Privacy Act of 1974; Privacy Act System of Records, 77503-77508 [2013-30458]

Agencies

• National Aeronautics and Space Administration

[Federal Register Volume 78, Number 246 (Monday, December 23, 2013)]
[Notices]
[Pages 77503-77508]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2013-30458]


-----------------------------------------------------------------------

NATIONAL AERONAUTICS AND SPACE ADMINISTRATION

[Notice 13-149]


Privacy Act of 1974; Privacy Act System of Records

AGENCY: National Aeronautics And Space Administration (NASA).

ACTION: Notice of proposed revisions to existing Privacy Act systems of 
records.

-----------------------------------------------------------------------

SUMMARY: Pursuant to the provisions of the Privacy Act of 1974 (5 
U.S.C. 552a), the National Aeronautics and Space Administration is 
issuing public notice of its proposal to modify its previously noticed 
system of records. This notice publishes updates of those systems of 
records as set forth below under the caption SUPPLEMENTARY INFORMATION.

DATES: Submit comments within 30 calendar days from the date of this 
publication.

ADDRESSES: Patti F. Stockman, Privacy Act Officer, Office of the Chief 
Information Officer, National Aeronautics and Space Administration 
Headquarters, Washington, DC 20546-0001, (202) 358-4787, NASA-PAOfficer@nasa.gov.

FOR FURTHER INFORMATION CONTACT: NASA Privacy Act Officer, Patti F. 
Stockman, (202) 358-4787, NASA-PAOfficer@nasa.gov.

SUPPLEMENTARY INFORMATION: Minor modifications of the NASA systems of 
records include: Updates of locations as well as system and subsystem 
managers; addition of routine uses; and correction of previous 
typographical errors. Changes for specific NASA systems of records are 
set forth below:
    NASA Freedom of Information Act System/NASA 10FOIA: Change ``GOIA'' 
to ``FOIA'' under Routine Uses; update the Safeguards section.
    History Archives Biographical Collection/NASA 10HABC: Add Standard 
Routine Uses and refine the System Manager title.
    Human Experimental and Research Data Records/NASA 10HERD: Refine 
system locations and corresponding subsystem managers; update the 
Safeguards section.
    Health Information Management System/NASA 10HIMS: Refine system 
locations and corresponding subsystem managers; update the Safeguards 
section.
    Inspector General Investigations Case Files/NASA 10IGIC: Delete a 
location where records are not maintained; update authorities for 
maintenance of the system; clarify some and add other routine uses; 
update the Safeguards section.

Larry N. Sweet,
NASA Chief Information Officer.
NASA 10FOIA

SYSTEM NAME:
    NASA Freedom of Information Act System.

SECURITY CLASSIFICATION:
    None.

SYSTEM LOCATION:
    Locations 1-11 and 18, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    Individuals or their representatives who have submitted Freedom of 
Information Act (FOIA)/Privacy Act (PA) requests for records and/or 
FOIA administrative appeals with NASA; individuals whose requests for 
records have been referred to the Agency by other agencies; individuals 
who are the subject of such requests, appeals; and/or the NASA 
personnel assigned to handle such requests and appeals.

CATEGORIES OF RECORDS IN THE SYSTEM:
    This system consists of records created or compiled in response to 
FOIA, FOIA/PA or PA requests for records or subsequent administrative 
appeals and may include: The requester's name, address, telephone 
number, email address; the original requests and administrative 
appeals; responses to such requests and appeals; all related memoranda, 
correspondence, notes and other related or supporting documentation, 
and in some instances copies of requested records and records under 
administrative appeal.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    51 U.S.C. 20113; 44 U.S.C. 3101; 5 U.S.C. 552; 14 CFR part 1206.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND THE PURPOSES OF SUCH USES:
    This system is maintained for the purpose of processing and 
tracking access requests and administrative appeals under the FOIA; for 
the purpose of maintaining a FOIA administrative record regarding 
Agency action on such requests and appeals; and for the Agency in 
carrying out any other responsibilities under the FOIA and applicable 
executive orders. Any disclosures of information will be compatible 
with the purpose for which the Agency collected the information. The 
records and information in these records may be disclosed in accordance 
with a NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, 
AND DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
    Records in this system are maintained in paper files; copies may 
also be maintained in electronic format.

RETRIEVABILITY:
    Information is retrieved by FOIA case file numbers.

SAFEGUARDS:
    Records are maintained on a secure NASA server and protected in 
accordance with all Federal standards and those established in NASA 
regulations at 14 CFR 1212.605. Additionally, the server and data 
management environments employ infrastructure encryption technologies 
both in data transmission and at rest on servers. An approved security 
plan is in place for the system containing the records in accordance 
with OMB Circular A-130, Management of Federal Information Resources. 
Only authorized personnel requiring information in the official 
discharge of their duties are

[[Page 77504]]

authorized access to records through approved access or authentication 
methods. Access to electronic records is achieved only from 
workstations within the NASA Intranet or via a secure Virtual Private 
Network (VPN) connection that requires two-factor hardware token 
authentication. Non-electronic records are secured in locked rooms or 
files.

RETENTION AND DISPOSAL:
    Records are retained and disposed of in accordance with guidelines 
defined in the NASA Procedural Requirements (NPR) 1441.1D, NASA Records 
Retention Schedules (NRRS), Schedule 1, Item 49.

SYSTEM MANAGER AND ADDRESS:
    System Manager: Principal Agency FOIA Officer, Office of 
Communications, Location 1, as set forth in Appendix A. Subsystem 
Managers: Center FOIA Officers, located within locations 2-11 and 18, 
as set forth in Appendix A.

NOTIFICATION PROCEDURE:
    Individuals interested in inquiring about their records should 
notify the system manager or subsystem manager at the appropriate NASA 
Center, as set forth in Appendix A.

RECORD ACCESS PROCEDURES:
    Individuals seeking to access their FOIA case file should submit 
their request in writing to the system manager or subsystem manager at 
the appropriate NASA Center, as set forth in Appendix A. The request 
envelope should be clearly marked, ``PRIVACY ACT REQUEST FOR ACCESS.'' 
The request should include a general description of the records sought, 
FOIA case file number, and must include your full name, current 
address, and the date. The request must be signed and either notarized 
or submitted under penalty of perjury. The system manager may require a 
notarized signature. Some information may be exempt from access in 
accordance with FOIA regulations.

CONTESTING RECORD PROCEDURES:
    The NASA regulations governing access to records, procedures for 
contesting the content and for appealing initial determinations are set 
forth in Title 14, Code of Federal Regulations, Part 1212.

RECORD SOURCE CATEGORIES:
    Information is collected directly from individuals making Freedom 
of Information Act requests.

EXEMPTIONS CLAIMED FOR THE SYSTEM:
    None.
NASA 10HABC

SYSTEM NAME:
    History Archives Biographical Collection.

SECURITY CLASSIFICATION:
    None.

SYSTEM LOCATION:
    Location 1 and 11 as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    This system maintains information on individuals who are of 
historical significance in aeronautics, astronautics, space science, 
and other concerns of NASA.

CATEGORIES OF RECORDS IN THE SYSTEM:
    Biographical data; speeches and articles by an individual; 
correspondence, interviews, and various other tapes and transcripts of 
program activities.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    51 U.S.C. 20112(a)(3) and 44 U.S.C. 3101.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND THE PURPOSE OF SUCH USES:
    The following are routine uses:
    1. Disclosure to scholars (historians and other disciplines) or any 
other interested individuals for research in writing dissertations, 
articles, and books, for government, commercial, and nonprofit 
publication or developing material for other media use.
    2. NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, 
AND DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
    Records in this system are maintained as hard-copy documents and on 
electronic media.

RETRIEVABILITY:
    The records are retrieved from the system by the individual's name.

SAFEGUARDS:
    Because these records are archive material and, therefore, a matter 
of public information, there are no special safeguard procedures 
required.

RETENTION AND DISPOSAL:
    Records are retained indefinitely in Agency reference collections 
in history offices, but may be destroyed when no longer needed in 
accordance with NASA Records Retention Schedules, Schedule 1 Item 10.

SYSTEM MANAGERS AND ADDRESSES:
    Chief Archivist, Location 1.
    Subsystem Manager: Public Affairs Officer, Location 11 as set forth 
in Appendix A.

NOTIFICATION PROCEDURE:
    Information may be obtained from the system manager listed above.

RECORD ACCESS PROCEDURE:
    Requests from individuals should be addressed to same address as 
stated in the Notification section above.

CONTESTING RECORD PROCEDURES:
    The NASA regulations for access to records and for contesting 
contents and appealing initial determinations by the individual 
concerned appear at 14 CFR part 1212.

RECORD SOURCE CATEGORIES:
    Press releases, newspapers, journals, copies of internal Agency 
records, and the individuals themselves.

EXEMPTIONS CLAIMED FOR THE SYSTEM:
    None.
NASA 10HERD

SYSTEM NAME:
    Human Experimental and Research Data Records.

SECURITY CLASSIFICATION:
    None.

SYSTEM LOCATION:
    Locations 2, 5, 6, and 8, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    The information in this system of records is obtained from 
individuals who have been involved in space flight, aeronautical 
research flight, and/or participated in NASA tests or experimental or 
research programs; civil service employees, military, employees of 
other government agencies, contractor employees, students, human 
subjects (volunteer or paid), and other volunteers on whom information 
is collected as part of an experiment or study.

CATEGORIES OF RECORDS IN THE SYSTEM:
    This system of records contains data obtained in the course of an 
experiment, test, or research medical data from in-flight records, 
other information collected in connection with an experiment, test, or 
research.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    51 U.S.C. 20113(a) and 44 U.S.C. 3101.

[[Page 77505]]

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND THE PURPOSES OF SUCH USES:
    Any disclosures of information will be compatible with the purpose 
for which the Agency collected the information. Records and information 
in this system may be disclosed: (1) To other individuals or 
organizations, including Federal, State, or local agencies, and 
nonprofit, educational, or private entities, who are participating in 
NASA programs or are otherwise furthering the understanding or 
application of biological, physiological, and behavioral phenomena as 
reflected in the data contained in this system of records; (2) To 
external biomedical professionals and independent entities to support 
internal and external reviews for purposes of research quality 
assurance; (3) To agency contractors or other Federal agencies, as 
necessary for the purpose of assisting NASA in the efficient 
administration of its programs; (4) To a Congressional office in 
response to an inquiry from that office made at the request of the 
subject of the record; and; and (5) In accordance with standard routine 
uses set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, AND 
DISPOSITIONING OF RECORDS IN THE SYSTEM:
STORAGE:
    Records in this system are stored as paper documents, electronic 
media, micrographic media, photographs, or motion pictures film, and 
various medical recordings such as electrocardiograph tapes, 
stripcharts, and x-rays.

RETRIEVABILITY:
    Records are retrieved by the individual's name, experiment or test; 
arbitrary experimental subject number; flight designation; or 
crewmember designation on a particular space or aeronautical flight.

SAFEGUARDS:
    Records are maintained on secure NASA servers and protected in 
accordance with all Federal standards and those established in NASA 
regulations at 14 CFR 1212.605. Additionally, server and data 
management environments employ infrastructure encryption technologies 
both in data transmission and at rest on servers. Approved security 
plans are in place for systems containing the records in accordance 
with OMB Circular A-130, Management of Federal Information Resources. 
Only authorized personnel requiring information in the official 
discharge of their duties are authorized access to records through 
approved access or authentication methods. Access to electronic records 
is achieved only from workstations within the NASA Intranet or via a 
secure Virtual Private Network (VPN) connection that requires two-
factor hardware token authentication. Non-electronic records are 
secured in locked rooms or files.

RETENTION AND DISPOSAL:
    Records are maintained in Agency files for varying periods of time 
depending on the need for use of the records and destroyed when no 
longer needed in accordance with NASA Records Retention Schedules, 
Schedule 7 Item 16.

SYSTEM MANAGER(S) AND ADDRESS(ES)
    Chief Health and Medical Officer, Location 1.
    Subsystem Managers: Director Life Sciences Directorate, Chief Space 
Medicine Division, and Program Scientist Human Research Program, all at 
Location 5; Institutional Review Board (IRB) Chairs at Locations 2, 6, 
and 8, as set forth in Appendix A.

NOTIFICATION PROCEDURE:
    Information may be obtained by contacting the cognizant system or 
subsystem manager listed above. Requests must contain the identifying 
data concerning the requester, e.g., first, middle and last name; date 
of birth; and Social Security Number.

RECORD ACCESS PROCEDURES:
    Requests from individuals should be addressed to the same address 
as stated above.

CONTESTING RECORD PROCEDURES:
    The NASA regulations for access to records and for contesting and 
appealing initial determinations by the individual concerned appear at 
14 CFR part 1212.

RECORD SOURCE CATEGORIES:
    Information in this system is obtained from experimental test 
subjects, physicians and other health care providers, principal 
investigators and other researchers, and previous experimental test or 
research records.

EXEMPTIONS CLAIMED FOR THE SYSTEM:
    None.
NASA 10HIMS

SYSTEM NAME:
    Health Information Management System.

SECURITY CLASSIFICATION:
    None

SYSTEM LOCATION:
    Medical Clinics/Units and Environmental Health Offices at Locations 
1 through 14 inclusive, and 19, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    This system maintains information on NASA civil service employees 
and applicants; other Agency civil service and military employees 
working at NASA; astronauts and their families; International Space 
Partners astronauts, their families, or other space flight personnel on 
temporary or extended duty at NASA; onsite contractor personnel who 
receive job-related examinations under the NASA Occupational Health 
Program, have work-related mishaps or accidents, or come to clinic for 
emergency or first-aid treatment; visitors to NASA Centers who come to 
the clinic for emergency or first-aid treatment.

CATEGORIES OF RECORDS IN THE SYSTEM:
    This system contains general medical records of medical care, first 
aid, emergency treatment, examinations (e.g., surveillance, hazardous 
workplace, certification, flight, special purpose and health 
maintenance), exposures (e.g., hazardous materials and ionizing 
radiation), and consultations by non-NASA physicians.
    Information resulting from physical examinations, laboratory and 
other tests, and medical history forms; treatment records; screening 
examination results; immunization records; administration of 
medications prescribed by private/personal or NASA flight surgeon 
physicians; consultation records; and hazardous exposure and other 
health hazard/abatement data.
    Medical records, behavioral health records, and physical 
examination records of Astronauts and their families.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    51 U.S.C. 2475 20113(a); 44 U.S.C. 3101; 42 CFR part 2.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND THE PURPOSES OF SUCH USES
    Any disclosures of information will be compatible with the purpose 
for which the Agency collected the information. The records and 
information in this system may be disclosed: (1) To external medical 
professionals and independent entities to support internal and external 
reviews for purposes of medical quality assurance; (2) To private or 
other government health care providers for consultation or referral; 
(3) To the Office of Personnel Management, Occupational

[[Page 77506]]

Safety and Health Administration, and other Federal or State agencies 
as required in accordance with the Federal agency's special program 
responsibilities; (4) To insurers for reimbursement; (5) To employers 
of non-NASA personnel in support of the Mission Critical Space Systems 
Personnel Reliability Program; (6) pursuant to NASA Space Act 
agreements to international partners for mission support and continuity 
of care for their employees; (7) To non-NASA personnel performing 
research, studies, or other activities through arrangements or 
agreements with NASA and for mutual benefit; (8) To the public of pre-
space flight information having mission impact concerning an individual 
crewmember, limited to the crewmember's name and the fact that a 
medical condition exists; (9) To public, limited to the crewmember's 
name and the fact that a medical condition exists, if a flight 
crewmember is, for medical reasons, unable to perform a scheduled 
public event during the time period following Space Shuttle landing and 
concluding with completion of the post space flight return to duty 
medical evaluation; (10) To the public of medical conditions arising 
from accidents, consistent with NASA regulations; (11) To agency 
contractors or other Federal agencies, as necessary for the purpose of 
assisting NASA in the efficient administration of its programs; (12) To 
a Congressional office in response to an inquiry from that office made 
at the request of the subject of the record; and (13) In accordance 
with standard routine uses 1-7 as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, AND 
DISPOSITIONING OF RECORDS IN THE SYSTEM:
STORAGE:
    Records are stored in multiple formats including paper, digital, 
micrographic, photographic, and as medical recordings such as 
electrocardiograph tapes, x-rays and strip charts.

RETRIEVABILITY:
    Records are retrieved from the system by the individual's name, 
date of birth, and/or Social Security or other assigned Number.

SAFEGUARDS:
    Records are maintained on secure NASA servers and protected in 
accordance with all Federal standards and those established in NASA 
regulations at 14 CFR 1212.605. Additionally, server and data 
management environments employ infrastructure encryption technologies 
both in data transmission and at rest on servers. Approved security 
plans are in place for systems containing the records in accordance 
with OMB Circular A-130, Management of Federal Information Resources. 
Only authorized personnel requiring information in the official 
discharge of their duties are authorized access to records through 
approved access or authentication methods. Access to electronic records 
is achieved only from workstations within the NASA Intranet or via a 
secure Virtual Private Network (VPN) connection that requires two-
factor hardware token authentication. Non-electronic records are 
secured in locked rooms or files.

RETENTION AND DISPOSAL:
    Records are maintained in Agency files and destroyed by series in 
accordance with NASA Records Retention Schedule 1, Item 126, and NASA 
Records Retention Schedule 8, Item 57.

SYSTEM MANAGER(S) AND ADDRESS(ES):
    Chief Health and Medical Officer at Location 1.
    Subsystem Managers: Director Occupational Health at Location 1; 
Chief, Space Medicine Division at Location 5; Occupational Health 
Contracting Officers Technical Representatives at Locations 2-4, 6-14, 
and 19. Locations are as set forth in Appendix A.

NOTIFICATION PROCEDURE:
    Information may be obtained by contacting the cognizant system or 
subsystem manager listed above. Requests must contain the identifying 
data concerning the requester, e.g., first, middle and last name; date 
of birth; and Social Security Number.

RECORD ACCESS PROCEDURES:
    Individual written requests for information shall be addressed to 
the System Manager at Location 1 or the subsystem manager at the 
appropriate NASA Center.

CONTESTING RECORD PROCEDURES:
    The NASA regulations for access to records and for contesting 
contents and appealing initial determinations by the individual 
concerned appear in 14 CFR part 1212.

RECORD SOURCE PROCEDURES:
    The information in this system of records is obtained from 
individuals, physicians, and previous medical records of individuals.

EXEMPTIONS CLAIMED FOR THE SYSTEM:
    None.
NASA 10IGIC

SYSTEM NAME:
    Inspector General Investigations Case Files.

SECURITY CLASSIFICATION:
    Some of the material contained in the system has been classified in 
the interests of national security pursuant to Executive Order 11652.

SYSTEM LOCATION:
    Locations 1, 2, 4 through 11, 14, 16 and 17 as set forth in 
Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    This system maintains information on current and former employees 
of NASA, contractors, and subcontractors, and others whose actions have 
affected NASA.

CATEGORIES OF RECORDS IN THE SYSTEM:
    Case files pertaining to matters including, but not limited to, the 
following classifications of cases: (1) Fraud against the Government, 
(2) theft of Government property, (3) bribery, (4) lost or stolen lunar 
samples, (5) misuse of Government property, (6) conflict of interest, 
(7) waiver of claim for overpayment of pay, (8) leaks of Source 
Evaluation Board information, (9) improper personal conduct, (10) 
irregularities in awarding contracts, (11) computer crimes, (12) 
research misconduct, and (13) whistleblower protection investigations 
under various statutes and regulations.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    51 U.S.C. 20113; 51 U.S.C. 20114; 44 U.S.C. 3101; Inspector General 
Act of 1978, as amended, 5 U.S.C. Appendix 3.

PURPOSES:
    Information in this system of records is collected in the course of 
investigating alleged crimes and other violations of law or regulations 
that affect NASA. The information is used by prosecutors, Agency 
managers, law enforcement agencies, Congress, NASA contractors, and 
others to address the crimes and other misconduct discovered during 
investigations.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND THE PURPOSES OF SUCH USES:
    The following are routine uses: (1) Responding to the White House, 
the Office of Management and Budget, and other organizations in the 
Executive Office of the President regarding matters inquired of; (2) 
disclosure to a congressional office from the record of an individual 
in response to a written inquiry from the congressional office

[[Page 77507]]

made at the request of that individual; (3) providing data to Federal 
intelligence elements; (4) providing data to any source from which 
information is requested in the course of an investigation, and to 
identify the type of information requested; (5) providing personal 
identifying data to Federal, State, local, or foreign law enforcement 
representatives seeking confirmation of identity of persons under 
investigations; (6) disclosing, as necessary, to a contractor, 
subcontractor, or grantee firm or institution, to the extent that the 
disclosure is in NASA's interest and is relevant and necessary in order 
that the contractor, subcontractor, or grantee is able to take 
administrative or corrective action; (7) disclosing to any official 
(including members of the Council of Inspectors General on Integrity 
and Efficiency (CIGIE) and staff and authorized officials of the 
Department of Justice and Federal Bureau of Investigation) charged with 
the responsibility to conduct qualitative assessment reviews of 
internal safeguards and management procedures employed in Office of 
Inspector General (OIG) operations; (8) disclosing to members of the 
CIGIE for the preparation of reports to the President and Congress on 
the activities of the Inspectors General; (9) disclosing to the public 
when: The matter under investigation has become public knowledge, or 
when the Inspector General determines that such disclosure is necessary 
to preserve confidence in the integrity of the OIG investigative 
process, or to demonstrate the accountability of NASA officers, or 
employees, or other individuals covered by this system, unless the 
Inspector General determines that disclosure of the specific 
information in the context of a particular case would constitute an 
unwarranted invasion of personal privacy; (10) disclosing to the news 
media and public when there exists a legitimate public interest (e.g., 
to provide information on events in the criminal process, such as 
indictments), or when necessary for protection from imminent threat to 
life or property; (11) disclosing to any individual or entity when 
necessary to elicit information that will assist an OIG investigation 
or audit; (12) disclosing to complainants and/or victims to the extent 
necessary to provide such persons with information and explanations 
concerning the progress and/or results of the investigation or case 
arising from the matters of which they complained and/or of which they 
were a victim; (13) disclosing to contractors, grantees, experts, 
consultants, students, and others performing or working on a contract, 
service, grant, cooperative agreement, or other assignment for the 
Federal Government, who have a need to know such information in order 
to accomplish an agency function; (14) NASA standard routine uses as 
set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, 
AND DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
    Records in this system are maintained as hard-copy documents and on 
electronic media.

RETRIEVABILITY:
    Each OIG investigation is assigned a case number and all records 
relating to a particular investigation are filed and retrieved by that 
case number. Records may also be retrieved from the system by the name 
of an individual.

SAFEGUARDS:
    Records are maintained on secure NASA servers and protected in 
accordance with all Federal standards and those established in NASA 
regulations at 14 CFR 1212.605. Additionally, server and data 
management environments employ infrastructure encryption technologies 
both in data transmission and at rest on servers. Approved security 
plans are in place for systems containing the records in accordance 
with OMB Circular A-130, Management of Federal Information Resources. 
Only authorized personnel requiring information in the official 
discharge of their duties are authorized access to records through 
approved access or authentication methods. Access to electronic records 
is achieved only from workstations within the NASA Intranet or via a 
secure Virtual Private Network (VPN) connection that requires two-
factor hardware token authentication. Non-electronic records are 
secured in locked rooms or files.

RETENTION AND DISPOSAL:
    Records are maintained in Agency files and destroyed in accordance 
with NASA Procedural Requirements (NPR) 1441.1, NASA Records Retention 
Schedules, Schedule 9. Files containing information of an investigative 
nature but not related to a specific investigation are destroyed in 
accordance with NPR 1441.1. Significant case files are scheduled for 
disposition with the National Archives and Records Administration when 
closed. All other case files are destroyed 10 years after file is 
closed.

SYSTEM MANAGER AND ADDRESS:
    Assistant Inspector General for Investigations, Location 1.
    Subsystem Managers Special and Resident Agents in Charge, Location 
2, 4 through 11 inclusive, 14, 16, and 17 as set forth in Appendix A.

NOTIFICATION PROCEDURE:
    None. System is exempt (see below).

RECORD ACCESS PROCEDURES:
    None. System is exempt (see below).

CONTESTING RECORD PROCEDURES:
    None. System is exempt (see below).

RECORD SOURCE CATEGORIES:
    Exempt.

EXEMPTIONS CLAIMED FOR THE SYSTEM:
    (1) The Inspector General Investigations Case Files system of 
records is exempt from any part of the Privacy Act (5 U.S.C. 552a), 
EXCEPT the following subsections: (b) relating to conditions of 
disclosure; (c)(1) and (2) relating to keeping and maintaining a 
disclosure accounting; (e)(4)(A)-(F) relating to publishing a system 
notice setting forth name, location, categories of individuals and 
records, routine uses, and policies regarding storage, retrievability, 
access controls, retention and disposal of the records; (e)(6), (7), 
(9), (10), and (11) relating to the dissemination and maintenance of 
records; (i) relating to criminal penalties. This exemption applies to 
those records and information contained in the system of records 
pertaining to the enforcement of criminal laws.
    (2) To the extent that there may exist noncriminal investigative 
files within this system of records, the Inspector General 
Investigations Case Files system of records is exempt from the 
following subsections of the Privacy Act (5 U.S.C. 552a): (c)(3) 
relating to access to disclosure accounting, (d) relating to access to 
reports, (e)(1) relating to the type of information maintained in the 
records; (e)(4)(G), (H), and (I) relating to publishing the system 
notice information as to agency procedures for access and amendment and 
information as to the categories of sources of records, and (f) 
relating to developing agency rules for gaining access and making 
corrections. The determination to exempt this system of records has 
been made by the Administrator of NASA in accordance with 5 
U.S.C.552a(j) and (k) and subpart 5 of the NASA regulations appearing 
in 14 CFR part 1212, for the reason that a component of the Office of 
Inspector General, NASA, performs as its principal function activities 
pertaining to the enforcement of

[[Page 77508]]

criminal laws, within the meaning of 5 U.S.C. 552a(j)(2).

[FR Doc. 2013-30458 Filed 12-20-13; 8:45 am]
BILLING CODE 7510-13-P