The access and use of CDX Registration for the electronic submittal of environmental information require the creation of a CDX User ID and login credentials that I must maintain and keep confidential. I will review the following steps concerning the creation and maintenance of a CDX User ID and login credentials.
Warning Notice
In proceeding and accessing U.S. Government information and information systems, you acknowledge that you fully understand and consent to all of the following:
- you are accessing U.S. Government information and information systems that are provided for official U.S. Government purposes only;
- unauthorized access to or unauthorized use of U.S. Government information or information systems is subject to criminal, civil, administrative, or other lawful action;
- the term U.S. Government information system includes systems operated on behalf of the U.S. Government;
- you have no reasonable expectation of privacy regarding any communications or information used, transmitted, or stored on U.S. Government information systems;
- at any time, the U.S. Government may for any lawful government purpose, without notice, monitor, intercept, search, and seize any authorized or unauthorized communication to or from U.S. Government information systems or information used or stored on U.S. Government information systems;
- at any time, the U.S. Government may for any lawful government purpose, search and seize any authorized or unauthorized device, to include non-U.S. Government owned devices, that stores U.S. Government information;
- any communications or information used, transmitted, or stored on U.S. Government information systems may be used or disclosed for any lawful government purpose, including but not limited to, administrative purposes, penetration testing, communication security monitoring, personnel misconduct measures, law enforcement, and counterintelligence inquiries; and
- you may not process or store classified national security information on this computer system.
Privacy Statement
EPA will use the personal identifying information which you provide for the expressed purpose of registration to the Central Data Exchange site and for updating and correcting information in internal EPA databases as necessary. The Agency will not make this information available for other purposes unless required by law. EPA does not sell or otherwise transfer personal information to an outside third party. [https://www.federalregister.gov/documents/2021/08/18/2021-17639/privacy-act-of-1974-system-of-records]
Protecting my CDX Login Credentials
I agree to protect my CDX User ID and login credentials.
I will not divulge my credentials to any other individual; I will not store them in an unprotected location; and I will not allow them to be written into computer scripts to achieve automated login.
I also acknowledge that EPA is not responsible for recovering access to my CDX account should I lose or delete my associated Login.gov account. Although Login.gov recommends deleting an account if the authentication method(s) is/are lost for any reason, CDX will not offer a means to relink the account due to security implications. Thus, revocation or loss of a Login.gov account will render the associated CDX account defunct, and retrieval of the account’s submission history (Copy of Record) will necessitate submitting a notarized request on company letterhead via paper mail to EPA with proper certification of authorization.
Limited CDX Software Distribution
Any distribution of software provided by the Environmental Protection Agency's Central Data Exchange shall be handled according to any defined license practices. CDX provides tools which contain FIPS-validated RSA BSAFE Crypto-J, which is classified under Export Commodity Classification Number (ECCN) 5D002 "Encryption Software" referenced under CCATS G059799. This product is eligible for license exception ENC under Sections 740.17 (A) and (B) (2) of the Export Administration Regulations (EAR). The exportation of this item classified by the Bureau of Industry and Security (BIS) as 5D002 "Unrestricted" to foreign subsidiaries of US companies is permitted under this license exception ("ENC "Encryption"). This license exception does not apply to the embargoed nations of Cuba, Iran, North Korea, Sudan, and Syria, or any parties found on the various government denial lists including the Department of Commerce Denied Parties List. For additional information and guidance regarding your use of this product, please refer to the United States' standard regulations for encryption at https://www.bis.doc.gov/index.php/documents/regulation-docs/415-part-740-license-exceptions/file#page=52.
Actions to take if my CDX Account has been Compromised
If I have determined that my CDX account has become compromised, I agree to contact the CDX Technical Support staff at 888-890-1995 or (970) 494-5500 for international callers as soon as possible.
Terminating my CDX Account
I agree to notify CDX within ten working days if my duties change and I no longer need to interact with the CDX on behalf of my organization. I agree to make this notification via either the CDX web interface or by notifying the CDX Technical Support staff at 888-890-1995 or (970) 494-5500 for international callers. This notification will allow CDX to deactivate my account and protect it from potential abuse by others.
Following the CDX Rules of Behavior
EPA employees and contractors who support the CDX program are required to follow the CDX Rules of Behavior. By proceeding with CDX login, those users acknowledge this requirement and agree to abide by those rules.