Revisions for the Freedom of Information Act and Privacy Act Regulations, 56936-56940 [E8-23076]

Download as PDF 56936 Federal Register / Vol. 73, No. 191 / Wednesday, October 1, 2008 / Rules and Regulations office within OMB, has determined that, for purposes of SBREFA, this is not a major rule. Paperwork Reduction Act The final rule does not contain a ‘‘collection of information’’ within the meaning of section 3502(3) of the Paperwork Reduction Act of 1995, 44 U.S.C. 3502(3), and would not increase paperwork requirements under the Paperwork Reduction Act of 1995 or regulations of the Office of Management and Budget. Executive Order 13132 Executive Order 13132 encourages independent regulatory agencies to consider the impact of their actions on state and local interests. In adherence to fundamental federalism principles, NCUA, an independent regulatory agency as defined in 44 U.S.C. 3502(5), voluntarily complies with the executive order. The final rule would not have substantial direct effect on the states, on the connection between the national government and the states, or on the distribution of power and responsibilities among the various levels of government. NCUA has determined that this final rule does not constitute a policy that has federalism implications for purposes of the executive order. The Treasury and General Government Appropriations Act, 1999—Assessment of Federal Regulations and Policies on Families NCUA has determined that this final rule would not affect family well-being within the meaning of section 654 of the Treasury and General Government Appropriations Act, 1999, Public Law 105–277, 112 Stat. 2681 (1998). List of Subjects in 12 CFR Part 740 Advertisements, Credit unions, Signs and symbols. By the National Credit Union Administration Board on September 25, 2008. Mary F. Rupp, Secretary of the Board. For the reasons stated above, NCUA amends 12 CFR part 740 as follows: ■ ebenthall on PROD1PC60 with RULES PART 740—ACCURACY OF ADVERTISING AND NOTICE OF INSURED STATUS 1. The authority citation for part 740 is revised to read as follows: ■ Authority: 12 U.S.C. 1766, 1781, 1785, and 1789. 2. Amend § 740.5 by revising paragraph (b) to read as follows: ■ VerDate Aug<31>2005 15:26 Sep 30, 2008 Jkt 217001 § 740.5 Requirements for the official advertising statement. * * * * * (b) The official advertising statement is in substance as follows: ‘‘This credit union is federally insured by the National Credit Union Administration.’’ Insured credit unions, at their option, may use the short title ‘‘Federally insured by NCUA’’ or a reproduction of the official sign, as described in § 740.4(b), as the official advertising statement. The official advertising statement must be in a size and print that is clearly legible. If the official sign is used as the official advertising statement, an insured credit union may alter the font size to ensure its legibility as provided in § 740.4(b)(2). * * * * * [FR Doc. E8–23071 Filed 9–30–08; 8:45 am] BILLING CODE 7535–01–P amendments into the rule, the proposed rule added definitions, revised terminology and otherwise clarified provisions implementing the Privacy Act. Technical corrections also were made to both sections. Discussion NCUA’s policy is to review a third of its regulations periodically to ‘‘update, clarify and simplify existing regulations and eliminate redundant and unnecessary provisions.’’ Interpretive Ruling and Policy Statement (IRPS) 87– 2, Developing and Reviewing Government Regulations. The proposed changes were the result of such a review. The changes also coincided with recent statutory amendments to FOIA and NCUA’s updating of its Systems of Records Notice under the Privacy Act, periodically published in the Federal Register. Summary of Comments The NCUA Board received two comments in general support of the proposed rule. In response to proposed 12 CFR Part 792 language clarifying when a FOIA request is considered received, one RIN 3133–AD44 commenter urged the agency to make Revisions for the Freedom of reasonable efforts to promptly notify a Information Act and Privacy Act requester when a request is incorrectly Regulations addressed or otherwise deficient; forward incorrectly addressed requests AGENCY: National Credit Union to the proper Information Center; or if Administration. possible, disregard deficiencies having ACTION: Final rule. no impact on the ability to process the response. The amended language simply SUMMARY: The NCUA Board is amending explains what conditions must be met to its Freedom of Information Act (FOIA) start the clock for the statutory and Privacy Act regulations. The final processing period. As a general practice, rule reflects recent amendments to the Information Center staff communicates FOIA addressing fee practices, time with requesters to obtain missing limits for complying with requests, and information and to clarify requests to new reporting requirements. The enable their timely processing. changes to the Privacy Act provisions Similarly, FOIA requests sent to the reflect the agency’s efforts to clarify the wrong Information Center are forwarded procedures whereby individuals may to the correct Information Center. obtain notification of whether an NCUA The commenter also suggested a system of records contains information deceased individual’s records should about the individual and how to access receive protection consistent with that or amend a record. of a living individual and suggested the DATES: This rule is effective October 31, agency require a requester to obtain 2008. approval from the decedent’s estate FOR FURTHER INFORMATION CONTACT: before releasing any records. As Linda K. Dent, Staff Attorney, Office of explained in the Department of Justice’s General Counsel, at (703) 518–6540. 2007 FOIA Guide, there is a ‘‘longstanding FOIA rule that death SUPPLEMENTARY INFORMATION: extinguishes one’s privacy rights.’’ Background USDOJ: OIP: Freedom of Information Act Guide, March 2007, page 566. On April 17, 2008, the NCUA Board Whether records pertaining to a requested comment on a proposed rule to update and clarify the procedures for deceased individual are actually requesting access to agency records and released requires an evaluation of the other rights and requirements under the privacy interests at issue in such a FOIA and Privacy Act provisions of part release, which may include surviving family members’ right to personal 792. 73 FR 22,289 (April 25, 2008). In addition to incorporating the 2007 FOIA privacy. NATIONAL CREDIT UNION ADMINISTRATION PO 00000 Frm 00002 Fmt 4700 Sfmt 4700 E:\FR\FM\01OCR1.SGM 01OCR1 Federal Register / Vol. 73, No. 191 / Wednesday, October 1, 2008 / Rules and Regulations The other commenter questioned eliminating the ability to submit Privacy Act requests for records via telephone, believing the agency should facilitate all forms of electronic requests irrespective of how made. The proposed change does not eliminate a requester’s ability to submit requests by facsimile or email. The Board has added clarifying language to the procedures and requirements provisions to reflect this fact. Regulatory Procedures Paperwork Reduction Act In accordance with the requirements of the Paperwork Reduction Act (PRA) of 1995 (44 U.S.C. 3506; 5 CFR part 1320 Appendix A.1), the Board has determined the final rule does not contain a collection of information subject to the PRA. Regulatory Flexibility Act The Regulatory Flexibility Act requires NCUA to prepare an analysis to describe any significant economic impact a proposed rule may have on a substantial number of small credit unions (those under $10 million in assets). This final rule does not impose any requirements on federally-insured credit unions. Therefore, it will not have a significant economic impact on a substantial number of small credit unions and a regulatory flexibility analysis is not required. ebenthall on PROD1PC60 with RULES Executive Order 13132 Executive Order 13132 encourages independent regulatory agencies to consider the impact of their actions on state and local interests. In adherence to fundamental federalism principles, NCUA, an independent regulatory agency as defined in 44 U.S.C. 3502(5), voluntarily complies with the executive order. The final rule would not have substantial direct effects on the states, on the connection between the national government and the states, or on the distribution of power and responsibilities among the various levels of government. NCUA has determined that this final rule does not constitute a policy that has federalism implications for purposes of the executive order. The Treasury and General Government Appropriations Act, 1999—Assessment of Federal Regulations and Policies on Families NCUA has determined that this final rule would not affect family well-being within the meaning of section 654 of the Treasury and General Government Appropriations Act, 1999, Public Law 105–277, 112 Stat. 2681 (1998). VerDate Aug<31>2005 15:26 Sep 30, 2008 Jkt 217001 56937 List of Subjects in 12 CFR Part 792 § 792.07 Administrative practice and procedure, Credit unions, Freedom of Information, Information, Privacy, Records, System of records. (a) You must send your written request to one of NCUA’s Information Centers. * * * (b) If you are seeking any NCUA record, other than those maintained by the Office of Inspector General, you should send your request to NCUA, Office of the General Counsel, 1775 Duke Street, Alexandria, Virginia 22314–3428, Attn: FOIA Officer or as indicated on the NCUA Web site at https://www.ncua.gov. * * * * * ■ 5. In § 792.08, revise the introductory text and paragraph (a) to read as follows: By the National Credit Union Administration Board on September 25, 2008. Mary Rupp, Secretary of the Board. For the reasons stated in the preamble, the National Credit Union Administration amends 12 CFR part 792 as set forth below: ■ PART 792—REQUESTS FOR INFORMATION UNDER THE FREEDOM OF INFORMATION ACT AND PRIVACY ACT, AND BY SUBPOENA; SECURITY PROCEDURES FOR CLASSIFIED INFORMATION 1. The authority citation for part 792 continues to read as follows: ■ Authority: 5 U.S.C. 301, 552, 552a, 552b; 12 U.S.C. 1752a(d), 1766, 1789, 1795f; E.O. 12600, 52 FR 23781, 3 CFR, 1987 Comp., p. 235; E.O. 12958, 60 FR 19825, 3 CFR, 1995 Comp., p. 333. 2. In § 792.03, revise the fourth sentence of the introductory text and the last sentence of paragraph (c) to read as follows: ■ § 792.03 How will I know which records to request? * * * You may obtain copies of indices by making a request to the NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, VA 22314– 2387, Attn: FOIA Officer or as indicated on the NCUA Web site at www.ncua.gov. * * * * * * * * (c) * * * The Popular FOIA Index is available on the NCUA web site. 3. In § 792.04, revise paragraph (a) to read as follows: ■ § 792.04 How can I obtain these records? * * * * * (a) You may obtain copies of the records referenced in § 792.02 by obtaining the index referred to in § 792.03 and following the ordering instructions it contains, or by making a written request to NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, Virginia 22314–3428, Attn: FOIA Officer or as indicated on the NCUA Web site. * * * * * 4. In § 792.07, revise the first sentence of paragraph (a) and paragraph (b) to read as follows: ■ PO 00000 Frm 00003 Fmt 4700 Sfmt 4700 Where do I send my request? § 792.08 What must I include in my request? Until an Information Center receives your FOIA request, it is not obligated to search for responsive records, meet time deadlines, or release any records. A request will not be considered received if it does not include all of the items in paragraphs (a) through (c) of this section. (a) Your request must be in writing and include the words ‘‘FOIA REQUEST’’ on both the envelope and request letter. The request letter must also include your name, address and a telephone number where you can be reached during normal business hours. If you would like us to respond to your FOIA request by electronic mail (email), you should include your e-mail address. * * * * * ■ 6. In § 792.10, revise the second sentence of paragraph (a), the last sentence of paragraph (b) and the second sentence of paragraph (e) to read as follows: § 792.10 What will NCUA do with my request? (a)* * * The date of receipt for any request, including one that is addressed incorrectly or is forwarded to NCUA by another agency, is the earlier of the date the appropriate Information Center actually receives the request or 10 working days after either of NCUA’s Information Centers receives the request. (b) * * * All other requests will be handled under normal processing procedures in the order they were received. * * * * * (e) * * * If we notify you of a denial of your request, we will include the reason for the denial. * * * * * ■ 7. In § 792.11, revise paragraph (a)(6) introductory text by removing the first E:\FR\FM\01OCR1.SGM 01OCR1 56938 Federal Register / Vol. 73, No. 191 / Wednesday, October 1, 2008 / Rules and Regulations sentence and adding three sentences in its place to read as follows: § 792.11 What kind of records are exempt from public disclosure? (a) * * * (6) Personnel, medical, and similar files (including financial files) pertaining to another person, the disclosure of which would constitute a clearly unwarranted invasion of personal privacy without the subject person’s written consent or proof of death. Written consent consists of a written statement by the subject person, authorizing the release of the information to you, and including either the subject person’s notarized signature or a declaration made under penalty of perjury that the statement is true and correct. Proof of death consists of evidence that the subject of your request is deceased—such as a death certificate, a newspaper obituary, or some comparable proof of death. * * * * * * * * ■ 8. In § 792.15, revise paragraph (a) to read as follows: § 792.15 How long will it take to process my request? * * * * * (a)(1) Where the running of such time is suspended while: (i) The Information Center awaits additional information from the requester. A suspension of time for this purpose may occur only once during the processing period; and (ii) The Information Center clarifies with the requester issues regarding the payment of fees pursuant to § 792.26. (2) The Information Center’s receipt of the requester’s response to the request for additional information or clarification ends the tolling period; * * * * * ■ 9. Revise § 792.17 to read as follows: ebenthall on PROD1PC60 with RULES § 792.17 What can I do if the time limit passes and I still have not received a response? If NCUA does not comply with the time limits under § 792.15, or as extended under § 792.16, you do not have to pay search fees; requesters qualifying for free search fees will not have to pay duplication fees. You also can file suit against NCUA because you will be deemed to have exhausted your administrative remedies if NCUA fails to comply with the time limit provisions of this subpart. If NCUA can show that exceptional circumstances exist and that it is exercising due diligence in responding to your request, the court may retain jurisdiction and allow NCUA to complete its review of the records. In determining whether exceptional VerDate Aug<31>2005 15:26 Sep 30, 2008 Jkt 217001 circumstances exist, the court may consider your refusal to modify the scope of your request or arrange an alternative time frame for processing after being given the opportunity to do so by NCUA, when it notifies you of the existence of unusual circumstances as set forth in § 792.16. ■ 10. In § 792.18, revise the first sentence of paragraph (b) to read as follows: § 792.18 What if my request is urgent and I cannot wait for the records? * * * * * (b) In response to a request for expedited processing, the Information Center will notify you of the determination within ten working days of receipt of the request. * * * * * * * * ■ 11. In § 792.19, revise paragraph (c)(1) to read as follows: § 792.19 How does NCUA calculate the fees for processing my request? * * * * * (c) * * * (1) The per-page fee for paper copy reproduction of a document is $.10; * * * * * ■ 12. In § 792.27, revise paragraphs (a)(1) through (a)(4) to read as follows: § 792.27 Can fees be reduced or waived? * * * * * (a) * * * (1) Whether the subject of the requested records concerns identifiable operations or activities of the government, with a connection that is direct and clear; (2) Whether the disclosable portions of the requested records are meaningfully informative about government operations and activities in order to be likely to contribute to an understanding of government operations or activities. Information already in the public domain, either in a duplicate or substantially identical form where nothing new would be added to the public’s understanding, would not be meaningfully informative; (3) Whether disclosure of the requested information will contribute to public understanding, meaning a reasonably broad audience of persons interested in the subject, as opposed to the individual understanding of the requester. A requester’s expertise in the subject area and ability and intention to effectively convey information to the public will be considered. Representatives of the news media are presumed to satisfy this consideration; and (4) Whether the disclosure is likely to contribute significantly to public PO 00000 Frm 00004 Fmt 4700 Sfmt 4700 understanding of government operations or activities. The level of public understanding before disclosure must be enhanced by the disclosure to a significant extent. * * * * * 13. In § 792.28, revise the first and third sentences of paragraph (a), and paragraph (c), to read as follows: ■ § 792.28 What if I am not satisfied with the response I receive? * * * * * (a) Make a determination with respect to any appeal within 20 working days after the receipt of such appeal. * * * Where you do not address your appeal to the General Counsel, the time limitations stated above will be computed from the date of receipt of the appeal by the General Counsel. * * * * * (c) Address your appeal to NCUA, Office of General Counsel—FOIA APPEAL, 1775 Duke Street, Alexandria, VA 22314–3428. The words ‘‘FOIA APPEAL’’ should appear on the envelope and in the letter. Failure to address an appeal properly may delay commencement of the time limitation stated in paragraph (a) of this section, to take account of the time reasonably required to forward the appeal to the Office of General Counsel. Subpart E—[Amended] 14. Amend subpart E by removing the term ‘‘NCUA official’’ wherever it appears and adding in its place the term ‘‘system manager.’’ ■ 15. In § 792.53, add new paragraphs (g), (h) and (i) to read as follows: ■ § 792.53 Definitions. * * * * * (g) Notice of Systems of Records means the annual notice published by NCUA in the Federal Register informing the public of the existence and character of the systems of records it maintains. The Notice of Systems of Records also is available on NCUA’s Web site at https://www.ncua.gov. (h) System manager means the NCUA official responsible for the maintenance, collection, use or distribution of information contained in a system of records. The system manager for each system of records is provided in the Federal Register publication of NCUA’s annual systems of records notice. (i) Working day means Monday through Friday excluding legal public holidays. ■ 16. Revise § 792.54 to read as follows: E:\FR\FM\01OCR1.SGM 01OCR1 Federal Register / Vol. 73, No. 191 / Wednesday, October 1, 2008 / Rules and Regulations § 792.54 Procedures for requests pertaining to individual records in a system of records. (a) Individuals desiring to know if a system of records contains records pertaining to them, and individuals requesting access to records in a system of records pertaining to them should submit a written request to the appropriate system manager as identified in the Notice of Systems of Records. An individual who does not have access to the Federal Register and who is unable to determine the appropriate system manager to whom to submit a request may submit a request to the Privacy Officer, Office of General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, VA 22314–3428, in which case the request will be referred to the appropriate system manager. (b) Individuals requesting notification of, or access to, records should include the words ‘‘PRIVACY ACT REQUEST’’ on both the letter and, as appropriate, the envelope, cover document or subject line; describe the record sought; the approximate dates covered by the record; and, the systems of record in which records are thought to be included. Individuals must also meet the identification requirements in § 792.55. ■ 17. In § 792.55, revise paragraphs (a)(1) through (a)(3) and (c) to read as follows: ebenthall on PROD1PC60 with RULES § 792.55 Times, places, and requirements for identification of individuals making requests and identification of records requested. (a) * * * (1) Individuals appearing in person, if not personally known to the system manager responding to the request, must present a single document bearing a photograph (such as a passport or identification badge) or two items of identification which do not bear a photograph but do bear both a name and address (such as a driver’s license or voter registration card); (2) Individuals submitting requests by mail or written electronic form, such as facsimile or e-mail, may establish identity by a signature, address, date of birth, employee identification number if any, and one other identifier such as a photocopy of driver’s license or other document. If inadequate identifying information is provided, the system manager responding to the request may require further identifying information before any notification or responsive disclosure. (3) Individuals appearing in person or submitting requests by mail or written electronic form, who cannot provide the VerDate Aug<31>2005 15:26 Sep 30, 2008 Jkt 217001 56939 required documentation or identification, may provide an unsworn declaration subscribed to as true under penalty of perjury. * * * * * (c) A record may be disclosed to a representative of an individual to whom the record pertains provided the system manager receives written authorization from the individual who is the subject of the record. * * * * * ■ 18. In § 792.57, revise paragraph (b) to read as follows: circumstances, not later than 30 working days after receipt of the request) advise the individual that the record will be amended or corrected, or inform the individual of rejection of the request to amend the record, the reason for the rejection, and the procedures established by § 792.59 for the individual to request a review of that rejection. ■ 20. In § 792.59, revise the third sentence of paragraph (a) and the first two sentences of paragraph (c) to read as follows: § 792.57 Special procedures: Information furnished by other agencies; medical records. § 792.59 * * * * * (b) Medical records may be disclosed on request to the individuals to whom they pertain unless disclosing the medical information directly to the requesting individual could have an adverse effect on the individual. Where medical information is potentially adverse to the requesting individual, the system manager responsible may advise the requesting individual that the medical records will be transmitted only to a physician designated in writing by the individual. ■ 19. In § 792.58, revise paragraph (a) and the second sentence of paragraph (b) to read as follows: § 792.58 Requests for correction or amendment to a record; administrative review of requests. (a) An individual may request amendment of a record concerning that individual by submitting a written request, either in person or by mail, to the system manager identified in the Notice of Systems of Records. The words ‘‘PRIVACY ACT—REQUEST TO AMEND RECORD’’ should be written on the letter and the envelope. The request must describe the system of records containing the record sought to be amended, indicate the particular record involved, the nature of the correction sought, and the justification for the correction or amendment. An individual who does not have access to NCUA’s Notice of Systems of Records, and to whom the appropriate address is otherwise unavailable, may submit a request to the Privacy Act Officer, Office of General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, Virginia 22314– 3428, in which case the request will then be referred to the appropriate system manager. The date of receipt of the request will be determined as of the date of receipt by the system manager. (b) * * * The appropriate system manager will promptly (under normal PO 00000 Frm 00005 Fmt 4700 Sfmt 4700 Appeal of initial determination. (a) * * * Appeals must be addressed to the Office of General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, VA 22314–3428 with the words ‘‘PRIVACY ACT—APPEAL’’ written on the letter and the envelope.* * * * * * * * (c) If an appeal under this section is denied in whole or in part, an individual may file a statement of disagreement concisely stating the reason(s) for disagreeing with the denial for amendment or correction, and clearly identifying each part of any record that is disputed. The statement must be sent within 30 working days of the date of receipt of the notice of General Counsel’s refusal to authorize amendment or correction, to the General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, VA 22314–3428.* * * * * * * * ■ 21. In § 792.60, revise paragraph (j) to read as follows: § 792.60 Disclosure of record to person other than the individual to whom it pertains. * * * * * (j) To the Comptroller General, or any of his authorized representatives, in the course of the performance of the duties of the Government Accountability Office; * * * * * ■ 22. In § 792.61, revise the first sentence of paragraph (a) to read as follows: § 792.61 Accounting for disclosures. (a) Each system manager identified in the ‘‘Notice of Systems of Records’’ must establish a system of accounting for all disclosures of information or records under the Privacy Act made outside NCUA.* * * * * * * * ■ 23. In § 792.63, revise paragraphs (a), (b)(1), and (b)(4), to read as follows: E:\FR\FM\01OCR1.SGM 01OCR1 56940 Federal Register / Vol. 73, No. 191 / Wednesday, October 1, 2008 / Rules and Regulations § 792.63 Collection of information from individuals: information forms. (a) The system manager for each system of records is responsible for reviewing all forms developed and used to collect information from or about individuals for incorporation into the system of records. (b) * * * (1) To ensure that no information concerning religion, political beliefs or activities, association memberships (other than those required for a professional license), or the exercise of other First Amendment rights is required to be disclosed unless such requirement of disclosure is expressly authorized by statute or by the individual about whom the record is maintained, or unless pertinent to and within the scope of any authorized law enforcement activity; * * * * * (4) To ensure that the form or accompanying statement clearly indicates to the individual the effects on him or her, if any, of refusing to provide some or all of the requested information; and * * * * * ■ 24. In § 792.66, revise paragraphs (a) and (b)(2), add four new sentences to the end of paragraph (b)(3), and add four new sentences to the end of paragraph (b)(4) to read as follows: ebenthall on PROD1PC60 with RULES § 792.66 Exemptions. (a) NCUA maintains several systems of records that are exempted from some provisions of the Privacy Act. The system number and name, description of records contained in the system, exempted provisions and reasons for exemption are as follows: (b) * * * (2) System NCUA–8, entitled, ‘‘Investigative Reports Involving Any Crime or Suspicious Activity Against a Credit Union, NCUA,’’ consists of investigatory or enforcement records about individuals suspected of involvement in violations of laws or regulations, whether criminal or administrative. These records are maintained in an overall context of general investigative information concerning crimes against credit unions. To the extent that individually identifiable information is maintained for purposes of protecting the security of any investigations by appropriate law enforcement authorities and promoting the successful prosecution of all actual criminal activity, the records in this system are exempted, pursuant to section k(2) of the Privacy Act (5 U.S.C. 552a (k)(2)), from sections (c)(3), (d), (e)(1), (e)(2), (e)(4)(G), (e)(4)(H), (f), and VerDate Aug<31>2005 15:26 Sep 30, 2008 Jkt 217001 (g). The records in this system are also exempted pursuant to section (j)(2) of the Privacy Act, 5 U.S.C. 552a(j)(2), from sections (c)(3), (d), (e)(1), (e)(2), (e)(4)(G), (e)(4)(H), (f), and (g). Where possible, information that would identify a confidential source will be extracted or summarized in a manner that protects the source and the summary or extract will be provided to the requesting individual. (3) * * * NCUA need not make an accounting of previous disclosures of a record in this system of records available to its subject, and NCUA need not grant access to any records in this system of records by their subject. Further, whenever individuals request records about themselves and maintained in this system of records, the NCUA will advise the individuals only that no records available to them pursuant to the Privacy Act of 1974 have been identified. However, if review of the record reveals that the information contained therein has been used or is being used to deny the individuals any right, privilege or benefit for which they are eligible or to which they would otherwise be entitled under federal law, the individuals will be advised of the existence of the information and will be provided the information, except to the extent disclosure would identify a confidential source. Where possible, information which would identify a confidential source will be extracted or summarized in a manner which protects the source and the summary or extract will be provided to the requesting individual. (4) * * * NCUA need not make an accounting of previous disclosures of a record in this system of records available to its subject, and NCUA need not grant access to any records in this system of records by their subject. Further, whenever individuals request records about themselves and maintained in this system of records, the NCUA will advise the individuals only that no records available to them pursuant to the Privacy Act of 1974 have been identified. However, if review of the record reveals that the information contained therein has been used or is being used to deny the individuals any right, privilege or benefit for which they are eligible or to which they would otherwise be entitled under federal law, the individuals will be advised of the existence of the information and will be provided the information, except to the extent disclosure would identify a confidential source. Where possible, information that would identify a confidential source will be extracted or summarized in a manner which protects the source and PO 00000 Frm 00006 Fmt 4700 Sfmt 4700 the summary or extract will be provided to the requesting individual. * * * * * ■ 25. In § 792.69, revise paragraph (a) to read as follows: § 792.69 Training and employee standards of conduct with regard to privacy. (a) The Director of the Office of Human Resources, with advice from the Senior Privacy Act Officer, is responsible for training NCUA employees in the obligations imposed by the Privacy Act and this subpart. * * * * * [FR Doc. E8–23076 Filed 9–30–08; 8:45 am] BILLING CODE 7535–01–P SMALL BUSINESS ADMINISTRATION 13 CFR Parts 121, 125, 127, and 134 RIN 3245–AF40 The Women-Owned Small Business Federal Contract Assistance Procedures Small Business Administration. Final rule. AGENCY: ACTION: SUMMARY: This final rule amends the U.S. Small Business Administration (SBA) regulations governing small business contracting programs to set forth procedures that will govern the new Women-Owned Small Business (WOSB) Federal Contract Assistance Procedures as authorized in the Small Business Act. DATES: Effective Date: This rule is effective October 31, 2008. Applicability Date: This final rule will be effective 30 days after publication. This final rule does not identify the industries in which WOSBs are underrepresented or substantially underrepresented in Federal procurement because SBA is awaiting comments on its proposed rule before concluding its eligibility determinations. SBA’s determination of the industries in which WOSBs are underrepresented or substantially underrepresented in Federal procurement will be effective not less than 30 days after its publication date. FOR FURTHER INFORMATION CONTACT: Linda Korbol, Assistant Administrator for Women’s Procurement, Office of Government Contracting, (202) 205– 7341 or Linda.Korbol@sba.gov. SUPPLEMENTARY INFORMATION: On December 27, 2007, SBA proposed to amend its regulations in the Federal Register, 72 FR 73285, with a request for comments to implement the WOSB Federal Contract Assistance Procedures E:\FR\FM\01OCR1.SGM 01OCR1

Agencies

[Federal Register Volume 73, Number 191 (Wednesday, October 1, 2008)]
[Rules and Regulations]
[Pages 56936-56940]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: E8-23076]


-----------------------------------------------------------------------

NATIONAL CREDIT UNION ADMINISTRATION

12 CFR Part 792

RIN 3133-AD44


Revisions for the Freedom of Information Act and Privacy Act 
Regulations

AGENCY: National Credit Union Administration.

ACTION: Final rule.

-----------------------------------------------------------------------

SUMMARY: The NCUA Board is amending its Freedom of Information Act 
(FOIA) and Privacy Act regulations. The final rule reflects recent 
amendments to the FOIA addressing fee practices, time limits for 
complying with requests, and new reporting requirements. The changes to 
the Privacy Act provisions reflect the agency's efforts to clarify the 
procedures whereby individuals may obtain notification of whether an 
NCUA system of records contains information about the individual and 
how to access or amend a record.

DATES: This rule is effective October 31, 2008.

FOR FURTHER INFORMATION CONTACT: Linda K. Dent, Staff Attorney, Office 
of General Counsel, at (703) 518-6540.

SUPPLEMENTARY INFORMATION:

Background

    On April 17, 2008, the NCUA Board requested comment on a proposed 
rule to update and clarify the procedures for requesting access to 
agency records and other rights and requirements under the FOIA and 
Privacy Act provisions of part 792. 73 FR 22,289 (April 25, 2008). In 
addition to incorporating the 2007 FOIA amendments into the rule, the 
proposed rule added definitions, revised terminology and otherwise 
clarified provisions implementing the Privacy Act. Technical 
corrections also were made to both sections.

Discussion

    NCUA's policy is to review a third of its regulations periodically 
to ``update, clarify and simplify existing regulations and eliminate 
redundant and unnecessary provisions.'' Interpretive Ruling and Policy 
Statement (IRPS) 87-2, Developing and Reviewing Government Regulations. 
The proposed changes were the result of such a review. The changes also 
coincided with recent statutory amendments to FOIA and NCUA's updating 
of its Systems of Records Notice under the Privacy Act, periodically 
published in the Federal Register.

Summary of Comments

    The NCUA Board received two comments in general support of the 
proposed rule. In response to proposed language clarifying when a FOIA 
request is considered received, one commenter urged the agency to make 
reasonable efforts to promptly notify a requester when a request is 
incorrectly addressed or otherwise deficient; forward incorrectly 
addressed requests to the proper Information Center; or if possible, 
disregard deficiencies having no impact on the ability to process the 
response. The amended language simply explains what conditions must be 
met to start the clock for the statutory processing period. As a 
general practice, Information Center staff communicates with requesters 
to obtain missing information and to clarify requests to enable their 
timely processing. Similarly, FOIA requests sent to the wrong 
Information Center are forwarded to the correct Information Center.
    The commenter also suggested a deceased individual's records should 
receive protection consistent with that of a living individual and 
suggested the agency require a requester to obtain approval from the 
decedent's estate before releasing any records. As explained in the 
Department of Justice's 2007 FOIA Guide, there is a ``longstanding FOIA 
rule that death extinguishes one's privacy rights.'' USDOJ: OIP: 
Freedom of Information Act Guide, March 2007, page 566. Whether records 
pertaining to a deceased individual are actually released requires an 
evaluation of the privacy interests at issue in such a release, which 
may include surviving family members' right to personal privacy.

[[Page 56937]]

    The other commenter questioned eliminating the ability to submit 
Privacy Act requests for records via telephone, believing the agency 
should facilitate all forms of electronic requests irrespective of how 
made. The proposed change does not eliminate a requester's ability to 
submit requests by facsimile or e-mail. The Board has added clarifying 
language to the procedures and requirements provisions to reflect this 
fact.

Regulatory Procedures

Paperwork Reduction Act

    In accordance with the requirements of the Paperwork Reduction Act 
(PRA) of 1995 (44 U.S.C. 3506; 5 CFR part 1320 Appendix A.1), the Board 
has determined the final rule does not contain a collection of 
information subject to the PRA.

Regulatory Flexibility Act

    The Regulatory Flexibility Act requires NCUA to prepare an analysis 
to describe any significant economic impact a proposed rule may have on 
a substantial number of small credit unions (those under $10 million in 
assets). This final rule does not impose any requirements on federally-
insured credit unions. Therefore, it will not have a significant 
economic impact on a substantial number of small credit unions and a 
regulatory flexibility analysis is not required.

Executive Order 13132

    Executive Order 13132 encourages independent regulatory agencies to 
consider the impact of their actions on state and local interests. In 
adherence to fundamental federalism principles, NCUA, an independent 
regulatory agency as defined in 44 U.S.C. 3502(5), voluntarily complies 
with the executive order. The final rule would not have substantial 
direct effects on the states, on the connection between the national 
government and the states, or on the distribution of power and 
responsibilities among the various levels of government. NCUA has 
determined that this final rule does not constitute a policy that has 
federalism implications for purposes of the executive order.

The Treasury and General Government Appropriations Act, 1999--
Assessment of Federal Regulations and Policies on Families

    NCUA has determined that this final rule would not affect family 
well-being within the meaning of section 654 of the Treasury and 
General Government Appropriations Act, 1999, Public Law 105-277, 112 
Stat. 2681 (1998).

List of Subjects in 12 CFR Part 792

    Administrative practice and procedure, Credit unions, Freedom of 
Information, Information, Privacy, Records, System of records.

    By the National Credit Union Administration Board on September 
25, 2008.
Mary Rupp,
Secretary of the Board.

0
For the reasons stated in the preamble, the National Credit Union 
Administration amends 12 CFR part 792 as set forth below:

PART 792--REQUESTS FOR INFORMATION UNDER THE FREEDOM OF INFORMATION 
ACT AND PRIVACY ACT, AND BY SUBPOENA; SECURITY PROCEDURES FOR 
CLASSIFIED INFORMATION

0
1. The authority citation for part 792 continues to read as follows:

    Authority: 5 U.S.C. 301, 552, 552a, 552b; 12 U.S.C. 1752a(d), 
1766, 1789, 1795f; E.O. 12600, 52 FR 23781, 3 CFR, 1987 Comp., p. 
235; E.O. 12958, 60 FR 19825, 3 CFR, 1995 Comp., p. 333.

0
2. In Sec.  792.03, revise the fourth sentence of the introductory text 
and the last sentence of paragraph (c) to read as follows:


Sec.  792.03  How will I know which records to request?

    * * * You may obtain copies of indices by making a request to the 
NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, VA 
22314-2387, Attn: FOIA Officer or as indicated on the NCUA Web site at 
www.ncua.gov. * * *
* * * * *
    (c) * * * The Popular FOIA Index is available on the NCUA web site.


0
3. In Sec.  792.04, revise paragraph (a) to read as follows:


Sec.  792.04  How can I obtain these records?

* * * * *
    (a) You may obtain copies of the records referenced in Sec.  792.02 
by obtaining the index referred to in Sec.  792.03 and following the 
ordering instructions it contains, or by making a written request to 
NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, Virginia 
22314-3428, Attn: FOIA Officer or as indicated on the NCUA Web site.
* * * * *

0
4. In Sec.  792.07, revise the first sentence of paragraph (a) and 
paragraph (b) to read as follows:


Sec.  792.07  Where do I send my request?

    (a) You must send your written request to one of NCUA's Information 
Centers. * * *
    (b) If you are seeking any NCUA record, other than those maintained 
by the Office of Inspector General, you should send your request to 
NCUA, Office of the General Counsel, 1775 Duke Street, Alexandria, 
Virginia 22314-3428, Attn: FOIA Officer or as indicated on the NCUA Web 
site at https://www.ncua.gov.
* * * * *

0
5. In Sec.  792.08, revise the introductory text and paragraph (a) to 
read as follows:


Sec.  792.08  What must I include in my request?

    Until an Information Center receives your FOIA request, it is not 
obligated to search for responsive records, meet time deadlines, or 
release any records. A request will not be considered received if it 
does not include all of the items in paragraphs (a) through (c) of this 
section.
    (a) Your request must be in writing and include the words ``FOIA 
REQUEST'' on both the envelope and request letter. The request letter 
must also include your name, address and a telephone number where you 
can be reached during normal business hours. If you would like us to 
respond to your FOIA request by electronic mail (e-mail), you should 
include your e-mail address.
* * * * *

0
6. In Sec.  792.10, revise the second sentence of paragraph (a), the 
last sentence of paragraph (b) and the second sentence of paragraph (e) 
to read as follows:


Sec.  792.10  What will NCUA do with my request?

    (a)* * * The date of receipt for any request, including one that is 
addressed incorrectly or is forwarded to NCUA by another agency, is the 
earlier of the date the appropriate Information Center actually 
receives the request or 10 working days after either of NCUA's 
Information Centers receives the request.
    (b) * * * All other requests will be handled under normal 
processing procedures in the order they were received.
* * * * *
    (e) * * * If we notify you of a denial of your request, we will 
include the reason for the denial.
* * * * *

0
7. In Sec.  792.11, revise paragraph (a)(6) introductory text by 
removing the first

[[Page 56938]]

sentence and adding three sentences in its place to read as follows:


Sec.  792.11  What kind of records are exempt from public disclosure?

    (a) * * *
    (6) Personnel, medical, and similar files (including financial 
files) pertaining to another person, the disclosure of which would 
constitute a clearly unwarranted invasion of personal privacy without 
the subject person's written consent or proof of death. Written consent 
consists of a written statement by the subject person, authorizing the 
release of the information to you, and including either the subject 
person's notarized signature or a declaration made under penalty of 
perjury that the statement is true and correct. Proof of death consists 
of evidence that the subject of your request is deceased--such as a 
death certificate, a newspaper obituary, or some comparable proof of 
death. * * *
* * * * *

0
8. In Sec.  792.15, revise paragraph (a) to read as follows:


Sec.  792.15  How long will it take to process my request?

* * * * *
    (a)(1) Where the running of such time is suspended while:
    (i) The Information Center awaits additional information from the 
requester. A suspension of time for this purpose may occur only once 
during the processing period; and
    (ii) The Information Center clarifies with the requester issues 
regarding the payment of fees pursuant to Sec.  792.26.
    (2) The Information Center's receipt of the requester's response to 
the request for additional information or clarification ends the 
tolling period;
* * * * *

0
9. Revise Sec.  792.17 to read as follows:


Sec.  792.17  What can I do if the time limit passes and I still have 
not received a response?

    If NCUA does not comply with the time limits under Sec.  792.15, or 
as extended under Sec.  792.16, you do not have to pay search fees; 
requesters qualifying for free search fees will not have to pay 
duplication fees. You also can file suit against NCUA because you will 
be deemed to have exhausted your administrative remedies if NCUA fails 
to comply with the time limit provisions of this subpart. If NCUA can 
show that exceptional circumstances exist and that it is exercising due 
diligence in responding to your request, the court may retain 
jurisdiction and allow NCUA to complete its review of the records. In 
determining whether exceptional circumstances exist, the court may 
consider your refusal to modify the scope of your request or arrange an 
alternative time frame for processing after being given the opportunity 
to do so by NCUA, when it notifies you of the existence of unusual 
circumstances as set forth in Sec.  792.16.

0
10. In Sec.  792.18, revise the first sentence of paragraph (b) to read 
as follows:


Sec.  792.18  What if my request is urgent and I cannot wait for the 
records?

* * * * *
    (b) In response to a request for expedited processing, the 
Information Center will notify you of the determination within ten 
working days of receipt of the request. * * *
* * * * *

0
11. In Sec.  792.19, revise paragraph (c)(1) to read as follows:


Sec.  792.19  How does NCUA calculate the fees for processing my 
request?

* * * * *
    (c) * * *
    (1) The per-page fee for paper copy reproduction of a document is 
$.10;
* * * * *

0
12. In Sec.  792.27, revise paragraphs (a)(1) through (a)(4) to read as 
follows:


Sec.  792.27  Can fees be reduced or waived?

* * * * *
    (a) * * *
    (1) Whether the subject of the requested records concerns 
identifiable operations or activities of the government, with a 
connection that is direct and clear;
    (2) Whether the disclosable portions of the requested records are 
meaningfully informative about government operations and activities in 
order to be likely to contribute to an understanding of government 
operations or activities. Information already in the public domain, 
either in a duplicate or substantially identical form where nothing new 
would be added to the public's understanding, would not be meaningfully 
informative;
    (3) Whether disclosure of the requested information will contribute 
to public understanding, meaning a reasonably broad audience of persons 
interested in the subject, as opposed to the individual understanding 
of the requester. A requester's expertise in the subject area and 
ability and intention to effectively convey information to the public 
will be considered. Representatives of the news media are presumed to 
satisfy this consideration; and
    (4) Whether the disclosure is likely to contribute significantly to 
public understanding of government operations or activities. The level 
of public understanding before disclosure must be enhanced by the 
disclosure to a significant extent.
* * * * *

0
13. In Sec.  792.28, revise the first and third sentences of paragraph 
(a), and paragraph (c), to read as follows:


Sec.  792.28  What if I am not satisfied with the response I receive?

* * * * *
    (a) Make a determination with respect to any appeal within 20 
working days after the receipt of such appeal. * * * Where you do not 
address your appeal to the General Counsel, the time limitations stated 
above will be computed from the date of receipt of the appeal by the 
General Counsel.
* * * * *
    (c) Address your appeal to NCUA, Office of General Counsel--FOIA 
APPEAL, 1775 Duke Street, Alexandria, VA 22314-3428. The words ``FOIA 
APPEAL'' should appear on the envelope and in the letter. Failure to 
address an appeal properly may delay commencement of the time 
limitation stated in paragraph (a) of this section, to take account of 
the time reasonably required to forward the appeal to the Office of 
General Counsel.

Subpart E--[Amended]

0
14. Amend subpart E by removing the term ``NCUA official'' wherever it 
appears and adding in its place the term ``system manager.''
0
15. In Sec.  792.53, add new paragraphs (g), (h) and (i) to read as 
follows:


Sec.  792.53  Definitions.

* * * * *
    (g) Notice of Systems of Records means the annual notice published 
by NCUA in the Federal Register informing the public of the existence 
and character of the systems of records it maintains. The Notice of 
Systems of Records also is available on NCUA's Web site at https://
www.ncua.gov.
    (h) System manager means the NCUA official responsible for the 
maintenance, collection, use or distribution of information contained 
in a system of records. The system manager for each system of records 
is provided in the Federal Register publication of NCUA's annual 
systems of records notice.
    (i) Working day means Monday through Friday excluding legal public 
holidays.

0
16. Revise Sec.  792.54 to read as follows:

[[Page 56939]]

Sec.  792.54  Procedures for requests pertaining to individual records 
in a system of records.

    (a) Individuals desiring to know if a system of records contains 
records pertaining to them, and individuals requesting access to 
records in a system of records pertaining to them should submit a 
written request to the appropriate system manager as identified in the 
Notice of Systems of Records. An individual who does not have access to 
the Federal Register and who is unable to determine the appropriate 
system manager to whom to submit a request may submit a request to the 
Privacy Officer, Office of General Counsel, National Credit Union 
Administration, 1775 Duke Street, Alexandria, VA 22314-3428, in which 
case the request will be referred to the appropriate system manager.
    (b) Individuals requesting notification of, or access to, records 
should include the words ``PRIVACY ACT REQUEST'' on both the letter 
and, as appropriate, the envelope, cover document or subject line; 
describe the record sought; the approximate dates covered by the 
record; and, the systems of record in which records are thought to be 
included. Individuals must also meet the identification requirements in 
Sec.  792.55.

0
17. In Sec.  792.55, revise paragraphs (a)(1) through (a)(3) and (c) to 
read as follows:


Sec.  792.55  Times, places, and requirements for identification of 
individuals making requests and identification of records requested.

    (a) * * *
    (1) Individuals appearing in person, if not personally known to the 
system manager responding to the request, must present a single 
document bearing a photograph (such as a passport or identification 
badge) or two items of identification which do not bear a photograph 
but do bear both a name and address (such as a driver's license or 
voter registration card);
    (2) Individuals submitting requests by mail or written electronic 
form, such as facsimile or e-mail, may establish identity by a 
signature, address, date of birth, employee identification number if 
any, and one other identifier such as a photocopy of driver's license 
or other document. If inadequate identifying information is provided, 
the system manager responding to the request may require further 
identifying information before any notification or responsive 
disclosure.
    (3) Individuals appearing in person or submitting requests by mail 
or written electronic form, who cannot provide the required 
documentation or identification, may provide an unsworn declaration 
subscribed to as true under penalty of perjury.
* * * * *
    (c) A record may be disclosed to a representative of an individual 
to whom the record pertains provided the system manager receives 
written authorization from the individual who is the subject of the 
record.
* * * * *

0
18. In Sec.  792.57, revise paragraph (b) to read as follows:


Sec.  792.57  Special procedures: Information furnished by other 
agencies; medical records.

* * * * *
    (b) Medical records may be disclosed on request to the individuals 
to whom they pertain unless disclosing the medical information directly 
to the requesting individual could have an adverse effect on the 
individual. Where medical information is potentially adverse to the 
requesting individual, the system manager responsible may advise the 
requesting individual that the medical records will be transmitted only 
to a physician designated in writing by the individual.

0
19. In Sec.  792.58, revise paragraph (a) and the second sentence of 
paragraph (b) to read as follows:


Sec.  792.58  Requests for correction or amendment to a record; 
administrative review of requests.

    (a) An individual may request amendment of a record concerning that 
individual by submitting a written request, either in person or by 
mail, to the system manager identified in the Notice of Systems of 
Records. The words ``PRIVACY ACT--REQUEST TO AMEND RECORD'' should be 
written on the letter and the envelope. The request must describe the 
system of records containing the record sought to be amended, indicate 
the particular record involved, the nature of the correction sought, 
and the justification for the correction or amendment. An individual 
who does not have access to NCUA's Notice of Systems of Records, and to 
whom the appropriate address is otherwise unavailable, may submit a 
request to the Privacy Act Officer, Office of General Counsel, National 
Credit Union Administration, 1775 Duke Street, Alexandria, Virginia 
22314-3428, in which case the request will then be referred to the 
appropriate system manager. The date of receipt of the request will be 
determined as of the date of receipt by the system manager.
    (b) * * * The appropriate system manager will promptly (under 
normal circumstances, not later than 30 working days after receipt of 
the request) advise the individual that the record will be amended or 
corrected, or inform the individual of rejection of the request to 
amend the record, the reason for the rejection, and the procedures 
established by Sec.  792.59 for the individual to request a review of 
that rejection.

0
20. In Sec.  792.59, revise the third sentence of paragraph (a) and the 
first two sentences of paragraph (c) to read as follows:


Sec.  792.59  Appeal of initial determination.

    (a) * * * Appeals must be addressed to the Office of General 
Counsel, National Credit Union Administration, 1775 Duke Street, 
Alexandria, VA 22314-3428 with the words ``PRIVACY ACT--APPEAL'' 
written on the letter and the envelope.* * *
* * * * *
    (c) If an appeal under this section is denied in whole or in part, 
an individual may file a statement of disagreement concisely stating 
the reason(s) for disagreeing with the denial for amendment or 
correction, and clearly identifying each part of any record that is 
disputed. The statement must be sent within 30 working days of the date 
of receipt of the notice of General Counsel's refusal to authorize 
amendment or correction, to the General Counsel, National Credit Union 
Administration, 1775 Duke Street, Alexandria, VA 22314-3428.* * *
* * * * *

0
21. In Sec.  792.60, revise paragraph (j) to read as follows:


Sec.  792.60  Disclosure of record to person other than the individual 
to whom it pertains.

* * * * *
    (j) To the Comptroller General, or any of his authorized 
representatives, in the course of the performance of the duties of the 
Government Accountability Office;
* * * * *

0
22. In Sec.  792.61, revise the first sentence of paragraph (a) to read 
as follows:


Sec.  792.61  Accounting for disclosures.

    (a) Each system manager identified in the ``Notice of Systems of 
Records'' must establish a system of accounting for all disclosures of 
information or records under the Privacy Act made outside NCUA.* * *
* * * * *

0
23. In Sec.  792.63, revise paragraphs (a), (b)(1), and (b)(4), to read 
as follows:

[[Page 56940]]

Sec.  792.63  Collection of information from individuals: information 
forms.

    (a) The system manager for each system of records is responsible 
for reviewing all forms developed and used to collect information from 
or about individuals for incorporation into the system of records.
    (b) * * *
    (1) To ensure that no information concerning religion, political 
beliefs or activities, association memberships (other than those 
required for a professional license), or the exercise of other First 
Amendment rights is required to be disclosed unless such requirement of 
disclosure is expressly authorized by statute or by the individual 
about whom the record is maintained, or unless pertinent to and within 
the scope of any authorized law enforcement activity;
* * * * *
    (4) To ensure that the form or accompanying statement clearly 
indicates to the individual the effects on him or her, if any, of 
refusing to provide some or all of the requested information; and
* * * * *

0
24. In Sec.  792.66, revise paragraphs (a) and (b)(2), add four new 
sentences to the end of paragraph (b)(3), and add four new sentences to 
the end of paragraph (b)(4) to read as follows:


Sec.  792.66  Exemptions.

    (a) NCUA maintains several systems of records that are exempted 
from some provisions of the Privacy Act. The system number and name, 
description of records contained in the system, exempted provisions and 
reasons for exemption are as follows:
    (b) * * *
    (2) System NCUA-8, entitled, ``Investigative Reports Involving Any 
Crime or Suspicious Activity Against a Credit Union, NCUA,'' consists 
of investigatory or enforcement records about individuals suspected of 
involvement in violations of laws or regulations, whether criminal or 
administrative. These records are maintained in an overall context of 
general investigative information concerning crimes against credit 
unions. To the extent that individually identifiable information is 
maintained for purposes of protecting the security of any 
investigations by appropriate law enforcement authorities and promoting 
the successful prosecution of all actual criminal activity, the records 
in this system are exempted, pursuant to section k(2) of the Privacy 
Act (5 U.S.C. 552a (k)(2)), from sections (c)(3), (d), (e)(1), (e)(2), 
(e)(4)(G), (e)(4)(H), (f), and (g). The records in this system are also 
exempted pursuant to section (j)(2) of the Privacy Act, 5 U.S.C. 
552a(j)(2), from sections (c)(3), (d), (e)(1), (e)(2), (e)(4)(G), 
(e)(4)(H), (f), and (g). Where possible, information that would 
identify a confidential source will be extracted or summarized in a 
manner that protects the source and the summary or extract will be 
provided to the requesting individual.
    (3) * * * NCUA need not make an accounting of previous disclosures 
of a record in this system of records available to its subject, and 
NCUA need not grant access to any records in this system of records by 
their subject. Further, whenever individuals request records about 
themselves and maintained in this system of records, the NCUA will 
advise the individuals only that no records available to them pursuant 
to the Privacy Act of 1974 have been identified. However, if review of 
the record reveals that the information contained therein has been used 
or is being used to deny the individuals any right, privilege or 
benefit for which they are eligible or to which they would otherwise be 
entitled under federal law, the individuals will be advised of the 
existence of the information and will be provided the information, 
except to the extent disclosure would identify a confidential source. 
Where possible, information which would identify a confidential source 
will be extracted or summarized in a manner which protects the source 
and the summary or extract will be provided to the requesting 
individual.
    (4) * * * NCUA need not make an accounting of previous disclosures 
of a record in this system of records available to its subject, and 
NCUA need not grant access to any records in this system of records by 
their subject. Further, whenever individuals request records about 
themselves and maintained in this system of records, the NCUA will 
advise the individuals only that no records available to them pursuant 
to the Privacy Act of 1974 have been identified. However, if review of 
the record reveals that the information contained therein has been used 
or is being used to deny the individuals any right, privilege or 
benefit for which they are eligible or to which they would otherwise be 
entitled under federal law, the individuals will be advised of the 
existence of the information and will be provided the information, 
except to the extent disclosure would identify a confidential source. 
Where possible, information that would identify a confidential source 
will be extracted or summarized in a manner which protects the source 
and the summary or extract will be provided to the requesting 
individual.
* * * * *

0
25. In Sec.  792.69, revise paragraph (a) to read as follows:


Sec.  792.69  Training and employee standards of conduct with regard to 
privacy.

    (a) The Director of the Office of Human Resources, with advice from 
the Senior Privacy Act Officer, is responsible for training NCUA 
employees in the obligations imposed by the Privacy Act and this 
subpart.
* * * * *
[FR Doc. E8-23076 Filed 9-30-08; 8:45 am]
BILLING CODE 7535-01-P
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.