The access and use of CDX Registration for the electronic submittal of environmental information require the creation of a user ID and password that I must maintain and keep confidential. I will review the following steps concerning the creation and maintenance of a user ID and password.

Warning Notice

In proceeding and accessing U.S. Government information and information systems, you acknowledge that you fully understand and consent to all of the following:

1. you are accessing U.S. Government information and information systems that are provided for official U.S. Government purposes only;
2. unauthorized access to or unauthorized use of U.S. Government information or information systems is subject to criminal, civil, administrative, or other lawful action;
3. the term U.S. Government information system includes systems operated on behalf of the U.S. Government;
4. you have no reasonable expectation of privacy regarding any communications or information used, transmitted, or stored on U.S. Government information systems;
5. at any time, the U.S. Government may for any lawful government purpose, without notice, monitor, intercept, search, and seize any authorized or unauthorized communication to or from U.S. Government information systems or information used or stored on U.S. Government information systems;
6. at any time, the U.S. Government may for any lawful government purpose, search and seize any authorized or unauthorized device, to include non-U.S. Government owned devices, that stores U.S. Government information;
7. any communications or information used, transmitted, or stored on U.S. Government information systems may be used or disclosed for any lawful government purpose, including but not limited to, administrative purposes, penetration testing, communication security monitoring, personnel misconduct measures, law enforcement, and counterintelligence inquiries; and
8. you may not process or store classified national security information on this computer system.

Privacy Statement

EPA will use the personal identifying information which you provide for the express purpose of registration to the Central Data Exchange site and for updating and correcting information in internal EPA databases as necessary. The Agency will not make this information available for other purposes unless required by law. EPA does not sell or otherwise transfer personal information to an outside third party. Federal Register: March 18, 2002 (Volume 67, Number 52), Page 12010-12013.

Choosing a CDX Password

For CDX registration purposes, I agree to select a password which will not be easily guessed (e.g., my name, my children's names, birthdays, etc.). Passwords must be a minimum of 8 alpha-numeric characters (no spaces or special characters) and contain at least 1 of each of the following:

• uppercase character
• lowercase character
• number

Passwords may not begin with a number nor contain the word "password" nor contain your User Name.

Protecting my CDX Password

I agree to protect my CDX password.

Limited CDX Software Distribution

Any distribution of software provided by the Environmental Protection Agency's Central Data Exchange shall be handled according to any defined license practices.

CDX provides tools which contains FIPS-validated RSA BSAFE Crypto-J which is classified under Export Commodity Classification Number (ECCN) 5D002 "Encryption Software" referenced under CCATS G059799. This product is eligible for license exception ENC under Sections 740.17 (A) and (B) (2) of the Export Administration Regulations (EAR). The exportation of this item classified by the Bureau of Industry and Security (BIS) as 5D002 "Unrestricted" to foreign subsidiaries of US companies is permitted under this license exception ("ENC" "Encryption"). This license exception does not apply to the embargoed nations of Cuba, Iran, North Korea, Sudan and Syria or any parties found on the various government denial lists including the Department of Commerce Denied Parties List. For additional information and guidance regarding your use of this product, please refer to the United States' standard regulations for encryption at https://www.bis.doc.gov/index.php/documents/regulation-docs/415-part-740-license-exceptions/file#page=47.

Actions to take if my CDX Account has been Compromised

If I have determined that my CDX account has become compromised, I agree to contact the CDX Technical Support staff at 888-890-1995 or (970) 494-5500 for International callers as soon as possible.

Terminating my CDX Account

I agree to notify CDX within ten working days if my duties change and I no longer need to interact with the CDX on behalf of my organization. I agree to make this notification via either the CDX web interface or by notifying the CDX Technical Support staff at 888-890-1995 or (970) 494-5500 for International callers. This notification will allow CDX to deactivate my account and protect it from potential abuse by others.