Formulas Online (FONL)

Privacy Impact Assessment

Information Collected and Purpose

Formulas Online (FONL) is a web-based application that supports the online submission of applications, along with the routing and processing of submissions and sample analysis requests for beverage and non-beverage alcohol product formula. The intent of this application is to streamline the management process for the three regulatory functions vital to the mission of TTB. The regulatory functions consist of the following compliance approval processes: (i) beverage alcohol formula process and approval, (ii) certificate of label issuance approval (COLA); and (iii) non-beverage product information processes for tax and regulatory compliance. All submissions and sample analysis requests are provided with secure cross-organizational access.

Information Use and Sharing

FONL stores names, mailing addresses, phone numbers, and e-mail addresses for those individuals who have provided the aforementioned information on the application. FONL provides applicants with a publicly facing website enabling them to view the information in the application and to check the status of the application while it is awaiting approval. Each application is specifically linked to the individual who submits it and only designated and approved TTB officials have direct access to personally identifiable information (PII) stored within FONL. With regard to the roles assigned within the application, all individuals receive access rights based on their status.

Information Consent

For an individual’s PII to be stored in FONL, the individual must have willingly and intentionally filled out and submitted an application. The application is subject to the Privacy Act and a Privacy Act SORN that addresses all required categories of information has been published in the Federal Register.

Information Protection

The Alcohol and Tobacco Tax and Trade Bureau (TTB) will take appropriate security measures to safeguard PII and other sensitive data stored on FONL. TTB will apply Department of the Treasury security standards, including but not limited to, routine scans and monitoring, back-up activities, and background security checks for all TTB employees and contractors. Accordingly, access to FONL PII will be limited to specific job function and access will be controlled based on least privilege.

The following access safeguards will also be implemented:

Passwords expire after a set period;
Accounts are locked after a set period of inactivity;
Minimum length of passwords is eight characters;
Passwords are combination of letters, numbers, and symbols; and
Accounts are locked after a set number of incorrect attempts.

TTB Annual Report Statistics Initial Requests
Year	Received	Processed	Pending
2010 2009 2008 2007 2006 2005 2004 2003	94 86 121 84 100 140 223 151	93 94 120 85 122 186 201 116	2 0 8 5 6 28 74 52