Centers for Disease Control and Prevention CDC Digital Media Channel Privacy Policy Notice changes — 20230101_rev01

28

For more information, see:

29

30

- [HHS/CDC System of Records Notices](http://www.hhs.gov/foia/privacy/sorns.html)

31

32

As data retention policies vary from system to system, please check that system's policy or their individual SORN for more detailed information.

33

34

CDC may use geofencing technologies to reach individuals with critical health information at a specific place and time. These technologies can be particularly useful during a public health emergency. Geofencing technologies are location-based services in which an app or other software program uses a mobile device's global positioning system (GPS) to prompt a specific message, push notification or mobile advertisement (e.g., on web browsers or apps) when that device enters or exits a defined "geofence." A _geofence_ is a virtual perimeter around a real-world geographic area, which could include an airport or land border, school, shopping mall, stadium, or other geographic area.

34

CDC may work through third-party vendors to use geofencing technologies to reach individuals with critical health information at a specific place and time. These technologies can be particularly useful during a public health emergency. Geofencing technologies are location-based services in which an application (app) or other software program uses a mobile device's global positioning system (GPS) to prompt a specific message, push notification or mobile advertisement (e.g., on web browsers or apps) when that device enters or exits a defined "geofence" or shortly thereafter. A _geofence_ is a virtual perimeter around a real-world geographic area, which could include an airport or land border, school, shopping mall, stadium, or other geographic area.

35

36

To receive a geofenced message from CDC, you must have certain apps downloaded and either have background location sharing enabled on your device or be actively using those apps while passing through a geofenced area. A geofence does not track your location; it is solely used to detect devices that may enter a specific geographic area at a point in time so they can receive a CDC-sponsored message.

36

To receive a geofenced message from CDC, you must have certain apps downloaded and either have background location sharing enabled on your device or be actively using those apps while passing through a geofenced area. A geofence does not track your location or your phone number; it is solely used to detect devices that may enter a specific geographic area at a point in time so they can receive a CDC-sponsored message. Messages may be delivered multiple times within a few days after crossing through a geofenced area, though CDC will limit the number of times an individual would receive a message. Additionally, CDC requires that individuals always have the option to opt-out of messaging, including any ads that are delivered in real-time and shortly thereafter.

37

38

CDC does not receive any personally identifying information about people reached through these geotargeted health messages. CDC may get aggregated data about the number of times a message is shown, the number of people who see the message, and the number of comments, likes, shares and clicks a message receives. CDC may also receive aggregated data about the basic demographic groups reached by messages, such as the distribution of ages and genders.

38

CDC may get aggregated data from third-party vendors about the number of times a message is shown, the number of people who see the message, and the number of comments, likes, shares, and clicks a message receives. CDC may also receive aggregated data about the basic demographic groups reached by messages, such as the distribution of ages and gender ranges. CDC does not receive any personally identifiable information (PII) about individuals reached through geotargeted health messages.

39

40

If you choose to [provide us with information](https://www.cdc.gov/Other/information-received.html), we may use that information to contact you, respond to your message, or provide you the information or services you requested. In order to serve you better, we may analyze multiple sources of data you have provided (for example, to look up whether you previously contacted the CDC about the same topic so that we do not send you a duplicative response). We may also use messages or comments collected through CDC.gov sites, Apps, or official social media profiles for our own purposes, such as to inform policy decisions or in public advocacy.

41

42

We may use data you provide and automatically generated data for statistical analysis to assess, for example, what information is of interest to users, technical design specifications, and system performance. This allows us to make general improvements to our site as well as to offer tailored content to email subscribers (e.g., a follow-up message to subscribers interested in a specific topic based on information they have provided or automatically generated data).

43

44

We believe in the importance of protecting the privacy of children online. As such, we will take all reasonable steps to protect the privacy and safety of any child from whom information is collected as required by the [Children's Online Privacy Protection Act (COPPA)](https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa). A child's parent or guardian is required to provide consent before CDC collects, uses, or shares personal information from a child under age 13.

 For more information, see:
 - [HHS/CDC System of Records Notices](http://www.hhs.gov/foia/privacy/sorns.html)
 As data retention policies vary from system to system, please check that system's policy or their individual SORN for more detailed information.
+CDC may use geofencing technologies to reach individuals with critical health information at a specific place and time. These technologies can be particularly useful during a public health emergency. Geofencing technologies are location-based services in which an app or other software program uses a mobile device's global positioning system (GPS) to prompt a specific message, push notification or mobile advertisement (e.g., on web browsers or apps) when that device enters or exits a defined "geofence." A _geofence_ is a virtual perimeter around a real-world geographic area, which could include an airport or land border, school, shopping mall, stadium, or other geographic area.
+CDC may work through third-party vendors to use geofencing technologies to reach individuals with critical health information at a specific place and time. These technologies can be particularly useful during a public health emergency. Geofencing technologies are location-based services in which an application (app) or other software program uses a mobile device's global positioning system (GPS) to prompt a specific message, push notification or mobile advertisement (e.g., on web browsers or apps) when that device enters or exits a defined "geofence" or shortly thereafter. A _geofence_ is a virtual perimeter around a real-world geographic area, which could include an airport or land border, school, shopping mall, stadium, or other geographic area.
+To receive a geofenced message from CDC, you must have certain apps downloaded and either have background location sharing enabled on your device or be actively using those apps while passing through a geofenced area. A geofence does not track your location; it is solely used to detect devices that may enter a specific geographic area at a point in time so they can receive a CDC-sponsored message.
+To receive a geofenced message from CDC, you must have certain apps downloaded and either have background location sharing enabled on your device or be actively using those apps while passing through a geofenced area. A geofence does not track your location or your phone number; it is solely used to detect devices that may enter a specific geographic area at a point in time so they can receive a CDC-sponsored message. Messages may be delivered multiple times within a few days after crossing through a geofenced area, though CDC will limit the number of times an individual would receive a message. Additionally, CDC requires that individuals always have the option to opt-out of messaging, including any ads that are delivered in real-time and shortly thereafter.
+CDC does not receive any personally identifying information about people reached through these geotargeted health messages. CDC may get aggregated data about the number of times a message is shown, the number of people who see the message, and the number of comments, likes, shares and clicks a message receives. CDC may also receive aggregated data about the basic demographic groups reached by messages, such as the distribution of ages and genders.
+CDC may get aggregated data from third-party vendors about the number of times a message is shown, the number of people who see the message, and the number of comments, likes, shares, and clicks a message receives. CDC may also receive aggregated data about the basic demographic groups reached by messages, such as the distribution of ages and gender ranges. CDC does not receive any personally identifiable information (PII) about individuals reached through geotargeted health messages.
 If you choose to [provide us with information](https://www.cdc.gov/Other/information-received.html), we may use that information to contact you, respond to your message, or provide you the information or services you requested. In order to serve you better, we may analyze multiple sources of data you have provided (for example, to look up whether you previously contacted the CDC about the same topic so that we do not send you a duplicative response). We may also use messages or comments collected through CDC.gov sites, Apps, or official social media profiles for our own purposes, such as to inform policy decisions or in public advocacy.
 We may use data you provide and automatically generated data for statistical analysis to assess, for example, what information is of interest to users, technical design specifications, and system performance. This allows us to make general improvements to our site as well as to offer tailored content to email subscribers (e.g., a follow-up message to subscribers interested in a specific topic based on information they have provided or automatically generated data).
 We believe in the importance of protecting the privacy of children online. As such, we will take all reasonable steps to protect the privacy and safety of any child from whom information is collected as required by the [Children's Online Privacy Protection Act (COPPA)](https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa). A child's parent or guardian is required to provide consent before CDC collects, uses, or shares personal information from a child under age 13.

CDC Digital Media Channel Privacy Policy Notice

Full text changes — 20220901_rev01 to 20230101_rev01