Privacy Act of 1974; System of Records, 952-956 [E6-21942]

Download as PDF 952 Federal Register / Vol. 72, No. 5 / Tuesday, January 9, 2007 / Notices Secretary, Defense Health Board, Skyline One, 5205 Leesburg Pike, Suite 810, Falls Church, VA 22041, (703) 681– 3279, ext. 123. Section 552b(b) of Title 5, U.S.C., specifically subparagraph (1) thereof and Title 5, U.S.C., appendix 1, subsection 10(d). Open sessions of the meeting will be limited by space accommodations. Any interested person may attend, appear before or file statements with the Board at the time and in the manner permitted by the Board. Dated: January 3, 2007. C.R. Choate, Alternate OSD Federal Register Liaison Officer, Department of Defense. [FR Doc. 07–24 Filed 1–8–07; 8:45 am] Privacy Act of 1974; Systems of Records SYSTEM NAME: AGENCY: Personnel Management Information System (February 22, 1993, 58 FR 10613). Reason: The records contained in this system of records have been migrated into Defense Intelligence Agency’s LDIA 05–0001, Human Resources Management System (HRMS). ACTION: LDIA SYSTEM NAME: Defense Intelligence Agency, DoD. Notice to Delete Systems of Records. ACTION: SUMMARY: The Defense Intelligence Agency is deleting five systems of records notices in its existing inventory of record systems subject to the Privacy Act of 1974 (5 U.S.C. 552a), as amended. This proposed action will be effective without further notice on February 8, 2007 unless comments are received that would result in a contrary determination. DATES: Freedom of Information Office, Defense Intelligence Agency (DAN–1A), 200 MacDill Boulevard, Washington, DC 20340–5100. ADDRESSES: FOR FURTHER INFORMATION CONTACT: Ms. Theresa Lowery at (202) 231–1193. The Defense Intelligence Agency notices for systems of records subject to the Privacy Act of 1974 (5 U.S.C. 552a), as amended, have been published in the Federal Register and are available from the address above. The specific deletions are set forth below. The proposed deletions are not within the purview of subsection (r) of the Privacy Act of 1974 (5 U.S.C. 552a), as amended, which requires the submission of a new or altered system report. SUPPLEMENTARY INFORMATION: ycherry on PROD1PC63 with NOTICES Privacy Act of 1974; System of Records Biographic Sketch (February 22, 1993, 58 FR 10613). Reason: Information no longer collected or maintained. Records have been destroyed. Office of the Secretary 13:55 Jan 08, 2007 Deletion LDIA 0005 SYSTEM NAME: DEPARTMENT OF DEFENSE VerDate Aug<31>2005 DEPARTMENT OF DEFENSE LDIA 0015 BILLING CODE 5001–06–M AGENCY: Dated: January 3, 2007. C.R. Choate, Alternate OSD Federal Register Liaison Officer, Department of Defense. Jkt 211001 Official Traveler Profile (February 22, 1993, 58 FR 10613). Reason: Defense Intelligence Agency maintains these records under a Government-wide Privacy Act system of records notice, GSA/GOVT–4, Contracted Travel Services Program published in the Federal Register on December 20, 2004, at 69 FR 75980. LDIA 0590 SYSTEM NAME: Defense Intelligence Special Career Automated System (DISCAS) (February 22, 1993, 58 FR 10613). Reason: The records are maintained in Defense Intelligence Agency’s LDIA 05–0001, Human Resources Management System (HRMS) published in the Federal Register on November 25, 2005 at 70 FR 71099. LDIA 0813 SYSTEM NAME: Bibliographic Data Index (February 22, 1993, 58 FR 10613). Reason: Information no longer collected or maintained. Records have been destroyed and the permanent records were retired to the Washington National Records Center. [FR Doc. 07–25 Filed 1–8–07; 8:45 am] BILLING CODE 5001–06–M PO 00000 Frm 00017 Fmt 4703 Sfmt 4703 Office of the Secretary of Defense [DOD–2006–OS–0221] Office of the Secretary, OSD. Notice to amend systems of records. SUMMARY: The Office of the Secretary of Defense is amending a system of records notice in its existing inventory of record systems subject to the Privacy Act of 1974 (5 U.S.C. 552a), as amended. DATES: Effective Date: January 9, 2007. FOR FURTHER INFORMATION CONTACT: Ms. Juanita Irvin at (703) 696–4940. SUPPLEMENTARY INFORMATION: The Notice was published on May 23, 2005, in the Federal Register (70 FR 29486). During the comment period, two public comments were received, which were virtually identical in format and content. The commenters assert that the collection and maintenance of data in the Joint Advertising, Market Research & Studies (JAMRS) Recruiting Database violates the Privacy Act of 1974. The commenters also remarked that the Department of Defense (‘‘DoD’’) should not be engaged in direct marketing activities; that the collection and use of Social Security Numbers (SSNs) is unauthorized and poses significant risks to an individual’s privacy; that the transfer of information from the DoD to a private contractor is inappropriate and that adequate security for the database is lacking; and, that the Department does not provide a means by which an individual may elect to have his or her data deleted from the database. The JAMRS Database is maintained in a manner that is consistent with the Privacy Act and other statutes and regulations relating to the Department’s recruiting authority. In its discretion, however, the Department has determined that the publication of a revised Systems Notice, providing further explanation and clarification of the manner in which the JAMRS Database is maintained, is appropriate at this time. The Department received a comment asserting that the maintenance of the JAMRS Database violates the Privacy Act. Commenters assert that Congress, in enacting the Privacy Act, sought to restrict the amount of personal information that Federal agencies could collect and maintain on individuals; that direct marketing by the DoD does not constitute an authorized purpose or use of the information; and that agencies E:\FR\FM\09JAN1.SGM 09JAN1 ycherry on PROD1PC63 with NOTICES Federal Register / Vol. 72, No. 5 / Tuesday, January 9, 2007 / Notices should be transparent in their information practices. The Department’s use of the JAMRS Database is consistent with the Privacy Act and its underlying purposes. The Department only collects such information on individuals as is relevant and necessary to accomplish a Departmental purpose prescribed by statute or Executive Order of the President. Consistent with this mandate, and in recognition of the importance of attracting qualified individuals to serve in the nation’s all-volunteer force, Congress has directed the armed services to ‘‘conduct intensive recruiting campaigns to obtain enlistments’’ in the military (10 U.S.C. 503(a)(1) (emphasis supplied)). To this end, the Secretary of Defense has been provided with a broad mandate to ‘‘act on a continuing basis to enhance the effectiveness of recruitment programs of the Department of Defense (including programs conducted jointly and programs conducted by the separate armed forces) through an aggressive program of advertising and market research targeted at prospective recruits for the armed forces and those who may influence prospective recruits’’ (10 U.S.C. 502(a)(2) (emphasis supplied)). In addition to these congressional directives to the Secretary of Defense to conduct intensive recruiting campaigns, Congress also has conferred broad grants of authority to recruit upon the Under Secretary of Defense for Personnel and Readiness and the Secretaries of the Army, Navy and Air Force. See 10 U.S.C. 136 (Under Secretary); 3013 (Secretary of the Army); 5013 (Secretary of the Navy); 8013 (Secretary of the Air Force). The Department disagrees with the commenters’ assertion that direct marketing is not an authorized agency purpose. Indeed, in acknowledgment of the critical role of recruitment efforts in the maintenance of the nation’s allvolunteer military, Congress has appropriated funds dedicated for this purpose. In particular, Congress continues to provide for the appropriation of funds to carry out advertising and market research programs to enhance the military’s recruiting efforts. This is neither a new effort nor a new system of records, but rather a continuation of an ongoing activity supporting the All-Volunteer Force. In the past, direct marketing data were compiled by each of the Services independently. In order to achieve significant costs savings, information is now purchased or obtained by the Department through a variety of sources (including but not limited to state motor vehicle departments, the Selective Service System registry, and VerDate Aug<31>2005 13:55 Jan 08, 2007 Jkt 211001 commercially-purchased lists). It is then provided to and maintained by a contractor, and then, sent to the military Services for use incident to their respective recruiting programs. In effect, the success of the All-Volunteer Force is contingent on the Secretary’s continuing ability to be able to contact young Americans for purposes of making them aware of their option to serve in the United States military and to perform a vital service on behalf of their nation. Although the Department did not initiate a new data collection effort, after an internal organizational realignment, the Department published the May 23, 2005 Systems Notice. The commenters further remarked that data should be collected directly from the individual as much as possible, that access and correction rights should be provided, and that the adoption of the Blanket Routine Uses for this database is inappropriate. These comments reflect a lack of understanding of the requirements of the Privacy Act, as well as the practical realities of collecting and maintaining data for use in military recruiting. First, the Privacy Act requires that information be collected to the ‘‘greatest extent practicable’’ directly from the subject individual when the information may result in adverse determinations about an individual’s rights, benefits, and privileges under Federal programs (5 U.S.C. 552a(e)(2)). The only practical cost-effective means of identifying the entire targeted population for recruiting efforts, as contemplated by 10 U.S.C. 503(a), is to obtain the information from a variety of third-party sources as is now being done. Moreover, the collection does not adversely impact an individual, in that it will not result in the denial of any Federal benefits nor will it result in any other unfavorable action impacting the individual. Second, access and amendment procedures are currently set out in the notice as is required by the Privacy Act (5 U.S.C. 552a(e)(4)). These provisions— specifically the notification, access, and contesting sections—advise individuals how they can determine if the database contains information about themselves, how they may access such information, and how they may contest the accuracy of the information in the database. And third, the Blanket Routine Uses, which are permissive in nature, generally are incorporated in all DoD system notices for record systems covered by the Privacy Act, unless there is a statutory or regulatory basis for not doing so. Since the information in the JAMRS database is used within DoD for recruiting purposes only and is not PO 00000 Frm 00018 Fmt 4703 Sfmt 4703 953 disclosed to non-DoD agencies, the Department has revised the notice to make clear that the Blanket Routine Uses do not apply except for those specific uses relating to disclosures to the Department of Justice for litigation purposes and to the General Services Administration and the National Archives and Records Administration for records management purposes. The commenters also remarked that the Department lacks authority for collecting Social Security Numbers (SSNs) and that their use for purposes of identifying individuals in the database is unnecessary. These contentions are mistaken. Executive Order 9397 permits the use of the SSN where Federal agencies require a system of numerical identification for individual persons incident to administering an agency activity. A unique identification system is essential in order to accomplish the limited purposes for which the number is used. The principal purpose for collecting the number is to identify individuals who are presently members of the Armed Forces. The SSN is matched against a DoD database containing the SSNs of new recruits. Where there is a match, the information in the JAMRS Database is not released to the Services for the recruitment mailings. Other unique identifiers, such as a residential address or home telephone numbers, may not always suffice, especially in a highly mobile society where individuals frequently move. SSNs are only collected from the Selective Service System (SSS) and are not collected from any other governmental or private database. The Department has revised the notice to make clear that SSNs are not collected from all data sources. Further, the SSNs are used solely for internal database purposes and are not shared with the military Services. The commenters also expressed the concern that the use of SSNs heightens the risk of identity theft. DoD acknowledges that identity theft is an important concern for the Department and that the compromise of the SSN would constitute a significant invasion of privacy. In order to minimize potential exposure, the Department scrambles—a form of encryption—the SSN upon receipt and maintains the SSN in a scrambled format during the time it is stored in the database. These actions, along with other security features for the database, constitute reasonable and appropriate safeguards to protect and preserve the integrity of the number. The commenters observed that use of a private contractor to maintain the data is an ‘‘aberration’’ of normal practice, and also expressed concern with regard E:\FR\FM\09JAN1.SGM 09JAN1 ycherry on PROD1PC63 with NOTICES 954 Federal Register / Vol. 72, No. 5 / Tuesday, January 9, 2007 / Notices to a perceived lack of security procedures by the contractor to prevent abuse. Contractors or subcontractors are used to perform many activities on behalf of the Department, principally because of the unique expertise they possess and because the activity can be accomplished in a more cost-effective manner. The JAMRS contract was awarded based on the unique ability of the contractor to maintain and store large amounts of data in a secure manner; the contract does not permit the contractor to use the information for any non-Department of Defense marketing efforts. The Department recognizes the importance of ensuring that all data it collects are safely compiled, handled, stored, and transferred. The subcontractor has established a highly secure and restrictive environment by putting in place appropriate administrative, technical, and physical safeguards to ensure the security and confidentiality of the database. Vulnerability and risk assessment reviews are conducted on a regular basis to ensure maximum safeguarding of the information. The commenters also expressed concern about whether the company will be subject to the constraints imposed by the Privacy Act, or specifically whether the contractor is subject to 5 U.S.C. 552a(m). The contract includes the Privacy Act clause of the Federal Acquisition Regulation (FAR), specifically FAR 52.224–2, under which the contractor agrees to comply with the requirements of the Privacy Act and DoD rules and regulations issued under the Act. This contract provision also treats the contractor as an employee of DoD for purposes of the Privacy Act, and it is thus subject to possible criminal penalties if the Act is violated. The contract also was recently amended to incorporate the contract clause at FAR 52.239–1, Privacy and Security Safeguards, which includes a notification requirement if new or unanticipated threats or hazards are discovered, or if existing safeguards cease to function. Finally, the commenters asserted that individuals should be able to opt-out from the database. The Department agrees that such an option should be available. The Department currently permits any individual who is 151⁄2 years or older, or a parent or guardian acting on the behalf of any minor who is between 151⁄2 and 18 years old, to have his or her name removed from the JAMRS list provided to the Services for recruiting purposes. Individuals may accomplish this by sending a written request to JAMRS, Attn: Opt-Out, 4040 N. Fairfax Drive, Suite 200, Arlington, VerDate Aug<31>2005 13:55 Jan 08, 2007 Jkt 211001 VA 22203. In order to process such requests, the individual’s name, address, city, State, zip, and date of birth must be provided. The ‘‘Record Access Procedures’’ section of the System Notice has been expanded to set forth the above-prescribed procedures. The specific changes to the record system being amended are set forth below followed by the notice, as amended, published in its entirety. The proposed amendments are not within the purview of subsection (r) of the Privacy Act of 1974 (5 U.S.C. 552a), as amended, which requires the submission of a new or altered system report. Dated: December 18, 2006. C.R. Choate, Alternate OSD Federal Register Liaison Officer, Department of Defense. DHRA 04 SYSTEM NAME: Joint Advertising and Market Research Recruiting Database (May 23, 2005, 70 FR 29486). CHANGES: SYSTEM NAME: Delete entry and replace with ‘‘Joint Advertising, Market Research & Studies Recruiting Database.’’ SYSTEM LOCATION: Delete entry and replace with ‘‘Equifax Database Services, Inc., 500 Edgewater Drive, Suite 525, Wakefield, MA 01880–3030.’’ CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM: Delete entry and replace with ‘‘Young adults aged 16 to 18; college students; Selective Service System registrants; individuals who have taken the Armed Services Vocational Aptitude Battery (ASVAB) test; individuals who have responded to various paid/non-paid advertising campaigns seeking enlistment information; current military personnel who are on Active Duty or in the Reserves and prior service individuals who still have remaining Military Service Obligation; individuals who are in the process of enlisting; and individuals who have asked to be removed from any future recruitment lists.’’ CATEGORIES OF RECORDS IN THE SYSTEM: Delete entry and replace with ‘‘All Records: Full name, gender, address, city, State, zip code, source code. For Young Adults aged 16 to 18: Date of birth, telephone number, high school name, graduation date, grade point average, education level, military PO 00000 Frm 00019 Fmt 4703 Sfmt 4703 interest, college intent, ethnicity, ASVAB test date, ASVAB Armed Forces Qualifying Test Category Score. For College Students: Telephone number, college name, college location, college type, college competitive ranking, class year, ethnicity, field of study. For Selective Service System: Date of birth, scrambled Social Security Number, Selective Service registration method. Individuals who have responded to various paid/non-paid advertising campaigns seeking enlistment information: Date of birth, telephone number, Service Code, last grade completed, e-mail address, contact immediately flag. For Military Personnel: Date of birth, scrambled Social Security Number, ethnicity, education level, application date, military service and occupation information. For Individuals who have asked to be removed from future recruitment list: Date of birth, reason code.’’ AUTHORITY FOR MAINTENANCE OF THE SYSTEM: Delete entry and replace with ‘‘10 U.S.C. 503(a), Enlistments: Recruiting campaigns; 10 U.S.C. 136, Under Secretary of Defense for Personnel and Readiness; 10 U.S.C. 3013 (Secretary of the Army); 10 U.S.C. 5013 (Secretary of the Navy); 10 U.S.C. 8013 (Secretary of the Air Force); and E.O.9397 (SSN).’’ PURPOSE(S): Delete entry and replace with ‘‘The purpose of the system of records maintained by the Joint Advertising, Market Research and Studies (JAMRS) is to compile, process and distribute files of individuals to the Services to assist them in their direct marketing recruiting efforts. The system also provides JAMRS with the ability to measure effectiveness of list purchases through ongoing analysis and to remove the names of individuals who are currently members of, or are enlisting in, the Armed Forces or who have asked that their names be removed from future recruitment lists.’’ ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES: Delete entry and replace with ‘‘In addition to those disclosures generally permitted under 5 U.S.C. 552a(b) of the Privacy Act, these records or information contained therein may specifically be disclosed outside the DoD as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows: The DoD ‘‘Blanket Routine Uses set forth at the beginning of OSD’s compilation of systems of records notices do not apply to this system except: E:\FR\FM\09JAN1.SGM 09JAN1 Federal Register / Vol. 72, No. 5 / Tuesday, January 9, 2007 / Notices To any component of the Department of Justice for the purpose of representing the Department of Defense, or any officer, employee or member of the Department, in pending or potential litigation to which the record is pertinent. To the General Services Administration and the National Archives and Records Administration for the purpose of records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.’’ * * * * * RETRIEVABILITY: Delete entry and replace with ‘‘Records may be retrieved by an individual’s full name, address, and date of birth.’’ SAFEGUARDS: Delete entry and replace with ‘‘Access to information in the database is highly restricted and limited to those that require the records in the performance of their official duties. The database utilizes a layered approach of overlapping controls, monitoring and authentication to ensure overall security of the data, network and system resources. Sophisticated physical security, perimeter security (firewall, intrusion prevention), access control, authentication, encryption, data transfer, and monitoring solutions prevent unauthorized access from internal and external sources.’’ RETENTION AND DISPOSAL: Delete entry and replace with ‘‘Destroy three years from the date the information pertaining to the individual is first distributed to the Services or, where data are subsequently collected from a different data source, from the date that subsequent data are subsequently distributed to the Services. Records for individuals who have responded to various paid/nonpaid advertising campaigns seeking enlistment are kept, for analytical purposes, until they are no longer needed. Records for individuals who wish to be removed from future recruitment lists (opted-out) are retained for ten years.’’ ycherry on PROD1PC63 with NOTICES SYSTEM MANAGER(S) AND ADDRESS: Delete entry and replace with ‘‘Program Manager, Joint Advertising, Market Research & Studies (JAMRS), 4040 N. Fairfax Drive, Suite #200, Arlington, VA 22203–1613.’’ NOTIFICATION PROCEDURE: Delete entry and replace with ‘‘Individuals seeking to determine whether information about them is VerDate Aug<31>2005 13:55 Jan 08, 2007 Jkt 211001 contained in this system should address written inquiries to the Joint Advertising, Market Research & Studies (JAMRS), Direct Marketing Program Officer, 4040 N. Fairfax Drive, Suite #200, Arlington, Virginia 22203–1613. Requests should contain the full name, date of birth, and current address of the individual.’’ RECORD ACCESS PROCEDURES: Delete entry and replace with ‘‘Individuals seeking access to records about themselves contained in this system of records should address written inquiries to the Joint Advertising, Market Research & Studies (JAMRS), Direct Marketing Program Officer, 4040 N. Fairfax Drive, Suite #200, Arlington, Virginia 22203–1613. Requests should contain the full name, date of birth, and current address of the individual. Note 1: Individuals, who are 151⁄2 years old or older, or parents or legal guardians acting on behalf of individuals who are between the ages of 151⁄2 and 18 years old, seeking to have their name or the name of their child or ward, as well as other identifying data, removed from this system of records (or removed in the future when such information is obtained) should address written Opt-Out requests to the Joint Advertising, Marketing Research & Studies (JAMRS), ATTN: OptOut, 4040 N. Fairfax Drive, Suite #200, Arlington, Virginia 22203–1613. Such requests must contain the full name, date of birth, and current address of the individual. Note 2: Opt-Out requests will be honored for ten years. However, because opt-out screening is based, in part, on the current address of the individual, any change in address will require the submission of a new opt-out request with the new address.’’ * * * * * DHRA 04 SYSTEM NAME: Joint Advertising, Market Research & Studies Recruiting Database. SYSTEM LOCATION: Equifax Database Services, Inc., 500 Edgewater Drive, Suite 525, Wakefield, MA 01880–3030. CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM: Young adults aged 16 to 18; college students; Selective Service System registrants; individuals who have taken the Armed Services Vocational Aptitude Battery (ASVAB) test; individuals who have responded to various paid/nonpaid advertising campaigns seeking enlistment information; current military personnel who are on Active Duty or in the Reserves and prior service individuals who still have remaining PO 00000 Frm 00020 Fmt 4703 Sfmt 4703 955 Military Service Obligation; individuals who are in the process of enlisting; and individuals who have asked to be removed from any future recruitment lists. CATEGORIES OF RECORDS IN THE SYSTEM: All Records: Full name, gender, address, city, State, zip code, source code. For Young Adults aged 16 to 18: Date of birth, telephone number, high school name, graduation date, grade point average, education level, military interest, college intent, ethnicity, ASVAB test date, ASVAB Armed Forces Qualifying Test Category Score. For College Students: Telephone number, college name, college location, college type, college competitive ranking, class year, ethnicity, field of study. For Selective Service System: Date of birth, scrambled Social Security Number, Selective Service registration method. Individuals who have responded to various paid/non-paid advertising campaigns seeking enlistment information: Date of birth, telephone number, Service Code, last grade completed, e-mail address, contact immediately flag. For Military Personnel: Date of birth, scrambled Social Security Number, ethnicity, education level, application date, military service and occupation information. For Individuals who have asked to be removed from future recruitment list: Date of birth, reason code. AUTHORITY FOR MAINTENANCE OF THE SYSTEM: 10 U.S.C. 503(a), Enlistments: recruiting campaigns; 10 U.S.C. 136, Under Secretary of Defense for Personnel and Readiness; 10 U.S.C. 3013 (Secretary of the Army); 10 U.S.C. 5013 (Secretary of the Navy); 10 U.S.C. 8013 (Secretary of the Air Force); and E.O. 9397 (SSN). PURPOSE(S): The purpose of the system of records maintained by the Joint Advertising, Market Research and Studies (JAMRS) is to compile, process and distribute files of individuals to the Services to assist them in their direct marketing recruiting efforts. The system also provides JAMRS with the ability to measure effectiveness of list purchases through ongoing analysis and to remove the names of individuals who are currently members of, or are enlisting in, the Armed Forces or who have asked that their names be removed from future recruitment lists. ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES: In addition to those disclosures generally permitted under 5 U.S.C. E:\FR\FM\09JAN1.SGM 09JAN1 956 Federal Register / Vol. 72, No. 5 / Tuesday, January 9, 2007 / Notices 552a(b) of the Privacy Act, these records or information contained therein may specifically be disclosed outside the DoD as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows: The DoD Blanket Routine Uses set forth at the beginning of OSD’s compilation of systems of records notices do not apply to this system except: To any component of the Department of Justice for the purpose of representing the Department of Defense, or any officer, employee or member of the Department, in pending or potential litigation to which the record is pertinent. To the General Services Administration and the National Archives and Records Administration for the purpose of records management inspections conducted under authority of 44 U.S.C. 2904 and 2906. POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM: STORAGE: Records are maintained on electronic storage media. RETRIEVABILITY: Records may be retrieved by an individual’s full name, address, and date of birth. SAFEGUARDS: Access to information in the database is highly restricted and limited to those that require the records in the performance of their official duties. The database utilizes a layered approach of overlapping controls, monitoring and authentication to ensure overall security of the data, network and system resources. Sophisticated physical security, perimeter security (firewall, intrusion prevention), access control, authentication, encryption, data transfer, and monitoring solutions prevent unauthorized access from internal and external sources. SYSTEM MANAGER(S) AND ADDRESS: Program Manager, Joint Advertising, Market Research & Studies (JAMRS), 4040 N. Fairfax Drive, Suite #200, Arlington, VA 22203–1613. NOTIFICATION PROCEDURE: Individuals seeking to determine whether information about them is contained in this system should address written inquiries to the Joint Advertising, Market Research & Studies (JAMRS), Direct Marketing Program Officer, 4040 N. Fairfax Drive, Suite #200, Arlington, Virginia 22203–1613. Requests should contain the full name, date of birth, and current address of the individual. RECORD ACCESS PROCEDURES: Individuals seeking access to records about themselves contained in this system of records should address written inquiries to the Joint Advertising, Market Research & Studies (JAMRS), Direct Marketing Program Officer, 4040 N. Fairfax Drive, Suite #200, Arlington, Virginia 22203–1613. Requests should contain the full name, date of birth, and current address of the individual. Note 1: Individuals, who are 151⁄2 years old or older, or parents or legal guardians acting on behalf of individuals who are between the ages of 151⁄2 and 18 years old, seeking to have their name or the name of their child or ward, as well as other identifying data, removed from this system of records (or removed in the future when such information is obtained) should address written Opt-Out requests to the Joint Advertising, Marketing Research & Studies (JAMRS), ATTN: OptOut, 4040 N. Fairfax Drive, Suite #200, Arlington, Virginia 22203–1613. Such requests must contain the full name, date of birth, and current address of the individual. Note 2: Opt-Out requests will be honored for ten years. However, because opt-out screening is based, in part, on the current address of the individual, any change in address will require the submission of a new opt-out request with the new address. ycherry on PROD1PC63 with NOTICES RETENTION AND DISPOSAL: CONTESTING RECORD PROCEDURES: Destroy three years from the date the information pertaining to the individual is first distributed to the Services or, where data are subsequently collected from a different data source, from the date that subsequent data are subsequently distributed to the Services. Records for individuals who have responded to various paid/nonpaid advertising campaigns seeking enlistment are kept, for analytical purposes, until they are no longer needed. Records for individuals who wish to be removed from future recruitment lists (opted-out) are retained for ten years. The OSD rules for accessing records, for contesting contents and appealing initial agency determinations are contained in OSD Administrative Instruction 81; 32 CFR part 311; or may be obtained from the system manager. VerDate Aug<31>2005 13:55 Jan 08, 2007 Jkt 211001 RECORD SOURCE CATEGORIES: Individuals; state Department of Motor Vehicle offices; commercial information brokers/vendors; Selective Service System; Defense Manpower Data Center (DMDC); United States Military Entrance Processing Command for individuals who have taken the ASVAB test; and the Military services PO 00000 Frm 00021 Fmt 4703 Sfmt 4703 and Congressional offices for individuals who have asked to be removed from any future recruitment lists. EXEMPTIONS CLAIMED FOR THE SYSTEM: None. [FR Doc. E6–21942 Filed 1–8–07; 8:45 am] BILLING CODE 5001–06–P DEPARTMENT OF DEFENSE Department of the Army [USA–2007–0001] Privacy Act of 1974; System of Records AGENCY: Department of the Army, DoD. Notice of New System of Records. ACTION: SUMMARY: The Department of the Army proposes to add a system of records notice in its inventory of records systems subject to the Privacy Act of 1974 (5 U.S.C. 552a), as amended. This proposed action will be effective without further notice on February 8, 2007 unless comments are received which result in a contrary determination. DATES: Send comments to Department of the Army, Freedom of Information/Privacy Division, U.S. Army Records Management and Declassification Agency, ATTN: AHRC– PDD–FPZ, 7701 Telegraph Road, Casey Building, Suite 144, Alexandria, VA 22325–3905. ADDRESSES: Mr. Robert Dickerson at (703) 428–6513. FOR FURTHER INFORMATION CONTACT: The Department of the Army systems of records notices subject to the Privacy Act of 1974 (5 U.S.C. 552a), as amended, have been published in the Federal Register and are available from the address above. The proposed system report, as required by 5 U.S.C. 552a(r) of the Privacy Act of 1974, as amended, was submitted on December 13, 2006 to the House Committee on Government Reform, the Senate Committee on Homeland Security and Governmental Affairs, and the Office of Management and Budget (OMB) pursuant to paragraph 4c of Appendix I to OMB Circular No. A–130, ‘Federal Agency Responsibilities for Maintaining Records About Individuals,’ dated February 8, 1996 (February 20, 1996, 61 FR 6427). SUPPLEMENTARY INFORMATION: E:\FR\FM\09JAN1.SGM 09JAN1

Agencies

[Federal Register Volume 72, Number 5 (Tuesday, January 9, 2007)]
[Notices]
[Pages 952-956]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: E6-21942]


-----------------------------------------------------------------------

DEPARTMENT OF DEFENSE

Office of the Secretary of Defense

[DOD-2006-OS-0221]


Privacy Act of 1974; System of Records

AGENCY: Office of the Secretary, OSD.

ACTION: Notice to amend systems of records.

-----------------------------------------------------------------------

SUMMARY: The Office of the Secretary of Defense is amending a system of 
records notice in its existing inventory of record systems subject to 
the Privacy Act of 1974 (5 U.S.C. 552a), as amended.

DATES: Effective Date: January 9, 2007.

FOR FURTHER INFORMATION CONTACT: Ms. Juanita Irvin at (703) 696-4940.

SUPPLEMENTARY INFORMATION: The Notice was published on May 23, 2005, in 
the Federal Register (70 FR 29486). During the comment period, two 
public comments were received, which were virtually identical in format 
and content. The commenters assert that the collection and maintenance 
of data in the Joint Advertising, Market Research & Studies (JAMRS) 
Recruiting Database violates the Privacy Act of 1974. The commenters 
also remarked that the Department of Defense (``DoD'') should not be 
engaged in direct marketing activities; that the collection and use of 
Social Security Numbers (SSNs) is unauthorized and poses significant 
risks to an individual's privacy; that the transfer of information from 
the DoD to a private contractor is inappropriate and that adequate 
security for the database is lacking; and, that the Department does not 
provide a means by which an individual may elect to have his or her 
data deleted from the database. The JAMRS Database is maintained in a 
manner that is consistent with the Privacy Act and other statutes and 
regulations relating to the Department's recruiting authority. In its 
discretion, however, the Department has determined that the publication 
of a revised Systems Notice, providing further explanation and 
clarification of the manner in which the JAMRS Database is maintained, 
is appropriate at this time.
    The Department received a comment asserting that the maintenance of 
the JAMRS Database violates the Privacy Act. Commenters assert that 
Congress, in enacting the Privacy Act, sought to restrict the amount of 
personal information that Federal agencies could collect and maintain 
on individuals; that direct marketing by the DoD does not constitute an 
authorized purpose or use of the information; and that agencies

[[Page 953]]

should be transparent in their information practices.
    The Department's use of the JAMRS Database is consistent with the 
Privacy Act and its underlying purposes. The Department only collects 
such information on individuals as is relevant and necessary to 
accomplish a Departmental purpose prescribed by statute or Executive 
Order of the President. Consistent with this mandate, and in 
recognition of the importance of attracting qualified individuals to 
serve in the nation's all-volunteer force, Congress has directed the 
armed services to ``conduct intensive recruiting campaigns to obtain 
enlistments'' in the military (10 U.S.C. 503(a)(1) (emphasis 
supplied)). To this end, the Secretary of Defense has been provided 
with a broad mandate to ``act on a continuing basis to enhance the 
effectiveness of recruitment programs of the Department of Defense 
(including programs conducted jointly and programs conducted by the 
separate armed forces) through an aggressive program of advertising and 
market research targeted at prospective recruits for the armed forces 
and those who may influence prospective recruits'' (10 U.S.C. 502(a)(2) 
(emphasis supplied)). In addition to these congressional directives to 
the Secretary of Defense to conduct intensive recruiting campaigns, 
Congress also has conferred broad grants of authority to recruit upon 
the Under Secretary of Defense for Personnel and Readiness and the 
Secretaries of the Army, Navy and Air Force. See 10 U.S.C. 136 (Under 
Secretary); 3013 (Secretary of the Army); 5013 (Secretary of the Navy); 
8013 (Secretary of the Air Force).
    The Department disagrees with the commenters' assertion that direct 
marketing is not an authorized agency purpose. Indeed, in 
acknowledgment of the critical role of recruitment efforts in the 
maintenance of the nation's all-volunteer military, Congress has 
appropriated funds dedicated for this purpose. In particular, Congress 
continues to provide for the appropriation of funds to carry out 
advertising and market research programs to enhance the military's 
recruiting efforts. This is neither a new effort nor a new system of 
records, but rather a continuation of an ongoing activity supporting 
the All-Volunteer Force. In the past, direct marketing data were 
compiled by each of the Services independently. In order to achieve 
significant costs savings, information is now purchased or obtained by 
the Department through a variety of sources (including but not limited 
to state motor vehicle departments, the Selective Service System 
registry, and commercially-purchased lists). It is then provided to and 
maintained by a contractor, and then, sent to the military Services for 
use incident to their respective recruiting programs. In effect, the 
success of the All-Volunteer Force is contingent on the Secretary's 
continuing ability to be able to contact young Americans for purposes 
of making them aware of their option to serve in the United States 
military and to perform a vital service on behalf of their nation. 
Although the Department did not initiate a new data collection effort, 
after an internal organizational realignment, the Department published 
the May 23, 2005 Systems Notice.
    The commenters further remarked that data should be collected 
directly from the individual as much as possible, that access and 
correction rights should be provided, and that the adoption of the 
Blanket Routine Uses for this database is inappropriate. These comments 
reflect a lack of understanding of the requirements of the Privacy Act, 
as well as the practical realities of collecting and maintaining data 
for use in military recruiting. First, the Privacy Act requires that 
information be collected to the ``greatest extent practicable'' 
directly from the subject individual when the information may result in 
adverse determinations about an individual's rights, benefits, and 
privileges under Federal programs (5 U.S.C. 552a(e)(2)). The only 
practical cost-effective means of identifying the entire targeted 
population for recruiting efforts, as contemplated by 10 U.S.C. 503(a), 
is to obtain the information from a variety of third-party sources as 
is now being done. Moreover, the collection does not adversely impact 
an individual, in that it will not result in the denial of any Federal 
benefits nor will it result in any other unfavorable action impacting 
the individual. Second, access and amendment procedures are currently 
set out in the notice as is required by the Privacy Act (5 U.S.C. 
552a(e)(4)). These provisions--specifically the notification, access, 
and contesting sections--advise individuals how they can determine if 
the database contains information about themselves, how they may access 
such information, and how they may contest the accuracy of the 
information in the database. And third, the Blanket Routine Uses, which 
are permissive in nature, generally are incorporated in all DoD system 
notices for record systems covered by the Privacy Act, unless there is 
a statutory or regulatory basis for not doing so. Since the information 
in the JAMRS database is used within DoD for recruiting purposes only 
and is not disclosed to non-DoD agencies, the Department has revised 
the notice to make clear that the Blanket Routine Uses do not apply 
except for those specific uses relating to disclosures to the 
Department of Justice for litigation purposes and to the General 
Services Administration and the National Archives and Records 
Administration for records management purposes.
    The commenters also remarked that the Department lacks authority 
for collecting Social Security Numbers (SSNs) and that their use for 
purposes of identifying individuals in the database is unnecessary. 
These contentions are mistaken. Executive Order 9397 permits the use of 
the SSN where Federal agencies require a system of numerical 
identification for individual persons incident to administering an 
agency activity. A unique identification system is essential in order 
to accomplish the limited purposes for which the number is used. The 
principal purpose for collecting the number is to identify individuals 
who are presently members of the Armed Forces. The SSN is matched 
against a DoD database containing the SSNs of new recruits. Where there 
is a match, the information in the JAMRS Database is not released to 
the Services for the recruitment mailings. Other unique identifiers, 
such as a residential address or home telephone numbers, may not always 
suffice, especially in a highly mobile society where individuals 
frequently move. SSNs are only collected from the Selective Service 
System (SSS) and are not collected from any other governmental or 
private database. The Department has revised the notice to make clear 
that SSNs are not collected from all data sources. Further, the SSNs 
are used solely for internal database purposes and are not shared with 
the military Services. The commenters also expressed the concern that 
the use of SSNs heightens the risk of identity theft. DoD acknowledges 
that identity theft is an important concern for the Department and that 
the compromise of the SSN would constitute a significant invasion of 
privacy. In order to minimize potential exposure, the Department 
scrambles--a form of encryption--the SSN upon receipt and maintains the 
SSN in a scrambled format during the time it is stored in the database. 
These actions, along with other security features for the database, 
constitute reasonable and appropriate safeguards to protect and 
preserve the integrity of the number.
    The commenters observed that use of a private contractor to 
maintain the data is an ``aberration'' of normal practice, and also 
expressed concern with regard

[[Page 954]]

to a perceived lack of security procedures by the contractor to prevent 
abuse. Contractors or subcontractors are used to perform many 
activities on behalf of the Department, principally because of the 
unique expertise they possess and because the activity can be 
accomplished in a more cost-effective manner. The JAMRS contract was 
awarded based on the unique ability of the contractor to maintain and 
store large amounts of data in a secure manner; the contract does not 
permit the contractor to use the information for any non-Department of 
Defense marketing efforts. The Department recognizes the importance of 
ensuring that all data it collects are safely compiled, handled, 
stored, and transferred. The subcontractor has established a highly 
secure and restrictive environment by putting in place appropriate 
administrative, technical, and physical safeguards to ensure the 
security and confidentiality of the database. Vulnerability and risk 
assessment reviews are conducted on a regular basis to ensure maximum 
safeguarding of the information.
    The commenters also expressed concern about whether the company 
will be subject to the constraints imposed by the Privacy Act, or 
specifically whether the contractor is subject to 5 U.S.C. 552a(m). The 
contract includes the Privacy Act clause of the Federal Acquisition 
Regulation (FAR), specifically FAR 52.224-2, under which the contractor 
agrees to comply with the requirements of the Privacy Act and DoD rules 
and regulations issued under the Act. This contract provision also 
treats the contractor as an employee of DoD for purposes of the Privacy 
Act, and it is thus subject to possible criminal penalties if the Act 
is violated. The contract also was recently amended to incorporate the 
contract clause at FAR 52.239-1, Privacy and Security Safeguards, which 
includes a notification requirement if new or unanticipated threats or 
hazards are discovered, or if existing safeguards cease to function.
    Finally, the commenters asserted that individuals should be able to 
opt-out from the database. The Department agrees that such an option 
should be available. The Department currently permits any individual 
who is 15\1/2\ years or older, or a parent or guardian acting on the 
behalf of any minor who is between 15\1/2\ and 18 years old, to have 
his or her name removed from the JAMRS list provided to the Services 
for recruiting purposes. Individuals may accomplish this by sending a 
written request to JAMRS, Attn: Opt-Out, 4040 N. Fairfax Drive, Suite 
200, Arlington, VA 22203. In order to process such requests, the 
individual's name, address, city, State, zip, and date of birth must be 
provided. The ``Record Access Procedures'' section of the System Notice 
has been expanded to set forth the above-prescribed procedures.
    The specific changes to the record system being amended are set 
forth below followed by the notice, as amended, published in its 
entirety. The proposed amendments are not within the purview of 
subsection (r) of the Privacy Act of 1974 (5 U.S.C. 552a), as amended, 
which requires the submission of a new or altered system report.

    Dated: December 18, 2006.
C.R. Choate,
Alternate OSD Federal Register Liaison Officer, Department of Defense.
DHRA 04

System name:
    Joint Advertising and Market Research Recruiting Database (May 23, 
2005, 70 FR 29486).

Changes:
System name:
    Delete entry and replace with ``Joint Advertising, Market Research 
& Studies Recruiting Database.''

System location:
    Delete entry and replace with ``Equifax Database Services, Inc., 
500 Edgewater Drive, Suite 525, Wakefield, MA 01880-3030.''

Categories of individuals covered by the system:
    Delete entry and replace with ``Young adults aged 16 to 18; college 
students; Selective Service System registrants; individuals who have 
taken the Armed Services Vocational Aptitude Battery (ASVAB) test; 
individuals who have responded to various paid/non-paid advertising 
campaigns seeking enlistment information; current military personnel 
who are on Active Duty or in the Reserves and prior service individuals 
who still have remaining Military Service Obligation; individuals who 
are in the process of enlisting; and individuals who have asked to be 
removed from any future recruitment lists.''

Categories of records in the system:
    Delete entry and replace with ``All Records: Full name, gender, 
address, city, State, zip code, source code. For Young Adults aged 16 
to 18: Date of birth, telephone number, high school name, graduation 
date, grade point average, education level, military interest, college 
intent, ethnicity, ASVAB test date, ASVAB Armed Forces Qualifying Test 
Category Score. For College Students: Telephone number, college name, 
college location, college type, college competitive ranking, class 
year, ethnicity, field of study. For Selective Service System: Date of 
birth, scrambled Social Security Number, Selective Service registration 
method. Individuals who have responded to various paid/non-paid 
advertising campaigns seeking enlistment information: Date of birth, 
telephone number, Service Code, last grade completed, e-mail address, 
contact immediately flag. For Military Personnel: Date of birth, 
scrambled Social Security Number, ethnicity, education level, 
application date, military service and occupation information. For 
Individuals who have asked to be removed from future recruitment list: 
Date of birth, reason code.''

Authority for maintenance of the system:
    Delete entry and replace with ``10 U.S.C. 503(a), Enlistments: 
Recruiting campaigns; 10 U.S.C. 136, Under Secretary of Defense for 
Personnel and Readiness; 10 U.S.C. 3013 (Secretary of the Army); 10 
U.S.C. 5013 (Secretary of the Navy); 10 U.S.C. 8013 (Secretary of the 
Air Force); and E.O.9397 (SSN).''

Purpose(s):
    Delete entry and replace with ``The purpose of the system of 
records maintained by the Joint Advertising, Market Research and 
Studies (JAMRS) is to compile, process and distribute files of 
individuals to the Services to assist them in their direct marketing 
recruiting efforts. The system also provides JAMRS with the ability to 
measure effectiveness of list purchases through ongoing analysis and to 
remove the names of individuals who are currently members of, or are 
enlisting in, the Armed Forces or who have asked that their names be 
removed from future recruitment lists.''

Routine uses of records maintained in the system, including categories 
of users and the purposes of such uses:
    Delete entry and replace with ``In addition to those disclosures 
generally permitted under 5 U.S.C. 552a(b) of the Privacy Act, these 
records or information contained therein may specifically be disclosed 
outside the DoD as a routine use pursuant to 5 U.S.C. 552a(b)(3) as 
follows:
    The DoD ``Blanket Routine Uses set forth at the beginning of OSD's 
compilation of systems of records notices do not apply to this system 
except:

[[Page 955]]

    To any component of the Department of Justice for the purpose of 
representing the Department of Defense, or any officer, employee or 
member of the Department, in pending or potential litigation to which 
the record is pertinent.
    To the General Services Administration and the National Archives 
and Records Administration for the purpose of records management 
inspections conducted under authority of 44 U.S.C. 2904 and 2906.''
* * * * *

Retrievability:
    Delete entry and replace with ``Records may be retrieved by an 
individual's full name, address, and date of birth.''

Safeguards:
    Delete entry and replace with ``Access to information in the 
database is highly restricted and limited to those that require the 
records in the performance of their official duties. The database 
utilizes a layered approach of overlapping controls, monitoring and 
authentication to ensure overall security of the data, network and 
system resources. Sophisticated physical security, perimeter security 
(firewall, intrusion prevention), access control, authentication, 
encryption, data transfer, and monitoring solutions prevent 
unauthorized access from internal and external sources.''

Retention and disposal:
    Delete entry and replace with ``Destroy three years from the date 
the information pertaining to the individual is first distributed to 
the Services or, where data are subsequently collected from a different 
data source, from the date that subsequent data are subsequently 
distributed to the Services. Records for individuals who have responded 
to various paid/nonpaid advertising campaigns seeking enlistment are 
kept, for analytical purposes, until they are no longer needed. Records 
for individuals who wish to be removed from future recruitment lists 
(opted-out) are retained for ten years.''

System manager(s) and address:
    Delete entry and replace with ``Program Manager, Joint Advertising, 
Market Research & Studies (JAMRS), 4040 N. Fairfax Drive, Suite 
200, Arlington, VA 22203-1613.''

Notification procedure:
    Delete entry and replace with ``Individuals seeking to determine 
whether information about them is contained in this system should 
address written inquiries to the Joint Advertising, Market Research & 
Studies (JAMRS), Direct Marketing Program Officer, 4040 N. Fairfax 
Drive, Suite 200, Arlington, Virginia 22203-1613.
    Requests should contain the full name, date of birth, and current 
address of the individual.''

Record access procedures:
    Delete entry and replace with ``Individuals seeking access to 
records about themselves contained in this system of records should 
address written inquiries to the Joint Advertising, Market Research & 
Studies (JAMRS), Direct Marketing Program Officer, 4040 N. Fairfax 
Drive, Suite 200, Arlington, Virginia 22203-1613.
    Requests should contain the full name, date of birth, and current 
address of the individual.

    Note 1: Individuals, who are 15\1/2\ years old or older, or 
parents or legal guardians acting on behalf of individuals who are 
between the ages of 15\1/2\ and 18 years old, seeking to have their 
name or the name of their child or ward, as well as other 
identifying data, removed from this system of records (or removed in 
the future when such information is obtained) should address written 
Opt-Out requests to the Joint Advertising, Marketing Research & 
Studies (JAMRS), ATTN: Opt-Out, 4040 N. Fairfax Drive, Suite 
200, Arlington, Virginia 22203-1613. Such requests must 
contain the full name, date of birth, and current address of the 
individual.


    Note 2: Opt-Out requests will be honored for ten years. However, 
because opt-out screening is based, in part, on the current address 
of the individual, any change in address will require the submission 
of a new opt-out request with the new address.''

* * * * *
DHRA 04

System name:
    Joint Advertising, Market Research & Studies Recruiting Database.

System location:
    Equifax Database Services, Inc., 500 Edgewater Drive, Suite 525, 
Wakefield, MA 01880-3030.

Categories of individuals covered by the system:
    Young adults aged 16 to 18; college students; Selective Service 
System registrants; individuals who have taken the Armed Services 
Vocational Aptitude Battery (ASVAB) test; individuals who have 
responded to various paid/non-paid advertising campaigns seeking 
enlistment information; current military personnel who are on Active 
Duty or in the Reserves and prior service individuals who still have 
remaining Military Service Obligation; individuals who are in the 
process of enlisting; and individuals who have asked to be removed from 
any future recruitment lists.

Categories of records in the system:
    All Records: Full name, gender, address, city, State, zip code, 
source code. For Young Adults aged 16 to 18: Date of birth, telephone 
number, high school name, graduation date, grade point average, 
education level, military interest, college intent, ethnicity, ASVAB 
test date, ASVAB Armed Forces Qualifying Test Category Score. For 
College Students: Telephone number, college name, college location, 
college type, college competitive ranking, class year, ethnicity, field 
of study. For Selective Service System: Date of birth, scrambled Social 
Security Number, Selective Service registration method. Individuals who 
have responded to various paid/non-paid advertising campaigns seeking 
enlistment information: Date of birth, telephone number, Service Code, 
last grade completed, e-mail address, contact immediately flag. For 
Military Personnel: Date of birth, scrambled Social Security Number, 
ethnicity, education level, application date, military service and 
occupation information. For Individuals who have asked to be removed 
from future recruitment list: Date of birth, reason code.

Authority for maintenance of the system:
    10 U.S.C. 503(a), Enlistments: recruiting campaigns; 10 U.S.C. 136, 
Under Secretary of Defense for Personnel and Readiness; 10 U.S.C. 3013 
(Secretary of the Army); 10 U.S.C. 5013 (Secretary of the Navy); 10 
U.S.C. 8013 (Secretary of the Air Force); and E.O. 9397 (SSN).

Purpose(s):
    The purpose of the system of records maintained by the Joint 
Advertising, Market Research and Studies (JAMRS) is to compile, process 
and distribute files of individuals to the Services to assist them in 
their direct marketing recruiting efforts. The system also provides 
JAMRS with the ability to measure effectiveness of list purchases 
through ongoing analysis and to remove the names of individuals who are 
currently members of, or are enlisting in, the Armed Forces or who have 
asked that their names be removed from future recruitment lists.

Routine uses of records maintained in the system, including categories 
of users and the purposes of such uses:
    In addition to those disclosures generally permitted under 5 U.S.C.

[[Page 956]]

552a(b) of the Privacy Act, these records or information contained 
therein may specifically be disclosed outside the DoD as a routine use 
pursuant to 5 U.S.C. 552a(b)(3) as follows: The DoD Blanket Routine 
Uses set forth at the beginning of OSD's compilation of systems of 
records notices do not apply to this system except:
    To any component of the Department of Justice for the purpose of 
representing the Department of Defense, or any officer, employee or 
member of the Department, in pending or potential litigation to which 
the record is pertinent.
    To the General Services Administration and the National Archives 
and Records Administration for the purpose of records management 
inspections conducted under authority of 44 U.S.C. 2904 and 2906.

Policies and practices for storing, retrieving, accessing, retaining, 
and disposing of records in the system:
Storage:
    Records are maintained on electronic storage media.

Retrievability:
    Records may be retrieved by an individual's full name, address, and 
date of birth.

Safeguards:
    Access to information in the database is highly restricted and 
limited to those that require the records in the performance of their 
official duties. The database utilizes a layered approach of 
overlapping controls, monitoring and authentication to ensure overall 
security of the data, network and system resources. Sophisticated 
physical security, perimeter security (firewall, intrusion prevention), 
access control, authentication, encryption, data transfer, and 
monitoring solutions prevent unauthorized access from internal and 
external sources.

Retention and disposal:
    Destroy three years from the date the information pertaining to the 
individual is first distributed to the Services or, where data are 
subsequently collected from a different data source, from the date that 
subsequent data are subsequently distributed to the Services. Records 
for individuals who have responded to various paid/nonpaid advertising 
campaigns seeking enlistment are kept, for analytical purposes, until 
they are no longer needed. Records for individuals who wish to be 
removed from future recruitment lists (opted-out) are retained for ten 
years.

System manager(s) and address:
    Program Manager, Joint Advertising, Market Research & Studies 
(JAMRS), 4040 N. Fairfax Drive, Suite 200, Arlington, VA 
22203-1613.

Notification procedure:
    Individuals seeking to determine whether information about them is 
contained in this system should address written inquiries to the Joint 
Advertising, Market Research & Studies (JAMRS), Direct Marketing 
Program Officer, 4040 N. Fairfax Drive, Suite 200, Arlington, 
Virginia 22203-1613.
    Requests should contain the full name, date of birth, and current 
address of the individual.

Record access procedures:
    Individuals seeking access to records about themselves contained in 
this system of records should address written inquiries to the Joint 
Advertising, Market Research & Studies (JAMRS), Direct Marketing 
Program Officer, 4040 N. Fairfax Drive, Suite 200, Arlington, 
Virginia 22203-1613.
    Requests should contain the full name, date of birth, and current 
address of the individual.

    Note 1: Individuals, who are 15\1/2\ years old or older, or 
parents or legal guardians acting on behalf of individuals who are 
between the ages of 15\1/2\ and 18 years old, seeking to have their 
name or the name of their child or ward, as well as other 
identifying data, removed from this system of records (or removed in 
the future when such information is obtained) should address written 
Opt-Out requests to the Joint Advertising, Marketing Research & 
Studies (JAMRS), ATTN: Opt-Out, 4040 N. Fairfax Drive, Suite 
200, Arlington, Virginia 22203-1613. Such requests must 
contain the full name, date of birth, and current address of the 
individual.


    Note 2: Opt-Out requests will be honored for ten years. However, 
because opt-out screening is based, in part, on the current address 
of the individual, any change in address will require the submission 
of a new opt-out request with the new address.

Contesting record procedures:
    The OSD rules for accessing records, for contesting contents and 
appealing initial agency determinations are contained in OSD 
Administrative Instruction 81; 32 CFR part 311; or may be obtained from 
the system manager.

Record source categories:
    Individuals; state Department of Motor Vehicle offices; commercial 
information brokers/vendors; Selective Service System; Defense Manpower 
Data Center (DMDC); United States Military Entrance Processing Command 
for individuals who have taken the ASVAB test; and the Military 
services and Congressional offices for individuals who have asked to be 
removed from any future recruitment lists.

Exemptions claimed for the system:
    None.

 [FR Doc. E6-21942 Filed 1-8-07; 8:45 am]
BILLING CODE 5001-06-P