Privacy Act of 1974; Department of Homeland Security/National Protection and Programs Directorate-002 Chemical Facility Anti-Terrorism Standards Personnel Surety Program System of Records, 34732-34736 [2011-14383]
Download as PDF
srobinson on DSK4SPTVN1PROD with NOTICES
34732
Federal Register / Vol. 76, No. 114 / Tuesday, June 14, 2011 / Notices
Response: DHS agrees that there is
currently no central database that allows
the public to determine that an
individual has already undergone
screening by the Department.
Comment: One commenter was
troubled by the information pertaining
to RBPS–12 contained in Appendix C of
the May 2009 Risk-Based Performance
Standards Guidance (https://www.dhs.
gov/xlibrary/assets/chemsec_cfats_risk
based_performance_standards.pdf),
because the commenter believes that
certain types of measures, procedures,
policies, and plans mentioned in
Appendix C are not appropriate for
determining if chemical facility
personnel are terrorist threats.
Response: The Department expects
high-risk chemical facilities to
implement appropriate security
measures to conduct identity, criminal
history, and legal authorization to work
background checks. These security
measures can vary from facility to
facility commensurate with facilityspecific risks, security issues, and
business practices. The guidance
referenced by the commenter (see pages
180 to 186 of the Risk-Based
Performance Standards Guidance), and
other guidance addressing identity,
criminal history, and legal authorization
to work background checks, however, is
not guidance addressing compliance
with 6 CFR 27.230(a)(12)(iv), and as
such is not the subject of this notice, nor
is it the subject of the underlying ICR or
of the 30- or 60-day notices preceding
this notice.
Comment: One commenter requested
that the Department clarify what appeal
or waiver options an affected individual
has if his/her employer takes an adverse
employment action against him/her
based on RBPS–12 background checks
or based on information received or
obtained under the CFATS Personnel
Surety Program. The commenter also
requested that the Department prevent
high-risk chemical facilities from using
personal information collected from
affected individuals as part of RBPS–12
for purposes other than conducting the
background checks required by RBPS–
12.
Response: High risk chemical
facilities’ employment actions are not
regulated by CFATS.
The ICR the Department will submit
to OMB, this notice, the 60-day notice,
and the 30-day notice address the
CFATS Personnel Surety Program, not
the identity, legal authorization to work,
and criminal history background checks
required by 6 CFR 230(a)(12)(i)–(iii).
Discussion of information collected as
part of those other three background
checks, or employment decisions based
VerDate Mar<15>2010
16:27 Jun 13, 2011
Jkt 223001
on them, is beyond the scope of this
notice.
Conclusion
As mentioned in the summary section
of this notice, DHS has submitted an
ICR to OMB for review and clearance in
accordance with the Paperwork
Reduction Act of 1995. This notice
responds to comments received during
the 30-day notice.
Prior to implementation of the CFATS
Personnel Surety Program, the
Department will also publish a Privacy
Impact Assessment (PIA) about the
CFATS Personnel Surety Program,
available on the Department’s Web page
at https://www.dhs.gov/privacy and
https://www.dhs.gov/chemicalsecurity.
The Department will also publish a
System of Records Notice (SORN) for
the CFATS Personnel Surety Program,
and a Notice of Proposed Rulemaking
proposing to take certain Privacy Act
exemptions for the CFATS Personnel
Surety Program System of Records.
The Department will also publish a
notice, and/or send notice to high-risk
chemical facilities individually, stating
that the CFATS Personnel Surety
Program has been implemented. In that
notice, the Department will include
description of how the CFATS
Personnel Surety Program will be
implemented, as well as the information
submission schedule high-risk chemical
facilities will be required to follow. The
notice will also describe how a high-risk
chemical facility can request a variance
from the submission schedule.
Analysis
Agency: Department of Homeland
Security, National Protection and
Programs Directorate, Office of
Infrastructure Protection, Infrastructure
Security Compliance Division.
Title: CFATS Personnel Surety
Program.
Form: DHS Form 11000–29.
OMB Number: 1670–NEW.
Frequency: As required by a DHSapproved schedule.
Affected Public: High-risk chemical
facilities as defined in 6 CFR Part 27,
high-risk chemical facility personnel,
and as appropriate, unescorted visitors
with access to restricted areas or critical
assets.
Number of Respondents: 1,303,700
individuals.
Estimated Time per Respondent: 0.54
hours (32.4 minutes).
Total Burden Hours: 707,200 annual
burden hours.
Total Burden Cost (capital/startup):
$0.00.
Total Burden Cost (operating/
maintaining): $29,704,000.
PO 00000
Frm 00094
Fmt 4703
Sfmt 4703
Signed: June 6, 2011.
David Epperson,
Chief Information Officer, National Protection
and Programs Directorate, Department of
Homeland Security.
[FR Doc. 2011–14382 Filed 6–13–11; 8:45 am]
BILLING CODE 9110–9–P
DEPARTMENT OF HOMELAND
SECURITY
Office of the Secretary
[Docket No. DHS–2011–0032]
Privacy Act of 1974; Department of
Homeland Security/National Protection
and Programs Directorate—002
Chemical Facility Anti-Terrorism
Standards Personnel Surety Program
System of Records
Privacy Office, DHS.
Notice of Privacy Act system of
AGENCY:
ACTION:
records.
In accordance with the
Privacy Act of 1974, the Department of
Homeland Security proposes to
establish a new system of records notice
titled, ‘‘Department of Homeland
Security/National Protection and
Programs Directorate—002 Chemical
Facility Anti-Terrorism Standards
Personnel Surety Program System of
Records.’’ This new system of records
collects information on individuals,—
facility personnel and unescorted
visitors—who have or are seeking access
to restricted areas and critical assets at
high risk chemical facilities and
compares this information to the
Terrorist Screening Database, the
terrorist watchlist maintained by the
Federal Bureau of Investigation’s
Terrorist Screening Center. The
Department of Homeland Security is
issuing a Notice of Proposed
Rulemaking concurrently with this
system of records elsewhere in the
Federal Register to exempt portions of
the system of records from one or more
provisions of the Privacy Act because of
criminal, civil, and administrative
enforcement requirements. This newly
established system of records will be
included in the Department of
Homeland Security’s inventory of
record systems.
DATES: Submit comments on or before
July 14, 2011. This system will be
effective July 14, 2011.
ADDRESSES: You may submit comments,
identified by docket number [DHS–
2011–0032] by one of the following
methods:
• Federal e-Rulemaking Portal:
https://www.regulations.gov. Follow the
instructions for submitting comments.
SUMMARY:
E:\FR\FM\14JNN1.SGM
14JNN1
Federal Register / Vol. 76, No. 114 / Tuesday, June 14, 2011 / Notices
• Fax: 703–483–2999.
• Mail: Mary Ellen Callahan, Chief
Privacy Officer, Privacy Office,
Department of Homeland Security,
Washington, DC 20528.
• Instructions: All submissions
received must include the agency name
and docket number for this rulemaking.
All comments received will be posted
without change to https://
www.regulations.gov, including any
personal information provided.
• Docket: For access to the docket to
read background documents or
comments received go to https://
www.regulations.gov.
For
general questions please contact: Emily
Andrew (703–235–2182), Privacy
Officer, National Protection and
Programs Directorate, Department of
Homeland Security, Washington, DC
20528. For privacy issues please
contact: Mary Ellen Callahan (703–235–
0780), Chief Privacy Officer, Privacy
Office, Department of Homeland
Security, Washington, DC 20528.
SUPPLEMENTARY INFORMATION:
FOR FURTHER INFORMATION CONTACT:
srobinson on DSK4SPTVN1PROD with NOTICES
I. Background
In accordance with the Privacy Act of
1974, 5 U.S.C. 552a, the Department of
Homeland Security (DHS)/National
Protection and Programs Directorate
(NPPD) proposes to establish a DHS
system of records titled, ‘‘DHS/NPPD—
002 Chemical Facility Anti-Terrorism
Standards Personnel Surety Program
System of Records.’’
On October 4, 2006, the President
signed the DHS Appropriations Act of
2007 (the Act), Public Law 109–295.
Section 550 of the Act (Section 550)
provides DHS with the authority to
regulate the security of high-risk
chemical facilities. DHS has
promulgated regulations implementing
Section 550, the Chemical Facility AntiTerrorism Standards (CFATS), 6 CFR
part 27.
Section 550 requires that DHS
establish Risk Based Performance
Standards (RBPS) as part of CFATS.
RBPS–12 (6 CFR 27.230(a)(12)(iv))
requires that regulated chemical
facilities implement ‘‘measures
designed to identify people with
terrorist ties.’’ The ability to identify
individuals with terrorist ties is an
inherently governmental function and
requires the use of information held in
government-maintained databases,
which are unavailable to high-risk
chemical facilities. Therefore, DHS is
implementing the CFATS Personnel
Surety Program, which will allow
chemical facilities to comply with
RBPS–12 by implementing ‘‘measures
VerDate Mar<15>2010
16:27 Jun 13, 2011
Jkt 223001
designed to identify people with
terrorist ties.’’
The CFATS Personnel Surety Program
will work with the DHS Transportation
Security Administration (TSA) to
identify individuals who have terrorist
ties by vetting information submitted by
each high-risk chemical facility against
the Terrorist Screening Database
(TSDB). The TSDB is the Federal
government’s consolidated and
integrated terrorist watchlist of known
and suspected terrorists, maintained by
the Department of Justice (DOJ) Federal
Bureau of Investigation’s (FBI) Terrorist
Screening Center (TSC). For more
information on the TSDB, see DOJ/FBI—
019 Terrorist Screening Records System,
72 FR 47073 (August 22, 2007).
High-risk chemical facilities or their
designees will submit the information
of: (1) Facility personnel who have or
are seeking access, either unescorted or
otherwise, to restricted areas or critical
assets; and (2) unescorted visitors who
have or are seeking access to restricted
areas or critical assets. These persons,
about whom high-risk chemical
facilities and facilities’ designees will
submit information to DHS, are referred
to in this notice as ‘‘affected
individuals.’’ Individual high-risk
facilities may classify particular
contractors or categories of contractors
either as ‘‘facility personnel’’ or as
‘‘visitors.’’ This determination should be
a facility-specific determination, and
should be based on facility security,
operational requirements, and business
practices.
Information will be submitted to
DHS/NPPD through the Chemical
Security Assessment Tool (CSAT), the
online data collection portal for CFATS.
The high-risk chemical facility or its
designees will submit the information of
affected individuals to DHS through
CSAT. The submitters of this
information (‘‘Submitters’’) for each
high-risk chemical facility will also
affirm, to the best of their knowledge,
that the information is: (1) True, correct,
and complete; and (2) collected and
submitted in compliance with the
facility’s Site Security Plan (SSP) or
Alternative Security Program (ASP), as
reviewed and authorized and/or
approved in accordance with 6 CFR
27.245. The Submitter(s) of each highrisk chemical facility will also affirm
that, in accordance with their Site
Security Plans, notice required by the
Privacy Act of 1974, 5 U.S.C. § 552a, has
been given to affected individuals before
their information is submitted to DHS.
DHS will send a verification of receipt
to the Submitter(s) of each high-risk
chemical facility when a high-risk
chemical facility: (1) Submits
PO 00000
Frm 00095
Fmt 4703
Sfmt 4703
34733
information about an affected individual
for the first time; (2) submits additional,
updated, or corrected information about
an affected individual; and/or (3)
notifies DHS that an affected individual
no longer has or is seeking access to that
facility’s restricted areas or critical
assets.
Upon receipt of each affected
individual’s information in CSAT, DHS/
NPPD will send a copy of the
information to DHS/TSA. Within DHS/
TSA, the Office of Transportation Threat
Assessment and Credentialing (TTAC)
conducts vetting against the TSDB for
several DHS programs. DHS/TSA/TTAC
will compare the information of affected
individuals collected by DHS (via
CSAT) to information in the TSDB.
DHS/TSA/TTAC will forward potential
matches to the DOJ/FBI/TSC, which will
make a final determination of whether
an individual’s information is identified
as a match to a record in the TSDB.
In certain instances, DHS/NPPD may
contact a high-risk chemical facility to
request additional information (e.g., visa
information) pertaining to particular
individuals in order to clarify suspected
data errors or resolve potential matches
(e.g., in situations where an affected
individual has a common name). Such
requests will not imply, and should not
be construed to indicate that an
individual’s information has been
confirmed as a match to a TSDB record.
DHS/NPPD may also conduct data
accuracy reviews and audits as part of
the CFATS Personnel Surety Program.
Such reviews may be conducted on
random samples of affected individuals.
To assist with this activity, DHS/NPPD
may request information pertaining to
affected individuals that was previously
provided to DHS/NPPD by high-risk
chemical facilities, in order to confirm
the accuracy of that information.
Consistent with the Department’s
information sharing mission,
information stored in the DHS/NPPD—
002 Chemical Facility Anti-Terrorism
Standards Personnel Surety Program
System of Records may be shared with
other DHS components, as well as
appropriate Federal, state, local, Tribal,
foreign, or international government
agencies. This sharing will only take
place after DHS determines that the
receiving component or agency has a
need to know the information to carry
out national security, law enforcement,
immigration, intelligence, or other
functions consistent with the routine
uses set forth in this system of records
notice.
Additionally, DHS is issuing a Notice
of Proposed Rulemaking (NPRM)
concurrently with this system of
records, to be published elsewhere in
E:\FR\FM\14JNN1.SGM
14JNN1
34734
Federal Register / Vol. 76, No. 114 / Tuesday, June 14, 2011 / Notices
SECURITY CLASSIFICATION:
II. Privacy Act
srobinson on DSK4SPTVN1PROD with NOTICES
the Federal Register, to exempt portions
of the system of records from provisions
of the Privacy Act because of criminal,
civil, and administrative enforcement
requirements.
This newly established system of
records will be included in the
Department’s inventory of record
systems.
CATEGORIES OF INDIVIDUALS COVERED BY THE
SYSTEM:
The Privacy Act embodies fair
information principles in a statutory
framework governing the means by
which the United States government
collects, maintains, uses, and
disseminates individuals’ records. The
Privacy Act applies to information that
is maintained in a ‘‘system of records.’’
A ‘‘system of records’’ is a group of any
records under the control of an agency
for which information is retrieved by
the name of an individual or by some
identifying number, symbol, or other
identifying particular assigned to the
individual. In the Privacy Act,
individuals are defined to encompass
United States citizens and lawful
permanent residents. As a matter of
policy, DHS extends administrative
Privacy Act protections to all
individuals where systems of records
maintain information on U.S. citizens,
lawful permanent residents, and
visitors. Individuals may request access
to their own records that are maintained
in a system of records in the possession
or under the control of DHS by
complying with DHS Privacy Act
regulations, 6 CFR Part 5.
The Privacy Act requires each agency
to publish in the Federal Register a
description denoting the type and
character of each system of records that
the agency maintains, and the routine
uses that are contained in each system
in order to make agency record keeping
practices transparent, to notify
individuals regarding the uses to which
their records are put, and to assist
individuals to more easily find such
records within the agency. Below is the
description of the DHS/NPPD—002
Chemical Facility Anti-Terrorism
Standards Personnel Surety Program
System of Records.
In accordance with 5 U.S.C. 552a(r),
DHS has provided a report of this
system of records to the Office of
Management and Budget and to
Congress.
System of Records
DHS/NPPD—002
SYSTEM NAME:
DHS/NPPD—002 Chemical Facility
Anti-Terrorism Standards Personnel
Surety Program System of Records.
VerDate Mar<15>2010
16:27 Jun 13, 2011
Jkt 223001
Unclassified, sensitive, law
enforcement sensitive, for official use
only, and classified.
SYSTEM LOCATION:
Records are maintained at DHS and
Component headquarters in
Washington, DC, and at field offices.
(1) High-risk chemical facility
personnel and unescorted visitors who
have or are seeking access to restricted
areas or critical assets at high-risk
chemical facilities (see 6 CFR
27.230(a)(12));
(2) High-risk chemical facility
personnel or designees who contact
DHS/NPPD or a Federal law
enforcement entity with follow-up
questions regarding submission of an
individual’s information to DHS/NPPD;
(3) Individuals listed in the TSDB
against whom potential or confirmed
matches have been made; and
(4) Individuals who have been or seek
to be distinguished from individuals in
the TSDB through redress or other
means as a result of the Personnel
Surety Program.
CATEGORIES OF RECORDS IN THE SYSTEM:
(1) High-risk chemical facilities are
required to submit the following
information on all facility personnel and
unescorted visitors who have or are
seeking access to restricted areas or
critical assets:
a. U.S. Citizens and Lawful
Permanent Residents
i. Full name;
ii. Date of birth; and
iii. Citizenship or Gender.
b. Non-U.S. persons
i. Full name;
ii. Date of birth;
iii. Citizenship; and
iv. Passport information and/or alien
registration number.
(2) To reduce the likelihood of false
positives in matching against the TSDB,
high-risk chemical facilities may also
(optionally) submit the following
information on facility personnel and
unescorted visitors who have or are
seeking access to restricted areas or
critical assets:
a. Aliases;
b. Gender (for Non-U.S. persons);
c. Place of birth; and
d. Redress Number.
(3) High-risk chemical facilities may
submit different information on
individuals who maintain DHS
screening program credentials or
endorsements that require TSDB checks
equivalent to the checks to be performed
PO 00000
Frm 00096
Fmt 4703
Sfmt 4703
as part of the CFATS Personnel Surety
Program. Instead of submitting the
information listed in category (1), above,
high risk chemical facilities may submit
the following information for such
individuals:
a. Full name;
b. Date of birth;
c. Name of the DHS program which
conducts equivalent vetting against the
TSDB, such as the Transportation
Worker Identification Credential (TWIC)
program or the Hazardous Materials
Endorsement (HME) program;
d. Unique number, or other program
specific verifying information associated
with a DHS screening program,
necessary to verify an individual’s
enrollment, such as TWIC Serial
Number for the TWIC program, or
Commercial Driver’s License (CDL)
Number and CDL issuing state(s) for the
HME program; and
e. Expiration date of the credential
endorsed or issued by the DHS
screening program.
This alternative is optional—high-risk
chemical facilities may either submit
the information listed in category (1) for
such individuals, or may submit the
information listed in category (3) for
such individuals.
(4) When high-risk chemical facilities
choose to submit the information listed
in category (3), above, they may also
(optionally) submit the following
information on facility personnel and
unescorted visitors who have or are
seeking access to restricted areas or
critical assets:
a. Aliases;
b. Place of Birth;
c. Gender;
d. Citizenship; and
e. Redress Number.
(5) DHS could collect additional
identifying information from a high-risk
chemical facility, as necessary to
confirm or clear a potential match to a
TSDB record. Information collected by
high-risk chemical facilities and
submitted to DHS for this purpose could
include any information listed in
categories (1) through (4), passport
information, visa information, driver’s
license information, or other available
identifying particulars, used to compare
the identity of an individual being
screened with information listed in the
TSDB;
(6) In the event that a confirmed
match is identified as part of the CFATS
Personnel Surety Program, in addition
to other records listed under the
categories of records section of this
SORN, DHS will obtain references to
and/or information from other
government law enforcement and
E:\FR\FM\14JNN1.SGM
14JNN1
Federal Register / Vol. 76, No. 114 / Tuesday, June 14, 2011 / Notices
intelligence databases, or other relevant
databases that may contain terrorism
information;
(7) Information necessary to assist in
tracking submissions and transmission
of records, including electronic
verification that DHS has received a
particular record; and
(8) Information provided by
individuals covered by this system in
support of any redress request,
including DHS Redress Numbers and/or
any of the above categories of records.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
DHS Appropriations Act of 2007,
Section 550, Public Law 109–295, 120
Stat. 1355 (October 4, 2006), as
amended; and the Chemical Facility
Anti-Terrorism Standards, 6 CFR part 27
(published April 9, 2007), as amended.
PURPOSE(S):
Information is collected to identify
persons listed in the TSDB, who have or
are seeking access to restricted areas or
critical assets at high-risk chemical
facilities.
srobinson on DSK4SPTVN1PROD with NOTICES
ROUTINE USES OF RECORDS MAINTAINED IN THE
SYSTEM, INCLUDING CATEGORIES OF USERS AND
THE PURPOSES OF SUCH USES:
In addition to those disclosures
generally permitted under 5 U.S.C.
552a(b), all or a portion of the records
or information contained in this system
may be disclosed outside DHS as a
routine use pursuant to 5 U.S.C.
552a(b)(3) as follows:
A. To the Department of Justice
(including United States Attorney
Offices) or other Federal agency
conducting litigation or in proceedings
before any court, adjudicative or
administrative body, when it is
necessary to the litigation and one of the
following is a party to the litigation or
has an interest in such litigation:
1. DHS or any component thereof;
2. Any employee of DHS in his/her
official capacity;
3. Any employee of DHS in his/her
individual capacity where the
Department of Justice or DHS has agreed
to represent the employee; or
4. The United States, or any agency
thereof, is a party to the litigation or has
an interest in such litigation, and DHS
determines that the records are both
relevant and necessary to the litigation
and the use of such records is
compatible with the purpose for which
DHS collected the records.
B. To a congressional office from the
record of an individual in response to
an inquiry from that congressional office
made at the request of the individual to
whom the record pertains.
C. To the National Archives and
Records Administration or other Federal
VerDate Mar<15>2010
16:27 Jun 13, 2011
Jkt 223001
government agencies pursuant to
records management inspections being
conducted under the authority of 44
U.S.C. 2904 and 2906.
D. To an agency, organization, or
individual for the purpose of performing
audit or oversight operations as
authorized by law, but only such
information as is necessary and relevant
to such audit or oversight function.
E. To appropriate agencies, entities,
and persons when:
1. DHS suspects or has confirmed that
the security or confidentiality of
information in the system of records has
been compromised;
2. The Department has determined
that as a result of the suspected or
confirmed compromise there is a risk of
harm to economic or property interests,
identity theft or fraud, or harm to the
security or integrity of this system or
other systems or programs (whether
maintained by DHS or another agency or
entity) or harm to the individual that
relies upon the compromised
information; and
3. The disclosure made to such
agencies, entities, and persons is
reasonably necessary to assist in
connection with the Department’s
efforts to respond to the suspected or
confirmed compromise and prevent,
minimize, or remedy such harm.
F. To contractors and their agents,
grantees, experts, consultants, and
others performing or working on a
contract, service, grant, cooperative
agreement, or other assignment for DHS,
when necessary to accomplish an
agency function related to this system of
records. Individuals provided
information under this routine use are
subject to the same Privacy Act
requirements and limitations on
disclosure as are applicable to DHS
officers and employees.
G. To an appropriate Federal, state,
Tribal, territorial, local, international, or
foreign law enforcement agency or other
appropriate authority charged with
investigating or prosecuting a violation
or enforcing or implementing a law,
rule, regulation, or order, where a
record, either on its face or in
conjunction with other information,
indicates a violation or potential
violation of law, which includes
criminal, civil, or regulatory violations
and such disclosure is proper and
consistent with the official duties of the
person making the disclosure.
H. To Federal, state, local, Tribal,
territorial, foreign, multinational, or
private sector entities as appropriate to
assist in coordination of terrorist threat
awareness, assessment, analysis or
response.
PO 00000
Frm 00097
Fmt 4703
Sfmt 4703
34735
I. To an appropriate Federal, state,
Tribal, local, international, or foreign
agency or other appropriate authority
regarding individuals who pose, or are
suspected of posing a risk to national
security.
J. To an appropriate Federal, state,
Tribal, local, international, foreign
agency, other appropriate governmental
entities or authority to:
1. Determine whether an individual is
a positive identity match to an identity
in the TSDB;
2. Facilitate operational, law
enforcement, or intelligence responses,
if appropriate, when vetted individuals’
identities match identities in the TSDB;
3. Provide information and analysis
about terrorist encounters and known or
suspected terrorist associates to
appropriate domestic and foreign
government agencies and officials for
counterterrorism purposes; or
4. Perform technical implementation
functions necessary for the CFATS
Personnel Surety Program.
DISCLOSURE TO CONSUMER REPORTING
AGENCIES:
None.
POLICIES AND PRACTICES FOR STORING,
RETRIEVING, ACCESSING, RETAINING, AND
DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
Records may be maintained at secured
government facilities, Federal contractor
locations, or locations of other parties
that perform functions related to the
CFATS Personnel Surety Program.
Records are stored on magnetic disc,
tape, digital media, and CD–ROM, and
may also be retained in hard copy
format in secure file folders or safes.
RETRIEVABILITY:
Records are retrievable by searching
any of the categories of records listed
above. Records may also be retrievable
by relevant chemical facility name,
chemical facility location, chemical
facility contact information, and by
other facility-specific data points.
SAFEGUARDS:
Records in this system are
safeguarded in accordance with
applicable rules and policies, including
all applicable DHS automated systems
security and access policies. Strict
controls have been imposed to minimize
the risk of compromising the
information that is being stored. Access
to the computer systems containing the
records in this system is limited to those
individuals who have a need to know
the information for the performance of
their official duties and who have
appropriate clearances or permissions.
E:\FR\FM\14JNN1.SGM
14JNN1
34736
Federal Register / Vol. 76, No. 114 / Tuesday, June 14, 2011 / Notices
srobinson on DSK4SPTVN1PROD with NOTICES
RETENTION AND DISPOSAL:
A proposed schedule for the retention
and disposal of records collected under
the DHS/NPPD—002 Chemical Facility
Anti-Terrorism Standards Personnel
Surety Program System of Records is
being developed by the DHS and NPPD
Offices of Records Management for
approval by the National Archives and
Records Administration (NARA).
The length of time DHS/NPPD will
retain information on individuals will
be dependent on individual TSDB
vetting results. Specifically, individuals’
information will be retained as
described below, based on the
individuals’ placements into three
categories:
(1) Information pertaining to an
individual who is not a potential or
confirmed match to a TSDB record will
be retained for one year after a high-risk
chemical facility has notified NPPD that
the individual no longer has or is
seeking access to the restricted areas or
critical assets of the facility;
(2) Information pertaining to an
individual who may originally have
appeared to be a match a TSDB record,
but who was subsequently determined
not to be a match, will be retained for
seven years after completion of TSDB
matching, or one year after the high-risk
chemical facility that submitted that
individual’s information has notified
DHS/NPPD that the individual no
longer has or is seeking access to the
restricted areas or critical assets of the
facility, whichever is later; and
(3) Information pertaining to an
individual who is a positive match to a
TSDB record will be retained for ninetynine years after completion of matching
activity, or seven years after DHS/NPPD
learns that the individual is deceased,
whichever is earlier.
DHS/TSA/TTAC will maintain
records within its possession in
accordance with the DHS/TSA–002—
Transportation Security Threat
Assessment System of Records, 75 FR
28046 (May 19, 2010). DHS/CBP will
maintain records in its possession in
accordance with the DHS/CBP–002—
Global Enrollment System of Records,
71 FR 20708 (April 21, 2006).
DHS/NPPD will also retain records to
conduct inspections or audits under 6
CFR 27.245 and 6 CFR 27.250 to ensure
that high-risk chemical facilities are in
compliance with CFATS. These records
could include the names of individuals
with access to high-risk chemical
facilities’ restricted areas and critical
assets, the periods of time during which
high-risk chemical facilities indicate
that such individuals have/had access,
and any other information listed
elsewhere in this notice, as appropriate.
VerDate Mar<15>2010
16:27 Jun 13, 2011
Jkt 223001
The retention periods for these
records provide reasonable amounts of
time for law enforcement, intelligence,
or redress matters involving individuals
who have or are seeking access to
restricted areas or critical assets at highrisk chemical facilities.
RECORD ACCESS PROCEDURES:
SYSTEM MANAGER AND ADDRESS:
CFATS Personnel Surety Program
Manager, 250 Murray Lane, SW., Mail
Stop 0610, Washington, DC 20528.
The Secretary of Homeland Security
is proposing to exempt this system from
the notification, access, and amendment
procedures of the Privacy Act. DHS/
NPPD, however, will consider
individual requests to determine
whether or not information may be
released. Individuals seeking
notification of and access to any record
contained in this system of records, or
seeking to contest its content, may
submit a request in writing to the DHS/
NPPD Freedom of Information Act
(FOIA) Officer, whose contact
information can be found at https://
www.dhs.gov/foia under ‘‘contacts.’’
When seeking records about yourself
from this system of records or any other
Department system of records your
request must conform with the Privacy
Act regulations set forth in 6 CFR part
5. You must first verify your identity,
meaning that you must provide your full
name, current address, and date and
place of birth. You must sign your
request, and your signature must either
be notarized or submitted under 28
U.S.C. 1746, a law that permits
statements to be made under penalty of
perjury as a substitute for notarization.
While no specific form is required, you
may obtain forms for this purpose from
the Chief Privacy Officer and Chief
Freedom of Information Act Officer,
https://www.dhs.gov or 1–866–431–0486.
In addition you should provide the
following:
• An explanation of why you believe
the Department would have information
about you;
• Identify which component(s) of the
Department you believe may have the
information about you;
• Specify when you believe records
containing information about you would
have been created;
• Provide any other information that
will help the FOIA staff determine
which DHS component agency may
have responsive records; and
• If your request is seeking records
pertaining to another living individual,
you must include a statement from that
individual certifying his/her agreement
for you to access his/her records.
Frm 00098
Fmt 4703
Sfmt 9990
See ‘‘Notification procedure’’ above.
CONTESTING RECORD PROCEDURES:
See ‘‘Notification procedure’’ above.
NOTIFICATION PROCEDURE:
PO 00000
Without this bulleted information the
component(s) may not be able to
conduct an effective search, and your
request may be denied due to lack of
specificity or lack of compliance with
applicable regulations.
RECORD SOURCE CATEGORIES:
Information is primarily obtained
from high-risk chemical facilities and
their designees. High-risk chemical
facilities shall provide notice to each
affected individual prior to submission
of the affected individual’s information
to DHS/NPPD. This will include notice
that additional information may be
requested after the initial submission.
Information may also be obtained from
other DHS programs when DHS verifies
enrollment of an affected individual in
another vetting or credentialing
program. Information may also be
obtained from the DOJ/FBI—019
Terrorist Screening Records System, 72
FR 47073 (August 22, 2007), or from
other FBI sources.
EXEMPTIONS CLAIMED FOR THE SYSTEM:
Concurrently with publication of this
system of records notice, the Secretary
of Homeland Security is publishing a
notice of proposed rulemaking
proposing to exempt this system from
the following provisions of the Privacy
Act, subject to the limitations set forth
therein: 5 U.S.C. 552a(c)(3); (d); (e)(1),
(e)(4)(G), (e)(4)(H), (e)(4)(I); and (f).
These exemptions are made pursuant to
5 U.S.C. 552a(k)(1) and (k)(2).
Further, DHS derivatively claims
some exemptions for this system of
records because it may contain records
or information recompiled from or
created from information contained in
the TSDB. For more information on the
FBI’s Terrorist Screening Records
System, see DOJ/FBI—019 Terrorist
Screening Records System, 72 FR 47073
(August 22, 2007).
DHS does not claim any exemptions
for the information high-risk chemical
facilities (or their designees) submit to
DHS as part of this system of records.
Dated: June 6, 2011.
Mary Ellen Callahan,
Chief Privacy Officer, Department of
Homeland Security.
[FR Doc. 2011–14383 Filed 6–13–11; 8:45 am]
BILLING CODE 9110–9P–P
E:\FR\FM\14JNN1.SGM
14JNN1
Agencies
[Federal Register Volume 76, Number 114 (Tuesday, June 14, 2011)]
[Notices]
[Pages 34732-34736]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2011-14383]
-----------------------------------------------------------------------
DEPARTMENT OF HOMELAND SECURITY
Office of the Secretary
[Docket No. DHS-2011-0032]
Privacy Act of 1974; Department of Homeland Security/National
Protection and Programs Directorate--002 Chemical Facility Anti-
Terrorism Standards Personnel Surety Program System of Records
AGENCY: Privacy Office, DHS.
ACTION: Notice of Privacy Act system of records.
-----------------------------------------------------------------------
SUMMARY: In accordance with the Privacy Act of 1974, the Department of
Homeland Security proposes to establish a new system of records notice
titled, ``Department of Homeland Security/National Protection and
Programs Directorate--002 Chemical Facility Anti-Terrorism Standards
Personnel Surety Program System of Records.'' This new system of
records collects information on individuals,--facility personnel and
unescorted visitors--who have or are seeking access to restricted areas
and critical assets at high risk chemical facilities and compares this
information to the Terrorist Screening Database, the terrorist
watchlist maintained by the Federal Bureau of Investigation's Terrorist
Screening Center. The Department of Homeland Security is issuing a
Notice of Proposed Rulemaking concurrently with this system of records
elsewhere in the Federal Register to exempt portions of the system of
records from one or more provisions of the Privacy Act because of
criminal, civil, and administrative enforcement requirements. This
newly established system of records will be included in the Department
of Homeland Security's inventory of record systems.
DATES: Submit comments on or before July 14, 2011. This system will be
effective July 14, 2011.
ADDRESSES: You may submit comments, identified by docket number [DHS-
2011-0032] by one of the following methods:
Federal e-Rulemaking Portal: https://www.regulations.gov.
Follow the instructions for submitting comments.
[[Page 34733]]
Fax: 703-483-2999.
Mail: Mary Ellen Callahan, Chief Privacy Officer, Privacy
Office, Department of Homeland Security, Washington, DC 20528.
Instructions: All submissions received must include the
agency name and docket number for this rulemaking. All comments
received will be posted without change to https://www.regulations.gov,
including any personal information provided.
Docket: For access to the docket to read background
documents or comments received go to https://www.regulations.gov.
FOR FURTHER INFORMATION CONTACT: For general questions please contact:
Emily Andrew (703-235-2182), Privacy Officer, National Protection and
Programs Directorate, Department of Homeland Security, Washington, DC
20528. For privacy issues please contact: Mary Ellen Callahan (703-235-
0780), Chief Privacy Officer, Privacy Office, Department of Homeland
Security, Washington, DC 20528.
SUPPLEMENTARY INFORMATION:
I. Background
In accordance with the Privacy Act of 1974, 5 U.S.C. 552a, the
Department of Homeland Security (DHS)/National Protection and Programs
Directorate (NPPD) proposes to establish a DHS system of records
titled, ``DHS/NPPD--002 Chemical Facility Anti-Terrorism Standards
Personnel Surety Program System of Records.''
On October 4, 2006, the President signed the DHS Appropriations Act
of 2007 (the Act), Public Law 109-295. Section 550 of the Act (Section
550) provides DHS with the authority to regulate the security of high-
risk chemical facilities. DHS has promulgated regulations implementing
Section 550, the Chemical Facility Anti-Terrorism Standards (CFATS), 6
CFR part 27.
Section 550 requires that DHS establish Risk Based Performance
Standards (RBPS) as part of CFATS. RBPS-12 (6 CFR 27.230(a)(12)(iv))
requires that regulated chemical facilities implement ``measures
designed to identify people with terrorist ties.'' The ability to
identify individuals with terrorist ties is an inherently governmental
function and requires the use of information held in government-
maintained databases, which are unavailable to high-risk chemical
facilities. Therefore, DHS is implementing the CFATS Personnel Surety
Program, which will allow chemical facilities to comply with RBPS-12 by
implementing ``measures designed to identify people with terrorist
ties.''
The CFATS Personnel Surety Program will work with the DHS
Transportation Security Administration (TSA) to identify individuals
who have terrorist ties by vetting information submitted by each high-
risk chemical facility against the Terrorist Screening Database (TSDB).
The TSDB is the Federal government's consolidated and integrated
terrorist watchlist of known and suspected terrorists, maintained by
the Department of Justice (DOJ) Federal Bureau of Investigation's (FBI)
Terrorist Screening Center (TSC). For more information on the TSDB, see
DOJ/FBI--019 Terrorist Screening Records System, 72 FR 47073 (August
22, 2007).
High-risk chemical facilities or their designees will submit the
information of: (1) Facility personnel who have or are seeking access,
either unescorted or otherwise, to restricted areas or critical assets;
and (2) unescorted visitors who have or are seeking access to
restricted areas or critical assets. These persons, about whom high-
risk chemical facilities and facilities' designees will submit
information to DHS, are referred to in this notice as ``affected
individuals.'' Individual high-risk facilities may classify particular
contractors or categories of contractors either as ``facility
personnel'' or as ``visitors.'' This determination should be a
facility-specific determination, and should be based on facility
security, operational requirements, and business practices.
Information will be submitted to DHS/NPPD through the Chemical
Security Assessment Tool (CSAT), the online data collection portal for
CFATS. The high-risk chemical facility or its designees will submit the
information of affected individuals to DHS through CSAT. The submitters
of this information (``Submitters'') for each high-risk chemical
facility will also affirm, to the best of their knowledge, that the
information is: (1) True, correct, and complete; and (2) collected and
submitted in compliance with the facility's Site Security Plan (SSP) or
Alternative Security Program (ASP), as reviewed and authorized and/or
approved in accordance with 6 CFR 27.245. The Submitter(s) of each
high-risk chemical facility will also affirm that, in accordance with
their Site Security Plans, notice required by the Privacy Act of 1974,
5 U.S.C. Sec. 552a, has been given to affected individuals before
their information is submitted to DHS.
DHS will send a verification of receipt to the Submitter(s) of each
high-risk chemical facility when a high-risk chemical facility: (1)
Submits information about an affected individual for the first time;
(2) submits additional, updated, or corrected information about an
affected individual; and/or (3) notifies DHS that an affected
individual no longer has or is seeking access to that facility's
restricted areas or critical assets.
Upon receipt of each affected individual's information in CSAT,
DHS/NPPD will send a copy of the information to DHS/TSA. Within DHS/
TSA, the Office of Transportation Threat Assessment and Credentialing
(TTAC) conducts vetting against the TSDB for several DHS programs. DHS/
TSA/TTAC will compare the information of affected individuals collected
by DHS (via CSAT) to information in the TSDB. DHS/TSA/TTAC will forward
potential matches to the DOJ/FBI/TSC, which will make a final
determination of whether an individual's information is identified as a
match to a record in the TSDB.
In certain instances, DHS/NPPD may contact a high-risk chemical
facility to request additional information (e.g., visa information)
pertaining to particular individuals in order to clarify suspected data
errors or resolve potential matches (e.g., in situations where an
affected individual has a common name). Such requests will not imply,
and should not be construed to indicate that an individual's
information has been confirmed as a match to a TSDB record.
DHS/NPPD may also conduct data accuracy reviews and audits as part
of the CFATS Personnel Surety Program. Such reviews may be conducted on
random samples of affected individuals. To assist with this activity,
DHS/NPPD may request information pertaining to affected individuals
that was previously provided to DHS/NPPD by high-risk chemical
facilities, in order to confirm the accuracy of that information.
Consistent with the Department's information sharing mission,
information stored in the DHS/NPPD--002 Chemical Facility Anti-
Terrorism Standards Personnel Surety Program System of Records may be
shared with other DHS components, as well as appropriate Federal,
state, local, Tribal, foreign, or international government agencies.
This sharing will only take place after DHS determines that the
receiving component or agency has a need to know the information to
carry out national security, law enforcement, immigration,
intelligence, or other functions consistent with the routine uses set
forth in this system of records notice.
Additionally, DHS is issuing a Notice of Proposed Rulemaking (NPRM)
concurrently with this system of records, to be published elsewhere in
[[Page 34734]]
the Federal Register, to exempt portions of the system of records from
provisions of the Privacy Act because of criminal, civil, and
administrative enforcement requirements.
This newly established system of records will be included in the
Department's inventory of record systems.
II. Privacy Act
The Privacy Act embodies fair information principles in a statutory
framework governing the means by which the United States government
collects, maintains, uses, and disseminates individuals' records. The
Privacy Act applies to information that is maintained in a ``system of
records.'' A ``system of records'' is a group of any records under the
control of an agency for which information is retrieved by the name of
an individual or by some identifying number, symbol, or other
identifying particular assigned to the individual. In the Privacy Act,
individuals are defined to encompass United States citizens and lawful
permanent residents. As a matter of policy, DHS extends administrative
Privacy Act protections to all individuals where systems of records
maintain information on U.S. citizens, lawful permanent residents, and
visitors. Individuals may request access to their own records that are
maintained in a system of records in the possession or under the
control of DHS by complying with DHS Privacy Act regulations, 6 CFR
Part 5.
The Privacy Act requires each agency to publish in the Federal
Register a description denoting the type and character of each system
of records that the agency maintains, and the routine uses that are
contained in each system in order to make agency record keeping
practices transparent, to notify individuals regarding the uses to
which their records are put, and to assist individuals to more easily
find such records within the agency. Below is the description of the
DHS/NPPD--002 Chemical Facility Anti-Terrorism Standards Personnel
Surety Program System of Records.
In accordance with 5 U.S.C. 552a(r), DHS has provided a report of
this system of records to the Office of Management and Budget and to
Congress.
System of Records
DHS/NPPD--002
System name:
DHS/NPPD--002 Chemical Facility Anti-Terrorism Standards Personnel
Surety Program System of Records.
Security classification:
Unclassified, sensitive, law enforcement sensitive, for official
use only, and classified.
System location:
Records are maintained at DHS and Component headquarters in
Washington, DC, and at field offices.
Categories of individuals covered by the system:
(1) High-risk chemical facility personnel and unescorted visitors
who have or are seeking access to restricted areas or critical assets
at high-risk chemical facilities (see 6 CFR 27.230(a)(12));
(2) High-risk chemical facility personnel or designees who contact
DHS/NPPD or a Federal law enforcement entity with follow-up questions
regarding submission of an individual's information to DHS/NPPD;
(3) Individuals listed in the TSDB against whom potential or
confirmed matches have been made; and
(4) Individuals who have been or seek to be distinguished from
individuals in the TSDB through redress or other means as a result of
the Personnel Surety Program.
Categories of records in the system:
(1) High-risk chemical facilities are required to submit the
following information on all facility personnel and unescorted visitors
who have or are seeking access to restricted areas or critical assets:
a. U.S. Citizens and Lawful Permanent Residents
i. Full name;
ii. Date of birth; and
iii. Citizenship or Gender.
b. Non-U.S. persons
i. Full name;
ii. Date of birth;
iii. Citizenship; and
iv. Passport information and/or alien registration number.
(2) To reduce the likelihood of false positives in matching against
the TSDB, high-risk chemical facilities may also (optionally) submit
the following information on facility personnel and unescorted visitors
who have or are seeking access to restricted areas or critical assets:
a. Aliases;
b. Gender (for Non-U.S. persons);
c. Place of birth; and
d. Redress Number.
(3) High-risk chemical facilities may submit different information
on individuals who maintain DHS screening program credentials or
endorsements that require TSDB checks equivalent to the checks to be
performed as part of the CFATS Personnel Surety Program. Instead of
submitting the information listed in category (1), above, high risk
chemical facilities may submit the following information for such
individuals:
a. Full name;
b. Date of birth;
c. Name of the DHS program which conducts equivalent vetting
against the TSDB, such as the Transportation Worker Identification
Credential (TWIC) program or the Hazardous Materials Endorsement (HME)
program;
d. Unique number, or other program specific verifying information
associated with a DHS screening program, necessary to verify an
individual's enrollment, such as TWIC Serial Number for the TWIC
program, or Commercial Driver's License (CDL) Number and CDL issuing
state(s) for the HME program; and
e. Expiration date of the credential endorsed or issued by the DHS
screening program.
This alternative is optional--high-risk chemical facilities may
either submit the information listed in category (1) for such
individuals, or may submit the information listed in category (3) for
such individuals.
(4) When high-risk chemical facilities choose to submit the
information listed in category (3), above, they may also (optionally)
submit the following information on facility personnel and unescorted
visitors who have or are seeking access to restricted areas or critical
assets:
a. Aliases;
b. Place of Birth;
c. Gender;
d. Citizenship; and
e. Redress Number.
(5) DHS could collect additional identifying information from a
high-risk chemical facility, as necessary to confirm or clear a
potential match to a TSDB record. Information collected by high-risk
chemical facilities and submitted to DHS for this purpose could include
any information listed in categories (1) through (4), passport
information, visa information, driver's license information, or other
available identifying particulars, used to compare the identity of an
individual being screened with information listed in the TSDB;
(6) In the event that a confirmed match is identified as part of
the CFATS Personnel Surety Program, in addition to other records listed
under the categories of records section of this SORN, DHS will obtain
references to and/or information from other government law enforcement
and
[[Page 34735]]
intelligence databases, or other relevant databases that may contain
terrorism information;
(7) Information necessary to assist in tracking submissions and
transmission of records, including electronic verification that DHS has
received a particular record; and
(8) Information provided by individuals covered by this system in
support of any redress request, including DHS Redress Numbers and/or
any of the above categories of records.
Authority for maintenance of the system:
DHS Appropriations Act of 2007, Section 550, Public Law 109-295,
120 Stat. 1355 (October 4, 2006), as amended; and the Chemical Facility
Anti-Terrorism Standards, 6 CFR part 27 (published April 9, 2007), as
amended.
Purpose(s):
Information is collected to identify persons listed in the TSDB,
who have or are seeking access to restricted areas or critical assets
at high-risk chemical facilities.
Routine uses of records maintained in the system, including categories
of users and the purposes of such uses:
In addition to those disclosures generally permitted under 5 U.S.C.
552a(b), all or a portion of the records or information contained in
this system may be disclosed outside DHS as a routine use pursuant to 5
U.S.C. 552a(b)(3) as follows:
A. To the Department of Justice (including United States Attorney
Offices) or other Federal agency conducting litigation or in
proceedings before any court, adjudicative or administrative body, when
it is necessary to the litigation and one of the following is a party
to the litigation or has an interest in such litigation:
1. DHS or any component thereof;
2. Any employee of DHS in his/her official capacity;
3. Any employee of DHS in his/her individual capacity where the
Department of Justice or DHS has agreed to represent the employee; or
4. The United States, or any agency thereof, is a party to the
litigation or has an interest in such litigation, and DHS determines
that the records are both relevant and necessary to the litigation and
the use of such records is compatible with the purpose for which DHS
collected the records.
B. To a congressional office from the record of an individual in
response to an inquiry from that congressional office made at the
request of the individual to whom the record pertains.
C. To the National Archives and Records Administration or other
Federal government agencies pursuant to records management inspections
being conducted under the authority of 44 U.S.C. 2904 and 2906.
D. To an agency, organization, or individual for the purpose of
performing audit or oversight operations as authorized by law, but only
such information as is necessary and relevant to such audit or
oversight function.
E. To appropriate agencies, entities, and persons when:
1. DHS suspects or has confirmed that the security or
confidentiality of information in the system of records has been
compromised;
2. The Department has determined that as a result of the suspected
or confirmed compromise there is a risk of harm to economic or property
interests, identity theft or fraud, or harm to the security or
integrity of this system or other systems or programs (whether
maintained by DHS or another agency or entity) or harm to the
individual that relies upon the compromised information; and
3. The disclosure made to such agencies, entities, and persons is
reasonably necessary to assist in connection with the Department's
efforts to respond to the suspected or confirmed compromise and
prevent, minimize, or remedy such harm.
F. To contractors and their agents, grantees, experts, consultants,
and others performing or working on a contract, service, grant,
cooperative agreement, or other assignment for DHS, when necessary to
accomplish an agency function related to this system of records.
Individuals provided information under this routine use are subject to
the same Privacy Act requirements and limitations on disclosure as are
applicable to DHS officers and employees.
G. To an appropriate Federal, state, Tribal, territorial, local,
international, or foreign law enforcement agency or other appropriate
authority charged with investigating or prosecuting a violation or
enforcing or implementing a law, rule, regulation, or order, where a
record, either on its face or in conjunction with other information,
indicates a violation or potential violation of law, which includes
criminal, civil, or regulatory violations and such disclosure is proper
and consistent with the official duties of the person making the
disclosure.
H. To Federal, state, local, Tribal, territorial, foreign,
multinational, or private sector entities as appropriate to assist in
coordination of terrorist threat awareness, assessment, analysis or
response.
I. To an appropriate Federal, state, Tribal, local, international,
or foreign agency or other appropriate authority regarding individuals
who pose, or are suspected of posing a risk to national security.
J. To an appropriate Federal, state, Tribal, local, international,
foreign agency, other appropriate governmental entities or authority
to:
1. Determine whether an individual is a positive identity match to
an identity in the TSDB;
2. Facilitate operational, law enforcement, or intelligence
responses, if appropriate, when vetted individuals' identities match
identities in the TSDB;
3. Provide information and analysis about terrorist encounters and
known or suspected terrorist associates to appropriate domestic and
foreign government agencies and officials for counterterrorism
purposes; or
4. Perform technical implementation functions necessary for the
CFATS Personnel Surety Program.
Disclosure to consumer reporting agencies:
None.
Policies and practices for storing, retrieving, accessing, retaining,
and disposing of records in the system:
Storage:
Records may be maintained at secured government facilities, Federal
contractor locations, or locations of other parties that perform
functions related to the CFATS Personnel Surety Program. Records are
stored on magnetic disc, tape, digital media, and CD-ROM, and may also
be retained in hard copy format in secure file folders or safes.
Retrievability:
Records are retrievable by searching any of the categories of
records listed above. Records may also be retrievable by relevant
chemical facility name, chemical facility location, chemical facility
contact information, and by other facility-specific data points.
Safeguards:
Records in this system are safeguarded in accordance with
applicable rules and policies, including all applicable DHS automated
systems security and access policies. Strict controls have been imposed
to minimize the risk of compromising the information that is being
stored. Access to the computer systems containing the records in this
system is limited to those individuals who have a need to know the
information for the performance of their official duties and who have
appropriate clearances or permissions.
[[Page 34736]]
Retention and disposal:
A proposed schedule for the retention and disposal of records
collected under the DHS/NPPD--002 Chemical Facility Anti-Terrorism
Standards Personnel Surety Program System of Records is being developed
by the DHS and NPPD Offices of Records Management for approval by the
National Archives and Records Administration (NARA).
The length of time DHS/NPPD will retain information on individuals
will be dependent on individual TSDB vetting results. Specifically,
individuals' information will be retained as described below, based on
the individuals' placements into three categories:
(1) Information pertaining to an individual who is not a potential
or confirmed match to a TSDB record will be retained for one year after
a high-risk chemical facility has notified NPPD that the individual no
longer has or is seeking access to the restricted areas or critical
assets of the facility;
(2) Information pertaining to an individual who may originally have
appeared to be a match a TSDB record, but who was subsequently
determined not to be a match, will be retained for seven years after
completion of TSDB matching, or one year after the high-risk chemical
facility that submitted that individual's information has notified DHS/
NPPD that the individual no longer has or is seeking access to the
restricted areas or critical assets of the facility, whichever is
later; and
(3) Information pertaining to an individual who is a positive match
to a TSDB record will be retained for ninety-nine years after
completion of matching activity, or seven years after DHS/NPPD learns
that the individual is deceased, whichever is earlier.
DHS/TSA/TTAC will maintain records within its possession in
accordance with the DHS/TSA-002--Transportation Security Threat
Assessment System of Records, 75 FR 28046 (May 19, 2010). DHS/CBP will
maintain records in its possession in accordance with the DHS/CBP-002--
Global Enrollment System of Records, 71 FR 20708 (April 21, 2006).
DHS/NPPD will also retain records to conduct inspections or audits
under 6 CFR 27.245 and 6 CFR 27.250 to ensure that high-risk chemical
facilities are in compliance with CFATS. These records could include
the names of individuals with access to high-risk chemical facilities'
restricted areas and critical assets, the periods of time during which
high-risk chemical facilities indicate that such individuals have/had
access, and any other information listed elsewhere in this notice, as
appropriate.
The retention periods for these records provide reasonable amounts
of time for law enforcement, intelligence, or redress matters involving
individuals who have or are seeking access to restricted areas or
critical assets at high-risk chemical facilities.
System manager and address:
CFATS Personnel Surety Program Manager, 250 Murray Lane, SW., Mail
Stop 0610, Washington, DC 20528.
Notification procedure:
The Secretary of Homeland Security is proposing to exempt this
system from the notification, access, and amendment procedures of the
Privacy Act. DHS/NPPD, however, will consider individual requests to
determine whether or not information may be released. Individuals
seeking notification of and access to any record contained in this
system of records, or seeking to contest its content, may submit a
request in writing to the DHS/NPPD Freedom of Information Act (FOIA)
Officer, whose contact information can be found at https://www.dhs.gov/foia under ``contacts.''
When seeking records about yourself from this system of records or
any other Department system of records your request must conform with
the Privacy Act regulations set forth in 6 CFR part 5. You must first
verify your identity, meaning that you must provide your full name,
current address, and date and place of birth. You must sign your
request, and your signature must either be notarized or submitted under
28 U.S.C. 1746, a law that permits statements to be made under penalty
of perjury as a substitute for notarization. While no specific form is
required, you may obtain forms for this purpose from the Chief Privacy
Officer and Chief Freedom of Information Act Officer, https://www.dhs.gov or 1-866-431-0486. In addition you should provide the
following:
An explanation of why you believe the Department would
have information about you;
Identify which component(s) of the Department you believe
may have the information about you;
Specify when you believe records containing information
about you would have been created;
Provide any other information that will help the FOIA
staff determine which DHS component agency may have responsive records;
and
If your request is seeking records pertaining to another
living individual, you must include a statement from that individual
certifying his/her agreement for you to access his/her records.
Without this bulleted information the component(s) may not be able
to conduct an effective search, and your request may be denied due to
lack of specificity or lack of compliance with applicable regulations.
Record access procedures:
See ``Notification procedure'' above.
Contesting record procedures:
See ``Notification procedure'' above.
Record source categories:
Information is primarily obtained from high-risk chemical
facilities and their designees. High-risk chemical facilities shall
provide notice to each affected individual prior to submission of the
affected individual's information to DHS/NPPD. This will include notice
that additional information may be requested after the initial
submission. Information may also be obtained from other DHS programs
when DHS verifies enrollment of an affected individual in another
vetting or credentialing program. Information may also be obtained from
the DOJ/FBI--019 Terrorist Screening Records System, 72 FR 47073
(August 22, 2007), or from other FBI sources.
Exemptions claimed for the system:
Concurrently with publication of this system of records notice, the
Secretary of Homeland Security is publishing a notice of proposed
rulemaking proposing to exempt this system from the following
provisions of the Privacy Act, subject to the limitations set forth
therein: 5 U.S.C. 552a(c)(3); (d); (e)(1), (e)(4)(G), (e)(4)(H),
(e)(4)(I); and (f). These exemptions are made pursuant to 5 U.S.C.
552a(k)(1) and (k)(2).
Further, DHS derivatively claims some exemptions for this system of
records because it may contain records or information recompiled from
or created from information contained in the TSDB. For more information
on the FBI's Terrorist Screening Records System, see DOJ/FBI--019
Terrorist Screening Records System, 72 FR 47073 (August 22, 2007).
DHS does not claim any exemptions for the information high-risk
chemical facilities (or their designees) submit to DHS as part of this
system of records.
Dated: June 6, 2011.
Mary Ellen Callahan,
Chief Privacy Officer, Department of Homeland Security.
[FR Doc. 2011-14383 Filed 6-13-11; 8:45 am]
BILLING CODE 9110-9P-P