US Department of Health and Human Services
Third Party Websites and Applications Privacy Impact Assessment
Date Signed:
March 13, 2018
OPDIV:
NIH
Name:
NIH OD SoundCloud
TPWA Unique Identifier:
T-8618012-764363
Is this a new TPWA?
Yes
Will the use of a third-party Website or application create a new or modify an existing HHS/OPDIV
System of Records Notice (SORN) under the Privacy Act?
No
If SORN is not yet published, identify plans to put one in place.
NA
Will the use of a third-party Website or application create an information collection subject to
OMB clearance under the Paperwork Reduction Act (PRA)?
No
Indicate the OMB approval number expiration date (or describe the plans to obtain OMB
clearance).
Expiration Date:
1/1/01 12:00 AM
Describe the plans to obtain OMB clearance.
Explanation:
NA
Does the third-party Website or application contain Federal Records?
No
Describe the specific purpose for the OPDIV use of the third-party Website or application:
The National Institutes of Health (NIH) Institutes and Centers (ICs) use SoundCloud as a tool for
reaching a broader audience during various NIH audio feeds, such as: seminars, symposiums, and
radio segments. Helping to educate and promote listeners on NIH's Mission of seeking fundamental
knowledge about the nature and behavior of living systems and the application of that knowledge to
enhance health, lengthen life, and reduce illness and disability. Along with NIH-wide and IC specific
goals.
This is an umbrella Third Party Website Applications (TPWA) Privacy Impact Assessment (PIA) that
will be used National Institutes of Health (NIH) wide by all Institutes and Centers (ICs)
Have the third-party privacy policies been reviewed to evaluate any risks and to determine
whether the Website or application is appropriate for OPDIV use?
Yes
Describe alternative means by which the public can obtain comparable information or services if
they choose not to use the third-party Website or application:
Visitors can visit an IC's specific homepage through the NIH main webpage located at:
https://www.nih.gov/. Or navigate directly to an IC's communication and public relations webpage.
Does the third-party Website or application have appropriate branding to distinguish the OPDIV
activities from those of nongovernmental actors?
Yes
How does the public navigate to the third party Website or application from the OPIDIV?
An external hyperlink from an HHS Website or Website operated on behalf of HHS
Please describe how the public navigate to the thirdparty website or application:
As an umbrella Third Party Website Applications (TPWA) Privacy Impact Assessment (PIA), the link
will vary as each Institute and Center (IC) maintain their own public websites. From each
participating NIH IC's website, the user clicks on the hyperlink and are directed to the third-party
application.
If the public navigate to the third-party website or application via an external hyperlink, is there
an alert to notify the public that they are being directed to anongovernmental Website?
Yes
Has the OPDIV Privacy Policy been updated to describe the use of a third-party Website or
application?
Yes
Provide a hyperlink to the OPDIV Privacy Policy:
https://www.nih.gov/web-policies-notices
Is an OPDIV Privacy Notice posted on the third-part website or application?
Yes
Is PII collected by the OPDIV from the third-party Website or application?
No
Will the third-party Website or application make PII available to the OPDIV?
No
Describe the PII that will be collected by the OPDIV from the third-party Website or application
and/or the PII which the public could make available to the OPDIV through the use of the third-
party Website or application and the intended or expected use of the PII:
No Personally Identifiable Information (PII) will be collected from the third-party Website and any NIH
ICs. SoundCloud is only a tool that allows individuals to listen to various NIH audio feeds, such as
seminars, symposiums, and radio segments.
Describe the type of PII from the third-party Website or application that will be shared, with
whom the PII will be shared, and the purpose of the information sharing:
No Personally Identifiable Information (PII) will be shared between the third-party Website and any
NIH ICs. SoundCloud is only a tool that allows individuals to listen to various NIH audio feeds,
such as seminars, symposiums, and radio segments.
If PII is shared, how are the risks of sharing PII mitigated?
NA
Will the PII from the third-party website or application be maintained by the OPDIV?
No
Describe how PII that is used or maintained will be secured:
NA
What other privacy risks exist and how will they be mitigated?
NA