by the Office of Intelligence and Analysis, the intelligence and
counterintelligence elements of the United States Coast Guard, or any other
Component performing authorized foreign intelligence or counterintelligence functions,
in accordance with the provisions of Executive Order 12333, as amended. This
Instruction does not apply to the Office of the Inspector General ; however, the OIG will
comply with the spirit of the Instruction.

Ill. References
A. Public Law 107-347, "E-Government Act of 2002," as amended, Section
208 [44 U.S.C. § 3501 note]

B. Title 5, United States Code (U.S.C.), Section 552a, "Records maintained


on individuals" [The Privacy Act of 1974, as amended)

C. Title 6, U.S.C., Section 142, "Privacy officer"

D. Title 44, U.S.C., Chapter 35, Subchapter Ill, "Information Security" [The
Federal Information Security Management Act of 2002, as amended (FISMA)]

-1-
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1475
E. Title 6, C.F.R., Chapter 1, Part 5, "Disclosure of records and information"

F. Directive 047-01 , "Privacy Policy and Compliance"

G. DHS Sensitive Systems Policy Directive 4300A

H. Privacy-related memoranda issued by the Office of Management and


Budget, including:

1. 0MB Memorandum 10-22, "Guidance for Online Use of Web


Measurement and Customization Technologies" (June 25, 2010)

2. 0MB Memorandum 10-23, "Guidance for Agency Use of Third-


Party Websites and Applications" (June 25, 2010)

3. 0MB Memorandum 07-16, "Safeguarding Against and Responding


to the Breach of Personally Identifiable Information" (May 22, 2007)

4. 0MB Memorandum 06-20, "FY 2006 Reporting Instructions for the


Federal Information Security Management Act and Agency Privacy
Management" (July 17, 2006)

5. 0MB Memorandum 06-19, "Reporting Incidents Involving


Personally Identifiable Information and Incorporating the Cost for Security
in Agency Information Technology Investments" (July 12, 2006)

6. 0MB Memorandum 06-15, "Safeguarding Personally Identifiable


Information" (May 22, 2006)

7. 0MB Circular No. A-130, "Transmittal Memorandum #4,


Management of Federal Information Resources" (November 28, 2000)

I. Privacy policy guidance and requirements issued (as updated) by the


Chief Privacy Officer and published on the Privacy Office website, including:

1. Privacy Policy Guidance Memorandum 2008-02, OHS Policy


Regarding Privacy Impact Assessments (December 30, 2008)

2. Privacy Policy Guidance Memorandum 2008-01, The Fair


Information Practice Principles: Framework for Privacy Policy at the
Department of Homeland Security (December 29, 2008)

3. Handbook for Safeguarding Sensitive Personally Identifiable


Information at DHS (March 2012)

-2-
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1476
IV. Definitions
A. Counsel means the Office of the General Counsel attorney, from either the
Immediate Office of the General Counsel or component counsel, assigned to
provide legal advice to the component covered by this Instruction.

B. Fair Information Practice Principles means the policy framework


adopted by the Department in Directive 047-01 , Privacy Policy and Compliance,
regarding the collection, use, maintenance, disclosure, deletion, or destruction of
Personally Identifiable Information.

C. Individual means a natural person, including a United States citizen,


Legal Permanent Resident, visitor to the United States, alien, DHS employee, or
DHS contractor.

D. Operational Use means authorized use of social media to collect


personally identifiable information for the purpose of enhancing situational
awareness, investigating an individual in a criminal, civil, or administrative
context, making a benefit determination about a person, making a personnel
determination about a Department employee, making a suitability determination
about a prospective Department employee, or for any other official Department
purpose that has the potential to affect the rights, privileges, or benefits of an
individual. Operational use does not include the use of search engines for
general Internet research, nor does it include the use of social media for
professional development such as training and continuing education or for
facilitating internal meetings.

E. Personally Identifiable Information (PII) means any information that


permits the identity of an individual to be directly or indirectly inferred, including
other information that is linked or linkable to an individual.

For example, when linked or linkable to an individual, such information includes a


name, Social Security number, date and place of birth, mother's maiden name,
Alien Registration Number, account number, license number, vehicle identifier
number, license plate number, device identifier or serial number, internet protocol
address, biometric identifier (e.g., facial recognition photograph, fingerprint, iris
scan, voice print), educational information, financial information, medical
information, criminal or employment information, information created specifically
to identify or authenticate an individual (e.g., a random generated number).

F. Privacy Compliance Documentation means any document required by


statute or by the Chief Privacy Officer that supports compliance with DHS privacy
policy, procedures, or requirements, including but not limited to the Social Media
Operational Use Template (Template), Privacy Impact Assessments (PIAs),
System of Records Notices (SORNs), Notices of Proposed Rulemaking for

-3-
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1477
Exemption from certain aspects of the Privacy Act (NPRM), and Final Rules for
Exemption from certain aspects of the Privacy Act.

G. Privacy Compliance Review (PCRJ means both the OHS Privacy Office
process to be followed and the document designed to provide a constructive
mechanism to improve a OHS program's ability to comply with assurances made
in existing Privacy Compliance Documentation including Privacy Impact
Assessments (PIAs), System of Records Notices (SORNs) and/or formal
agreements such as Memoranda of Understanding or Memoranda of Agreement.

H. Privacy Impact Assessment (PIA) means both the OHS Privacy Office
process to be followed and the document required whenever an information
technology (IT) system , technology, rulemaking, program, pilot project, or other
activity involves the planned use of PII or otherwise impacts the privacy of
individuals as determined by the Chief Privacy Officer. A PIA describes what
information OHS is collecting, why the information is being collected, how the
information will be used, stored, and shared, how the information may be
accessed, how the information will be protected from unauthorized use or
disclosure, and how long it will be retained. A PIA also provides an analysis of
the privacy considerations posed and the steps OHS has taken to mitigate any
impact on privacy. As a general rule, PIAs are public documents. The Chief
Privacy Officer may, in coordination with the affected component and the Office
of the General Counsel, modify or waive publication for security reasons , or to
protect classified, sensitive, or private information included in a PIA.

I. Program Manager means the OHS employee who is responsible for the
planning and operation of a OHS program.

J. Situational Awareness means information gathered from a variety of


sources that, when communicated to emergency managers and decision makers,
can form the basis for incident management decision making.

K. Social Media means the sphere of websites, applications, and web-based


tools that connect users to engage in dialogue, share information and media,
collaborate, and interact. Social media take many different forms, including but
not limited to web-based communities and hosted services, social networking
sites, video and photo sharing sites, biogs, virtual worlds, social bookmarking,
and other emerging technologies. This definition does not apply to internal
Department intranets or applications.

L. Social Media Operational Use Template (Template) means the


document that describes the current or proposed category of operational uses(s)
of social media, identifies the appropriate authorities for the current or proposed
category of use(s), describes what PII , if any, is collected (and from whom) , and
how that information is used. The Template is used to identify information
technology systems, technologies, rulemakings, programs, or pilot projects that
-4 -
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1478
involve collecting PII from social media for the proposed category of use(s) and
to assess whether there is a need for additional Privacy Compliance
Documentation. Templates are initially reviewed and adjudicated by the Chief
Privacy Officer, and every three years thereafter for accuracy.
M. System Manager means the OHS employee identified in a System of
Records Notice who is responsible for the operation and management of the
system of records to which the System of Records Notice pertains.

N. System of Records Notice (SORN) means the official public notice of a


OHS system of records as required by the Privacy Act of 1974 (as amended).
The SORN identifies (1) the purpose for the system of records, (2) the individuals
covered by information in the system of records , (3) the categories of records
maintained about individuals, (4) the source of the records and (5) the ways in
which the information is generally shared by the Department. The SORN also
provides notice of the mechanisms available for individuals to exercise their
Privacy Act rights to access and correct the PII that OHS maintains about them.

V. Responsibilities
A. All DHS employees are responsible for complying with Directive 110-01 ,
with privacy policies and procedures issued by the Chief Privacy Officer, and with
applicable Component policies on operational use of social media and for
protecting PII from unauthorized use or disclosure.

B. Chief Information Officer is responsible for providing web technology


services, security, and technical assistance for the operational use of social
media within the Department.

C. Counsel is responsible for:

1. Providing advice to Program Managers or System Managers, as


appropriate, to ensure that appropriate authority exists to engage in
categories of operational use of social media before Component
employees engage in those uses, and to ensure that the Template
generally documents that authority; and

2. Providing legal guidance to the Component Privacy Officers or


PPOCs and Program Managers or System Managers, as appropriate, in
the drafting of Rules of Behavior for operational use of social media.

D. Component Privacy Officers are responsible for:

1. Maintaining an accurate accounting of all Component categories of


operational use of social media using the Template to identify collection
and use of PII, and any other attendant privacy impacts, and ensuring

-5-
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1479
Components implement DHS privacy policy with respect to the operational
use of social media;

2. Coordinating with Program Managers or System Managers, as


appropriate, together with the Chief Privacy Officer and counsel to
complete a Template and any other required Privacy Compliance
Documentation (1) for all proposed categories of operational use of social
media, and (2) for any changes to the categories of operational use of
social media;

3. Developing and reviewing Component policies and directives


related to operational use of social media, and Component Rules of
Behavior consistent with the adjudicated Template, to ensure compliance
with OHS privacy policy, privacy laws applicable to OHS, and federal
government-wide privacy policies;

4. Overseeing Component privacy training for operational use of


social media and providing educational materials, consistent with privacy
training for operational use of social media developed by the Chief Privacy
Officer.

5. Reviewing documentation required in Section VI.D.8 to ascertain


compliance with this Instruction as needed; and

6. Collaborating with the Chief Privacy Officer in conducting Privacy


Compliance Reviews.

E. Privacy Points of Contact (PPOCs) are responsible for assuming the


duties of Component Privacy Officers in Components that do not have Privacy
Officers.

F. Program Managers, or System Managers, as appropriate, are


responsible for:

1. Coordinating with the Component Privacy Officer or PPOC to


ensure that privacy is appropriately addressed when proposing,
developing, implementing, or changing any operational use of social
media;

2. Coordinating with the Component Privacy Officer or PPOC and


counsel to prepare drafts of the Template and, as appropriate, all Privacy
Compliance Documentation required when proposing, developing, or
implementing or changing any category of operational use of social media;

3. Monitoring the design, deployment, operation, and retirement of


programs involving the operational use of social media to ensure that the
-6-
Instruction# 110-01-001
Revision # 00

2020-ICLl-00023 1480
use of PII, if any, is limited to those uses described in the Privacy
Compliance Documentation;

4. Ensuring oversight mechanisms are built into the design of


programs and systems involving the operational use of social media;

5. Coordinating with the Component Privacy Officer or PPOC to


establish administrative, technical, and physical controls for storing and
safeguarding PII consistent with OHS privacy, security, and records
management requirements to ensure the protection of PII from
unauthorized access, disclosure, or destruction in the course of
operational use of social media; and

6. Supporting the Component Privacy Officer or PPOC in developing


and implementing privacy procedures and job-related privacy training to
safeguard PII in operational uses of social media.

VI. Content and Procedures


A. Authority to Engage in Operational Use of Social Media: Program
Managers and System Managers consult with counsel to ensure that appropriate
authority exists to engage in categories of operational use of social media before
Component employees engage in those activities.

B. Privacy Compliance Documentation: Before engaging in, or contracting


for, new or modified categories of operational use of social media (which as
defined includes investigatory purposes), Program Managers and System
Managers, in consultation with Component Privacy Officers or PPOCs and
counsel complete a Template to document the authority and purpose(s) of those
uses as well as a description of those uses, and to determine whether all of the
Rules of Behavior discussed in Section VI.D of this Instruction will apply to the
particular uses(s) covered by the Template. Templates are submitted to the
Chief Privacy Officer for a prompt review and determination as to whether a new
or updated PIA or SORN is required. Templates are also completed to document
categories of operational use of social media in existence prior to this Instruction
to ensure compliance with this Instruction. Once a Template is approved for a
category of operational use, a Template is not required for additional use of
social media within that category unless there is a material modification of the
Rules of Behavior applicable to that category. Components may appeal to the
Deputy Secretary of Homeland Security if there is a disagreement over the OHS
Privacy Office determination of privacy compliance for the operational use of
social media.

C. Access: OHS employees who are granted access to use social media by
their Component heads renew their access authority annually, consistent with

-7-
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1481
annual training requirements. Access is contingent upon an employee's
successfully completing privacy training for operational use of social media.

0. Rules of Behavior: Component Privacy Officers or PPOCs, in coordination


with counsel and Program Managers, or System Managers as appropriate, draft
Rules of Behavior for operational use of social media (either separately or as part
of a broader policy document) and submit them with the Template to the Chief
Privacy Officer for review and approval. Personnel granted access to use social
media certify annually that they have read and understand the Component Rules
of Behavior. Where certification is not practicable, Component Privacy Officers
and PPOCs maintain records of employee attendance at privacy training that
includes training on Rules of Behavior.

Rules of Behavior include requirements for operational use of social media and
the consequences of failure to adhere to those requirements. Where a federal
policy establishes guidelines that apply to a Component's operational use of
social media, the Component's Rules of Behavior incorporate that policy and that
fact is noted in the Template. Unless otherwise noted in the Template
adjudication process, the Rules of Behavior provide, at a minimum, that OHS
employees:

1. Use social media for operational purposes only when activities are
authorized by statute, executive order, regulation, or policy;

2. Use only government-issued equipment, government accounts, and


only government email addresses when engaging in the operational
use of social media;

3. Use online screen names or identities that indicate an official OHS


affiliation and use OHS email addresses to open accounts used
when engaging in social media in the performance of their duties;

4. Access publicly available information through social media only by


reviewing posted information without interacting with any individual
who posted the information;

5. Respect individuals' privacy settings and access only information


that is publicly available unless the individual whose information the
employee seeks to access has given consent to access it;

6. Collect the minimum PII necessary for the proper performance of


their authorized duties;

7. Protect PII as required by the Privacy Act and OHS privacy policy;
and

-8-
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1482
8. Document operational use of social media, including date, site(s)
accessed, information collected, and how it was used in the same
manner that the Department would document information collected
from any source in the normal course of business. For instance,
where information obtained through authorized operational use of
social media is used in whole or in part to make decisions regarding
an individual's rights, benefits or privileges, employees document
that fact in relevant records.

E. Privacy Training: Component Privacy Officers or PPOCs tailor privacy


training for the operational use of social media to Component-specific needs,
based upon training materials provided by the Chief Privacy Officer. Completion
of this privacy training is a prerequisite for obtaining access to social media for
operational use. Upon completion of this training, employees will certify that they
have read and understand their Component's Rules of Behavior. Where
certification is not practicable, Component Privacy Officers and PPOCs maintain
records of employee attendance at privacy training that includes training on
Rules of Behavior. Employees also complete refresher training and recertify they
have read and understand their Component's Rules of Behavior annually
thereafter. Privacy training content includes, at a minimum, legal authorities,
acceptable operational uses of social media, access requirements, applicable
Rules of Behavior, and requirements for documenting operational uses of social
media.

F. Retention of PII: Component Program Managers or System Managers


where appropriate, maintain PII collected through authorized operational uses of
social media in the applicable Privacy Act system of records in accordance with
approved records retention schedules.

G. Privacy Compliance Reviews (PCR): The Chief Privacy Officer, in


collaboration with Component Privacy Officers or PPOCs, conducts PCRs of
approved operational uses of social media periodically, at the sole discretion of
the Chief Privacy Officer, to ascertain compliance with OHS privacy policy and
legal authorities. PCRs may include a determination as to whether the Privacy
Compliance Documentation for a particular operational use of social media is
accurate and up to date.

H. Implementation: Measured from the date Directive 110-01 and this


Instruction are signed and posted on OHS Connect:

1. the Chief Privacy Officer provides baseline training to the


Components within 45 days, and

-9-
Instruction# 110-01 -001
Revision # 00

2020-ICLl-00023 1483
2. Components complete implementation of this Instruction, including
obtaining approval from the Chief Privacy Officer of Templates for
categories of operational use of social media in existence prior to
this Instruction, within 120 days, except that Components complete
training of all pertinent employees within 165 days.

VII. Questions
Address any questions or concerns regarding these Instructions to the OHS Privacy
Office or to the relevant Component Privacy Officer or PPOC.

(b)(6); (b)(7)(C)

J&Nl-~, 2.--6!2_
Date
Chief Privacy Officer

- 10 -
Instruction# 110-01-001
Revision # 00

2020-ICLl-00023 1484
Homeland Security lnves1igations
U.S. Immigration National Security Investigations Division

and Customs U.S. Department of Homeland Security


Enforcement 500 12th Street, SW
Washington, D.C. 20536

National Security Unit Rules of Behavior for Open Source Analysis

All National Security Unit (NSU) Open Source (OS) Team users will abide by the follow ing Rules of
Behavior when conducting open source research:

1. All open source searches w ill be conducted in an unattributable browser, under the user's
unattributable browser account as assigned by a NSU supervisor. Only in times of exigent
circumstances when the unattributed browser account is not available, the NSU Supervisor may
instruct the OS Team to use their attributed government equipment and browser to conduct urgent
narrowly defined searches.
2. Users may only access the NSU proxy server service using government furnished equipment, and
under the supervision of a designated supervisor. At no time will a user:
a. Create an email address or use an email address for personal or investigative purposes.
b. Log into any account, including but not limited to, personal or professional accounts.
c. Access login protected portions/pages of any website that require an email address, username,
or other sign-on information.
d. Interact with any member of the public online. This can include, but is not limited to
messaging, chatting, friend ing, liking, following, or subscribing to an individual.
3. Users will only conduct open source research on the subject of a submitted request and his or her
associates and linked businesses.
4. In addition to the restrictions regarding engagement with individuals online, users are also prohibited
from posting, creating, or sharing any content online. This includes, but is not limited to images, text,
locational identifiers, or links to other web content.
5. Users will not conduct any personal business or local address searches (ex: lunch near the office) that
would identify the actual location of the user while using the unattributable browser.
6. Users will not cross contaminate the unattributable browser with information that would be able to
identify the OHS Network (A-LAN).
a. Users will not download or upload anything onto the OHS network. Only supervisors have
the capability to download/upload files.
b. Users will not share information between the unattributable browser and the OHS Network
via email, USB connection, or other methods.
c. Users m ust understand accessing a website from an attributed browser within a certain time
period of an unattributed browser may reveal a relationship between the two.

This agreement will be utilized at all times when conducting open source research as an employee of the
NSU. Policies set forth in this agreement were established to ensure employee compliance with federal
and other business mandates, as well as abide by the code of ethics and conduct for OHS/ICE employees.
It is essential that all NSU open source users operate according to policies and guidelines referenced in
this agreement.

www.ice.gov

2020-ICLl-00023 1485
SUBJECT: NSU OS Rules of Behavior
Page 2

By signing below, I acknowledge that I have read, understand, and will comply with the National Security
Unit Rules of Behavior for Open Source Analysis. Additionally, I verify that I have taken the annual ICE
Social Media Privacy Training and ICE Computer Security Training. I understand that failure to comply
with the Rules of Behavior could result in verbal or written warning, removal of system access,
reassignment to other duties, criminal or civil prosecution, or termination.

Signature and date

Supervisor's signature and date

FOR OFFICIAL USE ONLY

2020-ICLl-00023 1486
Counterterrorism and Criminal Exploitation Unit Agreement Form
U.S. Immigration and
Customs Enforcement

Unattributable Computer Agreement for Open Source Analysis

All analysts trained and assigned to an unattributable computer (UC) within the Counterterrorism and
Criminal Exploitation Unit (CTCEU) shall use this agreement as evidence to complete the terms and
conditions under which the parties whose signatures appear below have agreed.

• When online activity is aimed at the development or pursuit of investigative leads, CTCEU employees are
considered on duty and subject to all applicable ICE policies governing investigative conduct. Open source
analysts must comply with the Office of Government Ethics Standards of Conduct for Government
Employees relating to outside activities and the Office of Personnel Management's prohibition on any
employee engaging in "criminal, infamous, dishonest, immoral, or notoriously disgraceful conduct, or other
conduct prejudicial to the Government."
• All research for investigations is restricted to use only on unattributed computers established at the work
place. Utilizing a personally-owned computer or assigned Department of Homeland Security (DHS)
computer to conduct undercover internet activities and open source analysis is strictly forbidden.
• Using only the assigned UC, analysts will collect (overtly or through publicly available somces), analyze,
produce, and disseminate information, intelligence, and counterintelligence to support national and
departmental missions.
• At no point is it acceptable to share information between the CTCEU government computer and the UC by
USB connections, email or any other wireless method. UC equipment must have no connection to any
official government systems or networks, and must be completely clean of any government or officially
registered software including the operating system. UC equipment should be completely clean of any
reports, official data, or any remains of official activity.
• No connection should be made to identify the UC related to the DHS, U.S. Immigration and Customs
Enforcement (ICE), the CTCEU, or any government or law enforcement purpose whatsoever.
• It is vital the UC remain anonymous; no personal information should be created or used. To summarize,
open source analysts are specifically prohibited from doing the following:
o Connect any type of device with the USB port on the UC that would be used to transfer information
from and/or to the DHS computers.
o Access any website that requires an email address, username, or any other type of sign-on
information; this is not considered a publicly accessible online source.
o Create an email or use an email on the UC for personal or investigative purposes.
o Use the UC for any type of personal agenda; under no circumstance should an analyst be using their
own social media websites, check their email, research local weather or sports teams, etc.
o Conduct research online for investigative OST purposes without using a proxy server. Absolutely all
open source research must be practiced using a proxy server for privacy and security concerns.
o Download or upload anything onto the UC. Only administrators have the capability to
download/upload files; UC administrator user rights are assigned to specific CTCEU employees.

Page 1
Version 2.0
March 7, 2019

2020-ICLl-00023 1487
Counterterrorism and Criminal Exploitation Unit Agreement Form
U.S. Immigration and
Customs Enforcement

This agreement will be utilized at all times when accessing an unattributable computer, and employed as a
government conh·actor or government employee of the CTCEU. Any misuse of the UC and these guidelines
could damage the CTCEU's mission and possibly threaten national security.

Policies set forth in this agreement were established to ensure employee compliance with federal and other
business mandates, as well as abide by the code of ethics and conduct for DHS/ICE employees. It is essential
that all UC users operate according to policies and guidelines referenced in this agreement.

It is the responsibility of every user to read, understand, and comply with these guidelines. Violation of any
such activity and failure to comply will result in disciplinary action up to and including termination or
immediate removal of employees from the CTCEU.

Unattributed Computer User: Date:


(Print First, Middle Initial, Last Name)

Date: - - - - - -
(Signature)

Open Source Administrator: Date: - - - - - -


(Print First, Middle Initial, Last Name)

Date: - - - - - -
(Signature)

CTCEU Supervisor: Date:


(Print First, Middle Initial, Last Name)

Date: - - - - - -
(Signature)

Page 2
Version 2.0
March 7, 2019

2020-ICLl-00023 1488
DUS Privacy Office
Data Access Request Analysis (DARA) for l(b)(?)(E)

This form provides a privacy analysis for OHS' ~Kb~)~ (7~


)<~E~
)--------------~
The form replaces a PTA wherel(b)(7)(E)lis a service provider for component records. The OHS Privacy
Office uses this form to better understand how data is currently shared, will be shared and how data
I
protection withinl(b)(7)(E) lwill be accom lished. l(b)(7)(E) is a biometrics service provider and any
component or agency submitting data to b)(7)(E is a data provider.
Please respond to the q uestions listed below in the space provided. Please be as specific as possible.
Upon completion of the form, submit to: pia@hq.dhs.gov.

SECTION 1: SUMMARY INFORMATION (COMPLETED BY NPPD/OBIM PRIVACY)

PROJECT INFORMATION
Project or
EID: Criminal History Information Sharing - Photos and Fingerprints
Program Name:
b)(7)(E) fb)(7)(E)
TAFISMA Name:
TAFISMA
Number:
I
Project or
Type of Project or
IT System program Modification
Program:
status:

OBIM PROGRAM MANAGER


l(b)(6); (b)(7)(C)
Name: I
Identity Operations Division
Office: NPPD/OBIM Title:
Director
Phone: 202-525K,?~~~\J Email: b)(6); (b)(7)(C)

OBIM INFORMATION SYSTEM SECURITY OFFICER (ISSO)


Name: l<b)(6); (b)(7)(C) I
Phone: 202.29~~b)(6);
/h\/7 \/f"'\
I I Email: ll(b)(6); (b)(7)(C) I

ROUTING INFORMATION

Date submitted to Component Privacy Office: 40T


Date submitted to DUS Privacy Office: January 14, 2014

2020-ICLl-00023 1489
DUS Privacy Office
7
Data Access Request Analysis (DARA) fo~b )( )(E)

SECTION 2: INITIATE REQUEST TO SEARCH/ENROLL IN(b)(l )(E) ~COMPLETED BY


DATA PROVIDER)

Source System Kb)(7)(E) I T AFISMA


TAFISMA Name: Number:
Project or
Type of Project or
IT System program Modification
Pr ogram:
status:

SOURCE SYSTEM PROGRAM MANAGER


~b)(6); (b)(7)(C)
Name:
I
Office: HSI T itle: Unit Chief
Phone: 202-73~ b)(6);
h\/7 \/1'"'\
,I Email: (b)(6); (b)(7)(C)

SOURCE SYSTEM PRIVACY POC


Name: Kb)(6); (b)(7)(C~
Phone: 202-732-K.b )(6); I I Email: l(b)(6); (b )(7)(C)
I
SOURCE INFORMATION SYSTEM SE CURITY OFFICER (ISSO)
Name: (b)(6); (b)(7)(C) I
(b)(6); (b)(7)(C)
Phone: 202-211 ~)(6\ I Email:

A. Please describe the purpose of the project or program:


Please proi·ide a general dncriptio11 of'the project and it\· p111po.\e in a II'</\' a 11011-technical person could
1111der.1wnd.
p
of Mexican
nationals from the United States to Mexico. In particular ICE enhanced it's sharing with Mexico by
providing criminal conviction history for Mexican nationals who are being repatriated from the United
States and who have been convicted of certain firearms, national security, violent, and drug related
felonies. Specifically, ICE shares information on Mexican nationals convicted of felonies such as
homicide, rape, drug sales, kidnapping, weapons trafficking, and terroristic threats. Before or at the time
of a Mexican national's removal to Mexico, ICE shares the name, A-Number or Fingerprint Identification
Number, date of birth, place of birth, mother's ma iden name, gender, and for any qualifyi ng crime, the
NCIC Code, crime description, and date of conviction.
This DARA proposes adding fingerprints from DHS ' ~kh~'~n~,r~F~
'-----------~
b)(7)(E) and photographs from l(b )(7)(E) fl
A has been updated to include the sharing of fingerprint
recor s with Mex ico, El Salvador, Guatemala, Honduras, Dominican Republic, Jamaica, and Bahamas in
DHS/ICE/PI-OlS(f). These additional data elements would be added to the data alread ulled from( b)(7)(

2020-ICLl-00023 1490
DUS Privacy Office
Data Access Request Analysis (DARA) forl(b)(?)(E)

and provided to Mexico. To obtain fingerprints fromKb)(7)(E I ICE will use Fingerprint Identification
Numbers (FINs) fron-illi[] to searc (b)(7)(E) IThe FIN will only be used to search and will not be enrolled
in l(b)(7)(EI Since the FIN will return all encounters related to an identity, ICE will determine which
encounter(s) belong to ICE before sharing, and only share those ICE encounters, in order to avoid
unauthorized onward dissemination. Providing fingerprints and photographs to Mexico, El Salvador,
Guatemala, Honduras, Dominican Republic, Jamaica, and Bahamas will improve identification of foreign
nationals removed from the United States to these countries. In the future, ICE may enter into similar
sharing agreements with additional countries to further improve removal of nationals from the United
States to their own countries.
Project or Program status Update

Date first developed: September 1, 2010 Pilot launch date: NIA

Date last updated: November 7, 2012 Pilot end date: NIA

B. Data ProYider Request to Search or Enroll i n -

1. What authorities cover this request? • Memorandum of Cooperation between the


Department of Homeland Security of the United
States of America and the Secretariat of
Governance and the Secretariat of Public
Security of the United Mexican States
Concerning the Process and Exchange of
Information on Mexican Nationals to be
Repatriated to Mexico, signed March 23, 2010.
• Memorandum of Cooperation between the
Department of Homeland Security of the United
States of America and Civilian National Police
of the Republic of El Salvador Concerning the
Process and Exchange of Information on
Salvadoran Nationals Repatriated To El
Salvador, signed May 14, 2014.
• Memorandum of Cooperation between the
Ministry of Government of the Republic of
Guatemala the Department of Homeland
Security of the United States of America
Concerning the Process and Exchange of
Information on Guatemalan Nationals
Repatriated to Guatemala, signed July 9, 2014.
• Memorandum of Cooperation between the
Department of Homeland Security of the United
States of America and the National Police of The
Re ublic of Honduras Concemin the Process

2020-ICLl-00023 1491
Homeland
Security
DUS Privacy Office
Data Access Request Analysis (DARA) for ~rb-)(-7)-( E-
) -~

and Exchange of Information on Honduran


Nationals Repatriated to Honduras, signed
A ugust 19, 2014.
• Memorandum of Cooperation will be signed
with Dominican Republic, Jamaica, and Bahamas
before data is shared with these countries.
• Letter of Intent between the Department of
Homeland Security, as represented by United
States Immigration and Customs Enforcement
and the D epartment of Justice, Federal Bureau of
Investigation for the Sharing of Criminal History
Record Information in the Repatriation Process
of Deportees, signed March 21 and 22, 2013.
• 8 U.S.C. § 123 1- Detention and removal of
aliens ordered removed .
• 8 U.S.C. § 1103(a)(l) & (2) - Powers and Duties
of the Secretary.
2. From whom does the Project or
Program collect, maintain, use or • DHS Employees
disseminate information? Please
check all that apply.
• Contractors working on behalf of DHS
[Z] Members of the public
•information
This program does not collect any personally identifiable
1

Information provided TOl(b)(?)(E) rrom the Data Provider

3. Will the data provided to~ )(?)( ~ be: [Z] Search only?
• Search and Enroll?2
• Search and Assign? 3

4. Which data set(s) withi~(b)(?)(E)lare


being requested? (please include here Fingerprint images

1
OHS defines personal information as " Personally Identifiable Information" or PII, which is any information that permits the
identity of an individual to be directly or indirectly inferred, including any information that is linked or linkable to that individual,
regardless of whether the individual is a U.S. citizen, lawful permanent resident, visitor to the U.S., or employee or contractor to
the Department. "Sensitive PII" is PII, which if lost, compromised, or disclosed without authorization, could result in substantial
harm, embarrassment, inconvenience, or unfairness to an individual. For the purposes of this analysis, SPII and PII are treated
the same. Biometrics information is PII.
2
The data provider provides data to conduct a1¥b)(7)(1 search and enrolls that data as a new (b)(7)( encounter.
3
The data provider provides data to conduct an l(b)(? ){!search, which enrolls as a new (b)(7)( encounter only if another
!
encounter already exists. In search and assign queries the data providers cannot create a new identity inl(b)(7)( they can only
add encounters to an already existing identity.

2020-ICLl-00023 1492
DUS Privacy Office
Data Access Request Analysis (DARA) for rb)(?)(E)

or attach detailed list)

5. List all specific data provider data


elements to be enrolled and/or Fingerprint Identification Number (FIN)
searched.

6. Whichl(b)(?)(Elusers can search this


data ( once provided to Kb )(7)(E)l •~ AllNone
including external to OHS)?
7. Under DHS-DOJ interoperability all
•No. Listed Users (Broadly describe or attach list):
criminal j ustice agencies may access
all criminal justice information for
criminal justice purposes.
Is the information being provided
criminal iustice 4 information?
8. Is this data exempt from OneDHS? 5 No.
Under the OneDHS policy, all OHS
components are considered one
"agency" for purposes under the
Privacy Act. Information shall be
shared within OHS whenever the
requesting officer has an authorized
purpose for accessing the information
in the performance of his/her duties.

Information received back FROM~b )(?)(E)


I
9. What data elements/response will be Fingerprints will be returned to ICE but will not be
returned to the data provider? (Full? re tained by ICE. Fingerprints are provided to partnering
Limited? If limited list each element.) countries along with photographs from Kfilrr)and other
a. How long will the returned data information as described in the July 2010, November
be stored within the data 2011 , and April 2014Kb)(?)IPIA Updates. DHS enhanced
provider's system? (Data the information shared with authorized partnering
provider'sKb)(7)( !must allow for
countries to coordinate and conduct the removal of
this information to be stored).
Foreign nationals from the United States to partnering
countries.

4
For the definition of criminal justice from the DHS-DOJ Interoperability MOU please consult your OGC and this
link:
5
Information may be exempt from OneDHS with approval from the Information Sharing and Safeguarding
Governance Board. See OneDHS Certification Form on DHSConnect here:
http://d hsconnect.dhs.gov/org/comp/ia/Information%20Sharing%20Coordinating%20Council/Forms/ Allltems.aspx?
RootFolder=%2forg%2fcomp%2fia%2fln formation%20Sharing%20Coordinating%20Council%2t1SAAs%2fOne%
20DHS%20Compl iance%20Forrns&FolderCTTD=0x0 l 2000B l BCFB64737DE J48B4C0E64829 l 82567

2020-ICLl-00023 1493
DUS Privacy Office
Data Access Request Analysis (DARA) for rb)(7)(E)

10. If your plan to share the results with As described in the July 2010, November 2011 , and
others external to your April 2014Kb)(7)(E) !PIA
Department/Agency, please list the Updates, DHS enhanced the information shared with
third parties and describe the partnering countries to coordinate and conduct the
circumstances and means by which removal of Foreign nationals from the United States to
the results will be shared.
partnering countries. In particular ICE enhanced it's
sharing with authorized partnering countries by
providing criminal conviction history for Foreign
nationals who are being repatriated from the United
States and who have been convicted of certain firearms,
national security, violent, and drug related felonies.
Specifically, ICE shares information on Foreign
nationals convicted of felonies such as homicide, rape,
drug sales, kidnapping, weapons trafficking, and
terroristic threats.

This DARA proposes adding fingerprints from DHS'


Kb)(?)(E) I
and photographs from!~)(?)( tfhese additional data
elements would be added to the data already pulled from
EID and provided to partnering countries with signed
Memorandum of Cooperation in place. Providing
fingerprints and photographs to partnering countries will
allow for more accurate identification of individuals.
11. How will the data provider receive the The CHIS service will search!(b)(7)(E) !for fingerprints
search results (e.g. real-time, hourly, using each qualifying individual alien's A-Number. If a
daily, weekly, etc.)? match is found, the results will be returned to the CHIS
service over a secure electronic channel and appended to
the record for the alien.

I
Once pulled from l(b )(7)(E) information will be
electronically shared by email with authorized Foreign
partners. This email contains two attachments, the first
attachment is formatted to be read by law enforcement
officials identified in the Memorandum of Cooperation
that is completed for each partnering country. The
second attachment, containing the same information as
the first, provides a fi le properly formatted for ingestion
into each partnering countries law enforcement
system(s). The same information contained in the email
will also be transmitted over a secure SSL connection to
each authorized partnering country, where it is directly
routed to their law enforcement system for ingestion.
The format of the data passed through the secure SSL

2020-ICLl-00023 1494
DUS Privacy Office
Data Access Request Analysis (DARA) forrb)(?)(E)

connection will be identical to the file format of the


second e-mail attachment and directly ingested into the
partnering countries law enforcement system.
12. Are there any known or potential No.
technical constraints? If yes, please
describe.

C. Privac:y Compliance and Sharing Authorities

1. What PIA(s) covers the sharing The ~ I A has been updated to include the sharing of
described above? fingerprint records with Mexico, El Salvador, Guatemala,
Honduras, Dominican Republic, Jamaica, and Bahamas in
DHS/ICE/PI-015(f).

The sharing of the other data with Mexico is covered by


these previously published PIAs:
DHS/ICE/PIA-015(c)Kb)(7)(E) I
l(b)(7)(E) ~lien Removal Module Update,
November 7, 2011
DHS/ICE/PIA-015(a'f(b){7)1Update, July 28, 2010
DHS/ICE/PIA-015KEl0iPIA, January 14, 2010
DHS/NPPD/PIA-002 l<b)(7)(E) I
l(b)(7)(E) !December 7, 20 12.
2. What SORN(s) cover the sharing DHS/ICE-011 - Kb)(7)(E) I
described above? l<b)(7)(E) IMay 3, 2010
75 FR 23274 (also covers fingerplints & photographs
collected for booking)
DHS/NPPD-004 - DHSl(b)(7)(E) I
~b)(7)(E) pune 5, 2007, 72 FR
31080
3. What routine use(s) in the SORN(s) ifh\(T \f~ \ IRU M. To foreign governments for the
cover the sharing described above? purpose of coordinating and conducting the removal of
aliens to other nations; and to international, foreign, and
intergovernmental agencies, authorities, and
organizations in accordance with law and formal or
informal international arrangements.

l(b)(7)(E) !RU A. To appropriate federal, state, local, tribal,


foreign, or international agencies seeking information
on the subjects of wants, warrants, or lookouts, or any
other s ubject of interest, for purpose related to
administering or enforcing the law, national security,
immigration, or intelligence, where consistent with a

2020-ICLl-00023 1495
DUS Privacy Office
Data Access Request Analysis (DARA) fo1b )(7)(E)

DHS mission-related function as determined by DHS.


4. What Information Sharing Access Memorandum of Cooperation between the Department
Agreements (ISAA) govern the of Homeland Security of the United States of America
sharing outside of OHS? If this is and the Secretariat of Governance and The Secretariat of
criminal justice information or Public Security of the United Mexican States
credentialing information for a Concerning the Process and Exchange of Information on
national security position or a position
Mexican Nationals to be Repatriated to Mexico, signed
of public trust it is covered by the
DOJ Interoperability MOU. March 23, 2010.
Credentialing under the DOJ
Interoperability MOU require a Memorandum of Cooperation between the Department
separate ISAA, Interconnection of Homeland Security of the United States of America
Security Agreement (ISA) or User and Civilian National Police of the Republic of El
Agreement with Criminal Justice Salvador Concerning the Process and Exchange of
Information Services (CTIS) to cover Information on Salvadoran Nationals Repatriated To El
criminal history record responses. Salvador, signed May 14, 2014.

Memorandum of Cooperation between the Ministry of


Government of the Republic of Guatemala the
Department of Homeland Security of the United States
of America Concerning the Process and Exchange of
Information on Guatemalan Nationals Repatriated to
Guatemala, signed July 9, 2014.

Memorandum of Cooperation between the Department


of Homeland Security of the United States of America
and the National Police of The Republic of Honduras
Concerning the Process and Exchange of Information on
Honduran Nationals Repatriated to Honduras, signed
August 19, 2014.

Memorandum of Cooperation will be signed with


Dominican Republic, Jamaica, and Bahamas before data
is shared with these countries.

Letter of Intent between DHS/ICE and DOJ/FBI for the


Sharing of Criminal History Record Information in the
Repatriation Process of Deportees, March 22, 2013.

SECTION 3j(b)(7)(E) !(COMPLETED BY NPPDIOBIM PRIVACY)

2020-ICLl-00023 1496
DUS Privacy Office
Data Access Request Analysis (DARA) for rb)(7)(E)

1. What OUS will be assigned to the DHS.ICE.DNR


data rovider?
2. Is there an Activity Type Filter? ICE will not submit new encounters for enrollment through
If so, please describe the filter. CHIS.
3. W ill OBIM share any data No.
outside the Routine Uses listed in
the source system's SORN (see
Section D #3)?
4. Which PIA analyzes the proposed [8:J (b)(?)(E PIA
use? 0 DHS-DOJ Interoperability PIA
D Other: _ _ _ _ _ _ _ _ _ _ _ _ _ _ __
D U date is needed to:

OBIM Privacy Office Recommendation:


Please include recommendation below, includinf( what new privacy compliance documentation is needed.
OBIM Privacy recommends that DHS/ICE/PIA-0 15, (a), (c), & (t) and ENFORCE SORN provide the
appropriate coverage for this use ofICE's data and that the retrieval of data from~b)(?)(Elfor this effort is
covered by the IDENT SORN and PIA.

2020-ICLl-00023 1497
DUS Privacy Office
Data Access Request Analysis (DARA) fo1b)(?)(E)

(TO BE COMPLETED BY THE DHS PRIVACY OFFICE)

DHS Privacy Office Reviewer: l<b)(6); (b)(?)(C)


I
Date approved by DHS Privacy Office: December 19, 2014
PCTS Workflow Number: kb)(6): I
DESIGNATION

Privacy Sensitive System: Yes If "no" PTA adjudication is complete.


IT System
Category of System:
If "other" is selected, please describe: 40T

Determination: D PTA sufficient at this time.


D Privacy compliance documentation determination in progress.
D New information sharing arrangement is required.
D Privacy Act Statement required.
l;gJ Privacy Impact Assessment (PIA) required.
i;gJ System of Records Notice (SORN) required.
System covered by existing PIA
PIA: If covered by existing PIA, please list: DHS/ICE/PIA-015(t) - Enforcement Integrated
Database
System covered by ex isting SORN
SORN: If covered b~ existing SORN, 12Iease list: DHS/ICE-011 - i b)(7)(E)
I
l(b )(7)(E)
IMay 3, 2010 75 FR 23274
DHS Privacy Office Comments:
Please describe rationale for vrivacv compliance determination above.
ICE and OBIM submit this DARA to describe the expansion of ICE' s sharing under CHIS to include
fingerprints froml<b)(7)(E land photographs from~ HS/ICE/PIA-01 S(t) specifically discusses sharing
fingerprints and photographs as part of CHIS and provides appropriate PTA coverage. PRTV does not find
sufficient coverage for this sharing under the l(b)(7)( I PIA. Currently, thel(b)(?)(E)IPIA describesKb)(7)(E Is
receipt of information on ICE' s behalf from foreign partners. It only describes IDENT' s facilitation of
TCE's sharing w ith foreign partners as part of the kb)(?){jprocess. Next time OBTM updates thej(b)(?)(E) I
PIA, the PIA update should include notice of CHIS sharing.
The ENFORCE SORN covers the biographic and biometric data shared under CHIS. ENFORCE SORN
routine use M permits the sharing of this data with foreign governments pursuant to international
agreements.
PRIV requests the SOPs that are mentioned in the signed CHIS agreements and the opportunity to review
future CHIS agreements.

10

2020-ICLl-00023 1498
From: l(b)(6); (b )(7)(C)
Sent: 15 Mar 2018 09:21:55 -0400
To: b)(6); (b)(7)(C)
Subject: 1story Information for Deportees from the U.S.

Below is the email I sent out today. Let's wait and see what happens but ifl get a detailed
responsefrom Samoa, I will ask you for a formal response. I will keep in touch and let
you know.

Thank you for all your help.

l(b)(6); (b)(7)(C) I
Assistant Attache for Removals
U.S. Embassy Bangkok

Sent with BlackBen-y Work (www.blackben-y.com)

From: l(b)(6); (b)(7)(C)


Date: Thursday, Mar 15, 2018, 12:10 PM
To:l(b)(6); (b)(7)(C)
Cc:
'----~----~-~~---~-~---'
Subject: Criminal History Infonnation for Deportees from the U.S.

Police Commissioner (b )(6);


IL...\1-,\ /r"

Good Afternoon. My name is l(b)(6); (b)(7)(C) !and I am the Assistant Attache for
Removals for the U.S. Department of Homeland Security (DHS), Immigration and
Customs Enforcement (ICE) in Bangkok, Thailand. I have recently been in contact with
M~b)(6); (b)(7)(C) regarding the sharing of criminal history for Samoan nationals being
deported from the U.S. and he mentioned your desire for enhance criminal history
sharing. I am in contact with our ICE privacy compliance department and they are
looking into what can be shared. I can tell you NCIC printouts cannot be shared as ICE
does not own the NCIC record. Generally, ICE only provides the crimes that have led to
an individual's removal. It is my understanding (con-ect me ifl am wrong) that the
criminal history helps Samoan law enforcement measure the level of criminal that is
being deported and assists Samoan law enforcement with planning resources for
monitoring individuals or applying other services to ensure the deported individual
doesn't get involved with crime the moment they return. Increased criminal history
sharing may be a tough obstacle to overcome but in order for ICE Privacy to give you a
thorough answer and to help bridge any communication gaps, would it be possible for
your office to provide me an email as to how much criminal history is needed and why
the information is needed. Knowing the parameters of such a request is very important in
knowing what can be shared.

2020-ICLl-00023 1499
Just to complete the introduction I have added some of my roles and responsibilities; as
well as the other countries that are included in my area of responsibility.

• Serve as the Deportation Liaison Officer for U.S. Immigration and Customs
Enforcement (ICE), Homeland Security Investigations (HSI) at the U.S. Embassy,
Bangkok, Thailand.
• Serve as the subject matter expert in all facets of removal program; represent the
Attache and/or ICE HSI-ERO Headquarters in bilateral and multi-lateral
d iscussions and negotiations that facilitate the repatriation of removable foreign
nationals in a timely and consistent manner.
• Investigate and verify identity claims; obtain clearance for charter removal
fl ights; coordinate the return of international fugitives; expand the agency's ability
to remove d ifficult and high profile aliens in surrounding nations and serve as the
embassy point of contact regarding DHS/ICE Enforcement and Removal
Operations (ERO).

My AOR includes:

Australia
Brunei
Cambodia
East Timor
Fij i
French Polynesia (Fr.)
Indonesia
Kiribati
Laos
Malaysia
Marshall Islands
Micronesia
Myanmar
Nauru
New Caledonia (Fr.)
New Zealand
Palau
Papua New Guinea
Philippines
Pitcairn Islands (UK)
Samoa
Singapore
Solomon Islands

2020-ICLl-00023 1500
Thailand
Tonga
Tuvalu
Vanuatu

I look forward to hearing from you and hope we can establish a strong line of communication for
all U.S-Samoa repatriation issues. I have copied the ICE/ERO Deputy Attache for Removals
l(b)(6); I I
who is assigned to the U.S. Embassy New Delhi, India. M1~?<6~; overseas
repatriation issues in all of the Pacific Islands, Asia, and some of the Mi e ast and African
countries.

Best Regards,

Kb)(6 ); (b)(7 )(C )


Assistant Attache - ERO Removals
OHS/ Immigration & Customs Enforcement
U .S. Embassy Bangkok

2020-ICLl-00023 1501
From: Kb)(6); (b)(7)(C)
Sent: 15 Mar 2018 18:13:33 -0400
To: b)(6);
Cc: b)(7)(C)
Subject: FW: Criminal History Information for Deportees from the U.S.

~b)(6); _, I
Below is the response from Samoa. As you can see, I will need an in depth response. Do
you know of any MOAs or MOCs used for information sharing? NZ and AUS have
MOCs with Samoa which enables the sharing.

Thanks,

Sent with BlackBen-y Work


(www.blackberry.com)

From: Commissioner of Police k"""h.......)(__n__


)·. .fh
. .__)__(7......).......
fC'......)_ _ _ _ __.
Date: Friday, 16 Mar 2018 1:59 AM
To: l(b)(6): (b)(7)(C)
Subject: RE: Criminal History Information for Deportees from the U.S.

Hi Kb)(6);

As any responsible government agency (in any country) would, we need the complete criminal
history, so that we can properly classify each deportee. We are also required to capture crimes
of sexual nature for the Sex Registrar and any other offense listed in the criminal history to be
lodged into our national criminal database.

New Zealand and Australia are providing the information on deportees prior to their arrivals;
therefore, I would think the US would do the same.

Thanks you for taking the time to email. The info sharing would not only assist with our national
security, but also build better relations between the US and Samoa law enforcements.

Res pectfu Ily,

Kb)(6);
COMMISSIONER OF POLICE, SAMOA

From:Kb)(6); (b)(?)(C)
Sent: Thursday, March 15, 2018 7:11 PM
~~~ l(b)(6); (b)(?)(C) I
Subject: Criminal History I nformation for Deportees from the U.S.

Police Commissioner~b)(6)1

2020-ICLl-00023 1502
Good Afternoon. My name iskb)(6); (b)(7)(C) lm d I am the Assistant Attache for
Removals for the U.S. Department of Homeland Security (DHS), Immigration and
Customs Enforcement (ICE) in Bangkok, Thailand. I have recently been in contact with
MrJ(b)(6); (b)(7)(C) !regarding the sharing of criminal history for Samoan nationals being
deported from the U.S. and he mentioned your desire for enhance criminal history
sharing. I am in contact with our ICE privacy compliance department and they are
looking into what can be shared. I can tell you NCIC printouts cannot be shared as ICE
does not own the NCIC record. Generally, ICE only provides the crimes that have led to
an individual's removal. It is my understanding (correct me ifl am wrong) that the
criminal history helps Samoan law enforcement measure the level of criminal that is
being deported and assists Samoan law enforcement with planning resources for
monitoring individuals or applying other services to ensure the deported individual
doesn't get involved with crime the moment they return. Increased criminal history
sharing may be a tough obstacle to overcome but in order for ICE Privacy to give you a
thorough answer and to help bridge any communication gaps, would it be possible for
your office to provide me an email as to how much criminal history is needed and why
the information is needed. Knowing the parameters of such a request is very important in
knowing what can be shared.

Just to complete the introduction I have added some of my roles and responsibilities; as
well as the other countries that are included in my area ofresponsibility.

• Serve as the Deportation Liaison Officer for U.S. Immigration and Customs
Enforcement (ICE), Homeland Security Investigations (HSI) at the U.S. Embassy,
Bangkok, Thailand.
• Serve as the subject matter expert in all facets of removal program; represent the
Attache and/or ICE HSI-ERO Headquarters in bilateral and multi-lateral
discussions and negotiations that facilitate the repatriation of removable foreign
nationals in a timely and consistent manner.
• Investigate and verify identity claims; obtain clearance for charter removal
flights; coordinate the return of international fugitives; expand the agency's ability
to remove difficult and high profile aliens in surrounding nations and serve as the
embassy point of contact regarding DHS/ICE Enforcement and Removal
Operations (ERO).

My AOR includes:

Australia
Brunei
Cambodia
EastTimor
Fiji

2020-ICLl-00023 1503
French Polynesia (Fr.)
Indonesia
Kiribati
Laos
Malaysia
Marshall Islands
Micronesia
Myanmar
Nauru
New Caledonia (Fr.)
New Zealand
Palau
Papua New Guinea
Philippines
Pitcairn Islands (UK)
Samoa
Singapore
Solomon Islands
Thailand
Tonga
Tuvalu
Vanuatu

I look forward to hearing from you and hope we can establish a strong line of communication for
all U.S-Samoa repatriation issues. I have copied the ICE/ERO Deputy Attache for Removals
Kb)(6); . I
who is assigned to the U.S. Embassy New Delhi, India. Mrt~~~~~;- pverseas
repatriation issues in all of the Pacific Islands, Asia, and some of the Middle East and African
countries.

Best Regards,

kb)(6); (b)(?)(C)
Assistant Attache - ERO Removals
OHS/ Immigration & Customs Enforcement
U.S. Embassy Bangkok

2020-ICLl-00023 1504
- 14 : 33

TECS RECORD

FIRST b)(6);
IMAGE
TECS II - PERSON SUBJECT DISPLAY (1 OF 4)

NAME- LAST h)fn)· (h)(7 )(r,)


MID
ALIAS NICKNAME
ENTRY -
041315

HISPANIC U RACE U SEX M HAIR


STC
UPDATE
PHYSICAL IDENTIFIERS
EYES
HT 000 000 WT 000 000 ENGLSH

-
PERSONAL- S/M/T MORE
DOB !<b)(6): POB- CNTRY ST CITY CTZN MORE
SSN _ _ _ _.....,MORE AFN MORE RES MORE
PPN l( b)(6); I TYPE I CNTRY US ISSDT EXPDT MORE
ADDRESS- DATE STREET APT
CITY STATE CNTRY ZIP TYPE MORE
CONTACT- PHONE
OWNER CASE NBR MORE
PRIMARY
STATUS

NTFY

REMARKS- DATE 033010 MORE


(b)(?)(E)

NO SUB-RECORDS

Key :
*A - (b) (7) (E)
*B - (b) (6), (b) (7) (C)
*C - (b) (7) (E)
*D - (b) (7) (E)
*E - (b) (7) (E)
*F - (b) (7) (E)
*G - (b) (6), (b) (7) (C) , (b) (7) (E)
*H - (b) (6), (b) (7) (C), (b) (7) (E)
*I - (b) (7) (E)
*J - (b) (7) (E)
*K - (b) (7) (E)

2020-ICLl-00023 1505
-
14 : 33 PQH API/HIT DATA

QUERY
0 41315

LNE TERM/
NAME DOB DATE TIME AGN RSLT TYP REF LANE API
!fh\/1':\· / h\/7\/r"\ l(b)(6): 022314 0000 - API R
CUN - CANCUN DOC : !<b)(6): (b)(7)(C)! US P INSP : APIS QRY

API DATA ----


INDICATOR R REPORTED
CARRIER CODE DL DELTA AIR LINES INC .
FLT/VES NUMBER 501
ARRIVAL LOCATION CUN CANCUN
DEPARTURE LOCATION MSP ST PAUL INTL
TRANSMITTED BY DLMTC DELTAMATIC AQQ SUBMISSIO
INBOUND/OUTBOUND OUTBOUND

(b) ( 7 ) °' E) (b) (7) : E)

Key :
*A - (b) (7) (E)
*B - (b) (6), (b) (7) (C)
*C - (b) (7) (E)
*D - (b) (7) (E)

2020-ICLl-00023 1506
14 : 33 : 29 !(b)(7)( 1 Inspection Results 041315
- A822 CB P-MEXICO CITY
FLT/VES# : DL 501 DELTA AIR LINES INC .
DOCTYP* : P #* :kh) (n)· ( h )(7 )(r,) ! CTRY*: us UNITED STATES ST : M/F : M
DNAME (LAST) : ~ FRST: kb)(6); (b)(7)(C) DOB : l(b)(6): I
RFRD BY : - - - - - - -CBP OFFCR- C DTE : 02242 014 TME : 1320
REASON: ESTA: CCD :
OTHER

SNAME(LAST) : FRST: DOB :


NATIONALITY : US UNITED STATES
DISP : IAK JS P INSPECTION - ACTION TAKEN RCPT#: AUDATE :
CHARGE (CODED) :
DFRD TO : I94W# : FIN# :
SEC OFCR : - -CBP OFFCR-C 02/24/2014 13 : 20 IOEM# :
REFR COE :
COMMENTS : VIOLS :
INITIATOiflll
TYPE OF EVENT : REGISTERED SEX OFFENDER

-
Key :
*A -
*B -
*C -
&•MM@ i•iiiiiW f -•
(b) (7) (E)
(b) (6), (b) (7) (C)
(b) (7) (E)
(0) ('11 , E 1

--
*D - (b) (6) (b) (7) (C)
*E - (b) (6) (b) (7) (C)
*F - (b) (7) (E)
*G - (b) (7) (E)
*H - (b) (7) (E)

2020-ICLl-00023 1507
-
14 : 33 : 3 0 (b)(7)( INSPECTION COMMENTS
C:\

+------------------ I N SPECTION
IN I T I ATOiflll
0 4/13/2 0 15

PAGE 1
COM ME NTS --------------------+

TYPE OF EVENT : REGISTERED SEX OFFENDER

ADDIT IONAL COMMENTS

+-----------------------------------------------------------------------------+

Key :
fiiMMM FFIIFIW ' bi ,'/' (E I

*A - (b) (7) (E)


*B - (b) (6), (b) (7) (C)
*C - (b) (7) (E)

2020-ICLl-00023 1508
14 : 33 : 29 ~b)(?)(~ Inspection Resu l ts 04 1315
- A822 CB P-MEX ICO CITY
FLT/ VES # : DL 501 DELTA AI R LINES INC .
DOCTYP* : P #* : Kb)(6); I CTRY*: us UNITED STATES ST : M/F : M
DNAME (LAST) :Kb)(6); (b)(7)(C) I FRST : kb)(6); (b)(7)(C) DOB : kb)(6):
RFRD BY :
REASON :
(b)(7)(E)
- -CBP OFFCR- C DTE : 02 192015 TME : 2336
ESTA: •
CCD:

SNAME(LAST) : FRST: DOB :


NATIONALITY : US UNITED STATES
DISP : IAI IAP INSPECTION --«mfiD:111111 RCPT# : AUDATE :
CHARGE (CODED) :
DFRD TO : I94W# : FIN# :
SEC OFCR : - -CBP OFFC R-C 0 2/19/201 5 23 : 36 IOEM# :
RE FR COE :
COMMENTS : VIOLS :

-
Key :
*A -
*B -
*C -
&•MM@ i•iiiiiW f -•
(b) (7) (E)
(b) (6), (b) (7) (C)
(b) (7) (E)
(0) ('11 , E 1

--
*D - (b) (6) (b) (7) (C)
*E - (b) (7) (E)
*F - (b) (6) (b) (7) (C)
*G - (b) (7) (E)
*H - (b) (7) (E)
*I - (b) (7) (E)

2020-ICLl-00023 1509
-
14 : 33 : 3 0 l(b)(7)(

+------------------ I N SPECTION
(b)(7)(E)
IINSPECTION COMMENTS 0 4/13/2 0 15

PAGE 1
COM ME NTS --------------------+

ADDIT IONAL COMMENTS


(b)(7)(E)

+-----------------------------------------------------------------------------+

fiiMMM FFIIFIW ' bi ,'/' (E I

Key :
*A - (b) (7) (E)
*B - (b) (6), (b) (7) (C)
*C - (b) (7) (E)

2020-ICLl-00023 1510
From: l(b)(6); KCTR)
Sent: 1 Jul 2019 15:03:29 +0000
To: l(b)(6); (b)(7)(C) j(CTR)
Subject: Fleet Unite Survey
Attachments: RE: Survey Gizmo Access Request, RE: Request to Expedite -~kb_l(7_l(_E_l --~I RE:
concern with PII submitted as part of 2019 ICE Vehicle Allocation Methodology (VAM) Survey

Hi Jen,

Attached are the email chains. In the email is also a copy of the survey and the request t he Fleet
Management Unit sent to OCIO.

Please let me know if you have any questions.

Thanks,

Trinh

2020-ICLl-00023 1511
From: l(b)(6); tcrR)
Se nt: 10 Jun 2019 20:46:31 +0000
To: (b)(6); (b)(7)(C)
Cc:
Subje ct: RE: Survey Gizmo Access Request

Thank you, Mfb)(6); I


The information you've provided is very helpful. If further information is
needed, I will reach out again, but, based on the information you've provided and our other research,
the survey is fine.

Thank you for your time.

Best regards,

l(b )(6);
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
kb)(6): (b)(7)(C) I
202-732 ~~~~~~;,
1 1

From:Kb)(6); (b)(7)(C) I
Se nt: Monday, June 10, 2019 4:39 PM
To: r b)(6); (b)(7)(C)
Cc:
Subject: RE: Survey Gizmo Access Request

Email address if requested so we know who submitted the survey. We need operators to submit these,
not VCO's and the only way is to get the email address and link that to t he SAMS profile once captured.

The barcode is requested so we know what vehicle the survey taker is responding to. The barcode is an
arbitrary number that has no meaning unless you have access to DHS SAMS.

Thanks,

fb)(6): (b)(7)(C) IUnit Chief I Fleet Management


U.S. Immigration and Customs Enforcement {ICE)
Office of Asset and Facilities Management (OAFM)
500 12th Street SW, Washington, DC. 20536-5703
Office : 202. 732 (b)(6);
Cell Phone: 202-381 (b)(6);
b)(6): (b)(7)(C)

Fron{b)(6); ~CTR)
Se nt: Monday, June 10, 2019 3 :26 PM
To: kh)(R)· fh)(7)fr,)
Subject: RE: Survey Gizmo Access Request

2020-ICLl-00023 1512
M1b)(6); (b)(7)(C) I
Potentially last question, can you confirm why an email address and barcode are needed? It's not an
anonymous survey because you need to ensure the assigned barcode number for the vehicle is
associated with the accurate person?

Thank you for your time,

Kb)(6); I
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
Kb)(6); (b)(7)(C) I
202-732Kb)(6);

From (b)(6); (b)(7)(C)


Sent: Mon ay, June 10, 2019 11:19 AM
To:Kb)(6); (b)(7)(C)
Cc: I
~------------------~
Subject: FW: Survey Gizmo Access Request

Good morningl(b)(6); _ I
Per our phone call, please see the below email traffic with our OCIO POC to open Survey Gizmo for the
VAM survey. Additionally, I have attached an email with the initial request to the ICE SOC for access to
the survey tool. Please let me know if you have any questions.

Thanks,

l(b)(6); (b)(7)(C) II Unit Chief I Fleet Management


U.S. Immigration and Customs Enforcement (ICE)
Office of Asset and Facilities Management (OAFM)
500 12th Street SW, Washington, DC. 20536-5703
Office : 202.732!<b)(6): !
Cell Phone: 202-381~!<b_)_ ( 6-):~I
l(b)(6); (b)(7)(C)

(b)(6); (b)(7)(C)
I

Subject: RE: Survey Gizmo Access Request

Hello!<b)(6): !I'll work with the department and ensure there are no interruptions with the site.

2020-ICLl-00023 1513
!<b)(6): pSM, GSTRT
SOC Deputy Chief
Cyber Defense and Intelligence Branch
Information Assurance Division
Office of the Chief Information Security Officer (OCISO)
U.S. Immigration and Customs Enforcement
Department of Homeland Security
Mobile: (202) 604 b)(6);
EMAi b)(6); (b)(7)(C)
HSDN:
JWICS

From;Kb)(6); (b)(7)(C)
Sent: Thursday, April 11, 2019 4:53 AM
To~(b)(6); (b)(7)(C)
Cc:I
(b)(6); (b)(7)(C)

Subject: Survey Gizmo Access Request

Good morn ingl~~~~~~;- I


Mr.Kb)(6); I
and!(b)(6); ~orked with you earlier on opening Survey Gizmo to allow ICE's
officers/agent to complete the VAM survey.

We had to seek approval from the Department on our approach for the VAM which has pushed back our
survey date.

Our new schedule is below and requires survey access until September 30. This will also allow the
property unit to conduct their annual property survey separate from the fleet VAM.

• March 21st - April 30th - Vehicle operator clean up in SAMs


• April 24th - VAM Briefing for HPFMs and VCOs
• May 1st - June 26th- Conduct Surveys
• June 27th - Aug 1st- Evaluate survey responses and analyze fleet data
• Aug 2 nd - Aug 16th- Provide recommendations to Programs for review/feedback
• Aug 1ih - Sep 9 th- Consensus survey provided to Program Leadership for coordination
and consensus on survey recommendations

Please let me know if you have any issue with the date change.

Thank you,

(b_)(_7)_(C_)_ ~ I Unit Chief I Fleet Management


~~b_)(_6)_; _

2020-ICLl-00023 151 4
From: l(b)(6); I
Se nt: 11 Mar 2019 15:41:25 +0000
To: ~b)(6); (b)(7)(C) I
Cc: l(b)(6); (b)(7)(C)
Albert
Subject: RE: Request to Expedite - RITMOOS4123

Hello!{b)(6! just wanted to inform you that I'm able to get to the Gizmo site now. At your earliest, please
test. If it does not work, please let me know.

l(b)(6): ICISM, GSTRT


SOC Deputy Chief
Cyber Defense and Intelligence Branch
Information Assurance Division
Office of the Chief Information Security Officer (OCISO)
U.S. Immigration and Customs Enforcement
Department of Homeland Security
Mobile: (202) 604-l(b)(6); I
EMAIL b)(6); (b)(7)(C)
HSDN:
JWICS:

From:Kb)(6); (b)(7)(C) I
Se nt: Friday, March 8, 2019 9:21 AM
To: Kb)(6); (b)(7)(C)
Cc: I I
(b)(6); (b)(7)(C)

Subject: RE: Request to Expedite - RITM0054123

Good Morning.

We have one other (not 2) Property survey that we need it to be opened for from July 15th through
September 30 of 2019.

Thanks.

V/r,

l<b )(6):

From:j(b)(6); (b)(7)(C) I
Se nt: Friday, March 8, 2019 10:48 AM
To: b)(6); (b)(7)(C)
Cc:
(b)(6); (b)(7)(C)

2 020-ICLl-00023 1516
Thank you~or your support, We greatly appreciate it.l~b)(6;I

From: !rh)(R)·
Sent: Friday, March 8, 2019 10:42 AM
~~,(b)(6); (b)(7)(C)

r b)(6); (b)(7)(C)

Subject: FW: Request to Expedite - RITM0054123

The site will be open on the 12th . If it does not work by COB on the 12th, please let me know. Thank you
and have a great day.

Very Respectfully,
!rh )(n)· ICISM, GSTRT
SOC Deputy Chief, Cyber Defense and Intelligence Branch
Information Assurance Division
Office of the Chief Information Security Officer (OCIO)
U.S. Immigration and Customs Enforcement
Department of Homeland Security
Cell: 202-604l(b)(6); I
EMAIL b)(6); (b)(7)(C)
HSDN:
JWICS

From:!(b)(6): (b )(7)(C)
Sent: Friday, March 8, 2019 8 :39 AM
To: kh \rn\· th\17\f r'\
(CTR)!(b)(6): (b)(7)(C) !(CTR)
kb)(6): (b)(7)(C)
____
Cc: DHS ESOC _.__
,_ _______
(b)(6); (b)(7)(C)
b)(6): (b)(7)(C)
_., ICE soc kb)(6): (b)(7)(C)
Subject: RE: Request to Expedite - RITM0054123

Understood.

(b)(6); Please complete this request.


I L-. \ /7 \ /r,.

v/r
Kb)(6); (b)(7)(C) I
Sr. Network Engineer - OHS OneNet Network Operations Center
MGMT/OCIO/ITSO/ESD
US Department of Homeland Security
CACI
(0)202.4471Zhlffi)C)202.853kfillfil]
l(b)(6); (b)(7)(C) I

2020-ICLl-00023 1517
Enterprise OpCen Portal
OneNet Network OpCen

From:l(b)(6); (b)(7)(C)
Sent: Friday, March 8, 2019 10:37 AM
To:l(b)(6): (b)(7)(C) (CTR) i(b)(6): (b)(7)(C)
kb)(6): I(CTR) (b)(6); (b)(?)(C) CTR)
(b)(6): (b)(7)(C)
Cc: DHS ESOC <i{b)(6); (b)(?)(C) I;
ICE SOC ._l
(b_)(_6 )_; (_b)_(?_)(_C)_ _ _ _ _ __ ,
l(b)(6): (b)(7)(C) I
Subject: RE: Request to Expedite - RITM0054123

OneNet Firewall-

ESOC approves opening the destination addresses to Component ICE only from March 12, 2019 to June
15, 2019.

Please update Web Request RITM0054123 with these additional details as well as the attached emails,
and plan to block the destination addresses again starting June 16, 2019.

Thanks,

l(b)(6); (b)(?)(C) I
Government Watch Officer
Enterprise Security Operations Center
Department of Homeland Security
Desk: (202) 3724rh1fR1· i
Mobile: (202) 403~
UNCLAS b)(6); (b)(7)(C)
24/7 Email: b)(6): (b)(7.
24/7 Phone: 1-877-347 b)(6) ption# 2)

From: l(b)(6); (b)(?)(C)


Sent: Friday, March 8, 2019 10:32 AM
To:!fb)(6): (b)(7)(C)
ccj(b)(6); (b)(7)(C) [CTR)
...
kh.._.),_,_(R,)·;::
_,_ (=h)==(7==)=(('_=·'==========:;-------;::=============::::::;-------'1; DHS
~ES_o_c __ b)_(6_); _(b_)(_ 7)_(C_) - - - - . ; ICE soc ~(b)(6); (b)(?)(C)
b)(6): (b)(7)(C)
Subject: RE: Request to Expedite - RITM0054123

Hello ESOC, At this time, we need the site open for use from March 15 through June 15, 2019. Please
open the site a few days before actual surveys are sent to ensure everything is working.

If any other dates are needed, ICE SOC will open a WR with those dates.

Thank you very much for all the assistance!

Very Respectfully,

2020-ICLl-00023 1518
kb)(6); I
CISM, GSTRT
SOC Deputy Chief, Cyber Defense and Intelligence Branch
Information Assurance Division
Office of the Chief Information Security Officer (OCIO)
U.S. Immigration and Customs Enforcement
Department of Homeland Security
Cell: 202-604J(b)(6): I
EMAIL b)(6); (b)(7)(C)
HSDN:
JWICS:

From:l(b)(6); (b)(7)(C)
Se nt: Friday, March 8, 2019 7:53 AM
To:l(b)(6); (b)(7)(C)
Cc: kb)(6); (b)(7)(C) ICTR)
rb)(6); (b)(7)(C)

Subject: Re: Request to Expedite - RITM0054123

(b)(6);
(b)(7)(C)
Do we know how long OAFM wants these sites open for? Would prefer to only open for a certain
duration only for Component ICE (or smaller subnet if the mission will allow).

Thanks,

(b)(6); (b)(7)(C)
overnment atch Officer
Enterprise Security Operations Center
Department of Homeland Security
Desk: 202 372 (b)(6);
Mobile: 202 403 (b)(6):
UNCLASS(b)(6); (b)(7)(C)
24/7 Email: b)(6); (b)(7)(C)
24/7 Phone: 1-877-34!fi))@)Option# 2)

On Mar 8, 2019, at 8:44 AM,l(b)(6); (b)(7)(C) pwrote:


Hello ESOC, please see attached email from Mr¥b)(6); IICE CISO.

Very Respectfully,
kh1fR1· !CISM, GSTRT
SOC Deputy Chief, Cyber Defense and Intelligence Branch
Information Assurance Division
Office of the Chief Information Security Officer (OCIO)
U.S. Immigration and Customs Enforcement
Department of Homeland Security
Cell: 202-604 b)(6)
EMAIL b)(6); (b)(7)(C)

2020-ICLl-00023 1519
HSDN:(b)(6); (b)(7)(C)
JWICS

From:kb)(6): (b)(7)(C)
Sent: Friday, March 8, 2019 6:40 AM
To: b 6 · b 7 C CTR)
.--:-:-
(b--:-:)('="6)~;(~b)""=
(7~)('=°'C)~ ' - - - - - - - - - - - - - - , . . _ _ _ _ _ J

;...Cc::..!:(::::::
b)::::::::
(6::::::::
);:::::::
(b:::::::
)(:: : :7)(C::::::
: : : : : )= = : - - - - - - - - - - - - - - - - - - - - - - - ' ; ICE SOC
Kb)(6); (b)(7)(C) I
Subject: RE: Request to Expedite - RITM0054123

b)(6);
/L...\/7 \ /r,. \

Looks like b 6 · worked this request. I found the following in the request notes
from b)(6); (b)(7)(C)

b)(6); (b)(7)(C); (b)(7)(E)

If you would like us to proceed and complete the request, please let me know.

v/r
l(b)(6); (b)(7)(C) I
Sr. Network Engineer - OHS One Net Network Operations Center
MGMT/OCIO/ITSO/ESD
US Department of Homeland Security
General Dynamics Information Technology
(0)202.4471iliR](C)202.ss3l(b)(6); I
b)(6); (b)(7)(C)

From:Kb)(6); (b)(7)(C)
Sent: Friday, March 8, 2019 8:34 AM
To: (b)(6); (b)(7)(C)
(CTR) b)(6); (b)(?)(C)

c,.......__
b_)(6_)_
; (b
_)_
(7_)(C_)_.-----_ _ ___. ; OHS ESOC ~b)(6); (b)(?)(C) I; ICE soc
(b)(6); (b)(7)(C)
Subject: RE: Request to Expedite - RITM0054123

kb)(6 ): ( b )(7)(C)

2020-ICLl-00023 1520
ICE is reporting that they still do not have access tokb)(6): (b)(7)(C) jfrom ICE network
(neither I RM NET nor VPN). Can you please revisit WR# RITM00S4123?

Thanks,

!(b)(6): (b)(7)(C)
Government Watch Officer
Enterprise Security Operations Center
Department of Homeland Security
Desk: (202) 3721lliRfil]
Mobile: (202) 403 b)(6);
UNCLASS: h)(f;)· f h)f7)f<:)
24/7 Email (b)(6); (b)(?)(C)
24/7 Phone: 1-877-34 b)(6): Option# 2)

From:l(b)(6): (b)(7)(C) IOn Behalf Of DHS


ESOC
Se nt: Wednesday, March 6, 2019 1:52 PM
To: DHS ESOC GWO ~(b)(6); (b)(7)(C) I
..:C..:
c::....:D
:..:H..:.:S::....:E:.:S:.:
O:.:C:_f::::h::::::)(=n=)·=(h=)=(7=)= '======:::::::-____. .,.(CTR)
(r,= ,
!rb)(6): (b)(7)(C)

Subject: FW: Request to Expedite - RITM0054123

Good Afternoon GWO's,

The following web request has been forwarded to your queue, RITM0054123.

j(b)(6); __I
l(b)(6); (b)(7)(C)
Security Analyst
Enterprise Security Operations Center (ESOC)
Department of Homeland Security
MGMT/OCIO/OCISO
<image00l.jpg>

This electronic mail (including any attachments) may contain information that is
privileged, confidentia l, and/or otherwise protected from disclosure to anyone other
than its intended recipient(s). Any dissemination or use of this electronic mail or its
contents (including any attachments) by persons other than the intended recipient(s)
is strictly prohibited. If you have received this message in error, please notify us
immediately by reply e-mail so that we may correct our internal records. Please then
delete the original message (including any attachments) in its entirety. Thank you

From: ICE SOC ~(b)(6): (b)(7)(C)


Se nt: Wednesday, March 6, 2019 11:09 AM
To: DHS ESOC fb)(6); (b)(?)(C) I

2020-ICLl-00023 1521
Cc: ICE SOC tb)(6): (b)(7)(C) I
Subject: Request to Expedite - RITM0054123

ESOC,

ICE SOC is requesting that RITM0054123 be expedited per the ICE CISO. Thank you for
your assistance!

Respectfully,

l(b)(6); (b)(7)(C) lc 1ssP, ccsP, CEH


Defense Point Security I ICE SOC Shift Lead
Information Assurance Division
U.S. Immigration and Customs Enforcement
Department of Homeland Security
Email:!(b)(6): (b)(7)(C)
24/7 SOC: (480) 496j(b)(6): (b)(7)(C)
ICE Service Desk: (s =-ss::::)---:3::--:4::::.~=
rb=)r=6=
t =rb=)=
r 7= ) ==----------,
)<=c=

<mime-attachment>

2020-ICLl-00023 1522
From: l(b)(6); (b)(7)(C)
Se nt: 6 Jun 2019 20:10:58 +0000
To: (b)(6); CTR)
Cc: b)(6); (b)(7)(C)
Subje ct: RE: concern with PII submitted as part of 2019 ICE Vehicle Allocation
Methodology (VAM) Survey
Attachments: Final FY19 ICE VAM Survey Questions.pdf

Afternoon kb )(6):

We have no contract in place that I am aware of w ith Survey Gizmo, but use them per a reference by the
OCIO. Please also see the VAM questions attached which have no PII in them and no law enforcement
specific data. Additionally, please see Survey Gizmo's Privacy policy HERE.

Please let me know if you need additional information.

l(b)(6); (b)(7)(C) II Unit Chief I Fleet Management


U.S. Immigration and Customs Enforcement (ICE)
Office of Asset and Facilities Management (OAFM )
500 12th Street SW, Washington, DC. 20536-5703
Office: 202.732~--=-;;.--~
b)(6):
Cell Phone: 202-381 b)(6):
l(b)(6); (b)(7)(C)

Fromtb)(6); [CTR)
Se nt: Thursday, June 6, 2019 1:34 PM
To:l(b)(6); (b)(7)(C)
Subject: FW: concern with PII submitted as part of 2019 ICE Vehicle Allocation Methodology (VAM)
Survey

Hi Mrkb)(6); (b)(7)(C) I

This i~~?!~~!;,lwith the ICE Privacy Office, we spoke a few minutes ago. My contact is below.

Thank you for your assistance with the matter.

Best regards,

l(b)(6):
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
l(b)(6): (b)(7)(C) i
202-732J(b)(6); J

Fromfb)(6); ~CTR)
Se nt: Thursday, June 6, 2019 12:06 PM

2020-ICLl-00023 1523
To: HSI Tasking 2 k"""b;..;.)(a..a6..a.a
):-'-(b
""')"'(7
""__).a..a
(C;..;.)_ _ _ ___,
Subject: concern with PII submitted as part of 2019 ICE Vehicle Allocation Methodology (VAM) Survey

Good afternoon,

I am with the ICE Privacy Office and have been tasked with following up on a possible privacy incident;
an ICE user who has been requested to take the VAM survey is concerned about the collection of
personally identifiable information (PII) on a non-governmental website. To investigate the claim, I am
requesting for your help to obtain the POC of the survey or a contact for the Fleet Management Unit.

I appreciate your assistance in the matter.

Thank you,

kb)(6);
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
l(b)(6); (b)(? )(C ) I
202-732 (b)(6);
/l,.,\/7 \/1"\

2020-ICLl-00023 1524
w~ ;- U.S. Immigration
?a t
'?i.~
0

and Customs
Enforcement
2019 ICE Vehicle Allocation Methodology (VAM) Survey Questions
Thank you for participating in the 2019 Vehicle Allocation Methodology (VAM) Survey. The survey
should take approximately 8-10 minutes to complete. You will need to enter in the barcode of your
vehicle as part of the survey, therefore please ensure you have the information prior to starting the
survey. The barcode can be found on the driver's side doorjamb of the motor vehicle or affixed to the
inside of the motor vehicles' glove box. Your responses are very important to ICE in ensuring we
have detailed information regarding the ICE fleet. If at any time you need to exit out, please use the
save and continue feature in the top right corner of the survey. For questions regarding this VAM
survey, please reach out directly to your HPFM. Thank you again for participating in the ICE 2019
VAM Survey.

1. Please type in the barcode number for your vehicle. (The vehicle barcode can be found
on the driver's side doorjamb of the motor vehicle or affixed to the inside of the motor
vehicles' glove box.)

2. Please enter in your government email address.

3. Are you the operator of the referenced vehicle?


• Yes
• No
4. If No, are you a VCO who manages the assignment of this vehicle? (If 03 is no)
• Yes
• No (If no, survey closes)

5. Is the vehicle held in reserve for future staff assignments?


• Yes
• No
6. If the vehicle is being held in reserve for future staff assignments, please indicate when
new staff will be added, (If 05 is yes)
• Less than 30 days
• 30 to 90 days
• More than 90 days
• Unknown

7. Is this a backup or spare vehicle?


• Yes
• No
8. Which ICE Program/Office do you work for? (select all that apply)
• ERO
• HSI - HSI
• HSI - Intel
• HSl - 1O
• HSI - SEVP
• CFO
• OAS
• OCIO
• OFTP
• OPLA

2020-ICLl-00023 1525
~ : U.S. Immigration
~~a)~ and Customs
\~ Enforcement
2019 ICE Vehicle Allocation Methodology (VAM) Survey Questions
• Q PR
• OTO

9. What is your office location? (City, State, Zip Code Drop Down)

10. Where is the vehicle garaged when not in use?


• Office
• Residence
• Other - - - -

11 . If the garaged location is different than the Office location, please provide the specified
garaged location (City, State, Zip Code), otherwise put "N/A".

12. Does this vehicle and its driver travel to the same office or field facility at least 75% of
the total work days per month?
• Yes
• No
13. Is this vehicle used for routine Home-to-Work (HTW) usage?
• Yes
• No (Skip to 016)

14. What is the current odometer reading?

15. When was this odometer reading taken? (calendar drop down)

16. How many weeks per year is this vehicle typically used? (Based on past two years of
operations)
• 1 - 4 weeks (up to one month)
• 5 - 12 weeks (one to three months)
• 12 - 26 weeks (four to six months)
• 26 - 38 weeks (six to nine months)
• All year

17. When in use, how many days per week is this vehicle typically used? (Based on past
two years of operations)
• 1
• 2
• 3
• 4
• 5
• 6 to 7

18. When in use, how many hours per day is this vehicle typically used? (This is the entire
time that the vehicle is away from its normal parking area.)
• Less than 1
• 1 to 2
• 2 to 4
• 4 to 8

2020-ICLl-00023 1526
~ : U.S. Immigration
~~a)~ and Customs
\~ Enforcement
2019 ICE Vehicle Allocation Methodology (VAM) Survey Questions

• 8 to 10
• More than 10

19. How many trips per week does this vehicle average? (Trip: Vehicle is driven and
unavailable to other users. For example, the driver starts the engine, drives the vehicle
from the office location to a different location and turns off the engine.)
• 1
• 2 to 3
• 4 to 6
• 7 to 12
• 13 or more

20. How many hours does a typical trip take for this vehicle? (Calculate as time between
engine turn on and shut off)
• Oto 0.5
• 0.5to 1.5
• 1.5 to 3
• 3 to 5
• More than 5

21. In your estimation, how many hours a day does the vehicle idle?
• Enter number from Zero to 24 hours

22. Select and rank the Top 3 work purposes for this vehicle?
• Counter-Proliferation Investigations
• Detainee Transport
• Drug Smuggling
• Emergency/Contingency Response
• Emergency Response (e.g. Ambulance, Fire Truck, Mobile Command Post)
• Fight Financial Crimes
• General Business and/or Administration
• High Intensity Drug Trafficking Area
• Human Smuggling & Trafficking
• Law Enforcement
• Maintenance & Repair
• Mission Support
• Rapid Response Team (RRT)
• Secure Cyberspace and Safeguard Children
• Special Response Team (SRT)
• Theft and Illegal Trade
• Other (Specify): _ _ __

23. In your opinion, how would elimination of this vehicle affect your mission? Elimination
wou ld:
• Be detrimental/devastating to the core mission of this unit
• Be inconvenient, would require additional planning and scheduling
• Impair efficient/effective mission completion

2020-ICLl-00023 1527
~ : U.S. Immigration
~~a)~ and Customs
\~ Enforcement
2019 ICE Vehicle Allocation Methodology (VAM) Survey Questions
24. Please explain what operations would be adversely affected without this vehicle?

25. Is pooling/sharing of this vehicle practical at your specific work location? (Select all that
apply.)
• With in your Division/Department
• With another Division/ Department
• Already a pool or shared vehicle
• Pooling/Sharing not possible

26. Please select the option that best describes the use of this vehicle:
• This vehicle is a standard vehicle of any make or model that may be used for
other law enforcement operations.
• This vehicle is configured for patrol, pursuit, arrests, law enforcement, police
activities, or dignitary protection and is used in that capacity 75% of the year or
more.
• This vehicle is configured in one of the two forms above but is primarily used by
supervisors and managers who administer the department's programs.
• This vehicle is configured to perform intelligence, investigations, and surveillance
activities and is used in that capacity 75% of the year or more.

27. Please indicate the mode of operation for this vehicle:


• Assigned Randomly
• Assigned to a single officer/driver
• Assigned to a small group of drivers
• Pool vehicle used as needed for temporary assignments.
• Spare vehicle used to replace vehicles temporarily out of service.
• Vehicle is held in reserve to assign for future staff additions

28. Which of the following is the PRIMARY purpose of this vehicle?


• Carrying Cargo or Materials, e.g. cargo body, dump truck, fuel truck, transport
tractor, etc.
• Special Purpose Vehicle/Equipment, e.g. mobile command center)
• Transporting the Driver Only
• Transporting the Driver and Passenger(s)
• Transporting Driver, Tools and Equipment to and/or from Job Sites

29. What percent of the time is this asset used for the following purposes? (Note: The total
may exceed 100%, but you must enter a O for all purposes that are not applicable) :
• Carrying Cargo or Materials, (e.g. cargo body, dump truck, fuel truck, transport
tractor, etc.)
• Special Purpose Vehicle/Equipment, (e.g. mobile command post etc.)
• Transporting the Driver Only
• Transporting the Driver and Passenger(s)
• Transporting Driver, Tools and Equipment to and/or from Job Sites

30. Is this vehicle considered a Special Purpose Vehicle? Special purpose vehicles are
vehicles that have limited but essential missions and are designed or retrofitted for a
specific purpose. SPVs are not generally used to carry passengers or freight and have

2020-ICLl-00023 1528
~ : U.S. Immigration
~~a)~ and Customs
\~ Enforcement
2019 ICE Vehicle Allocation Methodology (VAM) Survey Questions
equipment that cannot be easily converted for other purposes. Vehicles that have been
retrofitted but can be returned to their original state for a nominal cost or effort are NOT
considered a special purpose vehicle.
• Yes
• No
31. Select the SPV type
• Ambu lance
• Box Truck
• Bus
• Cargo Truck
• Carrier
• Dump Truck
• Freightliner Sprinter
• Heavy Duty Truck
• Mobile Command Center
• Motor Home RV
• Refrigerated Truck
• Tractor Trailer
• Wrecker
• Other - TYPE ENTRY

32. Please indicate why the vehicle is special purpose and the essential mission it is used
for.

33. Does this vehicle carry tools or equipment that must be carried to perform your job?
(Equipment is anything more than a briefcase and/or a laptop case)
• Yes
• No
34. Does this vehicle have a full body cage?
• No
• Yes

35. What other unique equipment (beyond a cage) is installed on this vehicle?

36. Is there any equipment installed on this vehicle that makes it one of a kind or specially
equipped beyond what is normal (gun lock box) for this type of vehicle?
• Yes
• No
37. How many passengers does this vehicle typically transport at any given time (including
driver, detainees, etc.)?
• 1
• 2-4
• 5- 8
• More than 8

38. Is this the correct type/size vehicle needed to meet the mission it is assigned to perform?

2020-ICLl-00023 1529
~ : U.S. Immigration
~~a)~ and Customs
\~ Enforcement
2019 ICE Vehicle Allocation Methodology (VAM) Survey Questions
• Yes (skip to 044)
• No
39. Please select the type of vehicle that would be better suited to meet the mission?
b)(?)(E)

40. Select what type of Sedan. (Onlv il(b)(7)(E)


(b)(?)(E)
I

42. Select what type of truck. ( Onlv if Truck is selected in 039)


b)(?)(E)

43. Why did you select this type of vehicle?

44. Please select the options below that best describe the conditions in which this vehicle
travels. (Check all that apply):
• Mostly used on city streets and highways.
• Used frequently on steep grades.
• Used frequently on unpaved (dirt or gravel) roads.
• Used frequently off-road.
• Used frequently in severe heat conditions
• Used frequently in severe cold conditions
• Used frequently on weather-affected roads (unplowed snow).
• Used occasionally in severe heat conditions
• Used occasionally in severe cold conditions

45. Vehicle Condition:


• Poor (Has severe mechanical and/or cosmetic defects and is in poor running
condition)

2020-ICLl-00023 1530
~ : U.S. Immigration
~~a)~ and Customs
\~ Enforcement
2019 ICE Vehicle Allocation Methodology (VAM) Survey Questions
• Fair ((Has some mechanical or cosmetic defects and needs servicing but is still
in reasonable running condition)
• Good ((Is free of any major defects)
• Very Good (Looks new, is in excellent mechanical condition and needs no
reconditioning)

46. Vehicle down time: How often is this vehicle "out-of-service" in a month, on average:
• Less than 2 hours
• 2 to 5 hours
• 6 to 10 hours
• More than 1O hours

47. Do you have any additional comments regarding this vehicle?

2020-ICLl-00023 1531
Kb)(6); (b)(?)(C) ICIPP/ G
Senior Analyst and Director of Incidents
DHS Privacy/Policy & Oversight
(202)343-1737
l(b)(6); (b)(7)(C)

With honor and integrity, we will safeguard the American people, our homeland, and our values.

~ H:omeland
9 Security
From: Privacy Help l(b)(6); (b)(7)(C)
Sent: Thursday, June 13, 2019 1:10 PM
To: b)(6); (b)(?)(C)
Cc: Privacy Help b)(6); (b)(?)(C) ; ISD lnver,;:
s~tig;';;a-;-:-ti-;;:o~ns~
(b:::-
)(:--6)_; (_b_)(_?)_(C_)_-,-;;;:::;::::;:;:;:::::::;:::;:::;;:;:;:;;:;.:l<b
=)(=i'
_~l"""
; _-'--'
.
(b)(6); (b)(6); (b)(?)(C) b)(6); (b)(?)(C) b)(6); (b)(7)(C) * b)(6); (b)(?)(C) I
(b)(6): (b)(7)(C) b)(G); (b)(?)(C) l(b)(6); (b)(7)(C)
Subject: DHS Privacy Office Response - RE: Vehicle Asset Management (VAM) Survey via Email (New
Guidance)

Good afternoon Mr. l(b)(6); (b)(?)(C)

Thank you for reaching out. You bring up some valid concerns.

I have asked my colleagues to look into ICE's Surveygizmo and how its use may expose our agents to
doxxing and other malicious attacks. When I get a better understanding of this p rocedure and its data
collection safeguards, I will report back to you.

Thank you on behalf of all DHS officers and employees.

Respectfully,

kb)(6); (b)(?)(C) k:IPP/ G


Director of Incide nts
DHS Privacy/Policy & Oversight
(202)343 (b)(6);
(b)(6); (b)(7)(C)

2020-ICLl-00023 1532
With honor and integrity, we will safeguard the American people, our homeland, and our values.

~ t{om~land
V ~ecur1ty
From :l(b)(6); (b)(7)(C)
Se nt: Thursday, June 13, 2019 12:22 AM
To: Privacy Help ~(b)(6); (b)(7)(C)
Subject: FW: Vehicle Asset Management (VAM) Survey via Email (New Guidance)

Hello,
I'm contacting your office to voice my concerns over what I feel is an unsafe collection of Sensitive PII on
a non-government IT system (surveygizmo.com - a commercial survey web site).
b)(5)

Perhaps I'm being overly paranoid, but we've recently had an incident where one of our ERO Officers
had his home address published on an anti-ICE site and some personal property was subsequently
vandalized.

Thank you.

(b )(6);
(b)(7)(C)

(b)(6); (b)(7)(C)
Tee nica En orcement Officer

2020-ICLl-00023 1533
HSI - Albany, NY
808.285.l(b)(6I (cell)

From:1~~~~6~;_ __ l(CTR)
Sent: Thursday, June 6, 2019 10:59 AM
Toib)(6): (b)(7)(C)
Subject: RE: Vehicle Asset Management (VAM) Survey via Email (New Guidance)

Thank you, Mr{?~~~~;,~, j I've been trying to contact the Fleet Management Unit but haven't heard
back from them.

I will keep trying to reach them and will provide you with any updates.

Thank you for your patience.

Best regards,

l<b )(6):
Supporting the Office of Information Governance and Privacy (IGP)
U.S. Immigration and Customs Enforcement (ICE)
l(b)(6); (b)(7)(C) I
202-732Ub)(6):

From: l(b)(6); (b)(7)(C) I


Sent : Monday, June 3, 2019 4:52 PM
To b)(6); (b)(7)(C)
SubJect: FW: Ve Ic e Asset Management VAM urvey via Email (New Guidance)

Hellol(b)(6); I
The below forwarded email is from the MSS in Buffalo (my SAC office) who handles the vehicle fleet. It
discusses some of the later survey questions that appear to make it abundantly clear whether the
vehicle is assigned to a Law Enforcement Officer:

b)(5)

2020-ICLl-00023 1534
b)(5); (b)(?)(E)

Thank you for looking into it.

b)(6);
b)(7)(C)

f b)(6); (b)(7)(C)
Technical Enforcement Officer
HSI - Albany, NY
808.28SKb)(6); Fell)

From: l<b)(6): (b)(7)(C)


Sent: Wednesday, May 29, 2019 10:59 AM
To:
Subject: RE: Vehicle Asset Management (VAM ) Survey via Email (New Guidance)

Good morning all,

Many of you have already completed your VAM survey however, our office has received additional
guidance from HQ Fleet Management which will require you to modify the survey that has been
submitted. Using the link you were initially provided, please adjust your responses using the guidelines
below.

If you have not yet completed your survey please do so using the below guidance.

The HQ guidance received is as follows:

By now, all HSI personnel with an assigned GOV should have received the ICE Vehicle Allocation
Methodology (VAM) Survey question link. Completion of t his survey is critical and the data contained
will be provided to both ICE HQ (ICE M&A) and OHS HQ {Chief Readiness Security Office) and will be
used as the basis for future vehicle replacement/acquisition. If responses indicate that a GOV is not
needed, then HSI will be penalized when additional vehicles are sought, by either not being able to
replace the vehicle when able or will be unable to obtain an enhancement vehicle pursuant to a staffing
increase. As this data is absolutely critical, please see below additional info for consideration w hen

2020-ICLl-00023 1535
completing the survey and be sure to carefully review all questions and potential responses. Note: The
VAM inadvertently included GOVs that have been deadlined. If a deadlined GOV was already picked up
by GTB (excess car company), a survey should not be completed.

b)(5); (b)(7)(E)

Note that HSI MS is working with ICE OAFM to centralize the VAM with each SAC AOR so that a universal
vehicle plan can be generated based on the overall terrain/mission requirements rather than individual
GOV operator responses which are unable to take into account consideration for other terrain regions of
the AOR, incoming personnel, and overall AOR GOV condition.

Thank you,

l(b)(6); (b)(7)(C)
Homeland Security Investigations
Office of the Special A ent in Charge
250 DeIaware Ave. b)(6);
h\n\lr,
Buffalo, NY 14220
(716) 464fb)(6); ~ffice

2020-ICLl-00023 1536
2020-ICLl-00023 1537
From: Kb)(6); tCTR)
Se nt: 3 Jun 2019 20:28:21 +0000
To: l(b)(6); (b)(7)(C) I
Subject: RE: concern with PII submitted as part of 2019 ICE Vehicle Allocation
Methodology (VAM) Survey

Hi Mrkb)(6); (b)(7)(C) I
I am with the ICE Privacy Office and have been tasked with following up on a possible privacy incident.
Are you able to provide us with more information either via email or a quick call, preferably a phone
call?

I
I can be reach at 202-732-kb)(6 EDT, during business hours. If you preferred, please provide a time and
your contact information and we can schedule a call.

Thank you,

uppor ing e Office of Information Governance and Privacy (IGP)


U.S. Immigration and Customs Enforcement (ICE)
b)(6): (b)(7)(C)
202-732 (b)(6);

From: !<b)(6): (b)(7)(C)


Se nt: Monday, June 3, 2019 2:08 PM
,..,.,..--,-,-...,.,....--=-....,...,,..----------,
To: ICE Privacy-General Mailbox (b)(6); (b)(7)(C)
Subject: concern with Pl I subm itt.,..
e .,.....,.....,....-.,.-,-"'"'7'""""""1....,,.-=......,..,,-,--.,....,.....TTr,--.,.,...,....-.-1

Hello,
I just began the vehicle survey for my assigned GOV and question 2 asks for my government email
address.

What further concerns me is that this survey appears to be hosted on a non-government web site
(www.surveygizmo.com).

Thanks,
l(b)(6); (b)(7)(C)

kb)(6): (b)(7)(C )
Technical Enforcement Officer
HSI - Albany, NY

2020-ICLl-00023 1538
808.285,1~?)(6 !(cell)

2020-ICLl-00023 1539
From: kb)(6); (b)(7)(C) lcTR)
Sent: 20 Feb 2015 18:30:31 +0000
To: !(b)(6); (b)(7)(C) !
Cc: ICE Privacy-Ge nera l Mailbox
Subject: Privacy Act Violation
Importance: High

Thank you for your email regarding your privacy complaint. We cannot find in our records that your
initial complaint or the email below were acknowledged and apologize for that oversight. We have been
looking into this matter since your original email and will get back to you as soon as we have finished
our analysis of the incident you described. We appreciate your patience while we conclude our work.

Again, our apologies for not acknowledging your inquiry sooner.

) ;_(b_)(_7)_(C_)_ ~ I CTR)
-Kb_)(6_
AGS, Inc.
Privacy Compliance Specialist
In support of the ICE Privacy Office
U.S. Immigration and Customs Enforcement

Direct : 202-732 b)(6);


Main: 202-732 ~/?)(

For help with privacy quest ions, please visit the ICE Intranet at
l(b )(7)(E) I

From:kb)(6): (b)(7)(C) I
Sent: Thursday, January 29, 2015 3:15 PM
To: ICE Privacy-General Mailbox
Cc:kb)(6): (b)(7)(C) I
Subject: Privacy Act Violation

Dear Ice Privacy Office,

On November 10, 2014, I contacted your office via email regarding a privacy act violation (
please see attachment). As of this date, I have not received a response from your office.

I filed a formal EEO complaint where my accepted claim of my sensitive PII was accepted by
EEO on September 18, 2014.

Based on OHS ICE Policy Information, my sensitive PII information (medical) was knowingly
disclosed by my Supervisor to a colleague without my authorization which resulted in me being
embarrassed and brought on unfair treatment in my hostile work environment.

2020-ICLl-00023 1540
The Privacy Act of 1974 is a federal law that places restrictions on the federal government's
collection, use and dissemination of personal information. As of this date, I have not received a
response from your office.

Thank you,
j(b)(6); (b)(7)(C)

Management and Program Analyst/COR


Acquisition Program Manager (PM)
DHS I ICE I Enforcement and Removal Operations
Baltimore Field Office - Fallon Federal Building
31 Hopkins Plaza, Suite 730/Baltimore, MD 21201
8410-637 b)(6 cell 443-324 (b)(6 - 410-637f b)(6);
h)(fl)· (h)(7)(r,)
I
"'Nothing Will Work Unless You Do"
Maya Angelou

~-;AVE PAPER - Please do not print this e-mail unless absolutely necessary.

from publicih~
Warning: release under the Freedom
is~ ~o~c~u~~~~~S of In o/~
~S~I~F~IE~D~/F~O~R~O~
FF .S.C.
~I~C~IAL~~U~ 552).
S~E~O~N It 'isf(U~
~L~):~ to/~/F
be controlled,
~O~U~O~)~ stored,
. ~It~c~on]t~a•i
·n~ handled, transmitted,
.h]at may bedistributed,
s ~in~fo~r~miaiti~on~t~ exempt
and disposed of in accordance with DHS policy relating to FOUO in or · ot to be released to the public or other personnel
who do not have a valid "need-to-know" without prior approval of an authorized DHS offic1a. 1 his report should be
furnished to the media, either in written or verbal form.

2020-ICLl-00023 1541

You might also like