Privacy Act of 1974; System of Records, 1198-1200 [2020-00145]
Download as PDF
1198
Federal Register / Vol. 85, No. 6 / Thursday, January 9, 2020 / Notices
Heller, Director, Office of Shipyards and
Marine Engineering, Maritime
Administration, Room W21–318, 1200
New Jersey Ave. SE, Washington, DC
20590; phone: (202) 366–5737; or fax:
(202) 366–6988. To ensure applicants
receive accurate information about
eligibility or the Program, you are
encouraged to contact MARAD directly,
rather than through intermediaries or
third parties, with questions.
H. Other Information
All information submitted as part of
or in support of any application shall
use publicly available data or data that
can be made public and methodologies
that are accepted by industry practice
and standards, to the extent possible. If
the application includes information
you consider to be a trade secret or
confidential commercial or financial
information, you should do the
following: (1) Note on the front cover
that the submission ‘‘Contains
Confidential Business Information
(CBI);’’ (2) mark each affected page
‘‘CBI;’’ and (3) highlight or otherwise
denote the CBI portions. MARAD
protects such information from
disclosure to the extent allowed under
applicable law. In the event MARAD
receives a Freedom of Information Act
(FOIA) request for the information,
MARAD will follow the procedures
described in the Department of
Transportation FOIA regulations at 49
CFR 7.29. Only information that is
ultimately determined to be confidential
under that procedure will be exempt
from disclosure under FOIA.
Authority: 46 U.S.C. 54101 and the
Consolidated Appropriations Act, 2020,
Public Law 116–94, December 20, 2019.
Dated: January 6, 2020.
By Order of the Maritime Administrator.
T. Mitchell Hudson, Jr.
Secretary, Maritime Administration.
[FR Doc. 2020–00163 Filed 1–8–20; 8:45 am]
BILLING CODE 4910–81–P
DEPARTMENT OF THE TREASURY
Privacy Act of 1974; System of
Records
Department of the Treasury.
ACTION: Notice of a New System of
Records.
lotter on DSKBCFDHB2PROD with NOTICES
AGENCY:
In accordance with the
Privacy Act of 1974, the Department of
the Treasury (‘‘Treasury’’ or
‘‘Department’’), Treasury proposes to
establish a new system of records titled,
‘‘Department of the Treasury—.018 ERulemaking System of Records’’ under
SUMMARY:
VerDate Sep<11>2014
20:20 Jan 08, 2020
Jkt 250001
the Privacy Act of 1974 for the online
collection through the Federal Docket
Management System and/or
Regulations.gov of public comments to
notices of proposed rulemaking,
proposed orders, and other policy or
regulatory actions that are published in
the Federal Register or rules or rule
amendments, petitions, and other input
collected from the public that may not
be associated with statutory or
regulatory notice and comment
requirements.
DATES: Submit comments on or before
February 10, 2020. The new routine
uses will be applicable on February 10,
2020 unless Treasury receives
comments and determines that changes
to the system of records notice are
necessary.
ADDRESSES: Comments may be
submitted to the Federal E-Rulemaking
Portal electronically at https://
www.regulations.gov. Comments can
also be sent to the Deputy Assistant
Secretary for Privacy, Transparency, and
Records, Department of the Treasury,
Departmental Offices, 1750
Pennsylvania Avenue NW, Washington,
DC 20220, Attention: Revisions to
Privacy Act Systems of Records. All
comments received, including
attachments and other supporting
documents, are part of the public
records and subject to public disclosure.
All comments received will be posted
without change to www.regulations.gov,
including any personal information
provided. You should submit only
information that you wish to make
publicly available.
FOR FURTHER INFORMATION CONTACT: For
general questions and privacy issues
please contact: Deputy Assistant
Secretary for Privacy, Transparency, and
Records (202–622–5710), Department of
the Treasury, 1500 Pennsylvania
Avenue NW, Washington, DC 20220.
SUPPLEMENTARY INFORMATION:
I. E-Rulemaking
In accordance with the Privacy Act of
1974, the Department of the Treasury
(‘‘Treasury’’) proposes to establish a
new system of records titled,
‘‘Department of the Treasury—.018 ERulemaking System of Records.’’
Treasury collects comments on
rulemakings and other regulatory
actions, which it timely publishes on a
website to provide transparency in the
informal rulemaking process under the
Administrative Procedure Act (‘‘APA’’),
5 U.S.C. 553. The Treasury also may
solicit comments or other input from the
public that may not be associated with
statutory or regulatory notice and
comment requirements.
PO 00000
Frm 00062
Fmt 4703
Sfmt 4703
During an informal rulemaking or
other statutory or regulatory notice and
comment process, Department
personnel may manually remove a
comment from posting if the commenter
withdraws his or her comments before
the comment period has closed or
because the comment contains
obscenities or other material deemed
inappropriate for publication by the
Treasury. However, comments that are
removed from posting will be retained
by the Department for consideration, if
appropriate under the APA.
Below is the description of the new
Treasury—.018 E-Rulemaking System of
Records.
Treasury has provided a report of this
system of records to the Committee on
Oversight and Government Reform of
the House of Representatives, the
Committee on Homeland Security and
Governmental Affairs of the Senate, and
OMB, pursuant to 5 U.S.C. 552a(r) and
OMB Circular A–108, ‘‘Federal Agency
Responsibilities for Review, Reporting,
and Publication under the Privacy Act,’’
dated December 23, 2016.
II. The Privacy Act
Under the Privacy Act of 1974, 5
U.S.C. 552a, a ‘‘system of records’’ is
defined as any group of records under
the control of a federal government
agency from which information about
individuals is retrieved by name or
other personal identifier. The Privacy
Act establishes the means by which
government agencies must collect,
maintain, and use personally
identifiable information associated with
an individual in a government system of
records.
Each government agency is required
to publish in the Federal Register a
notice of a new system of records in
which the agency identifies and
describes the system of records, the
reasons why the agency uses the
personally identifying information
therein, the routine uses for which the
agency will disclose such information
outside the agency, and how individuals
may exercise their rights under the
Privacy Act to determine if the system
contains information about them.
Ryan Law,
Deputy Assistant Secretary for Privacy,
Transparency, and Records.
SYSTEM NAME AND NUMBER:
Department of the Treasury—.018 ERulemaking.
SECURITY CLASSIFICATION:
Unclassified
SYSTEM LOCATION:
Records are maintained at:
E:\FR\FM\09JAN1.SGM
09JAN1
Federal Register / Vol. 85, No. 6 / Thursday, January 9, 2020 / Notices
a. Department of the Treasury, 1500
Pennsylvania Avenue NW, Washington,
DC 20220
b. General Services Administration,
1800 F St NW, Washington, DC 20006
RECORDS SOURCE CATEGORIES:
SYSTEM MANAGER(S):
Individuals and organizations
providing comments or other input to
the Treasury.
Privacy Act Officer, 1750
Pennsylvania Avenue NW, Washington,
DC 20220.
ROUTINE USES OF RECORDS MAINTAINED IN THE
SYSTEM, INCLUDING CATEGORIES OF USERS AND
PURPOSES OF SUCH USES:
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
44 U.S.C. 3101; Administrative
Procedure Act, Public Law 79–404, 60
Stat. 237; 5 U.S.C. 553 et seq., and rules
and regulations promulgated
thereunder.
PURPOSE(S) OF THE SYSTEM:
To collect and maintain in an
electronic system feedback from the
public and industry groups regarding
proposed rules and other Treasury
regulatory actions in accordance with
the Administrative Procedure Act
(‘‘APA’’) or other statutory or regulatory
provisions, as well as input on Treasury
actions that may not be associated with
notice and comment requirements.
CATEGORIES OF INDIVIDUALS COVERED BY THE
SYSTEM:
Individuals providing comments or
other input to the Treasury in response
to proposed rules, industry filings or
other Treasury request for comments
associated with Treasury rules, notices,
policies or procedures, whether the
individuals provide comments or input
directly or through their representatives.
Any individuals who may be discussed
or identified in the comments or input
provided by others to the Treasury.
CATEGORIES OF RECORDS IN THE SYSTEM:
lotter on DSKBCFDHB2PROD with NOTICES
yet decided a Freedom of Information
Act or Privacy Act Request.
Incoming comments or other input to
the Treasury in response to proposed
rules, or other Treasury request for
comments associated with Treasury
rules, policies or procedures, provided
to the Treasury electronically, by
facsimile or postal mail or delivery
service. Comments or input submitted
to Treasury may include the full name
of the submitter, an email address and
the name of the organization, if an
organization is submitting the
comments. The commenter may
optionally provide job title, mailing
address and phone numbers. The
comments or input provided may
contain other personal information,
although the comment submission
instructions advise commenters not to
include additional personal or
confidential information.
This system excludes comments or
input for which the Treasury has
received and either has approved or not
VerDate Sep<11>2014
20:20 Jan 08, 2020
Jkt 250001
In addition to those disclosures
generally permitted under the Privacy
Act of 1974, 5 U.S.C. 552a(b), records
and/or information or portions thereof
maintained as part of this system may
be disclosed outside Treasury as a
routine use pursuant to 5 U.S.C.
552a(b)(3) as follows:
(1) To appropriate federal, state, local,
and foreign agencies for the purpose of
enforcing and investigating
administrative, civil or criminal law
relating to the hiring or retention of an
employee; issuance of a security
clearance, license, contract, grant or
other benefit;
(2) To a court, magistrate, or
administrative tribunal in the course of
presenting evidence, including
disclosures to opposing counsel or
witnesses in the course of or in
preparation for civil discovery,
litigation, or settlement negotiations, in
response to a court order where relevant
or potentially relevant to a proceeding,
or in connection with criminal law
proceedings;
(3) To a contractor for the purpose of
compiling, organizing, analyzing,
programming, or otherwise refining
records to accomplish an agency
function subject to the same limitations
applicable to U.S. Department of the
Treasury officers and employees under
the Privacy Act;
(4) To a congressional office from the
records of an individual in response to
an inquiry from that congressional office
made pursuant to a written Privacy Act
waiver at the request of the individual
to whom the records pertain;
(5) To third parties during the course
of an investigation to the extent
necessary to obtain information
pertinent to the investigation;
(6) To the Office of Personnel
Management, Merit Systems Protection
Board, Equal Employment Opportunity
Commission, Federal Labor Relations
Authority, and the Office of Special
Counsel for the purpose of properly
administering Federal personnel
systems or other agencies’ systems in
accordance with applicable laws,
Executive Orders, and regulations;
(7) To the National Archives and
Records Administration (NARA) or
General Services Administration
PO 00000
Frm 00063
Fmt 4703
Sfmt 4703
1199
pursuant to records management
inspections being conducted under the
authority of 44 U.S.C. 2904 and 2906;
(8) To other Federal agencies or
entities when the disclosure of the
existence of the individual’s security
clearance is needed for the conduct of
government business, and
(9) To appropriate agencies, entities,
and person when (1) the Department of
the Treasury and/or Departmental
Offices suspects or has confirmed that
there has been a breach of the system of
records; (2) the Department of the
Treasury and/or Departmental Offices
has determined that as a result of the
suspected or confirmed breach there is
a risk of harm to individuals, the
Department of the Treasury and/or
Departmental Offices (including its
information systems, programs, and
operations), the Federal Government, or
national security; and (3) the disclosure
made to such agencies, entities, and
persons is reasonably necessary to assist
in connection with the Department of
the Treasury’s and/or Departmental
Offices’ efforts to respond to the
suspected or confirmed breach or to
prevent, minimize, or remedy such
harm;
(10) To another Federal agency or
Federal entity when the Department of
the Treasury and/or Departmental
Offices determines that information
from this system of records is
reasonably necessary to assist the
recipient agency or entity in (1)
responding to a suspected or confirmed
breach or (2) preventing, minimizing, or
remedying the risk of harm to
individuals, the recipient agency or
entity (including its information
systems, programs, and operations), the
Federal Government, or national
security, resulting from a suspected or
confirmed breach;
(11) To General Services
Administration for purposes of
operating the E-Rulemaking system.
POLICIES AND PRACTICES FOR STORAGE OF
RECORDS:
Records in this system are stored
electronically or on paper in secure
facilities in a locked drawer behind a
locked door.
POLICIES AND PRACTICES FOR RETRIEVAL OF
RECORDS:
Records may be retrieved by an
individual’s name, social security
number, email address, electronic
identification number and/or access/
security badge number.
POLICIES AND PRACTICES FOR RETENTION AND
DISPOSAL OF RECORDS:
The retention and disposal period
depends on the nature of the comments
E:\FR\FM\09JAN1.SGM
09JAN1
1200
Federal Register / Vol. 85, No. 6 / Thursday, January 9, 2020 / Notices
or input provided to the Treasury. For
example, comments that pertain to a
Treasury proposed rule becomes part of
the Treasury’s central files and are kept
permanently. Other input to the
Treasury may be kept between one and
10 years, depending on the subject
matter.
lotter on DSKBCFDHB2PROD with NOTICES
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL
SAFEGUARDS:
Records in this system are
safeguarded in accordance with
applicable rules and policies, including
all applicable Treasury automated
systems security and access policies.
Strict controls have been imposed to
minimize the risk of compromising the
information that is being stored. Access
to the computer system containing the
records in this system is limited to those
individuals who have a need to know
the information for the performance of
their official duties and who have
appropriate clearances.
Entrance to data centers and support
organization offices is restricted to those
employees whose work requires them to
be there for the system to operate.
Identification (ID) cards are verified to
ensure that only authorized personnel
are present. Disclosure of information
through remote terminals is restricted
through the use of passwords and signon protocols which are periodically
changed. Reports produced from the
remote printers are in the custody of
personnel and financial management
officers and are subject to the same
privacy controls as other documents of
similar sensitivity. Access is limited to
authorized employees. Paper records are
maintained in locked safes and/or file
cabinets. Electronic records are
password-protected. During non-work
hours, records are stored in locked safes
and/or cabinets in a locked room.
Protection and control of any
sensitive but unclassified (SBU) records
are in accordance with TD P 71–10,
Department of the Treasury Security
Manual. Access to the records is
available only to employees responsible
for the management of the system and/
or employees of program offices who
have a need for such information.
The GSA information technology
system that hosts regulations.gov and
FDMS is in a facility protected by
physical walls, security guards, and
requiring identification badges. Rooms
housing the information technology
system infrastructure are locked, as are
the individual server racks. All security
controls are reviewed on a periodic
basis by external assessors. The controls
themselves include measures for access
control, security awareness training,
audits, configuration management,
VerDate Sep<11>2014
20:20 Jan 08, 2020
Jkt 250001
contingency planning, incident
response, and maintenance.
Records in FDMS are maintained in a
secure, password protected electronic
system that utilizes security hardware
and software to include multiple
firewalls, active intrusion detection,
encryption, identification and
authentication of users.
Partner agencies manage their own
access to FDMS through their
designated partner agency account
managers. Each designated partner
agency account manager has access to
FDMS. This level of access enables them
to establish, manage, and terminate user
accounts limited to their own agency.
Unified Carrier Registration Plan
RECORDS ACCESS PROCEDURES:
The UCR Executive Director will
verify the publication of meeting notice
on the UCR website and in the Federal
Register.
See ‘‘Notification Procedures’’ below.
CONTESTING RECORDS PROCEDURES:
See ‘‘Notification Procedures’’ below.
NOTIFICATION PROCEDURES:
Individuals seeking notification and
access to any records contained in the
system of records, or seeking to contest
its content, may inquire in accordance
with instructions pertaining to
individual Treasury components
appearing at 31 CFR part 1, subpart C,
appendix A.
EXEMPTIONS PROMULGATED FOR THE SYSTEM:
None.
HISTORY:
None.
[FR Doc. 2020–00145 Filed 1–8–20; 8:45 am]
BILLING CODE 4810–25–P
January 16, 2020
Education and Training Subcommittee
Meeting
Agenda
Open to the Public
I. Call to Order—Subcommittee Chair
The Subcommittee Chair will
welcome attendees, call the meeting to
order, call roll for the Subcommittee
and confirm whether a quorum is
present, and facilitate self-introductions.
II. Verification of Meeting Notice—UCR
Executive Director
III. Review and Approval of
Subcommittee Agenda and Setting of
Ground Rules—Subcommittee Chair
For Discussion and Possible Action
The Subcommittee Agenda will be
reviewed and the Subcommittee will
consider adoption.
Ground Rules
➢ Subcommittee action only to be
taken in designated areas on agenda
➢ Please MUTE your phone
➢ Please do not place the call on HOLD
IV. Approval of Minutes From October
16, 2019 Meeting—UCR Operations
Manager
For Discussion and Possible Action
UNIFIED CARRIER REGISTRATION
PLAN
Sunshine Act Meeting Notice; Unified
Carrier Registration Plan Board
Subcommittee Meeting
January 16, 2020, from
9:00 a.m. to 6:00 p.m., Eastern time.
PLACE: The Towers at Wildwood, 3200
Windy Hill Road SE, Suite 600W,
Atlanta, GA. This meeting will also be
accessible via conference call. Any
interested person may call 1–866–210–
1669, passcode 5253902#, to listen and
participate in the meeting.
STATUS: This meeting will be open to
the public.
MATTERS TO BE CONSIDERED: The
Unified Carrier Registration Plan Board
Education and Training Subcommittee
(the ‘‘Subcommittee’’) will continue its
work in developing and implementing
the Unified Carrier Registration Plan
and Agreement. The subject matter of
this meeting will include:
TIME AND DATE:
PO 00000
Frm 00064
Fmt 4703
Sfmt 4703
• Minutes from the October 16, 2019
Education and Training Subcommittee
meeting will be reviewed. The
Subcommittee will consider action to
approve.
V. Review of Project Goals—UCR
Education Manager
The UCR Education Manager will lead
a discussion covering the following
topics:
i. Creation of education and training
modules and setting their priority.
Initial training modules;
Enforcement (specifically new
entrant audit training, inspection
training, and compliance review),
UCR Overview (or UCR 101),
National Registration System (NRS),
and New Carriers
ii. Discuss intended audience, intention
of training modules (including
objectives and desired outcomes),
and determination of how to
quantify success and obtain
consensus on key performance
indicators (metrics)
E:\FR\FM\09JAN1.SGM
09JAN1
Agencies
[Federal Register Volume 85, Number 6 (Thursday, January 9, 2020)]
[Notices]
[Pages 1198-1200]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2020-00145]
=======================================================================
-----------------------------------------------------------------------
DEPARTMENT OF THE TREASURY
Privacy Act of 1974; System of Records
AGENCY: Department of the Treasury.
ACTION: Notice of a New System of Records.
-----------------------------------------------------------------------
SUMMARY: In accordance with the Privacy Act of 1974, the Department of
the Treasury (``Treasury'' or ``Department''), Treasury proposes to
establish a new system of records titled, ``Department of the
Treasury--.018 E-Rulemaking System of Records'' under the Privacy Act
of 1974 for the online collection through the Federal Docket Management
System and/or Regulations.gov of public comments to notices of proposed
rulemaking, proposed orders, and other policy or regulatory actions
that are published in the Federal Register or rules or rule amendments,
petitions, and other input collected from the public that may not be
associated with statutory or regulatory notice and comment
requirements.
DATES: Submit comments on or before February 10, 2020. The new routine
uses will be applicable on February 10, 2020 unless Treasury receives
comments and determines that changes to the system of records notice
are necessary.
ADDRESSES: Comments may be submitted to the Federal E-Rulemaking Portal
electronically at https://www.regulations.gov. Comments can also be sent
to the Deputy Assistant Secretary for Privacy, Transparency, and
Records, Department of the Treasury, Departmental Offices, 1750
Pennsylvania Avenue NW, Washington, DC 20220, Attention: Revisions to
Privacy Act Systems of Records. All comments received, including
attachments and other supporting documents, are part of the public
records and subject to public disclosure. All comments received will be
posted without change to www.regulations.gov, including any personal
information provided. You should submit only information that you wish
to make publicly available.
FOR FURTHER INFORMATION CONTACT: For general questions and privacy
issues please contact: Deputy Assistant Secretary for Privacy,
Transparency, and Records (202-622-5710), Department of the Treasury,
1500 Pennsylvania Avenue NW, Washington, DC 20220.
SUPPLEMENTARY INFORMATION:
I. E-Rulemaking
In accordance with the Privacy Act of 1974, the Department of the
Treasury (``Treasury'') proposes to establish a new system of records
titled, ``Department of the Treasury--.018 E-Rulemaking System of
Records.''
Treasury collects comments on rulemakings and other regulatory
actions, which it timely publishes on a website to provide transparency
in the informal rulemaking process under the Administrative Procedure
Act (``APA''), 5 U.S.C. 553. The Treasury also may solicit comments or
other input from the public that may not be associated with statutory
or regulatory notice and comment requirements.
During an informal rulemaking or other statutory or regulatory
notice and comment process, Department personnel may manually remove a
comment from posting if the commenter withdraws his or her comments
before the comment period has closed or because the comment contains
obscenities or other material deemed inappropriate for publication by
the Treasury. However, comments that are removed from posting will be
retained by the Department for consideration, if appropriate under the
APA.
Below is the description of the new Treasury--.018 E-Rulemaking
System of Records.
Treasury has provided a report of this system of records to the
Committee on Oversight and Government Reform of the House of
Representatives, the Committee on Homeland Security and Governmental
Affairs of the Senate, and OMB, pursuant to 5 U.S.C. 552a(r) and OMB
Circular A-108, ``Federal Agency Responsibilities for Review,
Reporting, and Publication under the Privacy Act,'' dated December 23,
2016.
II. The Privacy Act
Under the Privacy Act of 1974, 5 U.S.C. 552a, a ``system of
records'' is defined as any group of records under the control of a
federal government agency from which information about individuals is
retrieved by name or other personal identifier. The Privacy Act
establishes the means by which government agencies must collect,
maintain, and use personally identifiable information associated with
an individual in a government system of records.
Each government agency is required to publish in the Federal
Register a notice of a new system of records in which the agency
identifies and describes the system of records, the reasons why the
agency uses the personally identifying information therein, the routine
uses for which the agency will disclose such information outside the
agency, and how individuals may exercise their rights under the Privacy
Act to determine if the system contains information about them.
Ryan Law,
Deputy Assistant Secretary for Privacy, Transparency, and Records.
SYSTEM NAME AND NUMBER:
Department of the Treasury--.018 E-Rulemaking.
SECURITY CLASSIFICATION:
Unclassified
SYSTEM LOCATION:
Records are maintained at:
[[Page 1199]]
a. Department of the Treasury, 1500 Pennsylvania Avenue NW,
Washington, DC 20220
b. General Services Administration, 1800 F St NW, Washington, DC
20006
SYSTEM MANAGER(S):
Privacy Act Officer, 1750 Pennsylvania Avenue NW, Washington, DC
20220.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
44 U.S.C. 3101; Administrative Procedure Act, Public Law 79-404, 60
Stat. 237; 5 U.S.C. 553 et seq., and rules and regulations promulgated
thereunder.
PURPOSE(S) OF THE SYSTEM:
To collect and maintain in an electronic system feedback from the
public and industry groups regarding proposed rules and other Treasury
regulatory actions in accordance with the Administrative Procedure Act
(``APA'') or other statutory or regulatory provisions, as well as input
on Treasury actions that may not be associated with notice and comment
requirements.
CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
Individuals providing comments or other input to the Treasury in
response to proposed rules, industry filings or other Treasury request
for comments associated with Treasury rules, notices, policies or
procedures, whether the individuals provide comments or input directly
or through their representatives. Any individuals who may be discussed
or identified in the comments or input provided by others to the
Treasury.
CATEGORIES OF RECORDS IN THE SYSTEM:
Incoming comments or other input to the Treasury in response to
proposed rules, or other Treasury request for comments associated with
Treasury rules, policies or procedures, provided to the Treasury
electronically, by facsimile or postal mail or delivery service.
Comments or input submitted to Treasury may include the full name of
the submitter, an email address and the name of the organization, if an
organization is submitting the comments. The commenter may optionally
provide job title, mailing address and phone numbers. The comments or
input provided may contain other personal information, although the
comment submission instructions advise commenters not to include
additional personal or confidential information.
This system excludes comments or input for which the Treasury has
received and either has approved or not yet decided a Freedom of
Information Act or Privacy Act Request.
RECORDS SOURCE CATEGORIES:
Individuals and organizations providing comments or other input to
the Treasury.
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES
OF USERS AND PURPOSES OF SUCH USES:
In addition to those disclosures generally permitted under the
Privacy Act of 1974, 5 U.S.C. 552a(b), records and/or information or
portions thereof maintained as part of this system may be disclosed
outside Treasury as a routine use pursuant to 5 U.S.C. 552a(b)(3) as
follows:
(1) To appropriate federal, state, local, and foreign agencies for
the purpose of enforcing and investigating administrative, civil or
criminal law relating to the hiring or retention of an employee;
issuance of a security clearance, license, contract, grant or other
benefit;
(2) To a court, magistrate, or administrative tribunal in the
course of presenting evidence, including disclosures to opposing
counsel or witnesses in the course of or in preparation for civil
discovery, litigation, or settlement negotiations, in response to a
court order where relevant or potentially relevant to a proceeding, or
in connection with criminal law proceedings;
(3) To a contractor for the purpose of compiling, organizing,
analyzing, programming, or otherwise refining records to accomplish an
agency function subject to the same limitations applicable to U.S.
Department of the Treasury officers and employees under the Privacy
Act;
(4) To a congressional office from the records of an individual in
response to an inquiry from that congressional office made pursuant to
a written Privacy Act waiver at the request of the individual to whom
the records pertain;
(5) To third parties during the course of an investigation to the
extent necessary to obtain information pertinent to the investigation;
(6) To the Office of Personnel Management, Merit Systems Protection
Board, Equal Employment Opportunity Commission, Federal Labor Relations
Authority, and the Office of Special Counsel for the purpose of
properly administering Federal personnel systems or other agencies'
systems in accordance with applicable laws, Executive Orders, and
regulations;
(7) To the National Archives and Records Administration (NARA) or
General Services Administration pursuant to records management
inspections being conducted under the authority of 44 U.S.C. 2904 and
2906;
(8) To other Federal agencies or entities when the disclosure of
the existence of the individual's security clearance is needed for the
conduct of government business, and
(9) To appropriate agencies, entities, and person when (1) the
Department of the Treasury and/or Departmental Offices suspects or has
confirmed that there has been a breach of the system of records; (2)
the Department of the Treasury and/or Departmental Offices has
determined that as a result of the suspected or confirmed breach there
is a risk of harm to individuals, the Department of the Treasury and/or
Departmental Offices (including its information systems, programs, and
operations), the Federal Government, or national security; and (3) the
disclosure made to such agencies, entities, and persons is reasonably
necessary to assist in connection with the Department of the Treasury's
and/or Departmental Offices' efforts to respond to the suspected or
confirmed breach or to prevent, minimize, or remedy such harm;
(10) To another Federal agency or Federal entity when the
Department of the Treasury and/or Departmental Offices determines that
information from this system of records is reasonably necessary to
assist the recipient agency or entity in (1) responding to a suspected
or confirmed breach or (2) preventing, minimizing, or remedying the
risk of harm to individuals, the recipient agency or entity (including
its information systems, programs, and operations), the Federal
Government, or national security, resulting from a suspected or
confirmed breach;
(11) To General Services Administration for purposes of operating
the E-Rulemaking system.
POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
Records in this system are stored electronically or on paper in
secure facilities in a locked drawer behind a locked door.
POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
Records may be retrieved by an individual's name, social security
number, email address, electronic identification number and/or access/
security badge number.
POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
The retention and disposal period depends on the nature of the
comments
[[Page 1200]]
or input provided to the Treasury. For example, comments that pertain
to a Treasury proposed rule becomes part of the Treasury's central
files and are kept permanently. Other input to the Treasury may be kept
between one and 10 years, depending on the subject matter.
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
Records in this system are safeguarded in accordance with
applicable rules and policies, including all applicable Treasury
automated systems security and access policies. Strict controls have
been imposed to minimize the risk of compromising the information that
is being stored. Access to the computer system containing the records
in this system is limited to those individuals who have a need to know
the information for the performance of their official duties and who
have appropriate clearances.
Entrance to data centers and support organization offices is
restricted to those employees whose work requires them to be there for
the system to operate. Identification (ID) cards are verified to ensure
that only authorized personnel are present. Disclosure of information
through remote terminals is restricted through the use of passwords and
sign-on protocols which are periodically changed. Reports produced from
the remote printers are in the custody of personnel and financial
management officers and are subject to the same privacy controls as
other documents of similar sensitivity. Access is limited to authorized
employees. Paper records are maintained in locked safes and/or file
cabinets. Electronic records are password-protected. During non-work
hours, records are stored in locked safes and/or cabinets in a locked
room.
Protection and control of any sensitive but unclassified (SBU)
records are in accordance with TD P 71-10, Department of the Treasury
Security Manual. Access to the records is available only to employees
responsible for the management of the system and/or employees of
program offices who have a need for such information.
The GSA information technology system that hosts regulations.gov
and FDMS is in a facility protected by physical walls, security guards,
and requiring identification badges. Rooms housing the information
technology system infrastructure are locked, as are the individual
server racks. All security controls are reviewed on a periodic basis by
external assessors. The controls themselves include measures for access
control, security awareness training, audits, configuration management,
contingency planning, incident response, and maintenance.
Records in FDMS are maintained in a secure, password protected
electronic system that utilizes security hardware and software to
include multiple firewalls, active intrusion detection, encryption,
identification and authentication of users.
Partner agencies manage their own access to FDMS through their
designated partner agency account managers. Each designated partner
agency account manager has access to FDMS. This level of access enables
them to establish, manage, and terminate user accounts limited to their
own agency.
RECORDS ACCESS PROCEDURES:
See ``Notification Procedures'' below.
CONTESTING RECORDS PROCEDURES:
See ``Notification Procedures'' below.
NOTIFICATION PROCEDURES:
Individuals seeking notification and access to any records
contained in the system of records, or seeking to contest its content,
may inquire in accordance with instructions pertaining to individual
Treasury components appearing at 31 CFR part 1, subpart C, appendix A.
EXEMPTIONS PROMULGATED FOR THE SYSTEM:
None.
HISTORY:
None.
[FR Doc. 2020-00145 Filed 1-8-20; 8:45 am]
BILLING CODE 4810-25-P