Privacy Policy

The American Samoa Department of Health ("DOH", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Passenger Travel Health Portal ("Portal").

We understand the sensitive nature of health information and are committed to maintaining the confidentiality and security of the information you provide. This policy applies to information we collect through the Portal, in email, text, and other electronic communications.

Please read this Privacy Policy carefully. By accessing or using the Portal, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use the Portal.

We collect several types of information from and about users of our Portal, including:

2.1 Personal Information

Personal information is data that can be used to identify you individually. We collect the following categories of personal information:

• Identifiers: Name, postal address, email address, phone number, date of birth, passport or government ID number, and nationality.
• Travel Information: Flight details, arrival and departure dates, accommodation information, and travel history.
• Account Information: Username, password, and security questions/answers when you create an account.

2.2 Health Information

As part of the health declaration process, we collect health-related information, including:

• Vaccination status and vaccination records
• Current symptoms and health status
• Relevant medical history as it pertains to infectious diseases
• Recent exposure to infectious diseases

2.3 Automatically Collected Information

As you navigate through and interact with our Portal, we may use automatic data collection technologies to collect:

• Usage details such as traffic data, logs, and other communication data
• Information about your computer and internet connection, including your IP address, operating system, and browser type
• Device information including mobile device identifier

2.4 Information Collection Methods

We collect information through:

• Direct Interactions: Information you provide when filling out forms, creating an account, submitting health declarations, or corresponding with us.
• Automated Technologies: Cookies, web beacons, and other tracking technologies.
• Third-Party Sources: We may receive information from other government agencies, airlines, or healthcare providers with your consent or as permitted by law.

We use the information we collect about you or that you provide to us for the following purposes:

3.1 Primary Purposes

• To facilitate entry screening and health assessments for travelers to American Samoa
• To verify your identity and validate the information provided
• To process and respond to your health declaration submissions
• To communicate with you about your travel status, requirements, and updates
• To conduct contact tracing when necessary for public health purposes
• To provide you with notices and alerts related to public health requirements

3.2 Administrative and Operational Purposes

• To maintain and improve the Portal's functionality and user experience
• To fulfill record-keeping requirements and maintain accurate records
• To respond to your inquiries and provide customer support
• To enforce our terms and conditions and other policies
• To protect the rights, property, or safety of the DOH, Portal users, or others
• To detect, prevent, and address technical issues, security incidents, and fraudulent activity

3.3 Public Health Purposes

• To monitor and manage public health risks
• To generate de-identified, aggregate statistics for public health planning and reporting
• To support disease surveillance activities
• To assist in implementing appropriate public health measures

We do not use automated decision-making processes, including profiling, which produce legal or similarly significant effects on individuals. All health declaration assessments involve human review by qualified health officials.

We may disclose or share your personal information in the following circumstances:

4.1 Government Agencies and Health Authorities

We may share your information with:

• American Samoa Department of Health officials and staff
• Immigration and customs authorities
• Other relevant government agencies responsible for public safety and border control
• Public health officials for disease surveillance and contact tracing purposes

4.2 Service Providers

We may share information with third-party vendors, service providers, contractors, or agents who perform functions on our behalf.

All service providers are contractually obligated to use your personal information only as necessary to provide services to us and are required to maintain the confidentiality and security of your information.

4.3 Legal Requirements

We may disclose your information:

• To comply with any court order, law, or legal process
• To enforce or apply our terms of use and other agreements
• If we believe disclosure is necessary to protect the rights, property, or safety of the DOH, Portal users, or others

4.4 De-identified or Aggregate Information

We may use and share de-identified or aggregate information that does not identify any individual for public health research, improving public health planning, and reporting to governing bodies.

We have implemented appropriate technical and organizational measures to protect the security of your personal information. Our security measures include:

• Encryption of sensitive personal and health information
• Secure Socket Layer (SSL) technology for data transmission
• Access controls and authentication procedures
• Regular security assessments and vulnerability testing
• Staff training on data protection and security practices
• Physical security controls for our facilities

While we use commercially reasonable efforts to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

We have procedures to address suspected personal data breaches and will notify you and any applicable regulators of breaches when legally required to do so.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of your visit to American Samoa
• Legal obligations to maintain certain records for specified periods
• Public health monitoring requirements
• Statutes of limitations for potential legal claims
• Ongoing administrative needs

We typically retain health declaration information for a period of 7 years from the date of submission, in accordance with health record retention requirements. Account information is retained as long as your account remains active, plus a reasonable period thereafter for legal and administrative purposes.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable law.

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:

• Access: You may request access to your personal information we hold.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: In certain circumstances, you may request deletion of your personal information, subject to our legal obligations and legitimate interests.
• Restriction: You may request restriction of processing of your personal information under certain conditions.
• Data Portability: You may request a copy of your personal information in a structured, commonly used, machine-readable format.
• Objection: You may object to processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We may need to verify your identity before responding to your request.

7.1 Account Information

You can review and update your account information by logging into your account on the Portal. If you wish to deactivate your account, you may do so by contacting us.

The Portal is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child under age 13, please contact us, and we will take appropriate steps to remove such information.

For children under 18 but over 13, a parent or legal guardian must complete the health declaration on their behalf. The information collected about minors is subject to the same protections outlined in this Privacy Policy.

The Portal is operated in American Samoa. If you are accessing the Portal from outside American Samoa, please be aware that your information may be transferred to, stored, and processed in American Samoa or other countries where our servers and service providers are located.

By using the Portal or providing us with any information, you consent to the transfer, processing, and storage of your information in countries where the privacy laws may be less stringent than those in your country of residence.

When transferring personal information internationally, we take appropriate safeguards to ensure your information receives an adequate level of protection, which may include:

• Using approved contractual clauses
• Ensuring service providers maintain appropriate security measures
• Limiting transfers to what is necessary for the provision of our services

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by:

• Posting a notice on the Portal
• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending an email to users with registered accounts (for significant changes)

We encourage you to review the Privacy Policy whenever you access the Portal to stay informed about our information practices and your privacy rights.

Your continued use of the Portal after we post changes to the Privacy Policy means you accept and agree to those changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: