|Content updated on August 04, 2014|
|The Applications Covered By This Policy|
|This policy covers the: User Profile & Access Control System (UPACS), Buy America Waiver Request Admin Site (BAWRAS), Congestion Mitigation And Air Quality System (CMAQ), Course Management System (CMS), Dwight David Eisenhower Trans. Fellowship Prog. System (DDETFP), Delphi Interface Maintenance System (DIMS), Electronic National Environmental Policy Act (ENEPA), Fiscal Management Information System (FMIS4), Fiscal Management Information System 5.0 (FMIS5-P), Freedom Of Information Act Request Log System (FOIA), FHWA Organization Information System (FOIS), Fuels and Financial Analysis System Highways (Fuels & FASH), Highway Performance Monitoring System (HPMS), Highway Safety Improvement Program (HSIP), Integrated Transportation Information Platform (ITIP), Long Term Bridge Performance Program's Bridge Portal (LTBP), Management Services Division Information System (MSD), National Bridge Inventory System (NBI), National Highway Institute Website (NHIW), National Highway Specifications Website (NHSW), Nondestructive Evaluation (NDE), Project And Program Action Information System (PAPAI), Rapid Approval And State Payment System (RASPS), Transportation Fellows Interns and Contractor System (TFICS), Transportation Planning and Excellence Awards (TPEA), Travel Monitoring Analysis System 2.0 (TMAS2), and Vehicle Size and Weight Enforcement (VSW).|
|What Information UPACS Collects About You|
|UPACS is FHWA's security control system that manages User authentication and associated access rights for individuals needing entry into one of FHWA's applications.
UPACS collects general profile information that identifies the User, i.e. name, work address, work e-mail address, and the full SSN for FHWA employees and the last 4 digits of SSN for all other users. This information is collected in two ways. A perspective UPACS Users can register in UPACS by filling out a form and submitting their information to the local UPACS Administrator who approves the request. Or the local UPACS Administrator can register the user and approve the users registration.
As users are given "Access Rights" to FHWA applications, an "Application Rights" profile is established that identifies the User, the applications the User is authorized to access and their specific "Access Rights" within the application.
In addition, UPACS creates log entries for activities such as: user account approvals and removals, account transfers, failed login attempts, locked Passwords and PINs, all resets of Passwords and PINs, after-hour activities, and as users access UPACS, a log record is kept showing when the access occurred, whether the access was successful or not, and what FHWA application the user accessed.
UPACS Administrator's have access to the general profile of users in the UPACS Administrator's area of responsibility. System Owners and System Sponsors have access to User's application rights profiles. Designated individuals have access to the reports that display log activity.
|Interfaced Applications that Collect Information About You|
|When you access our applications, we may collect the following categories of personal information from you:
|Automatic Information Collection|
|When you visit our site, we collect information about your visit that does not identify you personally. We collect the IP address (an IP address is a number that is assigned to each computer connected to the Internet) and the Host Name from which you access this site. We also know the data and time of your visit.|
|Why We Collect Information|
|Our principal purpose for collecting personal information online is to provide you access to authorized
FHWA applications while addressing security concerns. We collect information to:
|Sharing Your Information|
|We may share personally identifiable information you provide to us online with representatives
within the Department of Transportation's Operating Administrations and related entities, other
federal government agencies, or other named representatives as needed to speed your request or
transaction and to support your use of FHWA's Applications. In a government-wide effort to combat security and virus threats, we may share some
information we collect automatically, such as IP address, with other federal government agencies.
Also, the law may require us to share collected information with authorized law enforcement, homeland security, and national security activities.
|Choices on How We Use the Information You Provide|
|Throughout our applications, we will let you know whether the information we ask you to provide is voluntary or required. By providing personally identifiable information, you grant us consent to use this information, but only for the primary reason you are giving it. We will ask you to grant us consent before using your voluntarily provided information for any secondary purposes, other than those required under the law.|
|Cookies or Other Tracking Devices|
|A "cookie" is a small text file stored on your computer that makes it easy for you to move around our
applications without continually re-entering items like your name, password and preferences.
We only use "session" cookies on our website. This means we store the cookie on your computer only during your
visit to our application. After you close your browser or turn off your computer, the cookie disappears.
If you access our applications to read, update, or download information, we use "session" cookies to collect and store only the following information about you: the name of the domain from which you access our application, the date and time you access our application; and the Internet address of the web site from which you linked directly to our site.
|Securing Your Information|
|Properly securing the information we collect online is a primary commitment. To help us do this, we take the following steps to:
|Your Rights Under the Privacy Act of 1974|
|The Privacy Act of 1974 protects the personal information the federal government keeps on you in systems of records (SOR)
(information an agency controls recovered by name or other personal identifier). The Privacy Act regulates how the government can
disclose, share, provide access to, and keep the personal information that it collects. The Privacy Act does not cover all information collected online.
The Act's major terms require agencies to:
| United States Department of Transportation - Federal Highway Administration