The access and use of CDX Registration for the electronic submittal of environmental information require the creation of a user ID and password that I must maintain and keep confidential. I will review the following steps concerning the creation and maintenance of a user ID and password.
In proceeding and accessing U.S. Government information and information systems, you acknowledge that you fully understand and consent to all of the following:
- you are accessing U.S. Government information and information systems that are provided for official U.S. Government purposes only;
- unauthorized access to or unauthorized use of U.S. Government information or information systems is subject to criminal, civil, administrative, or other lawful action;
- the term U.S. Government information system includes systems operated on behalf of the U.S. Government;
- you have no reasonable expectation of privacy regarding any communications or information used, transmitted, or stored on U.S. Government information systems;
- at any time, the U.S. Government may for any lawful government purpose, without notice, monitor, intercept, search, and seize any authorized or unauthorized communication to or from U.S. Government information systems or information used or stored on U.S. Government information systems;
- at any time, the U.S. Government may for any lawful government purpose, search and seize any authorized or unauthorized device, to include non-U.S. Government owned devices, that stores U.S. Government information;
- any communications or information used, transmitted, or stored on U.S. Government information systems may be used or disclosed for any lawful government purpose, including but not limited to, administrative purposes, penetration testing, communication security monitoring, personnel misconduct measures, law enforcement, and counterintelligence inquiries; and
- you may not process or store classified national security information on this computer system.
EPA will use the personal identifying information which you provide for the expressed purpose of registration to the Central Data Exchange site and for updating and correcting information in internal EPA databases as necessary. The Agency will not make this information available for other purposes unless required by law. EPA does not sell or otherwise transfer personal information to an outside third party. [https://www.federalregister.gov/documents/2021/08/18/2021-17639/privacy-act-of-1974-system-of-records]
Choosing a CDX Password
For CDX registration purposes, I agree to select a password which will not be easily guessed (e.g., my name, my children's names, birthdays, etc.). Passwords must be a minimum of 8 alpha-numeric characters (no spaces or special characters) and contain at least 1 of each of the following:
- uppercase character
- lowercase character
Passwords may not begin with a number nor contain the word "password" nor contain your User Name.
Protecting my CDX Password
I agree to protect my CDX password.
I will not divulge my password to any other individual; I will not store it in an unprotected location; and I will not allow it to be written into computer scripts to achieve automated login.
Limited CDX Software Distribution
Any distribution of software provided by the Environmental Protection Agency's Central Data Exchange shall be handled according to any defined license practices.
CDX provides tools which contains FIPS-validated RSA BSAFE Crypto-J which is classified under Export Commodity Classification Number (ECCN) 5D002 "Encryption Software" referenced under CCATS G059799. This product is eligible for license exception ENC under Sections 740.17 (A) and (B) (2) of the Export Administration Regulations (EAR). The exportation of this item classified by the Bureau of Industry and Security (BIS) as 5D002 "Unrestricted" to foreign subsidiaries of US companies is permitted under this license exception ("ENC "Encryption"). This license exception does not apply to the embargoed nations of Cuba, Iran, North Korea, Sudan and Syria or any parties found on the various government denial lists including the Department of Commerce Denied Parties List. For additional information and guidance regarding your use of this product, please refer to the United States' standard regulations for encryption at https://www.bis.doc.gov/index.php/documents/regulation-docs/415-part-740-license-exceptions/file#page=47
Actions to take if my CDX Account has been Compromised
If I have determined that my CDX account has become compromised, I agree to contact the CDX Technical Support staff at 888-890-1995 or (970) 494-5500 for International callers as soon as possible.
Terminating my CDX Account
I agree to notify CDX within ten working days if my duties change and I no longer need to interact with the CDX on behalf of my organization. I agree to make this notification via either the CDX web interface or by notifying the CDX Technical Support staff at 888-890-1995 or (970) 494-5500 for International callers. This notification will allow CDX to deactivate my account and protect it from potential abuse by others.