Privacy Act of 1974, 8245-8250 [2014-02890]

Download as PDF Federal Register / Vol. 79, No. 28 / Tuesday, February 11, 2014 / Notices d. Title 38 U.S.C. 5701(f)(1) authorized the disclosure of names or addresses, or both of present or former members of the Armed Forces and/or their beneficiaries to nonprofit organizations (including members of Congress) to notify Veterans of Title 38 benefits and to provide assistance to Veterans in obtaining these benefits. This release includes VA’s Outreach Program for the purpose of advising Veterans of non-VA Federal State and local benefits and programs. Affected Public: Individuals or households, Not for profit institutions, and State, local or tribal government. Estimated Annual Burden: a. Application of Service Representative for Placement on Mailing List, VA Form 3215—25 hours. b. Request for and Consent to Release of Information From Claimant’s Records, VA Form 3288—18,875 hours. c. Request to Correspondent for Identifying Information, VA Form Letter 70–2—3,750 hours. d. 38 CFR 1.519(A) Lists of Names and Addresses—50 hours. Estimated Average Burden Per Respondent: a. Application of Service Representative for Placement on Mailing List, VA Form 3215—10 minutes. b. Request for and Consent to Release of Information From Claimant’s Records, VA Form 3288—7.5 minutes. c. Request to Correspondent for Identifying Information, VA Form Letter 70–2—5 minutes. d. 38 CFR 1.519(A) Lists of Names and Addresses—60 minutes. Frequency of Response: On occasion. Estimated Number of Respondents: a. Application of Service Representative for Placement on Mailing List, VA Form 3215—150. b. Request for and Consent to Release of Information From Claimant’s Records, VA Form 3288—151,000. c. Request to Correspondent for Identifying Information, VA Form Letter 70–2—45,000. d. 38 CFR 1.519(A) Lists of Names and Addresses—50. Dated: February 6, 2014. By direction of the Secretary: Crystal Rennie, VA Clearance Officer, Department of Veterans Affairs. [FR Doc. 2014–02916 Filed 2–10–14; 8:45 am] tkelley on DSK3SPTVN1PROD with NOTICES BILLING CODE 8320–01–P DEPARTMENT OF VETERANS AFFAIRS Privacy Act of 1974 AGENCY: Department of Veterans Affairs. VerDate Mar<15>2010 17:58 Feb 10, 2014 Jkt 232001 Notice of Amendment of System of Records ‘‘National Patient DatabasesVA’’ (121VA10P2). ACTION: As required by the Privacy Act of 1974 (5 U.S.C. 552a(e)(4)), notice is hereby given that the Department of Veterans Affairs (VA) is amending the system of records entitled ‘‘National Patient Databases-VA’’ (121VA10P2) as set forth in 77 FR 27863. VA is amending the system of records by revising the Categories of Records in the System, Purposes, Routine Uses of Records Maintained in the System, Including Categories of Users and the Purposes of Such Uses, System Manager and Address, Notification Procedure, and Record Access Procedure, Records Source Categories and Appendix 4. VA is republishing the system notice in its entirety. DATES: Comments on this new system of records must be received no later than March 13, 2014. If no public comment is received during the period allowed for comment or unless otherwise published in the Federal Register by VA, the new system will become effective March 13, 2014. ADDRESSES: Written comments concerning the proposed new system of records may be submitted through www.regulations.gov; by mail or handdelivery to Director, Regulations Management (02REG), Department of Veterans Affairs, 810 Vermont Avenue NW., Room 1068, Washington, DC 20420; or by fax to (202) 273–9026. All comments received will be available for public inspection in the Office of Regulation Policy and Management, Room 1063B, between the hours of 8:00 a.m. and 4:30 p.m., Monday through Friday (except holidays). Please call (202) 461–4902 for an appointment. (This is not a toll free number.) In addition, during the comment period, comments may be viewed online through the Federal Docket Management System at www.regulations.gov. FOR FURTHER INFORMATION CONTACT: Stephania H. Griffin, Privacy Officer, Veterans Health Administration (VHA), Department of Veterans Affairs, 810 Vermont Avenue NW., Washington, DC 20420, telephone (704) 245–2492. SUPPLEMENTARY INFORMATION: Background: VHA is the largest health care provider in the country. VHA collects health care information from its local facilities to evaluate quality of services, clinical resource utilization, and patient safety, as well as to distribute medical information, such as alerts or recalls, track specific diseases, and monitor patients. National-level information is also needed for other SUMMARY: PO 00000 Frm 00095 Fmt 4703 Sfmt 4703 8245 activities, such as medical research and the development of National Best Clinical Practice Guidelines and National Quality Standards. VHA gathers this information from a wide variety of sources, including directly from Veterans; from information systems located at VHA medical centers, Veterans Integrated Service Networks (VISN), other VHA facilities, such as the Health Eligibility Center; and Federal departments and agencies such as the U.S. Department of Defense (DoD) and the Food and Drug Administration. As the data is collected, VHA stores it in several national patient databases. The Categories of Records in the System and the Records Source Categories are being amended to change 24VA19 to 24VA10P2. The purpose of this system of records is being amended to state that Healthcare Associated Infections and Influenza Surveillance System (HAIISS) data is available to VHA clinicians for the monitoring of, among other things, influenza, emerging infectious diseases or syndromes associated with natural and or bioterrorist activities, pathogen resistance to antimicrobials, and healthcare-associated infections (HAI). Data is also available for transmittal to state/local/Federal public health authorities for reportable diseases, biosurveillance, and Health Information Technology for Economic and Clinical Health Act Meaningful Use requirements purposes. Routine use 26 has been added to state that health care information may be disclosed to the Food and Drug Administration (FDA), or a person subject to the jurisdiction of the FDA, with respect to FDA-regulated products for purposes of reporting adverse events, product defects or problems, or biological product deviations; tracking products; enabling product recalls, repairs, or replacements; and/or conducting post marketing surveillance. System Manager and Address, Notification Procedure, and Record Access Procedure are being amended to change from the Austin Automation Center to the Austin Information Technology Center. Appendix 4 has been amended to remove the Corporate Data Warehouse; Regional Data Warehouses; and Veterans Informatics and Information Computing Infrastructure, which are now located in the Corporate Data Warehouse-VA (172VA10P2), Appendix A. The Electronic Surveillance System for the Early Notification of CommunityBased Epidemics is being removed from the Appendix. Master Patient Index is being changed to Master Veteran Index. Also, the Homeless Veterans Registry is E:\FR\FM\11FEN1.SGM 11FEN1 8246 Federal Register / Vol. 79, No. 28 / Tuesday, February 11, 2014 / Notices 121VA10P2 home and/or mailing address, home telephone number, emergency contact information such as name, address, telephone number, and relationship); prosthetic and sensory aid serial numbers; medical record numbers; integration control numbers; information related to medical examination or treatment (e.g., location of VA medical facility providing examination or treatment, treatment dates, medical conditions treated or noted on examination); information related to military service and status; 3. Medical benefit and eligibility information; 4. Patient workload data such as admissions, discharges, and outpatient visits; resource utilization such as laboratory tests, x-rays; 5. Patient Satisfaction Survey Data which include questions and responses; 6. External Peer Review Program (EPRP) data capture; 7. Online Data Collection system supported by Northeast Program Evaluation Center and VHA Support Service Center to include electronic information from all Veteran homeless programs and external sources; and 8. Clinically oriented information associated with My HealtheVet such as secure messages. SYSTEM NAME: AUTHORITY FOR MAINTENANCE OF THE SYSTEM: being amended to reflect a change in address to Austin Information Technology Center, 1615 Woodward Street, Austin, Texas, 78772. The notice of amendment and an advance copy of the system notice have been sent to the appropriate Congressional committees and to the Director of Office of Management and Budget (OMB) as required by 5 U.S.C. 552a(r) (Privacy Act) and guidelines issued by OMB (65 FR 77677), December 12, 2000. Signing Authority The Secretary of Veterans Affairs, or designee, approved this document and authorized the undersigned to sign and submit the document to the Office of the Federal Register for publication electronically as an official document of the Department of Veterans Affairs. Jose D. Riojas, Chief of Staff, Department of Veteran Affairs, approved this document on January 23, 2014, for publication. Dated: February 6, 2014. Robert C. McFetridge, Director, Office of Regulation Policy and Management, Office of the General Counsel, Department of Veterans Affairs. National Patient Databases-VA. Title 38, United States Code, Section 501. SYSTEM LOCATION: Records are maintained at VA medical centers, VA data processing centers, VISNs and Office of Information field offices. Address location for each VA national patient database is listed in VA Appendix 4 at the end of this document. CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM: The records contain information for all individuals (1) Receiving health care from VHA, and (2) Providing the health care. Individuals encompass Veterans and their immediate family members, members of the Armed Services, current and former employees, trainees, contractors, subcontractors, consultants, volunteers, and other individuals working collaboratively with VA. tkelley on DSK3SPTVN1PROD with NOTICES CATEGORIES OF RECORDS IN THE SYSTEM: The records may include information and health information related to: 1. Patient medical record abstract information including, but not limited to, information from Patient Medical Record—VA (24VA10P2). 2. Identifying information (e.g., name, birth date, death date, admission date, discharge date, gender, Social Security number, taxpayer identification number); address information (e.g., VerDate Mar<15>2010 17:58 Feb 10, 2014 Jkt 232001 PURPOSES: The records and information may be used for statistical analysis to produce various management, workload tracking, and follow-up reports; to track and evaluate the ordering and delivery of equipment, services, and patient care; for the planning, distribution, and utilization of resources; to monitor the performance of VISNs; and to allocate clinical and administrative support to patient medical care. The data may be used for VA’s extensive research programs in accordance with VA policy. In addition, the data may be used to assist in workload allocation for patient treatment services including provider panel management, nursing care, clinic appointments, surgery, prescription processing, diagnostic and therapeutic procedures; to plan and schedule training activities for employees; for audits, reviews, and investigations conducted by the network directors office and VA Central Office; for quality assurance audits, reviews, and investigations; for law enforcement investigations; and for personnel management, evaluation and employee ratings, and performance evaluations. Survey data will be collected for the PO 00000 Frm 00096 Fmt 4703 Sfmt 4703 purpose of measuring and monitoring national, VISN, and facility-level performance on VHA’s Veteran Health Care Service Standards (VHSS) pursuant to Executive Order 12862 and VHA Customer Service Standards Directive. The VHSS are designed to measure levels of patient satisfaction in areas that patients have defined as important in receiving quality, patient-centered health care. Results of the survey data analysis are shared throughout the VHA system. The EPRP data are collected in order to provide medical centers and outpatient clinics with diagnosis and procedure-specific quality of care information. EPRP is a contracted review of care, specifically designated to collect data to be used to improve the quality of care. The Veteran Homeless records and information will be used for case management in addition to statistical analysis to produce various management, workload tracking, and follow-up reports; to track and evaluate the goal of ending Veteran homelessness. HAIISS data will be available to VHA clinicians to use for the monitoring of health care-associated infections and for the transmittal of data to state/local health departments for biosurveillance purposes. ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES: To the extent that records contained in the system include information protected by 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus; information protected by 38 U.S.C. 5705, i.e., quality assurance records; or information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, such information cannot be disclosed under a routine use unless there is also specific statutory authority permitting the disclosure. VA may disclose protected health information pursuant to the following routine uses where required or permitted by law. 1. VA may disclose on its own initiative any information in this system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or E:\FR\FM\11FEN1.SGM 11FEN1 tkelley on DSK3SPTVN1PROD with NOTICES Federal Register / Vol. 79, No. 28 / Tuesday, February 11, 2014 / Notices charged with enforcing or implementing the statute, regulation, rule, or order. On its own initiative, VA may also disclose the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto. 2. Disclosure may be made to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of the purpose(s) of the request, and identify the type of information requested), when necessary to obtain or provide information relevant to an individual’s eligibility, care history, or other benefits across different Federal, state, or local, public health, health care, or program benefit agencies that improves the quality and safety of health care for our Veterans. 3. Disclosure may be made to a Federal agency in the executive, legislative, or judicial branch, State and local Government or the District of Columbia government in response to its request or at the initiation of VA, in connection with disease tracking, patient outcomes, or other health information required for program accountability. 4. Disclosure may be made to the National Archives and Records Administration and the General Services Administration for records management inspections under authority of Title 44, Chapter 29, of the United States Code. 5. VA may disclose information in this system of records to the Department of Justice (DOJ), either on VA’s initiative or in response to DOJ’s request for the information, after either VA or DOJ determines that such information is relevant to DOJ’s representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the DOJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. 6. Records from this system of records may be disclosed to a Federal agency or VerDate Mar<15>2010 17:58 Feb 10, 2014 Jkt 232001 to a state or local government licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity that maintains records concerning individuals’ employment histories or concerning the issuance, retention, or revocation of licenses, certifications, or registration necessary to practice an occupation, profession, or specialty, in order for the agency to obtain information relevant to an agency decision concerning the hiring, retention, or termination of an employee. 7. Records from this system of records may be disclosed to inform a Federal agency, licensing boards, or appropriate non-governmental entities about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients receiving medical care in the private sector or from another Federal agency. 8. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission, College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews but only to the extent that the information is necessary and relevant to the review. 9. Disclosure may be made to a national certifying body that has the authority to make decisions concerning the issuance, retention, or revocation of licenses, certifications, or registrations required to practice a health care profession, when requested in writing by an investigator or supervisory official of the national certifying body for the purpose of making a decision concerning the issuance, retention, or revocation of the license, certification, or registration of a named health care professional. 10. Records from this system that contain information listed in 5 U.S.C. 7114(b)(4) may be disclosed to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions. 11. Disclosure may be made to the representative of an employee of all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under PO 00000 Frm 00097 Fmt 4703 Sfmt 4703 8247 medical evaluation (formerly fitness-for duty) examination procedures or Department-filed disability retirement procedures. 12. VA may disclose information to officials of the Merit Systems Protection Board, or the Office of Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law. 13. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation. 14. VA may disclose information to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections. 15. Disclosure of medical record data, excluding name and address, unless name and address are furnished by the requester, may be made to non-Federal research facilities for research purposes determined to be necessary and proper when approved in accordance with VA policy. 16. Disclosure of name(s) and address(s) of present or former personnel of the Armed Services, and/ or their dependents, may be made to: (a) a Federal department or agency, at the written request of the head or designee of that agency; or (b) directly to a contractor or subcontractor of a Federal department or agency, for the purpose of conducting Federal research necessary to accomplish a statutory purpose of an agency. When disclosure of this information is made directly to a contractor, VA may impose applicable conditions on the department, agency, and/or contractor to insure the appropriateness of the disclosure to the contractor. 17. Disclosure may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a E:\FR\FM\11FEN1.SGM 11FEN1 tkelley on DSK3SPTVN1PROD with NOTICES 8248 Federal Register / Vol. 79, No. 28 / Tuesday, February 11, 2014 / Notices contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA. 18. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual. 19. VA may disclose information to a Federal agency for the conduct of research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and the VHA Office of Information has determined prior to the disclosure that VHA data handling requirements are satisfied. 20. Disclosure of limited individual identification information may be made to another Federal agency for the purpose of matching and acquiring information held by that agency for VHA to use for the purposes stated for this system of records. 21. VA may, on its own initiative disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out VA’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to VerDate Mar<15>2010 17:58 Feb 10, 2014 Jkt 232001 a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727. 22. On its own initiative, VA may disclose to the general public via an Internet Web site, Primary Care Management Module information, including the names of its providers, provider panel sizes and reports on provider performance measures of quality when approved in accordance with VA policy. 23. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs. 24. VA may disclose names and addresses of present or former members of the Armed Services and/or their dependents under certain circumstances: (a) to any nonprofit organization, if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, or (b) to any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety, if a qualified representative of such organization, agency, or instrumentality has made a written request for such names or addresses for a purpose authorized by law, provided that the records will not be used for any purpose other than that stated in the request and that the organization, agency, or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f). 25. VA may disclose information, including demographic information, to U.S. Department of Housing and Urban Development (HUD) for the purpose of reducing homelessness among Veterans by implementing the Federal strategic plan to prevent and end homelessness and by evaluating and monitoring the HUD-Veterans Affairs Supported Housing program. 26. VA may disclose health care information to the Food and Drug Administration (FDA), or a person subject to the jurisdiction of the FDA, with respect to FDA-regulated products, for purposes of reporting adverse events; product defects or problems, or biological product deviations; tracking products; enabling product recalls, repairs, or replacements; and/or conducting post marketing surveillance. PO 00000 Frm 00098 Fmt 4703 Sfmt 4703 POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM: STORAGE: Records are maintained on electronic storage media including magnetic tape, disk, laser optical media. RETRIEVABILITY: Records are retrieved by name, Social Security number, or other assigned identifiers of the individuals on whom they are maintained. SAFEGUARDS: 1. Access to and use of national patient databases are limited to those persons whose official duties require such access, and VA has established security procedures to ensure that access is appropriately limited. Information security officers and system data stewards review and authorize data access requests. VA regulates data access with security software that authenticates users and requires individually unique codes and passwords. VA provides information security training to all staff and instructs staff on the responsibility each person has for safeguarding data confidentiality. 2. VA maintains Business Associate Agreements and Non-Disclosure Agreements with contracted resources in order to maintain confidentiality of the information. 3. Physical access to computer rooms housing national patient databases is restricted to authorized staff and protected by a variety of security devices. Unauthorized employees, contractors, and other staff are not allowed in computer rooms. The Federal Protective Service or other security personnel provide physical security for the buildings housing computer rooms and data centers. 4. Data transmissions between operational systems and national patient databases maintained by this system of record are protected by state-of-the-art telecommunication software and hardware. This may include firewalls, encryption, and other security measures necessary to safeguard data as it travels across the VA Wide Area Network. Data may be transmitted via a password protected spreadsheet and placed on the secured share point Web portal by the user that has been provided access to their secure file. Data can only be accessed by authorized personnel from each facility within the Polytrauma System of Care and the Physical Medicine and Rehabilitation Program Office. E:\FR\FM\11FEN1.SGM 11FEN1 Federal Register / Vol. 79, No. 28 / Tuesday, February 11, 2014 / Notices 5. In most cases, copies of back-up computer files are maintained at off-site locations. RETENTION AND DISPOSAL: The records are disposed of in accordance with General Records Schedule 20, item 4. Item 4 provides for deletion of data files when the agency determines that the files are no longer needed for administrative, legal, audit, or other operational purposes. SYSTEMS AND MANAGER(S) AND ADDRESS: Officials responsible for policies and procedures; Assistant Deputy Under Secretary for Health for Informatics and Analytics (10P2), Department of Veterans Affairs, 810 Vermont Avenue NW, Washington, DC 20420. Officials maintaining this system of records; Director, National Data Systems (10P2C), Austin Information Technology Center, 1615 Woodward Street, Austin, Texas 78772. NOTIFICATION PROCEDURE: 8249 RECORD SOURCE CATEGORIES: Individuals who wish to determine whether this system of records contains information about them should contact the Director of National Data Systems (10P2C), Austin Information Technology Center, 1615 Woodward Street, Austin, Texas 78772. Inquiries should include the person’s full name, Social Security number, location and dates of employment or location and dates of treatment, and their return address. RECORD ACCESS PROCEDURE: Individuals seeking information regarding access to and contesting of records in this system may write or call the Director of National Data Systems (10P2C), Austin Information Technology Center, 1615 Woodward Street, Austin, Texas 78772, or call the VA National Service Desk and ask to speak with the VHA Director of National Data Systems at (512) 326–6780. CONTESTING RECORD PROCEDURES: (See Record Access Procedures above.) Information in this system of records is provided by Veterans, VA employees, VA computer systems, Veterans Health Information Systems and Technology Architecture, VA medical centers, VA Health Eligibility Center, VA program offices, VISNs, VA Austin Automation Center, the Food and Drug Administration, DoD, HUD, Survey of Healthcare Experiences of Patients, EPRP, and the following Systems Of Records: ‘Patient Medical Records—VA’ (24VA10P2), ‘National Prosthetics Patient Database—VA’ (33VA113), ‘Healthcare Eligibility Records—VA’ (89VA16), VA Veterans Benefits Administration automated record systems (including the Veterans and Beneficiaries Identification and Records Location Subsystem—VA (38VA23), and subsequent iterations of those systems of records. VA APPENDIX 4 Database name Location Addiction Severity Index (ASI) ................................................................. Veteran Affairs Medical Center, 7180 Highland Drive, Pittsburgh, PA 15206. SunGard, 1500 Spring Garden Street, Philadelphia, PA 19130. Denver VA Medical Center, 1055 Clermont Street, Denver, CO 80220. Veterans Affairs Medical Center, University and Woodland Aves., Philadelphia, PA 19104. Southwest CMOP, 3675 East Britannia Drive, Tucson, AZ 85706. Bidirectional Health Information Exchange (BHIE) .................................. VA Clinical Assessment Reporting and Tracking (CART) Program ........ Care Management Information System ................................................... Consolidated Mail Outpatient Pharmacy (CMOP) Centralized Database System. Continuous Improvement in Cardiac Surgery (CICSP) ........................... Converged Registries (CR) Solution ........................................................ Cruetzfelet-Jakob Disease Lookback Dataset (CJDLD) .......................... Decision Support System ......................................................................... Dental Encounter System (DES) .............................................................. Eastern Pacemaker Surveillance Center Database ................................. Emerging Pathogens Initiative (EPI) ........................................................ Federal Health Information Exchange (FHIE) .......................................... Financial Clinical Data Mart (FCDM) ....................................................... Former Prisoner of War Statistical Tracking System ............................... Functional Status and Outcome Database (FSOC) ................................. Healthcare Associated Infections &, Influenza Surveillance System (HAIISS) Data Warehouse. Home Based Primary Care (HBC) ........................................................... Homeless Operational Management &, Evaluation System (HOMES) ... tkelley on DSK3SPTVN1PROD with NOTICES Homeless Veterans Registry .................................................................... Interagency Care Coordination Committee’s Community of Practice CoLab. Injury Data Store ...................................................................................... Mammography Quality Standards (MQS) VA .......................................... Master Veteran Index ............................................................................... VerDate Mar<15>2010 17:58 Feb 10, 2014 Jkt 232001 PO 00000 Frm 00099 Fmt 4703 Veteran Affairs Medical Center, 820 Clermont Street, Denver, CO 80220. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Cincinnati VA Medical Center, 3200 Vine Street, Cincinnati, OH 45220. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Veteran Affairs Medical Center, 50 Irving Street, NW Washington, DC 20422. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. SunGard, 1500 Spring Garden Street, Philadelphia, PA 19130. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Veteran Affairs Medical Center, 3801 Miranda Avenue, Palo Alto, CA 94304. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Austin Information Technology Center, 1615 Woodward Street, Austin, Texas 78772. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. 5450 Carlisle Pike, Mechanicsburg, PA 17050. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Veteran Affairs Medical Center, 508 Fulton Street, Durham, NC 27705. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Sfmt 4703 E:\FR\FM\11FEN1.SGM 11FEN1 8250 Federal Register / Vol. 79, No. 28 / Tuesday, February 11, 2014 / Notices Database name Location Medical SAS File (MDP) (Medical District Planning (MEDIPRO)) ........... Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Veteran Affairs Medical Center, 7180 Highland Drive, Pittsburgh, PA 15206. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. OQP Data Center, 601 Keystone Park Dr. Suite 800, Morrisville, NC 27560. Veterans Affairs Medical Center, 4150 Clement St., San Francisco,, CA 94121. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Veterans Affairs Medical Center, 5th Avenue and Roosevelt Road, Hines, IL 60141. Office of Information Field Office, 1335 East/West Hwy., Silver Spring, MD 20910. Denver Distribution Center, 155 Van Gordon Street, Lakewood, CO 80228–1709. Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Veterans Affairs Medical Center, 200 Springs Rd., Bedford, MA 01730. Veteran Affairs Medical Center, 4500 South Lancaster Road, Dallas, TX 75216. Craig Hospital, 3425 S. Clarkson St., Englewood, CO 80113. Missing Patient Register (MPR) ............................................................... National Mental Health Database System (NMHDS) .............................. National Medical Information System (NMIS) .......................................... National Survey of Veterans (NSV) ......................................................... Office of Quality and Performance (OQP) ............................................... Parkinson’s Disease Research, Education, and Clinical Centers Registry (PADRECC). Patient Assessment File (PAF) ................................................................ Pharmacy Benefits Management (PBM) .................................................. Radiation Exposure Inquiries Database ................................................... Remote Order Entry System (ROES) ...................................................... Resident Assessment Instrument/Minimum Data Set (RAI/MDS) ........... Short Form Health Survey for Veterans (SF–36V) .................................. VA National Clozapine Registry (NCCC) ................................................. VA Polytrauma Rehabilitation Center/Traumatic Brain Injury (TBI) Model System Database. VA Vital Status File (VSF) ........................................................................ Veterans Administration Central Cancer Registry (VACCR) ................... Austin Information Technology Center, 1615 Woodward Street, Austin, TX 78772. Veteran Affairs Medical Center, 50 Irving Street, NW, Washington, DC 20422. [FR Doc. 2014–02890 Filed 2–10–14; 8:45 am] tkelley on DSK3SPTVN1PROD with NOTICES BILLING CODE 8320–01–P VerDate Mar<15>2010 17:58 Feb 10, 2014 Jkt 232001 PO 00000 Frm 00100 Fmt 4703 Sfmt 9990 E:\FR\FM\11FEN1.SGM 11FEN1

Agencies

[Federal Register Volume 79, Number 28 (Tuesday, February 11, 2014)]
[Notices]
[Pages 8245-8250]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2014-02890]


-----------------------------------------------------------------------

DEPARTMENT OF VETERANS AFFAIRS


Privacy Act of 1974

AGENCY: Department of Veterans Affairs.

ACTION: Notice of Amendment of System of Records ``National Patient 
Databases-VA'' (121VA10P2).

-----------------------------------------------------------------------

SUMMARY: As required by the Privacy Act of 1974 (5 U.S.C. 552a(e)(4)), 
notice is hereby given that the Department of Veterans Affairs (VA) is 
amending the system of records entitled ``National Patient Databases-
VA'' (121VA10P2) as set forth in 77 FR 27863. VA is amending the system 
of records by revising the Categories of Records in the System, 
Purposes, Routine Uses of Records Maintained in the System, Including 
Categories of Users and the Purposes of Such Uses, System Manager and 
Address, Notification Procedure, and Record Access Procedure, Records 
Source Categories and Appendix 4. VA is republishing the system notice 
in its entirety.

DATES: Comments on this new system of records must be received no later 
than March 13, 2014. If no public comment is received during the period 
allowed for comment or unless otherwise published in the Federal 
Register by VA, the new system will become effective March 13, 2014.

ADDRESSES: Written comments concerning the proposed new system of 
records may be submitted through www.regulations.gov; by mail or hand-
delivery to Director, Regulations Management (02REG), Department of 
Veterans Affairs, 810 Vermont Avenue NW., Room 1068, Washington, DC 
20420; or by fax to (202) 273-9026. All comments received will be 
available for public inspection in the Office of Regulation Policy and 
Management, Room 1063B, between the hours of 8:00 a.m. and 4:30 p.m., 
Monday through Friday (except holidays). Please call (202) 461-4902 for 
an appointment. (This is not a toll free number.) In addition, during 
the comment period, comments may be viewed online through the Federal 
Docket Management System at www.regulations.gov.

FOR FURTHER INFORMATION CONTACT: Stephania H. Griffin, Privacy Officer, 
Veterans Health Administration (VHA), Department of Veterans Affairs, 
810 Vermont Avenue NW., Washington, DC 20420, telephone (704) 245-2492.

SUPPLEMENTARY INFORMATION: 
    Background: VHA is the largest health care provider in the country. 
VHA collects health care information from its local facilities to 
evaluate quality of services, clinical resource utilization, and 
patient safety, as well as to distribute medical information, such as 
alerts or recalls, track specific diseases, and monitor patients. 
National-level information is also needed for other activities, such as 
medical research and the development of National Best Clinical Practice 
Guidelines and National Quality Standards. VHA gathers this information 
from a wide variety of sources, including directly from Veterans; from 
information systems located at VHA medical centers, Veterans Integrated 
Service Networks (VISN), other VHA facilities, such as the Health 
Eligibility Center; and Federal departments and agencies such as the 
U.S. Department of Defense (DoD) and the Food and Drug Administration. 
As the data is collected, VHA stores it in several national patient 
databases.
    The Categories of Records in the System and the Records Source 
Categories are being amended to change 24VA19 to 24VA10P2.
    The purpose of this system of records is being amended to state 
that Healthcare Associated Infections and Influenza Surveillance System 
(HAIISS) data is available to VHA clinicians for the monitoring of, 
among other things, influenza, emerging infectious diseases or 
syndromes associated with natural and or bioterrorist activities, 
pathogen resistance to antimicrobials, and healthcare-associated 
infections (HAI). Data is also available for transmittal to state/
local/Federal public health authorities for reportable diseases, 
biosurveillance, and Health Information Technology for Economic and 
Clinical Health Act Meaningful Use requirements purposes.
    Routine use 26 has been added to state that health care information 
may be disclosed to the Food and Drug Administration (FDA), or a person 
subject to the jurisdiction of the FDA, with respect to FDA-regulated 
products for purposes of reporting adverse events, product defects or 
problems, or biological product deviations; tracking products; enabling 
product recalls, repairs, or replacements; and/or conducting post 
marketing surveillance.
    System Manager and Address, Notification Procedure, and Record 
Access Procedure are being amended to change from the Austin Automation 
Center to the Austin Information Technology Center.
    Appendix 4 has been amended to remove the Corporate Data Warehouse; 
Regional Data Warehouses; and Veterans Informatics and Information 
Computing Infrastructure, which are now located in the Corporate Data 
Warehouse-VA (172VA10P2), Appendix A. The Electronic Surveillance 
System for the Early Notification of Community-Based Epidemics is being 
removed from the Appendix. Master Patient Index is being changed to 
Master Veteran Index. Also, the Homeless Veterans Registry is

[[Page 8246]]

being amended to reflect a change in address to Austin Information 
Technology Center, 1615 Woodward Street, Austin, Texas, 78772.
    The notice of amendment and an advance copy of the system notice 
have been sent to the appropriate Congressional committees and to the 
Director of Office of Management and Budget (OMB) as required by 5 
U.S.C. 552a(r) (Privacy Act) and guidelines issued by OMB (65 FR 
77677), December 12, 2000.

Signing Authority

    The Secretary of Veterans Affairs, or designee, approved this 
document and authorized the undersigned to sign and submit the document 
to the Office of the Federal Register for publication electronically as 
an official document of the Department of Veterans Affairs. Jose D. 
Riojas, Chief of Staff, Department of Veteran Affairs, approved this 
document on January 23, 2014, for publication.

    Dated: February 6, 2014.
Robert C. McFetridge,
Director, Office of Regulation Policy and Management, Office of the 
General Counsel, Department of Veterans Affairs.
121VA10P2

SYSTEM NAME:
    National Patient Databases-VA.

SYSTEM LOCATION:
    Records are maintained at VA medical centers, VA data processing 
centers, VISNs and Office of Information field offices. Address 
location for each VA national patient database is listed in VA Appendix 
4 at the end of this document.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    The records contain information for all individuals (1) Receiving 
health care from VHA, and (2) Providing the health care. Individuals 
encompass Veterans and their immediate family members, members of the 
Armed Services, current and former employees, trainees, contractors, 
subcontractors, consultants, volunteers, and other individuals working 
collaboratively with VA.

CATEGORIES OF RECORDS IN THE SYSTEM:
    The records may include information and health information related 
to:
    1. Patient medical record abstract information including, but not 
limited to, information from Patient Medical Record--VA (24VA10P2).
    2. Identifying information (e.g., name, birth date, death date, 
admission date, discharge date, gender, Social Security number, 
taxpayer identification number); address information (e.g., home and/or 
mailing address, home telephone number, emergency contact information 
such as name, address, telephone number, and relationship); prosthetic 
and sensory aid serial numbers; medical record numbers; integration 
control numbers; information related to medical examination or 
treatment (e.g., location of VA medical facility providing examination 
or treatment, treatment dates, medical conditions treated or noted on 
examination); information related to military service and status;
    3. Medical benefit and eligibility information;
    4. Patient workload data such as admissions, discharges, and 
outpatient visits; resource utilization such as laboratory tests, x-
rays;
    5. Patient Satisfaction Survey Data which include questions and 
responses;
    6. External Peer Review Program (EPRP) data capture;
    7. Online Data Collection system supported by Northeast Program 
Evaluation Center and VHA Support Service Center to include electronic 
information from all Veteran homeless programs and external sources; 
and
    8. Clinically oriented information associated with My HealtheVet 
such as secure messages.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    Title 38, United States Code, Section 501.

PURPOSES:
    The records and information may be used for statistical analysis to 
produce various management, workload tracking, and follow-up reports; 
to track and evaluate the ordering and delivery of equipment, services, 
and patient care; for the planning, distribution, and utilization of 
resources; to monitor the performance of VISNs; and to allocate 
clinical and administrative support to patient medical care. The data 
may be used for VA's extensive research programs in accordance with VA 
policy. In addition, the data may be used to assist in workload 
allocation for patient treatment services including provider panel 
management, nursing care, clinic appointments, surgery, prescription 
processing, diagnostic and therapeutic procedures; to plan and schedule 
training activities for employees; for audits, reviews, and 
investigations conducted by the network directors office and VA Central 
Office; for quality assurance audits, reviews, and investigations; for 
law enforcement investigations; and for personnel management, 
evaluation and employee ratings, and performance evaluations. Survey 
data will be collected for the purpose of measuring and monitoring 
national, VISN, and facility-level performance on VHA's Veteran Health 
Care Service Standards (VHSS) pursuant to Executive Order 12862 and VHA 
Customer Service Standards Directive. The VHSS are designed to measure 
levels of patient satisfaction in areas that patients have defined as 
important in receiving quality, patient-centered health care. Results 
of the survey data analysis are shared throughout the VHA system. The 
EPRP data are collected in order to provide medical centers and 
outpatient clinics with diagnosis and procedure-specific quality of 
care information. EPRP is a contracted review of care, specifically 
designated to collect data to be used to improve the quality of care. 
The Veteran Homeless records and information will be used for case 
management in addition to statistical analysis to produce various 
management, workload tracking, and follow-up reports; to track and 
evaluate the goal of ending Veteran homelessness. HAIISS data will be 
available to VHA clinicians to use for the monitoring of health care-
associated infections and for the transmittal of data to state/local 
health departments for biosurveillance purposes.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND THE PURPOSES OF SUCH USES:
    To the extent that records contained in the system include 
information protected by 38 U.S.C. 7332, i.e., medical treatment 
information related to drug abuse, alcoholism or alcohol abuse, sickle 
cell anemia or infection with the human immunodeficiency virus; 
information protected by 38 U.S.C. 5705, i.e., quality assurance 
records; or information protected by 45 CFR Parts 160 and 164, i.e., 
individually identifiable health information, such information cannot 
be disclosed under a routine use unless there is also specific 
statutory authority permitting the disclosure. VA may disclose 
protected health information pursuant to the following routine uses 
where required or permitted by law.
    1. VA may disclose on its own initiative any information in this 
system, except the names and home addresses of Veterans and their 
dependents, that is relevant to a suspected or reasonably imminent 
violation of law, whether civil, criminal, or regulatory in nature and 
whether arising by general or program statute or by regulation, rule or 
order issued pursuant thereto, to a Federal, state, local, tribal, or 
foreign agency charged with the responsibility of investigating or 
prosecuting such violation, or

[[Page 8247]]

charged with enforcing or implementing the statute, regulation, rule, 
or order. On its own initiative, VA may also disclose the names and 
addresses of Veterans and their dependents to a Federal agency charged 
with the responsibility of investigating or prosecuting civil, 
criminal, or regulatory violations of law, or charged with enforcing or 
implementing the statute, regulation, rule, or order issued pursuant 
thereto.
    2. Disclosure may be made to any source from which additional 
information is requested (to the extent necessary to identify the 
individual, inform the source of the purpose(s) of the request, and 
identify the type of information requested), when necessary to obtain 
or provide information relevant to an individual's eligibility, care 
history, or other benefits across different Federal, state, or local, 
public health, health care, or program benefit agencies that improves 
the quality and safety of health care for our Veterans.
    3. Disclosure may be made to a Federal agency in the executive, 
legislative, or judicial branch, State and local Government or the 
District of Columbia government in response to its request or at the 
initiation of VA, in connection with disease tracking, patient 
outcomes, or other health information required for program 
accountability.
    4. Disclosure may be made to the National Archives and Records 
Administration and the General Services Administration for records 
management inspections under authority of Title 44, Chapter 29, of the 
United States Code.
    5. VA may disclose information in this system of records to the 
Department of Justice (DOJ), either on VA's initiative or in response 
to DOJ's request for the information, after either VA or DOJ determines 
that such information is relevant to DOJ's representation of the United 
States or any of its components in legal proceedings before a court or 
adjudicative body, provided that, in each case, the agency also 
determines prior to disclosure that disclosure of the records to the 
DOJ is a use of the information contained in the records that is 
compatible with the purpose for which VA collected the records. VA, on 
its own initiative, may disclose records in this system of records in 
legal proceedings before a court or administrative body after 
determining that the disclosure of the records to the court or 
administrative body is a use of the information contained in the 
records that is compatible with the purpose for which VA collected the 
records.
    6. Records from this system of records may be disclosed to a 
Federal agency or to a state or local government licensing board and/or 
to the Federation of State Medical Boards or a similar non-government 
entity that maintains records concerning individuals' employment 
histories or concerning the issuance, retention, or revocation of 
licenses, certifications, or registration necessary to practice an 
occupation, profession, or specialty, in order for the agency to obtain 
information relevant to an agency decision concerning the hiring, 
retention, or termination of an employee.
    7. Records from this system of records may be disclosed to inform a 
Federal agency, licensing boards, or appropriate non-governmental 
entities about the health care practices of a terminated, resigned, or 
retired health care employee whose professional health care activity so 
significantly failed to conform to generally accepted standards of 
professional medical practice as to raise reasonable concern for the 
health and safety of patients receiving medical care in the private 
sector or from another Federal agency.
    8. For program review purposes and the seeking of accreditation 
and/or certification, disclosure may be made to survey teams of the 
Joint Commission, College of American Pathologists, American 
Association of Blood Banks, and similar national accreditation agencies 
or boards with whom VA has a contract or agreement to conduct such 
reviews but only to the extent that the information is necessary and 
relevant to the review.
    9. Disclosure may be made to a national certifying body that has 
the authority to make decisions concerning the issuance, retention, or 
revocation of licenses, certifications, or registrations required to 
practice a health care profession, when requested in writing by an 
investigator or supervisory official of the national certifying body 
for the purpose of making a decision concerning the issuance, 
retention, or revocation of the license, certification, or registration 
of a named health care professional.
    10. Records from this system that contain information listed in 5 
U.S.C. 7114(b)(4) may be disclosed to officials of labor organizations 
recognized under 5 U.S.C. Chapter 71 when relevant and necessary to 
their duties of exclusive representation concerning personnel policies, 
practices, and matters affecting working conditions.
    11. Disclosure may be made to the representative of an employee of 
all notices, determinations, decisions, or other written communications 
issued to the employee in connection with an examination ordered by VA 
under medical evaluation (formerly fitness-for duty) examination 
procedures or Department-filed disability retirement procedures.
    12. VA may disclose information to officials of the Merit Systems 
Protection Board, or the Office of Special Counsel, when requested in 
connection with appeals, special studies of the civil service and other 
merit systems, review of rules and regulations, investigation of 
alleged or possible prohibited personnel practices, and such other 
functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be 
authorized by law.
    13. VA may disclose information to the Equal Employment Opportunity 
Commission when requested in connection with investigations of alleged 
or possible discriminatory practices, examination of Federal 
affirmative employment programs, or for other functions of the 
Commission as authorized by law or regulation.
    14. VA may disclose information to the Federal Labor Relations 
Authority (including its General Counsel) information related to the 
establishment of jurisdiction, the investigation and resolution of 
allegations of unfair labor practices, or information in connection 
with the resolution of exceptions to arbitration awards when a question 
of material fact is raised; to disclose information in matters properly 
before the Federal Services Impasses Panel, and to investigate 
representation petitions and conduct or supervise representation 
elections.
    15. Disclosure of medical record data, excluding name and address, 
unless name and address are furnished by the requester, may be made to 
non-Federal research facilities for research purposes determined to be 
necessary and proper when approved in accordance with VA policy.
    16. Disclosure of name(s) and address(s) of present or former 
personnel of the Armed Services, and/or their dependents, may be made 
to: (a) a Federal department or agency, at the written request of the 
head or designee of that agency; or (b) directly to a contractor or 
subcontractor of a Federal department or agency, for the purpose of 
conducting Federal research necessary to accomplish a statutory purpose 
of an agency. When disclosure of this information is made directly to a 
contractor, VA may impose applicable conditions on the department, 
agency, and/or contractor to insure the appropriateness of the 
disclosure to the contractor.
    17. Disclosure may be made to individuals, organizations, private 
or public agencies, or other entities or individuals with whom VA has a

[[Page 8248]]

contract or agreement to perform such services as VA may deem 
practicable for the purposes of laws administered by VA, in order for 
the contractor, subcontractor, public or private agency, or other 
entity or individual with whom VA has an agreement or contract to 
perform the services of the contract or agreement. This routine use 
includes disclosures by the individual or entity performing the service 
for VA to any secondary entity or individual to perform an activity 
that is necessary for individuals, organizations, private or public 
agencies, or other entities or individuals with whom VA has a contract 
or agreement to provide the service to VA.
    18. Disclosure may be made to a congressional office from the 
record of an individual in response to an inquiry from the 
congressional office made at the request of that individual.
    19. VA may disclose information to a Federal agency for the conduct 
of research and data analysis to perform a statutory purpose of that 
Federal agency upon the prior written request of that agency, provided 
that there is legal authority under all applicable confidentiality 
statutes and regulations to provide the data and the VHA Office of 
Information has determined prior to the disclosure that VHA data 
handling requirements are satisfied.
    20. Disclosure of limited individual identification information may 
be made to another Federal agency for the purpose of matching and 
acquiring information held by that agency for VHA to use for the 
purposes stated for this system of records.
    21. VA may, on its own initiative disclose any information or 
records to appropriate agencies, entities, and persons when (1) VA 
suspects or has confirmed that the integrity or confidentiality of 
information in the system of records has been compromised; (2) VA has 
determined that as a result of the suspected or confirmed compromise 
there is a risk of embarrassment or harm to the reputations of the 
record subjects, harm to economic or property interests, identity theft 
or fraud, or harm to the security, confidentiality, or integrity of 
this system or other systems or programs (whether maintained by VA or 
another agency or entity) that rely upon the potentially compromised 
information; and (3) the disclosure is to agencies, entities, or 
persons whom VA determines are reasonably necessary to assist or carry 
out VA's efforts to respond to the suspected or confirmed compromise 
and prevent, minimize, or remedy such harm. This routine use permits 
disclosures by VA to respond to a suspected or confirmed data breach, 
including the conduct of any risk analysis or provision of credit 
protection services as provided in 38 U.S.C. 5724, as the terms are 
defined in 38 U.S.C. 5727.
    22. On its own initiative, VA may disclose to the general public 
via an Internet Web site, Primary Care Management Module information, 
including the names of its providers, provider panel sizes and reports 
on provider performance measures of quality when approved in accordance 
with VA policy.
    23. Disclosure to other Federal agencies may be made to assist such 
agencies in preventing and detecting possible fraud or abuse by 
individuals in their operations and programs.
    24. VA may disclose names and addresses of present or former 
members of the Armed Services and/or their dependents under certain 
circumstances: (a) to any nonprofit organization, if the release is 
directly connected with the conduct of programs and the utilization of 
benefits under Title 38, or (b) to any criminal or civil law 
enforcement governmental agency or instrumentality charged under 
applicable law with the protection of the public health or safety, if a 
qualified representative of such organization, agency, or 
instrumentality has made a written request for such names or addresses 
for a purpose authorized by law, provided that the records will not be 
used for any purpose other than that stated in the request and that the 
organization, agency, or instrumentality is aware of the penalty 
provision of 38 U.S.C. 5701(f).
    25. VA may disclose information, including demographic information, 
to U.S. Department of Housing and Urban Development (HUD) for the 
purpose of reducing homelessness among Veterans by implementing the 
Federal strategic plan to prevent and end homelessness and by 
evaluating and monitoring the HUD-Veterans Affairs Supported Housing 
program.
    26. VA may disclose health care information to the Food and Drug 
Administration (FDA), or a person subject to the jurisdiction of the 
FDA, with respect to FDA-regulated products, for purposes of reporting 
adverse events; product defects or problems, or biological product 
deviations; tracking products; enabling product recalls, repairs, or 
replacements; and/or conducting post marketing surveillance.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, 
AND DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
    Records are maintained on electronic storage media including 
magnetic tape, disk, laser optical media.

RETRIEVABILITY:
    Records are retrieved by name, Social Security number, or other 
assigned identifiers of the individuals on whom they are maintained.

SAFEGUARDS:
    1. Access to and use of national patient databases are limited to 
those persons whose official duties require such access, and VA has 
established security procedures to ensure that access is appropriately 
limited. Information security officers and system data stewards review 
and authorize data access requests. VA regulates data access with 
security software that authenticates users and requires individually 
unique codes and passwords. VA provides information security training 
to all staff and instructs staff on the responsibility each person has 
for safeguarding data confidentiality.
    2. VA maintains Business Associate Agreements and Non-Disclosure 
Agreements with contracted resources in order to maintain 
confidentiality of the information.
    3. Physical access to computer rooms housing national patient 
databases is restricted to authorized staff and protected by a variety 
of security devices. Unauthorized employees, contractors, and other 
staff are not allowed in computer rooms. The Federal Protective Service 
or other security personnel provide physical security for the buildings 
housing computer rooms and data centers.
    4. Data transmissions between operational systems and national 
patient databases maintained by this system of record are protected by 
state-of-the-art telecommunication software and hardware. This may 
include firewalls, encryption, and other security measures necessary to 
safeguard data as it travels across the VA Wide Area Network. Data may 
be transmitted via a password protected spreadsheet and placed on the 
secured share point Web portal by the user that has been provided 
access to their secure file. Data can only be accessed by authorized 
personnel from each facility within the Polytrauma System of Care and 
the Physical Medicine and Rehabilitation Program Office.

[[Page 8249]]

    5. In most cases, copies of back-up computer files are maintained 
at off-site locations.

RETENTION AND DISPOSAL:
    The records are disposed of in accordance with General Records 
Schedule 20, item 4. Item 4 provides for deletion of data files when 
the agency determines that the files are no longer needed for 
administrative, legal, audit, or other operational purposes.

SYSTEMS AND MANAGER(S) AND ADDRESS:
    Officials responsible for policies and procedures; Assistant Deputy 
Under Secretary for Health for Informatics and Analytics (10P2), 
Department of Veterans Affairs, 810 Vermont Avenue NW, Washington, DC 
20420. Officials maintaining this system of records; Director, National 
Data Systems (10P2C), Austin Information Technology Center, 1615 
Woodward Street, Austin, Texas 78772.

NOTIFICATION PROCEDURE:
    Individuals who wish to determine whether this system of records 
contains information about them should contact the Director of National 
Data Systems (10P2C), Austin Information Technology Center, 1615 
Woodward Street, Austin, Texas 78772. Inquiries should include the 
person's full name, Social Security number, location and dates of 
employment or location and dates of treatment, and their return 
address.

RECORD ACCESS PROCEDURE:
    Individuals seeking information regarding access to and contesting 
of records in this system may write or call the Director of National 
Data Systems (10P2C), Austin Information Technology Center, 1615 
Woodward Street, Austin, Texas 78772, or call the VA National Service 
Desk and ask to speak with the VHA Director of National Data Systems at 
(512) 326-6780.

CONTESTING RECORD PROCEDURES:
    (See Record Access Procedures above.)

RECORD SOURCE CATEGORIES:
    Information in this system of records is provided by Veterans, VA 
employees, VA computer systems, Veterans Health Information Systems and 
Technology Architecture, VA medical centers, VA Health Eligibility 
Center, VA program offices, VISNs, VA Austin Automation Center, the 
Food and Drug Administration, DoD, HUD, Survey of Healthcare 
Experiences of Patients, EPRP, and the following Systems Of Records: 
`Patient Medical Records--VA' (24VA10P2), `National Prosthetics Patient 
Database--VA' (33VA113), `Healthcare Eligibility Records--VA' (89VA16), 
VA Veterans Benefits Administration automated record systems (including 
the Veterans and Beneficiaries Identification and Records Location 
Subsystem--VA (38VA23), and subsequent iterations of those systems of 
records.

VA APPENDIX 4

------------------------------------------------------------------------
             Database name                           Location
------------------------------------------------------------------------
Addiction Severity Index (ASI).........  Veteran Affairs Medical Center,
                                          7180 Highland Drive,
                                          Pittsburgh, PA 15206.
Bidirectional Health Information         SunGard, 1500 Spring Garden
 Exchange (BHIE).                         Street, Philadelphia, PA
                                          19130.
VA Clinical Assessment Reporting and     Denver VA Medical Center, 1055
 Tracking (CART) Program.                 Clermont Street, Denver, CO
                                          80220.
Care Management Information System.....  Veterans Affairs Medical
                                          Center, University and
                                          Woodland Aves., Philadelphia,
                                          PA 19104.
Consolidated Mail Outpatient Pharmacy    Southwest CMOP, 3675 East
 (CMOP) Centralized Database System.      Britannia Drive, Tucson, AZ
                                          85706.
Continuous Improvement in Cardiac        Veteran Affairs Medical Center,
 Surgery (CICSP).                         820 Clermont Street, Denver,
                                          CO 80220.
Converged Registries (CR) Solution.....  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Cruetzfelet-Jakob Disease Lookback       Cincinnati VA Medical Center,
 Dataset (CJDLD).                         3200 Vine Street, Cincinnati,
                                          OH 45220.
Decision Support System................  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Dental Encounter System (DES)..........  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Eastern Pacemaker Surveillance Center    Veteran Affairs Medical Center,
 Database.                                50 Irving Street, NW
                                          Washington, DC 20422.
Emerging Pathogens Initiative (EPI)....  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Federal Health Information Exchange      SunGard, 1500 Spring Garden
 (FHIE).                                  Street, Philadelphia, PA
                                          19130.
Financial Clinical Data Mart (FCDM)....  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Former Prisoner of War Statistical       Austin Information Technology
 Tracking System.                         Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Functional Status and Outcome Database   Austin Information Technology
 (FSOC).                                  Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Healthcare Associated Infections &,      Veteran Affairs Medical Center,
 Influenza Surveillance System (HAIISS)   3801 Miranda Avenue, Palo
 Data Warehouse.                          Alto, CA 94304.
Home Based Primary Care (HBC)..........  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Homeless Operational Management &,       Austin Information Technology
 Evaluation System (HOMES).               Center, 1615 Woodward Street,
                                          Austin, Texas 78772.
Homeless Veterans Registry.............  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Interagency Care Coordination            5450 Carlisle Pike,
 Committee's Community of Practice Co-    Mechanicsburg, PA 17050.
 Lab.
Injury Data Store......................  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Mammography Quality Standards (MQS) VA.  Veteran Affairs Medical Center,
                                          508 Fulton Street, Durham, NC
                                          27705.
Master Veteran Index...................  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.

[[Page 8250]]

 
Medical SAS File (MDP) (Medical          Austin Information Technology
 District Planning (MEDIPRO)).            Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Missing Patient Register (MPR).........  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
National Mental Health Database System   Veteran Affairs Medical Center,
 (NMHDS).                                 7180 Highland Drive,
                                          Pittsburgh, PA 15206.
National Medical Information System      Austin Information Technology
 (NMIS).                                  Center, 1615 Woodward Street,
                                          Austin, TX 78772.
National Survey of Veterans (NSV)......  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Office of Quality and Performance (OQP)  OQP Data Center, 601 Keystone
                                          Park Dr. Suite 800,
                                          Morrisville, NC 27560.
Parkinson's Disease Research,            Veterans Affairs Medical
 Education, and Clinical Centers          Center, 4150 Clement St., San
 Registry (PADRECC).                      Francisco,, CA 94121.
Patient Assessment File (PAF)..........  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Pharmacy Benefits Management (PBM).....  Veterans Affairs Medical
                                          Center, 5th Avenue and
                                          Roosevelt Road, Hines, IL
                                          60141.
Radiation Exposure Inquiries Database..  Office of Information Field
                                          Office, 1335 East/West Hwy.,
                                          Silver Spring, MD 20910.
Remote Order Entry System (ROES).......  Denver Distribution Center, 155
                                          Van Gordon Street, Lakewood,
                                          CO 80228-1709.
Resident Assessment Instrument/Minimum   Austin Information Technology
 Data Set (RAI/MDS).                      Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Short Form Health Survey for Veterans    Veterans Affairs Medical
 (SF-36V).                                Center, 200 Springs Rd.,
                                          Bedford, MA 01730.
VA National Clozapine Registry (NCCC)..  Veteran Affairs Medical Center,
                                          4500 South Lancaster Road,
                                          Dallas, TX 75216.
VA Polytrauma Rehabilitation Center/     Craig Hospital, 3425 S.
 Traumatic Brain Injury (TBI) Model       Clarkson St., Englewood, CO
 System Database.                         80113.
VA Vital Status File (VSF).............  Austin Information Technology
                                          Center, 1615 Woodward Street,
                                          Austin, TX 78772.
Veterans Administration Central Cancer   Veteran Affairs Medical Center,
 Registry (VACCR).                        50 Irving Street, NW,
                                          Washington, DC 20422.
------------------------------------------------------------------------

[FR Doc. 2014-02890 Filed 2-10-14; 8:45 am]
BILLING CODE 8320-01-P
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.