Privacy Act of 1974; Report of a New System of Records; FDA Records Related to Research Misconduct Proceedings, 52036-52041 [2012-20888]

Download as PDF 52036 Federal Register / Vol. 77, No. 167 / Tuesday, August 28, 2012 / Notices FOR FURTHER INFORMATION CONTACT: Beverly Friedman, Office of Regulatory Policy, Food and Drug Administration, 10903 New Hampshire Ave., Bldg. 51, Rm. 6222, Silver Spring, MD 20993– 0002, 301–796–3602. The Drug Price Competition and Patent Term Restoration Act of 1984 (Pub. L. 98–417) and the Generic Animal Drug and Patent Term Restoration Act (Pub. L. 100–670) generally provide that a patent may be extended for a period of up to 5 years so long as the patented item (human drug product, animal drug product, medical device, food additive, or color additive) was subject to regulatory review by FDA before the item was marketed. Under these acts, a product’s regulatory review period forms the basis for determining the amount of extension an applicant may receive. A regulatory review period consists of two periods of time: A testing phase and an approval phase. For human drug products, the testing phase begins when the exemption to permit the clinical investigations of the drug becomes effective and runs until the approval phase begins. The approval phase starts with the initial submission of an application to market the human drug product and continues until FDA grants permission to market the drug product. Although only a portion of a regulatory review period may count toward the actual amount of extension that the Director of Patents and Trademarks may award (for example, half the testing phase must be subtracted as well as any time that may have occurred before the patent was issued), FDA’s determination of the length of a regulatory review period for a human drug product will include all of the testing phase and approval phase as specified in 35 U.S.C. 156(g)(1)(B). FDA approved for marketing the human drug product TORISEL (temsirolimus). TORISEL is indicated for the treatment of advanced renal cell carcinoma. Subsequent to this approval, the Patent and Trademark Office received a patent term restoration application for TORISEL (U.S. Patent No. 5,362,718) from Wyeth, and the Patent and Trademark Office requested FDA’s assistance in determining this patent’s eligibility for patent term restoration and that FDA determine the product’s regulatory review period. In a letter dated August 7, 2012, FDA advised the Patent and Trademark Office that this human drug product had undergone a regulatory review period and that the approval of TORISEL represented the first permitted srobinson on DSK4SPTVN1PROD with NOTICES SUPPLEMENTARY INFORMATION: VerDate Mar<15>2010 16:39 Aug 27, 2012 Jkt 226001 commercial marketing or use of the product. FDA has determined that the applicable regulatory review period for TORISEL is 3,290 days. Of this time, 3,052 days occurred during the testing phase of the regulatory review period, while 238 days occurred during the approval phase. These periods of time were derived from the following dates: 1. The date an exemption under section 505(i) of the Federal Food, Drug, and Cosmetic Act (the FD&C Act) (21 U.S.C. 355(i)) became effective: May 29, 1998. FDA has verified the applicant’s claim that the date the investigational new drug application became effective was on May 29, 1998. 2. The date the application was initially submitted with respect to the human drug product under section 505(b) of the FD&C Act: October 5, 2006. FDA has verified the applicant’s claim that the new drug application (NDA) for TORISEL (NDA 22–088) was submitted on October 5, 2006. 3. The date the application was approved: May 30, 2007. FDA has verified the applicant’s claim that NDA 22–088 was approved on May 30, 2007. This determination of the regulatory review period establishes the maximum potential length of a patent extension. However, the U.S. Patent and Trademark Office applies several statutory limitations in its calculations of the actual period for patent extension. In its application for patent extension, this applicant seeks 1,764 days of patent term extension. Anyone with knowledge that any of the dates as published are incorrect may submit to the Division of Dockets Management (see ADDRESSES) either electronic or written comments and ask for a redetermination by October 29, 2012. Furthermore, any interested person may petition FDA for a determination regarding whether the applicant for extension acted with due diligence during the regulatory review period by February 25, 2013. To meet its burden, the petition must contain sufficient facts to merit an FDA investigation. (See H. Rept. 857, part 1, 98th Cong., 2d sess., pp. 41–42, 1984.) Petitions should be in the format specified in 21 CFR 10.30. Interested persons may submit to the Division of Dockets Management (see ADDRESSES) electronic or written comments and written petitions. It is only necessary to send one set of comments. It is no longer necessary to send three copies of mailed comments. However, if you submit a written petition, you must submit three copies of the petition. Identify comments with PO 00000 Frm 00072 Fmt 4703 Sfmt 4703 the docket number found in brackets in the heading of this document. Comments and petitions that have not been made publicly available on https:// www.regulations.gov may be viewed in the Division of Dockets Management between 9 a.m. and 4 p.m., Monday through Friday. Dated: August 12, 2012. Jane A. Axelrad, Associate Director for Policy, Center for Drug Evaluation and Research. [FR Doc. 2012–21239 Filed 8–27–12; 8:45 am] BILLING CODE 4160–01–P DEPARTMENT OF HEALTH AND HUMAN SERVICES Food and Drug Administration [Docket No. FDA–2011–N–0253] Privacy Act of 1974; Report of a New System of Records; FDA Records Related to Research Misconduct Proceedings AGENCY: Food and Drug Administration, HHS. Notice of a Privacy Act system of records. ACTION: In accordance with the requirements of the Privacy Act of 1974 (the Privacy Act) and the Food and Drug Administration’s (FDA’s) regulations for the protection of privacy, FDA is publishing notice of a new Privacy Act system of records entitled ‘‘FDA Records Related to Research Misconduct Proceedings, HHS/FDA/OC’’ System No. 09–10–0020. Under the Department of Health and Human Services’ (HHS’ or the Department’s) Public Health Service Policies on Research Misconduct, FDA has responsibilities for addressing research integrity and misconduct issues related to FDA supported activities. This system contains records related to the processing and reviewing of allegations of scientific research misconduct levied against an individual (the respondent) who is an agent of, or affiliated by contract or agreement with, FDA, or an FDA employee involved in intramural research. Research misconduct proceedings include allegation assessments, inquiries, investigations, oversight reviews by HHS’ Office of Research Integrity (ORI), hearings, and administrative appeals. DATES: Effective Date: The new system of records will be effective on August 28, 2012, with the exception of the routine uses and the requested exemptions. The routine uses will become effective on October 12, 2012. As detailed in the companion SUMMARY: E:\FR\FM\28AUN1.SGM 28AUN1 Federal Register / Vol. 77, No. 167 / Tuesday, August 28, 2012 / Notices rulemaking documents published elsewhere in this issue of the Federal Register, unless revised or withdrawn in response to comments, the requested exemptions will become effective 135 days after publication of the companion rulemaking documents. Submit either electronic or written comments regarding this document by October 12, 2012. You may submit comments, identified by Docket No. FDA–2011–N– 0253, by any of the following methods: ADDRESSES: Electronic Submissions Submit electronic comments in the following way: • Federal eRulemaking Portal: https:// www.regulations.gov. Follow the instructions for submitting comments. Written Submissions Submit written submissions in the following ways: • FAX: 301–827–6870. • Mail/Hand delivery/Courier (for paper or CD–ROM submissions): Division of Dockets Management (HFA– 305), Food and Drug Administration, 5630 Fishers Lane, Rm. 1061, Rockville, MD 20852. Instructions: All submissions received must include the Agency name and docket number for this document. All comments received may be posted without change to https:// www.regulations.gov, including any personal information provided. For additional information on submitting comments, see the ‘‘Comments’’ heading of the SUPPLEMENTARY INFORMATION section of this document. Docket: For access to the docket to read background documents or comments received, go to https:// www.regulations.gov and insert the docket number, found in brackets in the heading of this document, into the ‘‘Search’’ box and follow the prompts and/or go to the Division of Dockets Management, 5630 Fishers Lane, Rm. 1061, Rockville, MD 20852. FOR FURTHER INFORMATION CONTACT: Eileen Parish, Office of the Chief Scientist, Food and Drug Administration, 10903 New Hampshire Ave., Bldg. 32, Rm. 4214, Silver Spring, MD 20993, 301–796–8522, Eileen.Parish@fda.hhs.gov. srobinson on DSK4SPTVN1PROD with NOTICES SUPPLEMENTARY INFORMATION: I. New System of Records A. Description of the System of Records 1. Collection and Maintenance of Data in the System This system will collect and maintain personally identifiable information (PII) VerDate Mar<15>2010 16:39 Aug 27, 2012 Jkt 226001 and other data collected during the research misconduct process. The collected information will include, but is not limited to: Name, address, telephone number, education, professional experience, employment address, and training of an individual(s) who is (are) the subject of allegations. In addition, the system will contain records of complaints received, including the identity of the complainant, and how complaints were received and resolved. Also included will be information of witnesses and members of research misconduct committees. 2. Agency Procedures FDA’s procedures for disclosures of information maintained in this system of records are set forth in 21 CFR part 21. B. Routine Use Disclosures of Information in the System In accordance with the Privacy Act (5 U.S.C. 552a), FDA is providing notice of the ‘‘routine uses’’ of the records contained in the system of records. Disclosure of such records is permitted without the written consent of the individual to whom the record pertains, if the information is to be used for a purpose that is compatible with the purpose(s) for which the information was collected (5 U.S.C. 552a(b)(3)). Any such compatible use of data is known as a ‘‘routine use.’’ The routine uses in this system meet the compatibility requirement of the Privacy Act. The first two routine uses permit FDA to share information from this system with the individual or entity submitting an allegation; witnesses; pertinent Federal, State, and local agencies; and third parties that can provide information related to the allegation or proceeding. In the event of a suspected or confirmed breach of security or confidentiality of the system, the third routine use allows disclosures to Federal Agencies as necessary in order to respond to the breach. Likewise, where a record indicates a violation of law, FDA may share information with the responsible enforcement authority under the fifth routine use, and may provide information to the Department of Homeland Security (DHS) in circumstances where system records are captured in an intrusion detection program and made accessible to DHS as described in routine use 15. When health implications are evident based on information developed in the course of a proceeding, the fourth routine use permits disclosure to PO 00000 Frm 00073 Fmt 4703 Sfmt 4703 52037 research subjects, institutional review boards, and collaborating institutions. When FDA finds research misconduct has occurred, routine uses 6 through 10 describe disclosures FDA may make to FDA supported entities (routine use 6), to the respondent’s supervisor or employer (routine use 7 and 8), to publications as needed to retract research results (routine use 9), and licensing authorities (routine use 10). Similarly, routine use 12 permits disclosure of information to the parties and related institutions when FDA does not find research misconduct. Additional routine uses common to Federal records systems provide for disclosure to contractors and others who perform services for FDA related to this system (routine use 11), to the Department of Justice (DOJ) as related to the DOJ’s representation of FDA or Agency employees (routine use 13), to courts when the records are relevant in legal actions involving the U.S. Government, FDA, or Agency employees (routine use 14), and, to the National Archives and Records Administration and General Services Administration as needed in the course of records management inspections (routine use 16). As specified in section I.K of this document (see Routine Uses of Records Maintained in the System Including the Purposes of Such Uses and Categories of Users), many of these routine use disclosures will be restricted and subject to confidentiality or similar nondisclosure agreements in order to protect privacy. Because this is a law enforcement investigatory system, HHS and FDA intend to amend their Privacy Act regulations (45 CFR 5b.11 and 21 CFR 21.61, respectively) to exempt records in this system related to ongoing investigations or that would reveal a confidential source from the notification, access, and amendments provisions of the Privacy Act. These exemptions are necessary to maintain the integrity of research misconduct proceedings and allow FDA to obtain essential information. The proposed exemptions would ensure that the records related to ongoing investigations will not be disclosed inappropriately and that the identities of confidential sources will be protected. FDA and HHS are publishing companion rulemaking documents regarding these exemptions elsewhere in this issue of the Federal Register. C. System Number The system number is: 09–10–0020. E:\FR\FM\28AUN1.SGM 28AUN1 52038 Federal Register / Vol. 77, No. 167 / Tuesday, August 28, 2012 / Notices programs; (4) FDA supported extramural or intramural activities that are related to biomedical or behavioral research or research training; and (5) plagiarism of research records produced in the course of FDA supported research, research training, or activities related to that research or research training. D. System Name The system name is: FDA Records Related to Research Misconduct Proceedings, HHS/FDA/OC. E. Security Classification The security classification for the system is: Unclassified. srobinson on DSK4SPTVN1PROD with NOTICES F. System Location System records are located in the Office of the Chief Scientist, Food and Drug Administration, 10903 New Hampshire Ave., Bldg. 32, rm. 4214, Silver Spring, MD 20993. Some records may reside in the Agency component offices during the time that an allegation is under review. G. Categories of Individuals Covered by the System This system includes records related to the processing and reviewing of allegations of research misconduct levied against an individual (the respondent) who is an agent of, or affiliated by contract or agreement with FDA, or an FDA employee involved in intramural research. The records contain personally identifiable information (PII) and non-PII about respondents, complainants, witnesses and other individuals affiliated with entities that are contacted by or provide information to FDA. Privacy Act notification, access, and amendment rights (described in this document) relative to this system are available to individuals who are subjects of records in the system, that is, respondents. Although records in the system may contain PII related to other individuals, only respondents are considered subjects of records in this system. ‘‘Respondents’’ is defined as ‘‘the person against whom an allegation of research misconduct is directed or who is the subject of a research misconduct proceeding.’’ The term ‘‘research misconduct’’ is defined in 42 CFR 93.103 to mean ‘‘fabrication, falsification, or plagiarism in proposing, performing, or reviewing research, or in reporting research results.’’ These and other definitions are set out in 42 CFR part 93. This system notice applies to an allegation of research misconduct involving the following: (1) Applications or proposals for FDA support for biomedical or behavioral extramural or intramural research or research training, or activities related to that research or research training; (2) FDA supported biomedical or behavioral extramural or intramural research; (3) FDA supported extramural or intramural research training VerDate Mar<15>2010 16:39 Aug 27, 2012 Jkt 226001 findings of research misconduct and final decisions regarding administrative actions and their implementation; and (4) FDA and ORI coordination with other Federal, State, and local offices or agencies, including the DOJ. H. Categories of Records in the System The records in the system include information that must be submitted to ORI by FDA under 42 CFR part 93 and information that FDA obtains while conducting research misconduct proceedings. This information may include, but is not limited to: • PII about respondents such as name, date of birth, employment information, educational background, social security number, personal and professional phone numbers, mailing address, and email address; • PII regarding complainants and witnesses such as name, and personal or work contact information; • The nature and substance of allegations; • Data regarding FDA funding related to the research and/or respondent, including grants numbers; • The organization(s) and officials responsible for conducting the action that are part of the research misconduct proceeding; • The documentation used in the inquiry and investigation, including relevant research data and materials, which may include relevant information on study subjects; • Applications, proposals, and documentation related to review and award actions; • Reports, abstracts, manuscripts, and publications by the respondent(s); • Other relevant reports, abstracts, manuscripts, and publications; • Correspondence and memoranda of telephone calls; • Summaries of interviews and transcripts or recordings of interviews; • Statistical, scientific, and forensic analyses; • Interim and final FDA reports; and • Records of Agency findings, administrative actions, and appeal proceedings, if any. The system also contains general administrative and oversight records regarding ORI actions. This includes information related to the following: (1) ORI reviews of the research misconduct proceedings, ORI findings of research misconduct, and ORI proposals for administrative action or for settlement of the case; (2) a respondent’s opportunity to contest ORI findings of research misconduct and proposed HHS administrative actions; (3) final HHS The authorities for maintaining this system are: 21 U.S.C. 371, 375, 393(d)(2), 394, 397, and 399a; 42 U.S.C. 216(b), 241, 289b; 5 U.S.C. 301; 44 U.S.C. 3101; and 42 CFR part 93. PO 00000 Frm 00074 Fmt 4703 Sfmt 4703 I. Authority for Maintenance of the System J. Purpose The purposes of this system are to do the following: 1. Enable FDA, ORI, HHS, and the Federal Government to protect the health and safety of the public, to promote the integrity of FDA supported research, and to conserve public funds. 2. Enable FDA to implement its authority relating to research misconduct proceedings as set forth in 42 CFR part 93 and to document FDA activities in implementing that authority. 3. Ensure that research misconduct proceedings, including FDA’s implementation of the Agency’s and other HHS administrative actions, are carried out in accordance with FDA policy, 42 CFR part 93, and other applicable Federal statutes and regulations. 4. Enable FDA to inform Agency officials and other HHS officials who have a need for the records in the performance of their duties of the status and results of research misconduct proceedings. 5. Enable FDA to notify, consult with, and provide assistance to ORI, and other Federal, State, or local agencies to permit them to take action to protect the health and safety of the public, to promote the integrity of FDA supported research, to conserve public funds, or to pursue potential violations of civil and criminal statutes. K. Routine Uses of Records Maintained in the System Including the Purposes of Such Uses and Categories of Users The Privacy Act lists the conditions for disclosure under 5 U.S.C. 552a(b). Among the permitted disclosures is disclosure ‘‘to those officers and employees of the agency which maintains the record who have a need for the record in the performance of their duties’’ (5 U.S.C. 552a(b)(1)). For this system of records, this condition would include disclosure to the appropriate FDA, ORI, and other HHS officers and employees. E:\FR\FM\28AUN1.SGM 28AUN1 srobinson on DSK4SPTVN1PROD with NOTICES Federal Register / Vol. 77, No. 167 / Tuesday, August 28, 2012 / Notices Permitted disclosures also include routine uses that are listed in the notice of the system of records (5 U.S.C. 552a(b)(3)). The Privacy Act defines ‘‘routine use’’ as ‘‘with respect to the disclosure of a record, the use of such record for a purpose which is compatible with the purpose for which it was collected.’’ See also FDA’s Privacy Act regulations, defining ‘‘routine use’’ as ‘‘use outside the Department of Health and Human Services that is compatible with the purpose for which the records were collected and described in the [System of Records] notice)’’ (21 CFR 21.20(b)(5)). Records in this system that contain information about record subjects (respondents) and nonsubjects (witnesses, complainants, and other individuals affiliated with entities that are contacted by or provide information to FDA) may be disclosed to recipients outside HHS in accordance with the following routine uses: 1. Disclosure may be made to any individual or entity able to obtain information or provide information or assistance in a research misconduct proceeding or related proceeding. Recipients of disclosures under this routine use may include experts asked to perform statistical, forensic, or other analyses; the relevant FDA supported institution(s); institutions with which the respondent(s) was previously affiliated; Federal, State and local agencies; the respondent(s); the complainant(s); witnesses; and organizations or individuals acting on behalf of those agencies, institutions, and individuals; provided, however, that in each case FDA determines whether limited disclosures or confidentiality agreements are needed to protect the privacy of respondent(s), complainant(s), witnesses, research subjects, or others who may be identified in the records to be disclosed. 2. Disclosure may be made to other Federal, State, or local agencies and offices, if FDA has reason to believe that a research misconduct proceeding may involve that agency or office. 3. Disclosure may be made to appropriate Federal Agencies and Department contractors that have a need to know the information for the purpose of assisting the Department’s efforts to respond to a suspected or confirmed breach of the security or confidentiality of information maintained in this system of records, and the information disclosed is relevant and necessary for that assistance. 4. Disclosure may be made to Institutional Review Boards, collaborating institutions, and VerDate Mar<15>2010 16:39 Aug 27, 2012 Jkt 226001 individual research subjects, regarding information obtained or developed through a research misconduct proceeding that, in FDA’s judgment, may have implications for individuals’ health or for their participation in a research study. 5. When a record on its face, or in conjunction with other records, indicates a violation or potential violation of law, whether civil, criminal, or regulatory in nature, disclosure may be made to the appropriate agency, whether Federal, foreign, State, local, or tribal, or other public authority responsible for enforcing, investigating, or prosecuting such violation, if the information disclosed is relevant to the responsibilities of the agency or public authority. 6. After FDA makes a finding of research misconduct and has informed ORI of this finding, disclosure may be made to responsible officials of FDA supported institutions or organizations, when in connection with a research misconduct proceeding concerning a respondent previously or currently employed by, or affiliated with the institution or organization, or when FDA, ORI, or HHS makes a finding or takes an action potentially affecting the agency or organization or its FDA support for research, research training, or related activities. 7. After FDA makes a finding of research misconduct and has informed ORI of this finding, disclosure may be made to the respondent’s supervisor because research will be a significant part of many employee jobs, and performance is an important element of information to help the supervisor determine employee assignments as well as the level of supervision needed. If an individual moves to another job or contract, FDA may notify the other entity that we have relevant information with regard to that individual. 8. After FDA makes a finding of research misconduct and has informed ORI of this finding, disclosure may be made to a Federal Agency in connection with the hiring or retention of the respondent, the issuance of a security clearance, the reporting of an investigation of an employee, or the issuance of a license or other benefit by the Agency, to the extent that the record is relevant to the Agency’s decision on the matter. 9. After FDA makes a finding of research misconduct and has informed ORI of this finding, disclosure may be made to professional journals, other publications, news media, and the public concerning research misconduct findings and the need to correct or retract research results or reports that PO 00000 Frm 00075 Fmt 4703 Sfmt 4703 52039 have been affected by research misconduct, unless it is determined that release of the specific information in the context of a particular case would constitute a clearly unwarranted invasion of personal privacy. No information will be released that would reveal a confidential source. 10. After FDA makes a finding of research misconduct and has informed ORI of this finding, disclosure may be made to a State licensing board, certifying body, or other similar entity conducting a review of the respondent to aid the entity in meeting its responsibility to protect the health of the population in its jurisdiction or the integrity of the profession. 11. Disclosure may be made to contractors and other individuals or entities who perform services for the Agency related to this system of records and who have access to the records in order to perform such services, including individuals appointed to serve on FDA research misconduct inquiry committees or investigation committees if such individuals need access to the records to perform their assigned task. Provided, however, in each case FDA determines whether limited disclosures or confidentiality agreements are needed to protect the privacy of respondent(s), complainants(s), witnesses, research subjects, or others who may be identified in the records to be disclosed; and FDA determines that the disclosure is for a purpose compatible with the purpose for which the Agency collected the records. 12. When FDA closes a case without a settlement or finding of research misconduct, disclosure may be made to the respondent, relevant institution, and complainant(s); provided, however, that in each case FDA determines whether limited disclosures or confidentiality agreements are needed to protect the privacy of respondent(s), complainant(s), witnesses, research subjects, or others who may be identified in the records to be disclosed. 13. Disclosure may be made to the DOJ when: (1) The Agency or any component thereof; or (2) any employee of the Agency in his or her official capacity; or (3) any employee of the Agency in his or her individual capacity where the DOJ has agreed to represent the employee; or (4) the U.S. Government is a party to litigation or has an interest in such litigation, and by careful review, the Agency determines that the records are both relevant and necessary to the litigation and the use of such records by the DOJ is therefore deemed by the Agency to be for a purpose that is compatible with the E:\FR\FM\28AUN1.SGM 28AUN1 52040 Federal Register / Vol. 77, No. 167 / Tuesday, August 28, 2012 / Notices purpose for which the Agency collected the records. 14. Disclosure may be made to a court or other tribunal when: (1) The Agency or any component thereof; or (2) any employee of the Agency in his or her official capacity; or (3) any employee of the Agency in his or her individual capacity where the DOJ has agreed to represent the employee; or (4) the U.S. Government is a party to the proceeding or has an interest in such proceeding, and by careful review, the Agency determines that the records are both relevant and necessary to the proceeding and the use of such records is therefore deemed by the Agency to be for a purpose that is compatible with the purpose for which the Agency collected the records. 15. Einstein 2 Cyber Security Monitoring: Records may become accessible to U.S. Department of Homeland Security (DHS) cyber security personnel, if captured in an intrusion detection system used by HHS and DHS pursuant to the Einstein 2 program. Under Einstein 2, DHS uses intrusion detection systems to monitor Internet traffic to and from federal computer networks to prevent malicious computer code from reaching the networks. According to DHS’ Privacy Impact Assessment for Einstein 2 (available on the DHS Cybersecurity privacy Web site, https://www.dhs.gov), only PII that is directly related to a malicious code security incident is captured by and accessible to DHS, and DHS does not access PII unless the PII is part of the malicious code. 16. Disclosure may be made to the National Archives and Records Administration and/or the General Services Administration for the purpose of records management inspections conducted under authority of 44 U.S.C. 2904 and 2906. L. Policies and Practices for Storing, Retrieving, Accessing, Retaining, and Disposing of Records in the System 1. Storage Records may be maintained in hard copy files and on computer disks, hard drive, and file servers, and other types of data storage devices. srobinson on DSK4SPTVN1PROD with NOTICES 2. Retrievability Agency’s Chief Scientist and Deputy Commissioner for Science and Public Health, the Agency’s Research Integrity Officer (System Manager), and to other appropriate FDA staff when they have a need for the records in the performance of their duties. Records are also available to the Director of ORI and other appropriate ORI staff, and to other appropriate HHS officials that are involved in the research misconduct proceeding, when there is a need to know in the performance of their duties. All authorized users are informed that the records are confidential and are not to be further disclosed. b. Procedural safeguards. Access is strictly controlled by the Research Integrity Officer (System Manager) in compliance with the Privacy Act and this system notice. Access to the records is limited to ensure confidentiality. All questions and inquiries from any party should be addressed to the Research Integrity Officer (System Manager). c. Physical safeguards. All records (such as diskettes, computer listings, or documents) are kept in a secured area, locked rooms, and locked building. The facility has a 24-hour guard service, and access to the building is further controlled by an operational card key system. Access to the files, which are generally hard copy, is limited to a subset of individuals with general access to the building. Access to individual offices is controlled by simplex locks. Records are kept in locked file cabinets in a room that is locked during non-working hours. Access to this room is restricted to specific personnel. Access to computer files is strictly limited through passwords and user-invisible encryption. Special measures commensurate with the sensitivity of the record are taken to prevent unauthorized copying or disclosure of the records. M. Retention and Disposal The records are maintained for 7 years in accordance with 42 CFR part 93, FDA’s Records Control Schedule, and with the applicable General Records Schedule and disposition schedule approved by the National Archives and Records Administration. 3. Safeguards N. System Manager and Address FDA Research Integrity Officer, Office of the Chief Scientist, Food and Drug Administration, 10903 New Hampshire Ave., Bldg. 32, Rm. 4214, Silver Spring, MD 20993. a. Authorized users. Records in FDA’s system are available to the Commissioner of Food and Drugs, the O. Notification Procedure In accordance with 21 CFR part 21, subpart D, an individual may find out Records may be retrieved by manual or computer search of the case-tracking system using the name of the respondent(s). VerDate Mar<15>2010 16:39 Aug 27, 2012 Jkt 226001 PO 00000 Frm 00076 Fmt 4703 Sfmt 4703 whether a record exists about him or her by submitting a written request, with notarized signature if request is made by mail, or with identification if request is made in person, directed to: FDA Privacy Act Coordinator, Division of Freedom of Information (ELEM–1029), Food and Drug Administration, 12420 Parklawn Dr., Element Building, Rockville, MD 20857. HHS/FDA is exempting all records related to research misconduct proceedings from this provision (see section I.S of this document Records Exempted from Certain Provisions of the Privacy Act). However, consideration will be given to requests addressed to the Privacy Act Coordinator as described previously in this document. In addition, some records may be exempt under 5 U.S.C 552a(d)(5), if they are ‘‘compiled in reasonable anticipation of a civil action or proceeding.’’ See also 21 CFR 21.41(e). P. Record Access Procedures Procedures are the same as those in section I.O of this document (Notification Procedure). Requests should also reasonably specify the record contents being sought and may also request an accounting of disclosures that have been made of the record, if any. As stated previously in this document, HHS/FDA is exempting all records related to research misconduct proceedings from this provision (see section I.S of this document, Records Exempted from Certain Provisions of the Privacy Act), and some records may be exempt under 5 U.S.C. 552a(d)(5). However, consideration will be given to access requests addressed to the Privacy Act Coordinator as described in section I.O of this document (Notification Procedure). Q. Contesting Record Procedures In accordance with 21 CFR 21.50, contact the Privacy Act Coordinator, Food and Drug Administration (see FOR FURTHER INFORMATION CONTACT or section I.O of this document). Reasonably identify the record and specify the information being contested, the corrective action sought, and your reasons for requesting the correction, along with supporting information to show how the record is inaccurate, incomplete, untimely, or irrelevant. As stated previously in this document, HHS/FDA is exempting all records related to research misconduct proceedings from this provision (see section I.S of this document, Records Exempted from Certain Provisions of the Privacy Act), and some records may be exempt under 5 U.S.C. 552a(d)(5). E:\FR\FM\28AUN1.SGM 28AUN1 Federal Register / Vol. 77, No. 167 / Tuesday, August 28, 2012 / Notices R. Record Source Categories Information in this system is obtained from many sources, including the following: (1) Directly from the respondent or complainant or his/her representative; (2) derived from materials supplied by the respondent or complainant or his/her representative; (3) from information supplied by the institutions, witnesses, scientific publications, and other nongovernmental sources; (4) from observation and analysis made by FDA and ORI staff and scientific experts; (5) from departmental and other Federal, State, and local government records; (6) from hearings and other administrative proceedings; and (7) from any other relevant source. srobinson on DSK4SPTVN1PROD with NOTICES S. Records Exempted From Certain Provisions of the Privacy Act FDA records related to research misconduct proceedings will be exempt from the Privacy Act requirements pertaining to providing an accounting of disclosures, access and amendment, notification, and Agency procedures and rules under sections 552a(k)(2) and (k)(5) of the Privacy Act. Elsewhere in this issue of the Federal Register, FDA is publishing a notice of proposed rulemaking and direct final rule to apply these exemptions to records in this system related to ongoing investigations or that would reveal a confidential source. These exemptions are necessary to safeguard the integrity of the research misconduct proceedings and to ensure that FDA’s efforts to obtain accurate and objective information will not be hindered. In the course of investigations of allegations of research misconduct, it is often necessary to give an express promise to withhold the identity of an individual who has provided relevant information. Sources of information necessary to complete an effective investigation may be reluctant to provide sensitive information unless they can be assured that their identities will not be revealed. The proposed exemptions will ensure that the records related to ongoing investigations will not be disclosed inappropriately and that the identities of confidential sources will be protected. The notice of proposed rulemaking and direct final rule provide additional detail regarding the bases for these exemptions. II. Comments FDA invites comments on all parts of the systems notice. Interested persons may submit to the Division of Dockets Management (see ADDRESSES) either VerDate Mar<15>2010 16:39 Aug 27, 2012 Jkt 226001 electronic or written comments regarding this document. It is only necessary to send one set of comments. Identify comments with the docket number found in brackets in the heading of this document. Received comments may be seen in the Division of Dockets Management between 9 a.m. and 4 p.m., Monday through Friday. Dated: June 12, 2012. Leslie Kux, Assistant Commissioner for Policy. [FR Doc. 2012–20888 Filed 8–27–12; 8:45 am] BILLING CODE 4160–01–P DEPARTMENT OF HEALTH AND HUMAN SERVICES Health Resources and Services Administration Advisory Commission on Childhood Vaccines, Notice of Meeting In accordance with section 10(a)(2) of the Federal Advisory Committee Act (Pub. L. 92–463), notice is hereby given of the following meeting: Name: Advisory Commission on Childhood Vaccines (ACCV). Date and Time: September 06, 2012, 1:00 p.m. to 5:15 p.m. EDT. Place: Parklawn Building (and via audio conference call), Conference Room 10–65, 5600 Fishers Lane, Rockville, MD 20857. The ACCV will meet on Thursday, September 06 from 1:00 p.m. to 5:15 p.m. (EDT). The public can join the meeting via audio conference call by dialing 1–800–369–3104 on September 06, and providing the following information: Leader’s Name: Dr. Geoffrey Evans Password: ACCV Agenda: The agenda items for the September meeting will include, but are not limited to: Updates from the Division of Vaccine Injury Compensation (DVIC), Department of Justice (DOJ), National Vaccine Program Office (NVPO), Immunization Safety Office (Centers for Disease Control and Prevention), National Institute of Allergy and Infectious Diseases (National Institutes of Health) and Center for Biologics Evaluation and Research (Food and Drug Administration). A draft agenda and additional meeting materials will be posted on the ACCV web site (https:// www.hrsa.gov/vaccinecompensation/ accv.htm) prior to the meeting. Agenda items are subject to change as priorities dictate. Public Comment: Persons interested in attending the meeting in person or providing an oral presentation should PO 00000 Frm 00077 Fmt 4703 Sfmt 4703 52041 submit a written request, along with a copy of their presentation to: Annie Herzog, DVIC, Healthcare Systems Bureau (HSB), Health Resources and Services Administration (HRSA), Room 11C–26, 5600 Fishers Lane, Rockville, Maryland 20857 or email: aherzog@hrsa.gov. Requests should contain the name, address, telephone number, email address, and any business or professional affiliation of the person desiring to make an oral presentation. Groups having similar interests are requested to combine their comments and present them through a single representative. The allocation of time may be adjusted to accommodate the level of expressed interest. DVIC will notify each presenter by email, mail, or telephone of their assigned presentation time. Persons who do not file an advance request for a presentation, but desire to make an oral statement, may announce it at the time of the public comment period. Public participation and ability to comment will be limited to space and time as available. FOR FURTHER INFORMATION CONTACT: Anyone requiring information regarding the ACCV should contact Annie Herzog, DVIC, HSB, HRSA, Room 11C–26, 5600 Fishers Lane, Rockville, MD 20857; telephone (301) 443–6593, or email: aherzog@hrsa.gov. Dated: August 22, 2012. Bahar Niakan, Director, Division of Policy and Information Coordination. [FR Doc. 2012–21093 Filed 8–27–12; 8:45 am] BILLING CODE 4165–15–P DEPARTMENT OF HEALTH AND HUMAN SERVICES National Institutes of Health National Institute of Allergy and Infectious Diseases; Notice of Closed Meetings Pursuant to section 10(d) of the Federal Advisory Committee Act, as amended (5 U.S.C. App.), notice is hereby given of the following meetings. The meetings will be closed to the public in accordance with the provisions set forth in sections 552b(c)(4) and 552b(c)(6), Title 5 U.S.C., as amended. The grant applications and the discussions could disclose confidential trade secrets or commercial property such as patentable material, and personal information concerning individuals associated with the grant applications, the disclosure of which would constitute a clearly unwarranted invasion of personal privacy. E:\FR\FM\28AUN1.SGM 28AUN1

Agencies

[Federal Register Volume 77, Number 167 (Tuesday, August 28, 2012)]
[Notices]
[Pages 52036-52041]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2012-20888]


-----------------------------------------------------------------------

DEPARTMENT OF HEALTH AND HUMAN SERVICES

Food and Drug Administration

[Docket No. FDA-2011-N-0253]


Privacy Act of 1974; Report of a New System of Records; FDA 
Records Related to Research Misconduct Proceedings

AGENCY: Food and Drug Administration, HHS.

ACTION: Notice of a Privacy Act system of records.

-----------------------------------------------------------------------

SUMMARY: In accordance with the requirements of the Privacy Act of 1974 
(the Privacy Act) and the Food and Drug Administration's (FDA's) 
regulations for the protection of privacy, FDA is publishing notice of 
a new Privacy Act system of records entitled ``FDA Records Related to 
Research Misconduct Proceedings, HHS/FDA/OC'' System No. 09-10-0020. 
Under the Department of Health and Human Services' (HHS' or the 
Department's) Public Health Service Policies on Research Misconduct, 
FDA has responsibilities for addressing research integrity and 
misconduct issues related to FDA supported activities. This system 
contains records related to the processing and reviewing of allegations 
of scientific research misconduct levied against an individual (the 
respondent) who is an agent of, or affiliated by contract or agreement 
with, FDA, or an FDA employee involved in intramural research. Research 
misconduct proceedings include allegation assessments, inquiries, 
investigations, oversight reviews by HHS' Office of Research Integrity 
(ORI), hearings, and administrative appeals.

DATES: Effective Date: The new system of records will be effective on 
August 28, 2012, with the exception of the routine uses and the 
requested exemptions. The routine uses will become effective on October 
12, 2012. As detailed in the companion

[[Page 52037]]

rulemaking documents published elsewhere in this issue of the Federal 
Register, unless revised or withdrawn in response to comments, the 
requested exemptions will become effective 135 days after publication 
of the companion rulemaking documents. Submit either electronic or 
written comments regarding this document by October 12, 2012.

ADDRESSES: You may submit comments, identified by Docket No. FDA-2011-
N-0253, by any of the following methods:

Electronic Submissions

    Submit electronic comments in the following way:
     Federal eRulemaking Portal: https://www.regulations.gov. 
Follow the instructions for submitting comments.

Written Submissions

    Submit written submissions in the following ways:
     FAX: 301-827-6870.
     Mail/Hand delivery/Courier (for paper or CD-ROM 
submissions): Division of Dockets Management (HFA-305), Food and Drug 
Administration, 5630 Fishers Lane, Rm. 1061, Rockville, MD 20852.
    Instructions: All submissions received must include the Agency name 
and docket number for this document. All comments received may be 
posted without change to https://www.regulations.gov, including any 
personal information provided. For additional information on submitting 
comments, see the ``Comments'' heading of the SUPPLEMENTARY INFORMATION 
section of this document.
    Docket: For access to the docket to read background documents or 
comments received, go to https://www.regulations.gov and insert the 
docket number, found in brackets in the heading of this document, into 
the ``Search'' box and follow the prompts and/or go to the Division of 
Dockets Management, 5630 Fishers Lane, Rm. 1061, Rockville, MD 20852.

FOR FURTHER INFORMATION CONTACT: Eileen Parish, Office of the Chief 
Scientist, Food and Drug Administration, 10903 New Hampshire Ave., 
Bldg. 32, Rm. 4214, Silver Spring, MD 20993, 301-796-8522, 
Eileen.Parish@fda.hhs.gov.

SUPPLEMENTARY INFORMATION:

I. New System of Records

A. Description of the System of Records

1. Collection and Maintenance of Data in the System
    This system will collect and maintain personally identifiable 
information (PII) and other data collected during the research 
misconduct process. The collected information will include, but is not 
limited to: Name, address, telephone number, education, professional 
experience, employment address, and training of an individual(s) who is 
(are) the subject of allegations. In addition, the system will contain 
records of complaints received, including the identity of the 
complainant, and how complaints were received and resolved. Also 
included will be information of witnesses and members of research 
misconduct committees.
2. Agency Procedures
    FDA's procedures for disclosures of information maintained in this 
system of records are set forth in 21 CFR part 21.

B. Routine Use Disclosures of Information in the System

    In accordance with the Privacy Act (5 U.S.C. 552a), FDA is 
providing notice of the ``routine uses'' of the records contained in 
the system of records. Disclosure of such records is permitted without 
the written consent of the individual to whom the record pertains, if 
the information is to be used for a purpose that is compatible with the 
purpose(s) for which the information was collected (5 U.S.C. 
552a(b)(3)). Any such compatible use of data is known as a ``routine 
use.'' The routine uses in this system meet the compatibility 
requirement of the Privacy Act.
    The first two routine uses permit FDA to share information from 
this system with the individual or entity submitting an allegation; 
witnesses; pertinent Federal, State, and local agencies; and third 
parties that can provide information related to the allegation or 
proceeding.
    In the event of a suspected or confirmed breach of security or 
confidentiality of the system, the third routine use allows disclosures 
to Federal Agencies as necessary in order to respond to the breach. 
Likewise, where a record indicates a violation of law, FDA may share 
information with the responsible enforcement authority under the fifth 
routine use, and may provide information to the Department of Homeland 
Security (DHS) in circumstances where system records are captured in an 
intrusion detection program and made accessible to DHS as described in 
routine use 15.
    When health implications are evident based on information developed 
in the course of a proceeding, the fourth routine use permits 
disclosure to research subjects, institutional review boards, and 
collaborating institutions.
    When FDA finds research misconduct has occurred, routine uses 6 
through 10 describe disclosures FDA may make to FDA supported entities 
(routine use 6), to the respondent's supervisor or employer (routine 
use 7 and 8), to publications as needed to retract research results 
(routine use 9), and licensing authorities (routine use 10). Similarly, 
routine use 12 permits disclosure of information to the parties and 
related institutions when FDA does not find research misconduct.
    Additional routine uses common to Federal records systems provide 
for disclosure to contractors and others who perform services for FDA 
related to this system (routine use 11), to the Department of Justice 
(DOJ) as related to the DOJ's representation of FDA or Agency employees 
(routine use 13), to courts when the records are relevant in legal 
actions involving the U.S. Government, FDA, or Agency employees 
(routine use 14), and, to the National Archives and Records 
Administration and General Services Administration as needed in the 
course of records management inspections (routine use 16).
    As specified in section I.K of this document (see Routine Uses of 
Records Maintained in the System Including the Purposes of Such Uses 
and Categories of Users), many of these routine use disclosures will be 
restricted and subject to confidentiality or similar nondisclosure 
agreements in order to protect privacy.
    Because this is a law enforcement investigatory system, HHS and FDA 
intend to amend their Privacy Act regulations (45 CFR 5b.11 and 21 CFR 
21.61, respectively) to exempt records in this system related to 
ongoing investigations or that would reveal a confidential source from 
the notification, access, and amendments provisions of the Privacy Act. 
These exemptions are necessary to maintain the integrity of research 
misconduct proceedings and allow FDA to obtain essential information. 
The proposed exemptions would ensure that the records related to 
ongoing investigations will not be disclosed inappropriately and that 
the identities of confidential sources will be protected. FDA and HHS 
are publishing companion rulemaking documents regarding these 
exemptions elsewhere in this issue of the Federal Register.

C. System Number

    The system number is: 09-10-0020.

[[Page 52038]]

D. System Name

    The system name is: FDA Records Related to Research Misconduct 
Proceedings, HHS/FDA/OC.

E. Security Classification

    The security classification for the system is: Unclassified.

F. System Location

    System records are located in the Office of the Chief Scientist, 
Food and Drug Administration, 10903 New Hampshire Ave., Bldg. 32, rm. 
4214, Silver Spring, MD 20993. Some records may reside in the Agency 
component offices during the time that an allegation is under review.

G. Categories of Individuals Covered by the System

    This system includes records related to the processing and 
reviewing of allegations of research misconduct levied against an 
individual (the respondent) who is an agent of, or affiliated by 
contract or agreement with FDA, or an FDA employee involved in 
intramural research. The records contain personally identifiable 
information (PII) and non-PII about respondents, complainants, 
witnesses and other individuals affiliated with entities that are 
contacted by or provide information to FDA.
    Privacy Act notification, access, and amendment rights (described 
in this document) relative to this system are available to individuals 
who are subjects of records in the system, that is, respondents. 
Although records in the system may contain PII related to other 
individuals, only respondents are considered subjects of records in 
this system.
    ``Respondents'' is defined as ``the person against whom an 
allegation of research misconduct is directed or who is the subject of 
a research misconduct proceeding.'' The term ``research misconduct'' is 
defined in 42 CFR 93.103 to mean ``fabrication, falsification, or 
plagiarism in proposing, performing, or reviewing research, or in 
reporting research results.'' These and other definitions are set out 
in 42 CFR part 93.
    This system notice applies to an allegation of research misconduct 
involving the following: (1) Applications or proposals for FDA support 
for biomedical or behavioral extramural or intramural research or 
research training, or activities related to that research or research 
training; (2) FDA supported biomedical or behavioral extramural or 
intramural research; (3) FDA supported extramural or intramural 
research training programs; (4) FDA supported extramural or intramural 
activities that are related to biomedical or behavioral research or 
research training; and (5) plagiarism of research records produced in 
the course of FDA supported research, research training, or activities 
related to that research or research training.

H. Categories of Records in the System

    The records in the system include information that must be 
submitted to ORI by FDA under 42 CFR part 93 and information that FDA 
obtains while conducting research misconduct proceedings. This 
information may include, but is not limited to:
     PII about respondents such as name, date of birth, 
employment information, educational background, social security number, 
personal and professional phone numbers, mailing address, and email 
address;
     PII regarding complainants and witnesses such as name, and 
personal or work contact information;
     The nature and substance of allegations;
     Data regarding FDA funding related to the research and/or 
respondent, including grants numbers;
     The organization(s) and officials responsible for 
conducting the action that are part of the research misconduct 
proceeding;
     The documentation used in the inquiry and investigation, 
including relevant research data and materials, which may include 
relevant information on study subjects;
     Applications, proposals, and documentation related to 
review and award actions;
     Reports, abstracts, manuscripts, and publications by the 
respondent(s);
     Other relevant reports, abstracts, manuscripts, and 
publications;
     Correspondence and memoranda of telephone calls;
     Summaries of interviews and transcripts or recordings of 
interviews;
     Statistical, scientific, and forensic analyses;
     Interim and final FDA reports; and
     Records of Agency findings, administrative actions, and 
appeal proceedings, if any.
    The system also contains general administrative and oversight 
records regarding ORI actions. This includes information related to the 
following: (1) ORI reviews of the research misconduct proceedings, ORI 
findings of research misconduct, and ORI proposals for administrative 
action or for settlement of the case; (2) a respondent's opportunity to 
contest ORI findings of research misconduct and proposed HHS 
administrative actions; (3) final HHS findings of research misconduct 
and final decisions regarding administrative actions and their 
implementation; and (4) FDA and ORI coordination with other Federal, 
State, and local offices or agencies, including the DOJ.

I. Authority for Maintenance of the System

    The authorities for maintaining this system are: 21 U.S.C. 371, 
375, 393(d)(2), 394, 397, and 399a; 42 U.S.C. 216(b), 241, 289b; 5 
U.S.C. 301; 44 U.S.C. 3101; and 42 CFR part 93.

J. Purpose

    The purposes of this system are to do the following:
    1. Enable FDA, ORI, HHS, and the Federal Government to protect the 
health and safety of the public, to promote the integrity of FDA 
supported research, and to conserve public funds.
    2. Enable FDA to implement its authority relating to research 
misconduct proceedings as set forth in 42 CFR part 93 and to document 
FDA activities in implementing that authority.
    3. Ensure that research misconduct proceedings, including FDA's 
implementation of the Agency's and other HHS administrative actions, 
are carried out in accordance with FDA policy, 42 CFR part 93, and 
other applicable Federal statutes and regulations.
    4. Enable FDA to inform Agency officials and other HHS officials 
who have a need for the records in the performance of their duties of 
the status and results of research misconduct proceedings.
    5. Enable FDA to notify, consult with, and provide assistance to 
ORI, and other Federal, State, or local agencies to permit them to take 
action to protect the health and safety of the public, to promote the 
integrity of FDA supported research, to conserve public funds, or to 
pursue potential violations of civil and criminal statutes.

K. Routine Uses of Records Maintained in the System Including the 
Purposes of Such Uses and Categories of Users

    The Privacy Act lists the conditions for disclosure under 5 U.S.C. 
552a(b). Among the permitted disclosures is disclosure ``to those 
officers and employees of the agency which maintains the record who 
have a need for the record in the performance of their duties'' (5 
U.S.C. 552a(b)(1)). For this system of records, this condition would 
include disclosure to the appropriate FDA, ORI, and other HHS officers 
and employees.

[[Page 52039]]

    Permitted disclosures also include routine uses that are listed in 
the notice of the system of records (5 U.S.C. 552a(b)(3)). The Privacy 
Act defines ``routine use'' as ``with respect to the disclosure of a 
record, the use of such record for a purpose which is compatible with 
the purpose for which it was collected.'' See also FDA's Privacy Act 
regulations, defining ``routine use'' as ``use outside the Department 
of Health and Human Services that is compatible with the purpose for 
which the records were collected and described in the [System of 
Records] notice)'' (21 CFR 21.20(b)(5)).
    Records in this system that contain information about record 
subjects (respondents) and nonsubjects (witnesses, complainants, and 
other individuals affiliated with entities that are contacted by or 
provide information to FDA) may be disclosed to recipients outside HHS 
in accordance with the following routine uses:
    1. Disclosure may be made to any individual or entity able to 
obtain information or provide information or assistance in a research 
misconduct proceeding or related proceeding. Recipients of disclosures 
under this routine use may include experts asked to perform 
statistical, forensic, or other analyses; the relevant FDA supported 
institution(s); institutions with which the respondent(s) was 
previously affiliated; Federal, State and local agencies; the 
respondent(s); the complainant(s); witnesses; and organizations or 
individuals acting on behalf of those agencies, institutions, and 
individuals; provided, however, that in each case FDA determines 
whether limited disclosures or confidentiality agreements are needed to 
protect the privacy of respondent(s), complainant(s), witnesses, 
research subjects, or others who may be identified in the records to be 
disclosed.
    2. Disclosure may be made to other Federal, State, or local 
agencies and offices, if FDA has reason to believe that a research 
misconduct proceeding may involve that agency or office.
    3. Disclosure may be made to appropriate Federal Agencies and 
Department contractors that have a need to know the information for the 
purpose of assisting the Department's efforts to respond to a suspected 
or confirmed breach of the security or confidentiality of information 
maintained in this system of records, and the information disclosed is 
relevant and necessary for that assistance.
    4. Disclosure may be made to Institutional Review Boards, 
collaborating institutions, and individual research subjects, regarding 
information obtained or developed through a research misconduct 
proceeding that, in FDA's judgment, may have implications for 
individuals' health or for their participation in a research study.
    5. When a record on its face, or in conjunction with other records, 
indicates a violation or potential violation of law, whether civil, 
criminal, or regulatory in nature, disclosure may be made to the 
appropriate agency, whether Federal, foreign, State, local, or tribal, 
or other public authority responsible for enforcing, investigating, or 
prosecuting such violation, if the information disclosed is relevant to 
the responsibilities of the agency or public authority.
    6. After FDA makes a finding of research misconduct and has 
informed ORI of this finding, disclosure may be made to responsible 
officials of FDA supported institutions or organizations, when in 
connection with a research misconduct proceeding concerning a 
respondent previously or currently employed by, or affiliated with the 
institution or organization, or when FDA, ORI, or HHS makes a finding 
or takes an action potentially affecting the agency or organization or 
its FDA support for research, research training, or related activities.
    7. After FDA makes a finding of research misconduct and has 
informed ORI of this finding, disclosure may be made to the 
respondent's supervisor because research will be a significant part of 
many employee jobs, and performance is an important element of 
information to help the supervisor determine employee assignments as 
well as the level of supervision needed. If an individual moves to 
another job or contract, FDA may notify the other entity that we have 
relevant information with regard to that individual.
    8. After FDA makes a finding of research misconduct and has 
informed ORI of this finding, disclosure may be made to a Federal 
Agency in connection with the hiring or retention of the respondent, 
the issuance of a security clearance, the reporting of an investigation 
of an employee, or the issuance of a license or other benefit by the 
Agency, to the extent that the record is relevant to the Agency's 
decision on the matter.
    9. After FDA makes a finding of research misconduct and has 
informed ORI of this finding, disclosure may be made to professional 
journals, other publications, news media, and the public concerning 
research misconduct findings and the need to correct or retract 
research results or reports that have been affected by research 
misconduct, unless it is determined that release of the specific 
information in the context of a particular case would constitute a 
clearly unwarranted invasion of personal privacy. No information will 
be released that would reveal a confidential source.
    10. After FDA makes a finding of research misconduct and has 
informed ORI of this finding, disclosure may be made to a State 
licensing board, certifying body, or other similar entity conducting a 
review of the respondent to aid the entity in meeting its 
responsibility to protect the health of the population in its 
jurisdiction or the integrity of the profession.
    11. Disclosure may be made to contractors and other individuals or 
entities who perform services for the Agency related to this system of 
records and who have access to the records in order to perform such 
services, including individuals appointed to serve on FDA research 
misconduct inquiry committees or investigation committees if such 
individuals need access to the records to perform their assigned task. 
Provided, however, in each case FDA determines whether limited 
disclosures or confidentiality agreements are needed to protect the 
privacy of respondent(s), complainants(s), witnesses, research 
subjects, or others who may be identified in the records to be 
disclosed; and FDA determines that the disclosure is for a purpose 
compatible with the purpose for which the Agency collected the records.
    12. When FDA closes a case without a settlement or finding of 
research misconduct, disclosure may be made to the respondent, relevant 
institution, and complainant(s); provided, however, that in each case 
FDA determines whether limited disclosures or confidentiality 
agreements are needed to protect the privacy of respondent(s), 
complainant(s), witnesses, research subjects, or others who may be 
identified in the records to be disclosed.
    13. Disclosure may be made to the DOJ when: (1) The Agency or any 
component thereof; or (2) any employee of the Agency in his or her 
official capacity; or (3) any employee of the Agency in his or her 
individual capacity where the DOJ has agreed to represent the employee; 
or (4) the U.S. Government is a party to litigation or has an interest 
in such litigation, and by careful review, the Agency determines that 
the records are both relevant and necessary to the litigation and the 
use of such records by the DOJ is therefore deemed by the Agency to be 
for a purpose that is compatible with the

[[Page 52040]]

purpose for which the Agency collected the records.
    14. Disclosure may be made to a court or other tribunal when: (1) 
The Agency or any component thereof; or (2) any employee of the Agency 
in his or her official capacity; or (3) any employee of the Agency in 
his or her individual capacity where the DOJ has agreed to represent 
the employee; or (4) the U.S. Government is a party to the proceeding 
or has an interest in such proceeding, and by careful review, the 
Agency determines that the records are both relevant and necessary to 
the proceeding and the use of such records is therefore deemed by the 
Agency to be for a purpose that is compatible with the purpose for 
which the Agency collected the records.
    15. Einstein 2 Cyber Security Monitoring: Records may become 
accessible to U.S. Department of Homeland Security (DHS) cyber security 
personnel, if captured in an intrusion detection system used by HHS and 
DHS pursuant to the Einstein 2 program. Under Einstein 2, DHS uses 
intrusion detection systems to monitor Internet traffic to and from 
federal computer networks to prevent malicious computer code from 
reaching the networks. According to DHS' Privacy Impact Assessment for 
Einstein 2 (available on the DHS Cybersecurity privacy Web site, https://www.dhs.gov), only PII that is directly related to a malicious code 
security incident is captured by and accessible to DHS, and DHS does 
not access PII unless the PII is part of the malicious code.
    16. Disclosure may be made to the National Archives and Records 
Administration and/or the General Services Administration for the 
purpose of records management inspections conducted under authority of 
44 U.S.C. 2904 and 2906.

L. Policies and Practices for Storing, Retrieving, Accessing, 
Retaining, and Disposing of Records in the System

1. Storage
    Records may be maintained in hard copy files and on computer disks, 
hard drive, and file servers, and other types of data storage devices.
2. Retrievability
    Records may be retrieved by manual or computer search of the case-
tracking system using the name of the respondent(s).
3. Safeguards
    a. Authorized users. Records in FDA's system are available to the 
Commissioner of Food and Drugs, the Agency's Chief Scientist and Deputy 
Commissioner for Science and Public Health, the Agency's Research 
Integrity Officer (System Manager), and to other appropriate FDA staff 
when they have a need for the records in the performance of their 
duties. Records are also available to the Director of ORI and other 
appropriate ORI staff, and to other appropriate HHS officials that are 
involved in the research misconduct proceeding, when there is a need to 
know in the performance of their duties. All authorized users are 
informed that the records are confidential and are not to be further 
disclosed.
    b. Procedural safeguards. Access is strictly controlled by the 
Research Integrity Officer (System Manager) in compliance with the 
Privacy Act and this system notice. Access to the records is limited to 
ensure confidentiality. All questions and inquiries from any party 
should be addressed to the Research Integrity Officer (System Manager).
    c. Physical safeguards. All records (such as diskettes, computer 
listings, or documents) are kept in a secured area, locked rooms, and 
locked building. The facility has a 24-hour guard service, and access 
to the building is further controlled by an operational card key 
system. Access to the files, which are generally hard copy, is limited 
to a subset of individuals with general access to the building.
    Access to individual offices is controlled by simplex locks. 
Records are kept in locked file cabinets in a room that is locked 
during non-working hours. Access to this room is restricted to specific 
personnel. Access to computer files is strictly limited through 
passwords and user-invisible encryption. Special measures commensurate 
with the sensitivity of the record are taken to prevent unauthorized 
copying or disclosure of the records.

M. Retention and Disposal

    The records are maintained for 7 years in accordance with 42 CFR 
part 93, FDA's Records Control Schedule, and with the applicable 
General Records Schedule and disposition schedule approved by the 
National Archives and Records Administration.

N. System Manager and Address

    FDA Research Integrity Officer, Office of the Chief Scientist, Food 
and Drug Administration, 10903 New Hampshire Ave., Bldg. 32, Rm. 4214, 
Silver Spring, MD 20993.

O. Notification Procedure

    In accordance with 21 CFR part 21, subpart D, an individual may 
find out whether a record exists about him or her by submitting a 
written request, with notarized signature if request is made by mail, 
or with identification if request is made in person, directed to: FDA 
Privacy Act Coordinator, Division of Freedom of Information (ELEM-
1029), Food and Drug Administration, 12420 Parklawn Dr., Element 
Building, Rockville, MD 20857. HHS/FDA is exempting all records related 
to research misconduct proceedings from this provision (see section I.S 
of this document Records Exempted from Certain Provisions of the 
Privacy Act). However, consideration will be given to requests 
addressed to the Privacy Act Coordinator as described previously in 
this document. In addition, some records may be exempt under 5 U.S.C 
552a(d)(5), if they are ``compiled in reasonable anticipation of a 
civil action or proceeding.'' See also 21 CFR 21.41(e).

P. Record Access Procedures

    Procedures are the same as those in section I.O of this document 
(Notification Procedure). Requests should also reasonably specify the 
record contents being sought and may also request an accounting of 
disclosures that have been made of the record, if any. As stated 
previously in this document, HHS/FDA is exempting all records related 
to research misconduct proceedings from this provision (see section I.S 
of this document, Records Exempted from Certain Provisions of the 
Privacy Act), and some records may be exempt under 5 U.S.C. 552a(d)(5). 
However, consideration will be given to access requests addressed to 
the Privacy Act Coordinator as described in section I.O of this 
document (Notification Procedure).

Q. Contesting Record Procedures

    In accordance with 21 CFR 21.50, contact the Privacy Act 
Coordinator, Food and Drug Administration (see FOR FURTHER INFORMATION 
CONTACT or section I.O of this document). Reasonably identify the 
record and specify the information being contested, the corrective 
action sought, and your reasons for requesting the correction, along 
with supporting information to show how the record is inaccurate, 
incomplete, untimely, or irrelevant. As stated previously in this 
document, HHS/FDA is exempting all records related to research 
misconduct proceedings from this provision (see section I.S of this 
document, Records Exempted from Certain Provisions of the Privacy Act), 
and some records may be exempt under 5 U.S.C. 552a(d)(5).

[[Page 52041]]

R. Record Source Categories

    Information in this system is obtained from many sources, including 
the following: (1) Directly from the respondent or complainant or his/
her representative; (2) derived from materials supplied by the 
respondent or complainant or his/her representative; (3) from 
information supplied by the institutions, witnesses, scientific 
publications, and other nongovernmental sources; (4) from observation 
and analysis made by FDA and ORI staff and scientific experts; (5) from 
departmental and other Federal, State, and local government records; 
(6) from hearings and other administrative proceedings; and (7) from 
any other relevant source.

S. Records Exempted From Certain Provisions of the Privacy Act

    FDA records related to research misconduct proceedings will be 
exempt from the Privacy Act requirements pertaining to providing an 
accounting of disclosures, access and amendment, notification, and 
Agency procedures and rules under sections 552a(k)(2) and (k)(5) of the 
Privacy Act.
    Elsewhere in this issue of the Federal Register, FDA is publishing 
a notice of proposed rulemaking and direct final rule to apply these 
exemptions to records in this system related to ongoing investigations 
or that would reveal a confidential source. These exemptions are 
necessary to safeguard the integrity of the research misconduct 
proceedings and to ensure that FDA's efforts to obtain accurate and 
objective information will not be hindered. In the course of 
investigations of allegations of research misconduct, it is often 
necessary to give an express promise to withhold the identity of an 
individual who has provided relevant information. Sources of 
information necessary to complete an effective investigation may be 
reluctant to provide sensitive information unless they can be assured 
that their identities will not be revealed. The proposed exemptions 
will ensure that the records related to ongoing investigations will not 
be disclosed inappropriately and that the identities of confidential 
sources will be protected.
    The notice of proposed rulemaking and direct final rule provide 
additional detail regarding the bases for these exemptions.

II. Comments

    FDA invites comments on all parts of the systems notice. Interested 
persons may submit to the Division of Dockets Management (see 
ADDRESSES) either electronic or written comments regarding this 
document. It is only necessary to send one set of comments. Identify 
comments with the docket number found in brackets in the heading of 
this document. Received comments may be seen in the Division of Dockets 
Management between 9 a.m. and 4 p.m., Monday through Friday.

    Dated: June 12, 2012.
Leslie Kux,
Assistant Commissioner for Policy.
[FR Doc. 2012-20888 Filed 8-27-12; 8:45 am]
BILLING CODE 4160-01-P
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.