A privacy impact assessment (PIA) is an analysis of how personally identifiable information is handled to (i) ensure that handling conforms with applicable requirements, (ii) determine the privacy risks associated with an information system or activity, and (iii) evaluate ways to mitigate privacy risks. A PIA is both an analysis and a formal document detailing the process and the outcome of the analysis.
PIAs Related to CFTC’s Mission, including Regulatory and Enforcement Functions
- Collibra Data Intelligence Cloud (Collibra), December 2024 (PDF)
- Commission and Staff Letters (CSL), February 28, 2020 (PDF)
- Data Loss Prevention (DLP) Tool, July 11, 2018 (PDF)
- Filings and Actions (FILAC), June 11, 2020 (PDF)
- FiscalNote, October 6, 2020 (PDF)
- General Support System (GSS), September 22, 2016 (PDF)
- Integrated Surveillance System (ISS), May 19, 2021 (PDF)
- LabCFTC, June 11, 2020 (PDF)
- National Futures Association (NFA), April 1, 2025 (PDF)
- NetDocuments Document Management System (NetDocuments), March 2025 (PDF)
- Order Book On-Demand-Market Financial Data Cloud (OBOD-MFDC), January 2025 (PDF)
- Ownership and Control Reporting (OCR), June 9, 2025 (PDF)
- Portal OPERA, Updated April 16, 2015 (PDF)
- Stressing Positions at Risk (SPARK), June 10, 2021 (PDF)
- Swaps and Derivatives Database (SDDB), September 30, 2014 (PDF)
- Whistleblower Electronic Submission Portal, Updated April 16, 2015 (PDF)
PIAs Related to CFTC’s Public Engagement and Communications
- Cision, October 6, 2020 (PDF)
- Comments Online, November 2, 2018 (PDF)
- Eventbrite, November 2, 2018 (PDF)
- FOIAXpress Cloud, April 25, 2025 (PDF)
- Internet and Social Media Use, July 15, 2011 (PDF)
- Twitter, January 19, 2011 (PDF)
- Visitor Information System, February 20, 2007 (PDF)
- Vulnerability Disclosure Program, April 20, 2021 (PDF)
- Whova Virtual Event Solution, May 12, 2021 (PDF)
PIAs Related to CFTC’s Employees and Contractors
- Automated Hiring System, September 19, 2012 (PDF)
- AWS General Shared Services (AWS GSS), August 2025 (PDF)
- Azure General Support System (GSS), April 27, 2022 (PDF)
- Business Information System (BIS), October 6, 2020 (PDF)
- CaseMap-TextMap, September 2025 (PDF)
- CloudNine LAW PreDiscovery (CloudNine), September 2025 (PDF)
- Commission Learning Academy (CLA), February 2025 (PDF)
- EBNS (Send Word Now), April 23, 2012
- e-Collaboration Tools, October 28, 2011
- Employee Labor Relations Tracking System (ETK ER/LR), May 2022 (PDF)
- Ensuring a Safe and Healthy Workplace in Response to COVID-19, May 2022 (PDF)
- Enterprise Asset Management System, May 10, 2019 (PDF)
- Ethics Management and Tracking (EMAT) System, July 11, 2018 (PDF)
- Everbridge Mass Notification System (EMNS), April 2025 (PDF)
- IBM Facilities and Real Estate Management on Cloud (IBM TRIRIGA), June 2022 (PDF)
- iComplaints, April 23, 2020 (PDF)
- Legal Files, September 2025 (PDF)
- Microsoft 365 (M365), November 9, 2021 (PDF)
- Microsoft Exchange 2016, April 20, 2021 (PDF)
- Mobile Device Management (MDM) System, March 1, 2019 (PDF)
- Monster Hiring Management Enterprise (MHME), June 2025 (PDF)
- Nexidia, September 2025
- Office of the Inspector General (OIG) Case Management System (OIG Case Management System), April 2025 (PDF)
- Personnel Clearance System, April 25, 2012
- Physical Security Management System, March 17, 2020 (PDF)
- PRISM, January 8, 2018 (PDF)
- Relativity, September 2025 (PDF)
- ServiceNow, May 20, 2025 (PDF)
- SPLUNK, December 12, 2019 (PDF)
- TeamMate, May 12, 2021 (PDF)
- Qualtrics XM Directory, March 25, 2022 (PDF)
- Zoom for Government, March 2026 (PDF)