Homeland Advanced Recognition Technology System Compliance with 28 C.F.R. Part 23

Date Issued

Wednesday, September 20, 2023

Submitting OIG

Department of Homeland Security OIG

Other Participating OIGs

Department of Homeland Security OIG

Agencies Reviewed/Investigated

Department of Homeland Security

Report Number

OIG-23-53

Report Description

The Department of Homeland Security does not plan to apply the operating policies of Title 28 of the Code of Federal Regulations (C.F.R.) Part 23, Criminal Intelligence Systems Operating Policies, to the Homeland Advanced Recognition Technology System (HART) because it has determined, and we concur, that HART is not a criminal intelligence system, as defined by 28 C.F.R. Part 23. Instead, HART is an identity service provider and data repository that will match, store, and share personally identifiable information. Therefore, HART must operate in accordance with the Privacy Act of 1974 and the EGovernment Act of 2002.

Report Type

Audit

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Open Recommendations

This report has 2 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
We recommend the DHS Chief Privacy Officer work with the HART program office to monitor and close recommendations made in the HART Increment 1 Privacy Impact Assessment.
2	No	$0	$0
We recommend the DHS Chief Privacy Officer ensure DHS component systems that use and provide data to HART have current and up-to-date Privacy Impact Assessments.