CDC Digital Media Channel Privacy Policy Notice

20171101_rev01 · COMPARED WITH 20160201_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20160201_rev01 to 20171101_rev01

1#### On This Page
2
3- [Information Received and Retained by CDC Digital Media channels]()
4- [How Information is used]()
5- [Sharing of this Information]()
6- [Data Retention]()
7- [Third-Party Tools and Sites]()
8- [Children and Privacy]()
9- [Security]()
10- [Contact Privacy Office]()
11- [Updates to This Privacy Policy]()
12
113The Centers for Disease Control and Prevention (CDC) is committed to maintaining your privacy and protecting your personal information when you visit CDC websites, use CDC's mobile applications. With respect to the collection, use, and disclosure of personally identifiable information (PII), CDC complies with all applicable federal laws.
214Our privacy policy is clear:
315
416- CDC does not collect any personally identifiable information (PII) when you visit any of CDC's digital medial channels unless you choose to provide that information to us.
517- Any PII that you choose to provide is fully protected.
618- Non-PII information related to your visit to our websites may be automatically collected and temporarily stored.
2436- the amount of data (measured in number of bytes) transmitted from CDC.gov to your computer
2537
2638### Using CDC's Mobile Application
2739
2840When you use CDC's Mobile Applications (Apps), certain information will be gathered and stored about your usage of the App. This information does not identify you personally. We collect and store information as follows:
2941
30- CDC receives aggregate data about the use of our Apps, such as the number of times the applications have been opened or the interactions or actions completed in the application. This is gathered via a third party provider (please refer to the [third-party tools list](http://www.cdc.gov/other/third-party-pages.html)). We also receive aggregate data from the platforms that distribute our Apps (currently the iTunes Store, Google Play Store, and the Windows Store), such as the number of people who download the App and mobile set-up information (e.g., device model, App version, country, language, and mobile carrier). Please consult the privacy policies of these third parties for further information.
31- You may sign up to receive "push notification" messages via a third party provider (please refer to the [third-party tools list](http://www.cdc.gov/other/third-party-pages.html)). To make sure messages reach the correct devices, our third party provider relies on a device token unique to your mobile device. A device token is a unique identifier issued to the app by the operating system of the mobile device. While we may be able to access a list of the tokens, the App and tokens do not reveal your identity, unique device ID, or contact information to us. The third party provider may collect the following: the time of an event, how a User came to our site, what search engine and search keywords users may have used to get to our site, information about the device our user is on such as their Operating System and browser, as well as the city, region and country location of users. This location information enables CDC to send public health push notification messages that are relevant to certain geographic locations. If, at any time, you wish to stop receiving push notifications, simply adjust your phone settings or remove the App.
42- CDC receives aggregate data about the use of our Apps, such as the number of times the applications have been opened or the interactions or actions completed in the application. This is gathered via a third party provider (please refer to the [third-party tools list](https://www.cdc.gov/other/third-party-pages.html)). We also receive aggregate data from the platforms that distribute our Apps (currently the iTunes Store, Google Play Store, and the Windows Store), such as the number of people who download the App and mobile set-up information (e.g., device model, App version, country, language, and mobile carrier). Please consult the privacy policies of these third parties for further information.
43- You may sign up to receive "push notification" messages via a third party provider (please refer to the [third-party tools list](https://www.cdc.gov/other/third-party-pages.html)). To make sure messages reach the correct devices, our third party provider relies on a device token unique to your mobile device. A device token is a unique identifier issued to the app by the operating system of the mobile device. While we may be able to access a list of the tokens, the App and tokens do not reveal your identity, unique device ID, or contact information to us. The third party provider may collect the following: the time of an event, how a User came to our site, what search engine and search keywords users may have used to get to our site, information about the device our user is on such as their Operating System and browser, as well as the city, region and country location of users. This location information enables CDC to send public health push notification messages that are relevant to certain geographic locations. If, at any time, you wish to stop receiving push notifications, simply adjust your phone settings or remove the App.
3244
3345CDC does not disclose, share, sell, or transfer any information about CDC digital media visitors or users unless required by law enforcement or by statute.
3446
3547For site security purposes and to ensure that this service remains available to all users, CDC employs software programs to identify unauthorized attempts to upload or change information, or otherwise cause damage.
3648
3749CDC's digital media are maintained by the U.S. Government and is protected by various provisions of Title 18, U.S. Code. Violations of Title 18 are subject to criminal prosecution in Federal court.
3951### Email Subscriptions
4052
4153Email and text message subscription services are offered by CDC as a convenience to users who choose to receive information via these channels. All information published via email subscriptions and text messaging services is available on CDC.gov without the requirement to provide email address or phone number.
4254
4355In order to manage CDC email subscription lists, we retain the names and email addresses of our email subscribers, as well as other information they may have shared with us (e.g., addresses and phone numbers), logs of emails we send, and automatically generated email data used to improve our email communications. Email subscriber service providers may collect and provide non-identifying information about the number of messages sent, clicks and open rates.
4456
45To get more information about current email subscription service providers and their privacy policy, please refer to the [current third-party tools/pages list](http://www.cdc.gov/other/third-party-pages.html). The email subscriber information is secured and only available to CDC managers, members of the CDC's communication and web Teams, and other designated staff who require this information to perform their duties. If, at any time, you wish to stop receiving our messages, simply click on the "Unsubscribe" link at the bottom of each email message.
57To get more information about current email subscription service providers and their privacy policy, please refer to the [current third-party tools/pages list](https://www.cdc.gov/other/third-party-pages.html). The email subscriber information is secured and only available to CDC managers, members of the CDC's communication and web Teams, and other designated staff who require this information to perform their duties. If, at any time, you wish to stop receiving our messages, simply click on the "Unsubscribe" link at the bottom of each email message.
4658
4759### Survey Tools
4860
4961Invitations to CDC surveys are sent via a pop up or external links to a random sampling of visitor. Your acceptance of a survey is completely optional. If you decline any survey, you will still have the same access to the information and resources provided in all of the CDC's digital media channels, as those who opt to take a survey.
5062
51CDC uses online surveys to collect opinions and feedback from visitors on all type of digital media channels. Please refer to the [current third-party tools/pages list](http://www.cdc.gov/other/third-party-pages.html) for the current survey service providers. These survey service providers obtain feedback and data on visitor's satisfaction on behalf of the CDC. Surveys conducted on behalf of the CDC do not collect any Personally Identifiable Information (PII), and the aggregate results are only available to CDC staff (e.g., subject matter experts, health communication staff, and other designated staff) who require this information to perform their duties.
63CDC uses online surveys to collect opinions and feedback from visitors on all type of digital media channels. Please refer to the [current third-party tools/pages list](https://www.cdc.gov/other/third-party-pages.html) for the current survey service providers. These survey service providers obtain feedback and data on visitor's satisfaction on behalf of the CDC. Surveys conducted on behalf of the CDC do not collect any Personally Identifiable Information (PII), and the aggregate results are only available to CDC staff (e.g., subject matter experts, health communication staff, and other designated staff) who require this information to perform their duties.
5264
5365Mobile surveys (i.e., those accessed via your mobile device) may request an email address and a phone number from you in order to send an external link to the survey. CDC does not receive your personal information, nor will the CDC have access to your information. To get more details on the data collected by any of these survey service providers, please refer to their specific privacy policy.
5466
5567### Official CDC Presence on Third-Party Websites
5668
57All official CDC information available on third-party websites is also available on CDC.gov site. The CDC maintains official pages or accounts on third-party websites in order to better engage and communicate with the general public ([a current third-party tools/pages list](http://www.cdc.gov/other/third-party-pages.html) is here). Your activity on those sites is governed by the third-party website's security and privacy policies. Users of third-party sites often share information with the general public, user communities, and/or the third-party operating the site. Consequently, you should review the privacy policies of third-party sites before using them and ensure that you understand how your information may be shared and used. You should also adjust privacy settings on your account on any third-party site to match your preferences.
69All official CDC information available on third-party websites is also available on CDC.gov site. The CDC maintains official pages or accounts on third-party websites in order to better engage and communicate with the general public ([a current third-party tools/pages list](https://www.cdc.gov/other/third-party-pages.html) is here). Your activity on those sites is governed by the third-party website's security and privacy policies. Users of third-party sites often share information with the general public, user communities, and/or the third-party operating the site. Consequently, you should review the privacy policies of third-party sites before using them and ensure that you understand how your information may be shared and used. You should also adjust privacy settings on your account on any third-party site to match your preferences.
5870
59For the sole purpose of complying with the [Presidential Records Act](http://www.archives.gov/about/laws/presidential-records.html), the CDC archives some information that users submit or publish when engaging with the CDC through official CDC pages or accounts on third-party websites (e.g., by sending a message, posting a comment, "following," "friending," or taking similar actions). This information may contain personal information, such as an individual's username and other public account information, when such information is available based on the user's privacy settings and the terms of the site. For example:
71For the sole purpose of complying with the [Presidential Records Act](http://www.archives.gov/about/laws/presidential-records.html), the CDC archives some information that users submit or publish when engaging with the CDC through official CDC pages or accounts on third-party websites (e.g., by sending a message, posting a comment, "following," "friending," or taking similar actions). This information may contain personal information, such as an individual's username and other public account information, when such information is available based on the user's privacy settings and the terms of the site. For example:
6072
61- On Twitter, the CDC automatically archives "tweets" from official CDC accounts, "direct messages" sent to or from official CDC accounts, and "mentions" (tweets from other users to official CDC accounts; these tweets contain an @ and the username of an official CDC account (e.g., [@CDCgov](https://twitter.com/cdcgov)). The CDC also automatically archives any status that official accounts have "favorited."
73- On Twitter, the CDC automatically archives "tweets" from official CDC accounts, "direct messages" sent to or from official CDC accounts, and "mentions" (tweets from other users to official CDC accounts; these tweets contain an @ and the username of an official CDC account (e.g., [@CDCgov](https://twitter.com/cdcgov)). The CDC also automatically archives any status that official accounts have "favorited."
6274- On Facebook, the CDC archives all content created by official CDC pages, content that tags an official CDC page, and any content posted on official CDC pages (for example, the number of likes to the page and comments posted).
63- On Google+, the CDC archives all content posted by official CDC accounts, as well as the number of likes/comments/shares on each of those posts (including the comments themselves). The CDC also automatically archives the total number of Google+ users that have added our page to a "Circle," and the list of users that CDC accounts have added to "Circles."
75- On Google+, the CDC archives all content posted by official CDC accounts, as well as the number of likes/comments/shares on each of those posts (including the comments themselves). The CDC also automatically archives the total number of Google+ users that have added our page to a "Circle," and the list of users that CDC accounts have added to "Circles."
6476
65For aggregate statistical analysis and to improve the quality of our services, we may integrate web measurement tools with our social media pages. To see current list of web measurement tools, please refer to the [current third-party tools/pages list](http://www.cdc.gov/other/third-party-pages.html). These tools enable basic analysis of social media traffic (such as the number of people visiting a certain page) and do not collect personally identifiable information.
77For aggregate statistical analysis and to improve the quality of our services, we may integrate web measurement tools with our social media pages. To see current list of web measurement tools, please refer to the [current third-party tools/pages list](https://www.cdc.gov/other/third-party-pages.html). These tools enable basic analysis of social media traffic (such as the number of people visiting a certain page) and do not collect personally identifiable information.
6678
6779[Top of Page]()
6880
6981## How Information is used
7082
71If you choose to [provide us with information](http://www.cdc.gov/Other/privacy.html), we may use that information to contact you, respond to your message, or provide you the information or services you requested. In order to serve you better, we may analyze multiple sources of data you have provided (for example, to look up whether you previously contacted the CDC about the same topic so that we do not send you a duplicative response). We may also use messages or comments collected through CDC.gov sites, Apps, or official social media pages for our own purposes, such as to inform policy decisions or in public advocacy.
83If you choose to [provide us with information](https://www.cdc.gov/Other/privacy.html), we may use that information to contact you, respond to your message, or provide you the information or services you requested. In order to serve you better, we may analyze multiple sources of data you have provided (for example, to look up whether you previously contacted the CDC about the same topic so that we do not send you a duplicative response). We may also use messages or comments collected through CDC.gov sites, Apps, or official social media pages for our own purposes, such as to inform policy decisions or in public advocacy.
7284
7385We may use data you provide and automatically generated data for statistical analysis to assess, for example, what information is of interest to users, technical design specifications, and system performance. This allows us to make general improvements to our site as well as to offer tailored content to email subscribers (e.g., a follow-up message to subscribers interested in a specific topic based on information they have provided or automatically generated data).
7486
7587[Top of Page]()
7688
7789## Sharing of this Information
7890
79[Information you choose to share with the CDC](http://www.cdc.gov/other/privacy.html) (directly and via third party sites) may be treated as public information. We may, for example, publish compilations of messages or comments collected through CDC.gov or official social media pages and provide them to national leaders, members of the press, or other individuals outside of the Federal Government. However, we exercise discretion to limit such disclosures to protect your privacy (for example, we generally do not publish last names of commenters).
91[Information you choose to share with the CDC](https://www.cdc.gov/other/privacy.html) (directly and via third party sites) may be treated as public information. We may, for example, publish compilations of messages or comments collected through CDC.gov or official social media pages and provide them to national leaders, members of the press, or other individuals outside of the Federal Government. However, we exercise discretion to limit such disclosures to protect your privacy (for example, we generally do not publish last names of commenters).
8092
81The CDC uses a third-party analytics provider (for current provider please see [current third-party tools/pages list](http://www.cdc.gov/other/third-party-pages.html)) to collect and summarize this information in conjunction with cookies. The third-party analytics provider does not receive personally identifiable information through these cookies and is prohibited from combining, matching or cross-referencing CDC.gov information with any other information.
93The CDC uses a third-party analytics provider (for current provider please see [current third-party tools/pages list](https://www.cdc.gov/other/third-party-pages.html)) to collect and summarize this information in conjunction with cookies. The third-party analytics provider does not receive personally identifiable information through these cookies and is prohibited from combining, matching or cross-referencing CDC.gov information with any other information.
8294
8395Within the CDC, we restrict access to personally identifiable information to only those employees, contractors, and/or vendors who require access to this information in order to perform their official duties and exercise controls to limit what data they can view based on the specific needs of their position. If you choose to share information with us, we may in some cases share that information (or automatically generated information) with other government agencies in response to lawful law enforcement requests or to protect CDC.gov from security threats.
8496
8597We do not use or share your information for commercial purposes and, except as described above, we do not exchange or otherwise disclose this information.
8698
8799[Top of Page]()
88100
89101## Data Retention
90102
91Submitting personal information (name, address, telephone number, email address, etc.) is voluntary and is not required to access information on our website. However, if you choose to provide CDC with personally identifiable information -- for example by completing a "Contact Us" form, leaving a comment, sending email, or completing a survey -- we may use that information to respond to your message and/or help us get you the information or services you requested.
103Submitting personal information (name, address, telephone number, email address, etc.) is voluntary and is not required to access information on our website. However, if you choose to provide CDC with personally identifiable information - for example by completing a "Contact Us" form, leaving a comment, sending email, or completing a survey - we may use that information to respond to your message and/or help us get you the information or services you requested.
92104
93105We retain the information only for as long as necessary to respond to your question or request. Information submitted electronically is maintained and destroyed as required by the Federal Records Act and records schedules of the National Archives and Records Administration. It may be subject to disclosure in certain cases (for example, if required by a Freedom of Information Act request, court order, or Congressional access request, or if authorized by a Privacy Act System of Records Notice (SORN)). It is subject to the Privacy Act if maintained in a Privacy Act system of record.
94106
95107For more information, see:
96108
97109- [Freedom of Information Act and the Privacy Act](http://www.usa.gov/Topics/Reference-Shelf/FOIA.shtml)
108120### Links to External Sites
109121
110122CDC.gov pages and other CDC digital media platforms may link to websites created and maintained by other public and/or private organizations and individuals. When you follow a link to an external site, you are leaving CDC.gov and are subject to the external site's privacy and security policies. We do not control or guarantee the accuracy, relevance, timeliness, or completeness of information contained on an external site. We also do not endorse the site's sponsor, any views they express, or any products or services they offer.
111123
112124### CDC Pages on Third-Party Websites
113125
114Your activity on third-party sites ([a current list is here](http://www.cdc.gov/other/third-party-pages.html)) is governed by the third-party website's security and privacy policies. Please contact third-party site's Privacy Office if you have any questions or need further information.
126Your activity on third-party sites ([a current list is here](https://www.cdc.gov/other/third-party-pages.html)) is governed by the third-party website's security and privacy policies. Please contact third-party site's Privacy Office if you have any questions or need further information.
115127
116128### CDC Content Embedded in Third-Party Sites
117129
118130In some instances, CDC's content may be embedded on third-party websites as a way to increase public awareness of CDC activities (for example CDC's Content syndication, microsite, data widgets, etc.). The integration of these products is intended to provide a seamless user experience and to enhance users' ability to access public information provided by CDC. The embedded CDC.gov content automatically generates CDC server logs, web metrics and may set a CDC cookie (see [Cookies](https://www.cdc.gov/other/cookies.html)). Additionally, all other cookies, web metrics and server logs etc. are governed by the third-party website's security and privacy policy.
119131
120132[Top of Page]()
126138When a CDC Web site needs to collect information about a child under 13 years old, COPPA required information and instructions will be provided by the specific Web page that collects information about the child. The Web page will specify exactly what the information will be used for, who will see it, and how long it will be kept.
127139
128140Personal information about children under 13 years of age may be needed to respond to his/her communication to us. Personal information about your child will be destroyed immediately upon completion of its intended purpose. On rare occasions, it may be determined that a communication from a child under 13 years old should be maintained for historical purposes. Should such an occasion occur, CDC will obtain the necessary consent from the child's parent.
129141
130142Finally, we provide many on-line tools and services in support of CDC's mission. A child under 13 years old may inadvertently provide personal information to one of these services. If this should happen, the information about the child will be deleted immediately upon discovery.
131143
132Our digital media channels are not intended to solicit information of any kind from children under age 13. If you believe that we have received information from or about children under age 13, please contact the CDC Privacy Office (see [Contact information](http://www.cdc.gov/other/privacy.html) here).
144Our digital media channels are not intended to solicit information of any kind from children under age 13. If you believe that we have received information from or about children under age 13, please contact the CDC Privacy Office (see [Contact information](https://www.cdc.gov/other/privacy.html) here).
133145
134146[Top of Page]()
135147
136148## Security
137149
138150All CDC digital media offerings, including the CDC.gov site, are maintained by the U.S. Government and protected by various provisions of Title 18 of the U.S. Code. Violations of Title 18 are subject to criminal prosecution in Federal court.