Topline: Require Permit Information For Permittee

Background

We wanted to identify and recommend any handbook changes that may be needed to (1) support the new online process and (2) ensure congruity between the online and in-office experiences.

Key Takeaways

• For the MVP, the FS2400-1 permit will be used instead of a redesign permit, and the justifications are listed in #157. Therefore no handbook changes are required.
• For a valid FS2400-1, a permittee is required to enter the following information including Name, Address, City, State, Zip Code, Permit Number, Payment Method, Permit Identification and Identification Type.
• Personal Identification type will be Driver's license or State ID (truncated)
• Security concerns were raised about PII and what is considered stand-alone data for permittee (resulting in us nixing a truncated SSN as a form of personal identification for FS2400-1)
• Policy concerns were raised regarding which district and authorized Forest Officer should be listed on the FS2400-1 per forest.
• We received permission from USFS Privacy Office to allow the FS2400-1 to be emailed to a permittee unencrypted after the purchase with a mandatory opt-in for users.

Design Implications

• Purchase form needs additional input for "Drivers License Number" as text field:

• This input field should allow a user to securely enter information (only revealing the last four digits of the license number)
• Truncated "Permittee Identification" will be auto-populate permittee printed on FS2400-1 (with the Permittee Identification Type as 'Driver's License')

• Pilot forest will provide one district and ranger to be listed on the FS2400-1
• User-flow will require small modifications to provide an optimal introductory of notification for opt-in PII usage
• Add additional checkbox on purchase online form for users to acknowledgments regarding PII needed to proceed in purchasing a firewood permit

Design Debt

• Permit purchasers will not be able to use other personal identification types (passport number, tribal ID, etc)