Privacy Impact Assessment Update
NPPD, CFATS Personnel Surety Program
Page 9
NPPD verifies an affected individual’s enrollment in a Trusted Traveler Program by
transmitting the affected individual’s unique program identification number (i.e., PASS ID
Number) to CBP. CBP returns the biographic enrollment information associated with the PASS
ID Number and NPPD then compares the biographic data elements to determine if there is a
match. If there is a match, NPPD has verified the affected individual’s enrollment in the Trusted
Traveler Program. NPPD then notifies the Submitter
22
that it verified the individual’s enrollment
in a Trusted Traveler Program. If the affected individual’s enrollment in a Trusted Traveler
Program has been verified, NPPD will periodically re-verify the affected individual’s continued
enrollment. If the affected individual’s enrollment is no longer verified, then NPPD may
transmit the information about the affected individual to TSA for vetting under Option 1. NPPD
will also notify the high-risk chemical facility, or its designee. The high-risk chemical facility is
responsible for taking action in accordance with its SSP or ASP, which may include submitting
new or updated information on that affected individual.
NPPD verifies an affected individual’s enrollment in the HME Program by transmitting
at a minimum the required data elements, which include: the affected individual’s unique
program identification number (i.e., State-issued Commercial Driver’s License Number) along
with the issuing State, the affected individual’s full name, and date of birth to TSA. TSA
compares the affected individual’s data against the Security Threat Assessments TSA has
performed for individuals currently active in the HME program. TSA provides NPPD the results
of its analysis as to whether there is a matching Security Threat Assessment. If there is a current
and active Security Threat Assessment that matches the biographic data NPPD received from a
Submitter, NPPD has verified the affected individual’s enrollment in the HME Program. NPPD
then notifies the Submitter that it verified the affected individual’s enrollment in the HME
Program. If an affected individual’s enrollment in the HME Program has been verified, NPPD
will periodically re-verify the affected individual’s continued enrollment. If the affected
individual’
s enrollme
nt is
no longer verified, then NPPD will notify the high-risk chemical facility, or its designee. NPPD may initiate vetting under Option 1, as appropriate. The high-
risk chemical facility is responsible for taking action in accordance with its SSP or ASP, which
may include submitting new or updated information on that affected individual.
NPPD verifies an affected individual’s enrollment in the TWIC Program by transmitting
to TSA at a minimum the required data elements, which include: the affected individual’s full
name, date of birth, and the expiration date displayed on the TWIC.
23
TSA compares the
affected individual’s data against the Security Threat Assessments TSA has performed for
individuals currently active in the TWIC program. TSA provides the results of its analysis as to
22
A submitter is a facility employee, corporate employee, or third-party designee that submits vetting information
directly to NPPD on behalf of a facility.
23
NPPD will also transmit to TSA the following optional data elements for TWIC and HME if provided by the
Submitter: Gender, Citizenship, Aliases, Place of Birth, Alien Registration Number, and Passport Number.