Privacy Act of 1974: New System of Records, 23313-23315 [2013-09133]
Download as PDF
Federal Register / Vol. 78, No. 75 / Thursday, April 18, 2013 / Notices
23313
NRC CASCADES AUTHORIZATION LETTERS—Continued
Authorization letters
Cascade
Cascade
Cascade
Cascade
Cascade
Cascade
Cascade
numbered
numbered
numbered
numbered
numbered
numbered
numbered
3.3
3.4
3.5
3.6
3.7
3.8
3.9
Date
.............................................................................................
.............................................................................................
.............................................................................................
.............................................................................................
.............................................................................................
.............................................................................................
.............................................................................................
October 31, 2012 ....................................
October 31, 2012 ....................................
November 21, 2012 .................................
December 20, 2012 .................................
January 14, 2013 ....................................
February 13, 2013 ...................................
March 14, 2013 .......................................
ADAMS
accession No.
ML12306A048
ML12306A048
ML12326A563
ML12355A171
ML13015A042
ML13044A527
ML13074A068
NRC AUTHORIZATION LETTERS RELATED TO THE CYLINDER RECEIPT AND DISPATCH BUILDING
Authorization letters
Date
CRDB Chemistry Laboratory .....................................................................................
CRDB Phase 2a ........................................................................................................
January 16, 2013 ....................................
January 30, 2013 ....................................
If you do not have access to ADAMS
or if there are problems in accessing the
documents located in ADAMS, contact
the NRC Public Document Room (PDR)
Reference staff at 1–800–397–4209, 301–
415–4737 or by email to
pdr.resource@nrc.gov.
These documents may also be viewed
electronically on the public computers
located at the NRC’s PDR, O 1 F21, One
White Flint North, 11555 Rockville Pike
Rockville, MD 20852. The PDR
reproduction contractor will copy
documents for a fee.
Dated at Rockville, Maryland this 11th day
of April.
For the Nuclear Regulatory Commission.
Brian W. Smith,
Chief, Uranium Enrichment Branch, Division
of Fuel Cycle Safety, and Safeguards Office
of Nuclear Material Safety, and Safeguards.
[FR Doc. 2013–09127 Filed 4–17–13; 8:45 am]
BILLING CODE 7590–01–P
OFFICE OF PERSONNEL
MANAGEMENT
Privacy Act of 1974: New System of
Records
U.S. Office of Personnel
Management (OPM).
ACTION: Notice of amendment to system
of records.
AGENCY:
OPM has amended an existing
system of records subject to the Privacy
Act of 1974 (5 U.S.C. 552a) to reflect the
fact that the Office of Planning and
Policy Analysis (PPA) is receiving
Federal Employees Health Benefits
Program (FEHBP) Health Claims data
directly from some FEHBP carriers, and
processing and analyzing this data
within OPM. PPA is developing the
alternative data intake process to
sroberts on DSK5SPTVN1PROD with NOTICES
SUMMARY:
VerDate Mar<15>2010
18:54 Apr 17, 2013
Jkt 229001
acquire data from plans and/or carriers
that are outside of the scope of existing
OPM systems.
DATES: This action will be effective
without further notice on May 20, 2013
unless comments are received that
would result in a contrary
determination.
Send written comments by
mail to the Office of Personnel
Management, ATTN: Dennis Hardy,
PMP, HCDW Project Manager, U. S.
Office of Personnel Management, 1900 E
Street NW., Room 2340A, Washington,
DC 20415, or by email to
dennis.hardy@opm.gov.
ADDRESSES:
FOR FURTHER INFORMATION CONTACT:
Dennis Hardy, PMP, HCDW Project
Manager, 202–606–4281.
SUPPLEMENTARY INFORMATION: The Office
of Planning and Policy Analysis, in
cooperation with the OPM/Chief
Information Officer (CIO), is
implementing an alternate data intake
and transformation infrastructure within
the OPM environment to allow OPM to
develop, process, and analyze this
additional data in an expeditious
manner. This alternate infrastructure,
which is a scaled down version of the
Health Claims Data Warehouse (HCDW)
system, also provides a ‘‘hot site’’
disaster recovery capability should the
primary environment be unavailable for
data processing and/or analysis. This
alternate infrastructure is easily scalable
to support the demands of OPM. In
addition to building the alternative data
intake process, PPA will continue to
receive carrier information from OPM’s
Office of Inspector General (OIG). The
carrier data will be transmitted securely
from the physically secured servers
managed by OIG to the secure data
intake infrastructure managed by OPM’s
OCIO. In total, PPA will be receiving
PO 00000
Frm 00110
Fmt 4703
Sfmt 4703
ADAMS
accession No.
ML13016A011
ML13030A327
data from nine plans and/or carriers.
This action is necessary to meet the
requirements of the Privacy Act to
publish in the Federal Register notice of
the existence and character of records
maintained by the Agency (5 U.S.C.
552a(e)(4)). OPM first published a
system of records notice pertaining to
the Health Claims Data Warehouse on
October 5, 2010, with the comment
period closing November 15, 2010. On
November 15, 2010, OPM extended the
comment period to December 15, 2010,
and indicated its intent to modify
certain aspects of the system of records
notice. On December 15, 2010, OPM
published a notice closing the comment
period. Based on the comments received
during the comment period, OPM
issued a revised notice that, among
other things, limited the scope of the
system to information pertaining to
FEHBP, significantly narrowed the
circumstances under which routine use
disclosures will be made from the
system, clarified that only de-identified
data will be released outside of OPM,
provided greater detail regarding OPM
authorities for maintaining the system,
and further described systems security
measures that will be taken to protect
the records.
The purpose of this system of records
is to provide a central database from
which OPM may analyze costs and
utilization of services associated with
FEHBP to ensure the best value for both
enrollees and taxpayers. OPM collects,
manages, and analyzes health services
data that health insurers and
administrators provide through secure
data transfer for the program. OPM’s
analysis of the data includes the cost of
care, utilization of services, and quality
of care for specific population groups,
geographic areas, health plans, health
care providers, disease conditions, and
E:\FR\FM\18APN1.SGM
18APN1
23314
Federal Register / Vol. 78, No. 75 / Thursday, April 18, 2013 / Notices
other relevant categories. The
information contained in the database
assists in improving the effectiveness
and efficiency of care delivered by
health care providers to the enrollees by
facilitating robust contract negotiations,
health plan accountability, performance
management, and program evaluation.
OPM uses identifiable data to create
person-level longitudinal records,
which are long-term health records that
allow us to examine individual health
information over time. Access to
personally identifiable information is
highly restricted to personnel needed to
create person-level longitudinal records
and to select OPM analysts using the
database for analytical purposes.
Office of Personnel Management.
John Berry,
Director.
OPM CENTRAL—15
SYSTEM NAME:
Health Claims Data Warehouse
(HCDW).
SYSTEM LOCATION:
Office of Personnel Management,
1900 E Street NW., Washington, DC
20415.
CATEGORIES OF INDIVIDUALS COVERED BY THE
SYSTEM:
This system contains records on the
Federal Employees Health Benefits
Program (FEHBP). The FEHBP includes
Federal employees, Postal employees,
uniformed service members, retirees,
and their family members who
voluntarily participate in the Program.
sroberts on DSK5SPTVN1PROD with NOTICES
CATEGORIES OF RECORDS IN THE SYSTEM:
The records in the system may
contain the following types of
information on participating enrollees
and covered dependents:
a. Name, social security number, date
of birth, gender.
b. Home address.
c. Covered dependent information
(spouse, dependents)—name, social
security number, date of birth, gender.
d. Enrollee’s employing agency.
e. Name of health care provider.
f. Health care provider address.
g. Health care provider taxpayer
identification number (TIN) or carrier
identifier.
h. Health care coverage information
regarding benefit coverage for the plan
in which the person is enrolled.
i. Health care procedures performed
on the individual in the form of ICD,
CPT and other appropriate codes.
j. Health care diagnoses in the form of
ICD codes, and treatments, including
prescribed drugs, derived from clinical
medical records.
VerDate Mar<15>2010
18:54 Apr 17, 2013
Jkt 229001
k. Provider charges, amounts paid by
the plan and amounts paid by the
enrollee for the above coverage,
procedures, and diagnoses.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
Authority for requiring FEHBP
carriers to allow OPM access to records
and for requiring reports, as well as
authority for OPM’s maintenance of
FEHBP health claims information, is
provided by 5 U.S.C. 8901, et seq. In
particular, section 8910 states, in
relevant part: ‘‘(a) The Office of
Personnel Management shall make a
continuing study of the operation and
administration of this chapter, including
surveys and reports on health benefit
plans available to employees and on the
experience of the plans. (b) Each
contract entered into under section 8902
of this title shall contain provisions
requiring carriers to—(1) furnish such
reasonable reports as the Office
determines to be necessary to enable it
to carry out its functions under this
chapter; and (2) permit the Office and
representatives of the Government
Accountability Office to examine
records of the carriers as may be
necessary to carry out the purposes of
this chapter.’’ As explained in greater
detail in the ‘‘Purpose’’ section below,
OPM uses the information collected in
this system to assist in its
administration of, and in carrying out its
functions under 5 U.S.C. chapter 89.
PURPOSE:
The primary purpose of this system of
records is to provide a central database
from which OPM may analyze the
FEHBP to support the management of
the program to ensure the best value for
the enrollees and taxpayers. OPM
collects, manages, and analyzes health
services data provided by health
insurers and administrators through
secure data transfer. OPM analyzes the
data in order to evaluate the cost of care,
utilization of services, and quality of
care for specific population groups,
geographic areas, health plans, health
care providers, disease conditions, and
other relevant categories. Information
contained in the database assists in
improving the effectiveness and
efficiency of care delivered by health
care providers to the enrollees by
facilitating robust contract negotiations,
health plan accountability, performance
management, and program evaluation.
OPM uses identifiable data to create
person-level longitudinal records.
Access to PII is restricted to personnel
needed to create person-level
longitudinal records and to select OPM
analysts using the database for the
analytical purposes described in this
PO 00000
Frm 00111
Fmt 4703
Sfmt 4703
notice. Only de-identified data will be
released by OPM externally for all other
research and analysis purposes.
ROUTINE USES OF RECORDS MAINTAINED IN THE
SYSTEM, INCLUDING CATEGORIES OF USERS AND
THE PURPOSES OF SUCH USES:
1. To disclose FEHBP data to analysts
inside and outside the Federal
Government for the purpose of
conducting analysis of health care and
health insurance trends and topical
health-related issues compatible with
the purposes for which the records were
collected and formulating health care
program changes and enhancements to
limit cost growth, improve outcomes,
increase accountability, and improve
efficiency in program administration. In
all disclosures to analysts external to
OPM under this routine use, only deidentified data will be disclosed. A
public use file that will be maintained
will only contain de-identified data and
will be structured, where appropriate, to
protect enrollee confidentiality where
identities may be discerned because
there are fewer records under certain
demographic or other variables.
POLICIES AND PRACTICES OF STORING,
RETRIEVING, SAFEGUARDING, RETAINING, AND
DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
These records are maintained in
electronic systems.
RETRIEVABILITY:
These records are retrieved by a
unique identifier that will be based on
identifying information (primarily name
and social security number) of the
individual.
SAFEGUARDS:
The Health Claims Data Warehouse
(HCDW), to include the new alternate
data intake and transformation
infrastructure, is operated within the
OPM environment. All employees who
have a need to access the information
are required to have an appropriate
background investigation consistent
with the risk and sensitivity designation
of that position. The investigation must
be favorably adjudicated before they are
allowed physical access to OPM and
access to the HCDW system. Employees
of contractors are required to have an
appropriate background investigation
consistent with the credentialing policy
of the agency and/or the terms of the
underlying contract. Again, the
investigation must be favorably
adjudicated before they are allowed
physical access to OPM and access to
the HCDW system. The OPM
environment is equipped with
electronic badge readers restricting
E:\FR\FM\18APN1.SGM
18APN1
Federal Register / Vol. 78, No. 75 / Thursday, April 18, 2013 / Notices
access to authorized personnel only and
has safeguards in place to alert security
personnel if unauthorized personnel
attempt to gain access to OPM’s
environment. OPM employs armed
physical security guards 365 days a
year, 24 hours a day that patrol OPM
headquarters, to include entry and exit
points. Computer firewalls are
maintained to prevent access by
unauthorized personnel. The HCDW
employs National Institute of Standards
and Technology (NIST) Physical and
Environmental Security Controls
identified in Special Publication SP
800–53 revision 3. The HCDW will
perform a Security Assessment and
Authorization (SA&A) following the
NIST 800–53 rev 3 standard in order to
obtain an Authority to Operate (ATO).
Users within the Office of Planning and
Policy Analysis (PPA) use the system to
perform cost and quality analysis for
health care plans. Two sub-groups of
PPA users have been identified in the
system, those who are permitted to view
PII and those who are not. HCDW
employs role based access controls
(RBAC) to further restrict access to data
contained within HCDW based on users’
roles. The data warehouse is fully
compliant with all applicable provisions
of the Privacy Act, Health Insurance
Portability and Accountability Act
(HIPAA) as an oversight agency, Federal
Information Security Management Act
(FISMA), Records Act and National
Institute of Standards and Technology
(NIST) guidance.
RETENTION AND DISPOSAL:
The records in this system are
retained for 7 years. Computer records
will be destroyed by electronic erasure.
The system has been approved by
NARA to maintain a 7-year record
retention.
SYSTEM MANAGERS AND ADDRESSES:
The system manager is Dennis Hardy,
PMP, HCDW Project Manager, U. S.
Office of Personnel Management, 1900 E
Street NW., Room 2340A, Washington,
DC 20415, 202–606–4281.
sroberts on DSK5SPTVN1PROD with NOTICES
NOTIFICATION AND RECORD ACCESS PROCEDURE:
Individuals wishing to determine
whether this system of records contains
information about them may do so by
writing to the U.S. Office of Personnel
Management, FOIA/PA Requester
Service Center, 1900 E Street NW.,
Room 5415, Washington, DC 20415–
7900 or by emailing foia@opm.gov.
Individuals must furnish the following
information for their records to be
located:
1. Full name.
2. Date and place of birth.
VerDate Mar<15>2010
18:54 Apr 17, 2013
Jkt 229001
3. Social security number.
4. Signature.
5. Available information regarding the
type of information requested.
6. The reason why the individual
believes this system contains
information about him/her.
7. The address to which the
information should be sent.
Individuals requesting access must
also comply with OPM’s Privacy Act
regulations regarding verification of
identity and access to records (5 CFR
297).
CONTESTING RECORD PROCEDURE:
Individuals wishing to request
amendment of records about them
should write to the Office of Personnel
Management, FOIA/PA Requester
Service Center, 1900 E Street NW.,
Room 5415, Washington, DC 20415–
7900. ATTN: Planning and Policy
Analysis.
Individuals must furnish the
following information in writing for
their records to be located:
1. Full name.
2. Date and place of birth.
3. Social Security Number.
4. City, state, and zip code of their
Federal Agency.
5. Signature.
6. Precise identification of the
information to be amended.
Individuals requesting amendment
must also follow OPM’s Privacy Act
regulations regarding verification of
identity and amendment to records (5
CFR 297).
RECORD SOURCE CATEGORIES:
OPM, which has the authority to
obtain this information from health care
insurers and administrators contracted
by OPM to manage the FEHBP, will
obtain the FEHBP records from health
care insurers and administrators. OPM’s
OIG also maintains the FEHBP records
in a separate system of records under its
own authorities.
SYSTEM EXEMPTIONS:
None.
[FR Doc. 2013–09133 Filed 4–17–13; 8:45 am]
BILLING CODE 6325–63–P
SECURITIES AND EXCHANGE
COMMISSION
Proposed Collection; Comment
Request
Upon Written Request, Copies Available
From: Securities and Exchange
Commission, Office of Investor
Education and Advocacy,
Washington, DC 20549–0213.
PO 00000
Frm 00112
Fmt 4703
Sfmt 4703
23315
Extension: Rule 15c3–1; SEC File No.
270–197, OMB Control No. 3235–
0200.
Notice is hereby given that pursuant
to the Paperwork Reduction Act of 1995
(44 U.S.C. 3501 et seq.) (‘‘PRA’’), the
Securities and Exchange Commission
(‘‘Commission’’) is soliciting comments
on the existing collection of information
provided for in Rule 15c3–1 (17 CFR
240.15c3–1), under the Securities
Exchange Act of 1934 (15 U.S.C. 78a et
seq.). The Commission plans to submit
this existing collection of information to
the Office of Management and Budget
(‘‘OMB’’) for extension and approval.
Rule 15c3–1 requires brokers-dealers
to have at all times sufficient liquid
assets to meet their current liabilities,
particularly the claims of customers.
The rule facilitates the monitoring of the
financial condition of broker-dealers by
the Commission and the various selfregulatory organizations. It is estimated
that broker-dealer respondents
registered with the Commission and
subject to the collection of information
requirements of Rule 15c3–1 incur an
aggregate annual time burden of 71,818
hours to comply with this rule and an
aggregate annual external cost of
$160,000.
Written comments are invited on: (a)
Whether the proposed collection of
information is necessary for the proper
performance of the functions of the
Commission, including whether the
information shall have practical utility;
(b) the accuracy of the Commission’s
estimates of the burden of the proposed
collection of information; (c) ways to
enhance the quality, utility, and clarity
of the information collected; and (d)
ways to minimize the burden of the
collection of information on
respondents, including through the use
of automated collection techniques or
other forms of information technology.
Consideration will be given to
comments and suggestions submitted in
writing within 60 days of this
publication.
An agency may not conduct or
sponsor, and a person is not required to
respond to, a collection of information
unless it displays a currently valid OMB
control number.
Please direct your written comments
to: Thomas Bayer, Director/Chief
Information Officer, Securities and
Exchange Commission, c/o Remi PavlikSimon, 6432 General Green Way,
Alexandria, Virginia 22312 or send an
email to: PRA_Mailbox@sec.gov.
E:\FR\FM\18APN1.SGM
18APN1
Agencies
[Federal Register Volume 78, Number 75 (Thursday, April 18, 2013)]
[Notices]
[Pages 23313-23315]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2013-09133]
=======================================================================
-----------------------------------------------------------------------
OFFICE OF PERSONNEL MANAGEMENT
Privacy Act of 1974: New System of Records
AGENCY: U.S. Office of Personnel Management (OPM).
ACTION: Notice of amendment to system of records.
-----------------------------------------------------------------------
SUMMARY: OPM has amended an existing system of records subject to the
Privacy Act of 1974 (5 U.S.C. 552a) to reflect the fact that the Office
of Planning and Policy Analysis (PPA) is receiving Federal Employees
Health Benefits Program (FEHBP) Health Claims data directly from some
FEHBP carriers, and processing and analyzing this data within OPM. PPA
is developing the alternative data intake process to acquire data from
plans and/or carriers that are outside of the scope of existing OPM
systems.
DATES: This action will be effective without further notice on May 20,
2013 unless comments are received that would result in a contrary
determination.
ADDRESSES: Send written comments by mail to the Office of Personnel
Management, ATTN: Dennis Hardy, PMP, HCDW Project Manager, U. S. Office
of Personnel Management, 1900 E Street NW., Room 2340A, Washington, DC
20415, or by email to dennis.hardy@opm.gov.
FOR FURTHER INFORMATION CONTACT: Dennis Hardy, PMP, HCDW Project
Manager, 202-606-4281.
SUPPLEMENTARY INFORMATION: The Office of Planning and Policy Analysis,
in cooperation with the OPM/Chief Information Officer (CIO), is
implementing an alternate data intake and transformation infrastructure
within the OPM environment to allow OPM to develop, process, and
analyze this additional data in an expeditious manner. This alternate
infrastructure, which is a scaled down version of the Health Claims
Data Warehouse (HCDW) system, also provides a ``hot site'' disaster
recovery capability should the primary environment be unavailable for
data processing and/or analysis. This alternate infrastructure is
easily scalable to support the demands of OPM. In addition to building
the alternative data intake process, PPA will continue to receive
carrier information from OPM's Office of Inspector General (OIG). The
carrier data will be transmitted securely from the physically secured
servers managed by OIG to the secure data intake infrastructure managed
by OPM's OCIO. In total, PPA will be receiving data from nine plans
and/or carriers. This action is necessary to meet the requirements of
the Privacy Act to publish in the Federal Register notice of the
existence and character of records maintained by the Agency (5 U.S.C.
552a(e)(4)). OPM first published a system of records notice pertaining
to the Health Claims Data Warehouse on October 5, 2010, with the
comment period closing November 15, 2010. On November 15, 2010, OPM
extended the comment period to December 15, 2010, and indicated its
intent to modify certain aspects of the system of records notice. On
December 15, 2010, OPM published a notice closing the comment period.
Based on the comments received during the comment period, OPM issued a
revised notice that, among other things, limited the scope of the
system to information pertaining to FEHBP, significantly narrowed the
circumstances under which routine use disclosures will be made from the
system, clarified that only de-identified data will be released outside
of OPM, provided greater detail regarding OPM authorities for
maintaining the system, and further described systems security measures
that will be taken to protect the records.
The purpose of this system of records is to provide a central
database from which OPM may analyze costs and utilization of services
associated with FEHBP to ensure the best value for both enrollees and
taxpayers. OPM collects, manages, and analyzes health services data
that health insurers and administrators provide through secure data
transfer for the program. OPM's analysis of the data includes the cost
of care, utilization of services, and quality of care for specific
population groups, geographic areas, health plans, health care
providers, disease conditions, and
[[Page 23314]]
other relevant categories. The information contained in the database
assists in improving the effectiveness and efficiency of care delivered
by health care providers to the enrollees by facilitating robust
contract negotiations, health plan accountability, performance
management, and program evaluation. OPM uses identifiable data to
create person-level longitudinal records, which are long-term health
records that allow us to examine individual health information over
time. Access to personally identifiable information is highly
restricted to personnel needed to create person-level longitudinal
records and to select OPM analysts using the database for analytical
purposes.
Office of Personnel Management.
John Berry,
Director.
OPM CENTRAL--15
SYSTEM NAME:
Health Claims Data Warehouse (HCDW).
SYSTEM LOCATION:
Office of Personnel Management, 1900 E Street NW., Washington, DC
20415.
CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
This system contains records on the Federal Employees Health
Benefits Program (FEHBP). The FEHBP includes Federal employees, Postal
employees, uniformed service members, retirees, and their family
members who voluntarily participate in the Program.
CATEGORIES OF RECORDS IN THE SYSTEM:
The records in the system may contain the following types of
information on participating enrollees and covered dependents:
a. Name, social security number, date of birth, gender.
b. Home address.
c. Covered dependent information (spouse, dependents)--name, social
security number, date of birth, gender.
d. Enrollee's employing agency.
e. Name of health care provider.
f. Health care provider address.
g. Health care provider taxpayer identification number (TIN) or
carrier identifier.
h. Health care coverage information regarding benefit coverage for
the plan in which the person is enrolled.
i. Health care procedures performed on the individual in the form
of ICD, CPT and other appropriate codes.
j. Health care diagnoses in the form of ICD codes, and treatments,
including prescribed drugs, derived from clinical medical records.
k. Provider charges, amounts paid by the plan and amounts paid by
the enrollee for the above coverage, procedures, and diagnoses.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
Authority for requiring FEHBP carriers to allow OPM access to
records and for requiring reports, as well as authority for OPM's
maintenance of FEHBP health claims information, is provided by 5 U.S.C.
8901, et seq. In particular, section 8910 states, in relevant part:
``(a) The Office of Personnel Management shall make a continuing study
of the operation and administration of this chapter, including surveys
and reports on health benefit plans available to employees and on the
experience of the plans. (b) Each contract entered into under section
8902 of this title shall contain provisions requiring carriers to--(1)
furnish such reasonable reports as the Office determines to be
necessary to enable it to carry out its functions under this chapter;
and (2) permit the Office and representatives of the Government
Accountability Office to examine records of the carriers as may be
necessary to carry out the purposes of this chapter.'' As explained in
greater detail in the ``Purpose'' section below, OPM uses the
information collected in this system to assist in its administration
of, and in carrying out its functions under 5 U.S.C. chapter 89.
PURPOSE:
The primary purpose of this system of records is to provide a
central database from which OPM may analyze the FEHBP to support the
management of the program to ensure the best value for the enrollees
and taxpayers. OPM collects, manages, and analyzes health services data
provided by health insurers and administrators through secure data
transfer. OPM analyzes the data in order to evaluate the cost of care,
utilization of services, and quality of care for specific population
groups, geographic areas, health plans, health care providers, disease
conditions, and other relevant categories. Information contained in the
database assists in improving the effectiveness and efficiency of care
delivered by health care providers to the enrollees by facilitating
robust contract negotiations, health plan accountability, performance
management, and program evaluation. OPM uses identifiable data to
create person-level longitudinal records. Access to PII is restricted
to personnel needed to create person-level longitudinal records and to
select OPM analysts using the database for the analytical purposes
described in this notice. Only de-identified data will be released by
OPM externally for all other research and analysis purposes.
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES
OF USERS AND THE PURPOSES OF SUCH USES:
1. To disclose FEHBP data to analysts inside and outside the
Federal Government for the purpose of conducting analysis of health
care and health insurance trends and topical health-related issues
compatible with the purposes for which the records were collected and
formulating health care program changes and enhancements to limit cost
growth, improve outcomes, increase accountability, and improve
efficiency in program administration. In all disclosures to analysts
external to OPM under this routine use, only de-identified data will be
disclosed. A public use file that will be maintained will only contain
de-identified data and will be structured, where appropriate, to
protect enrollee confidentiality where identities may be discerned
because there are fewer records under certain demographic or other
variables.
POLICIES AND PRACTICES OF STORING, RETRIEVING, SAFEGUARDING, RETAINING,
AND DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
These records are maintained in electronic systems.
RETRIEVABILITY:
These records are retrieved by a unique identifier that will be
based on identifying information (primarily name and social security
number) of the individual.
SAFEGUARDS:
The Health Claims Data Warehouse (HCDW), to include the new
alternate data intake and transformation infrastructure, is operated
within the OPM environment. All employees who have a need to access the
information are required to have an appropriate background
investigation consistent with the risk and sensitivity designation of
that position. The investigation must be favorably adjudicated before
they are allowed physical access to OPM and access to the HCDW system.
Employees of contractors are required to have an appropriate background
investigation consistent with the credentialing policy of the agency
and/or the terms of the underlying contract. Again, the investigation
must be favorably adjudicated before they are allowed physical access
to OPM and access to the HCDW system. The OPM environment is equipped
with electronic badge readers restricting
[[Page 23315]]
access to authorized personnel only and has safeguards in place to
alert security personnel if unauthorized personnel attempt to gain
access to OPM's environment. OPM employs armed physical security guards
365 days a year, 24 hours a day that patrol OPM headquarters, to
include entry and exit points. Computer firewalls are maintained to
prevent access by unauthorized personnel. The HCDW employs National
Institute of Standards and Technology (NIST) Physical and Environmental
Security Controls identified in Special Publication SP 800-53 revision
3. The HCDW will perform a Security Assessment and Authorization (SA&A)
following the NIST 800-53 rev 3 standard in order to obtain an
Authority to Operate (ATO). Users within the Office of Planning and
Policy Analysis (PPA) use the system to perform cost and quality
analysis for health care plans. Two sub-groups of PPA users have been
identified in the system, those who are permitted to view PII and those
who are not. HCDW employs role based access controls (RBAC) to further
restrict access to data contained within HCDW based on users' roles.
The data warehouse is fully compliant with all applicable provisions of
the Privacy Act, Health Insurance Portability and Accountability Act
(HIPAA) as an oversight agency, Federal Information Security Management
Act (FISMA), Records Act and National Institute of Standards and
Technology (NIST) guidance.
RETENTION AND DISPOSAL:
The records in this system are retained for 7 years. Computer
records will be destroyed by electronic erasure. The system has been
approved by NARA to maintain a 7-year record retention.
SYSTEM MANAGERS AND ADDRESSES:
The system manager is Dennis Hardy, PMP, HCDW Project Manager, U.
S. Office of Personnel Management, 1900 E Street NW., Room 2340A,
Washington, DC 20415, 202-606-4281.
NOTIFICATION AND RECORD ACCESS PROCEDURE:
Individuals wishing to determine whether this system of records
contains information about them may do so by writing to the U.S. Office
of Personnel Management, FOIA/PA Requester Service Center, 1900 E
Street NW., Room 5415, Washington, DC 20415-7900 or by emailing
foia@opm.gov. Individuals must furnish the following information for
their records to be located:
1. Full name.
2. Date and place of birth.
3. Social security number.
4. Signature.
5. Available information regarding the type of information
requested.
6. The reason why the individual believes this system contains
information about him/her.
7. The address to which the information should be sent.
Individuals requesting access must also comply with OPM's Privacy
Act regulations regarding verification of identity and access to
records (5 CFR 297).
CONTESTING RECORD PROCEDURE:
Individuals wishing to request amendment of records about them
should write to the Office of Personnel Management, FOIA/PA Requester
Service Center, 1900 E Street NW., Room 5415, Washington, DC 20415-
7900. ATTN: Planning and Policy Analysis.
Individuals must furnish the following information in writing for
their records to be located:
1. Full name.
2. Date and place of birth.
3. Social Security Number.
4. City, state, and zip code of their Federal Agency.
5. Signature.
6. Precise identification of the information to be amended.
Individuals requesting amendment must also follow OPM's Privacy Act
regulations regarding verification of identity and amendment to records
(5 CFR 297).
RECORD SOURCE CATEGORIES:
OPM, which has the authority to obtain this information from health
care insurers and administrators contracted by OPM to manage the FEHBP,
will obtain the FEHBP records from health care insurers and
administrators. OPM's OIG also maintains the FEHBP records in a
separate system of records under its own authorities.
SYSTEM EXEMPTIONS:
None.
[FR Doc. 2013-09133 Filed 4-17-13; 8:45 am]
BILLING CODE 6325-63-P