Web-based Operations Safety System (WebOPSS)

The Federal Aviation Administration’s (FAA) Aviation Safety Organization (AVS) owns and operates the Web-based Operations Safety System (WebOPSS) which operates under Title 49 U.S.C. 332 and 5 U.S.C. 301. WebOPSS is used by the FAA’s Flight Standards Service to disseminate FAA requirements to air operators (e.g., air carriers such as airlines) and air agencies (e.g., repair stations, training centers, and pilot schools) and manage authorizing documents. Those authorizing documents require that FAA and aviation industry users have digital certificates so they can electronically sign the documents. The Digital Certificate Service (DCS) within WebOPSS provides those digital certificates. The FAA is publishing this Privacy Impact Assessment (PIA) under Section 208 of the E-Government Act of 2002. The DCS collects the following Personally Identifiable Information (PII) from aviation industry air operators and air agency employees; their name, social security number (SSN), date of birth (DOB), home phone number, email address, driver’s license number and state of issuance, whether the driver’s license address is the current address or a previous address, current street address, years at that address, most recent previous address, billing address, indication of whether their credit card is a US card, their credit card number, CVC code, and card expiration year and date. DCS only maintains their name, email, and certificate order ID.