Privacy Act of 1974; Systems of Records, 61331-61334 [2021-24283]

Agencies

• NUCLEAR REGULATORY COMMISSION

[Federal Register Volume 86, Number 212 (Friday, November 5, 2021)]
[Notices]
[Pages 61331-61334]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2021-24283]


=======================================================================
-----------------------------------------------------------------------

NUCLEAR REGULATORY COMMISSION

[NRC-2021-0186]


Privacy Act of 1974; Systems of Records

AGENCY: Nuclear Regulatory Commission.

ACTION: Notice of new system of records.

-----------------------------------------------------------------------

SUMMARY: Pursuant to the Privacy Act of 1974 and Office of Management 
and Budget (OMB) Circular No. A-108, notice is hereby given that the 
U.S. Nuclear Regulatory Commission (NRC) proposes to develop a new 
system of records notice titled, ``Health Emergency Records,'' NRC 46. 
NRC proposes to establish this system of records to protect the NRC's 
workforce and respond to the Coronavirus Disease 2019 (COVID-19), a 
declared public health emergency, and other high consequence public 
health threats.

DATES: Submit comments on this new system of records by December 6, 
2021. Comments received after this date will be considered if it is 
practical to do so, but the Commission is able to ensure consideration 
only for comments received before this date. This proposed action will 
be effective on the day following the end of the comment period unless 
comments are received which result in a contrary determination.

ADDRESSES: You may submit comments by any of the following methods; 
however, the NRC encourages electronic comment submission through the 
Federal Rulemaking website:
     Federal Rulemaking Website: Go to https://www.regulations.gov and search for Docket ID NRC-2021-0186. Address 
questions about Docket IDs in Regulations.gov to Stacy Schumann; 
telephone: 301-415-0624; email: [email protected]. For technical 
questions, contact the individual listed in the FOR FURTHER INFORMATION 
CONTACT section of this document.
     Mail comments to: Office of Administration, Mail Stop: 
TWFN-7-A60M, U.S. Nuclear Regulatory Commission, Washington, DC 20555-
0001, ATTN: Program Management, Announcements and Editing Staff.
    For additional direction on obtaining information and submitting 
comments, see ``Obtaining Information and Submitting Comments'' in the 
SUPPLEMENTARY INFORMATION section of this document.

FOR FURTHER INFORMATION CONTACT: Sally Hardy, Office of the Chief 
Information Officer, U.S. Nuclear Regulatory Commission, Washington, DC 
20555-0001, telephone: 301-415-5607; email: [email protected].

SUPPLEMENTARY INFORMATION: 

I. Obtaining Information and Submitting Comments

A. Obtaining Information

    Please refer to Docket ID NRC-2021-0186 when contacting the NRC 
about the availability of information for this action. You may obtain 
publicly available information related to this action by any of the 
following methods:
     Federal Rulemaking Website: Go to https://www.regulations.gov and search for Docket ID NRC-2021-0186.
     NRC's Agencywide Documents Access and Management System 
(ADAMS): You may obtain publicly available documents online in the 
ADAMS Public Documents collection at https://www.nrc.gov/reading-rm/adams.html. To begin the search select, ``Begin Web-based ADAMS 
Search.'' For problems with ADAMS, please contact the NRC's Public 
Document Room (PDR) reference staff at 1-800-397-4209, 301-415-4737, or 
by email [email protected].
     Attention: The PDR, where you may examine and order copies 
of public documents, is currently closed. You may submit your request 
to the PDR via email at [email protected] or call 1-800-397-4209 or 
301-415-4737, between 8:00 a.m. and 4:00 p.m. (ET), Monday through 
Friday, except Federal holidays.

B. Submitting Comments

    The NRC encourages electronic comment submission through the 
Federal Rulemaking website (https://www.regulations.gov). Please 
include Docket ID NRC-2021-0186 in the

[[Page 61332]]

subject line of your comment submission.
    The NRC cautions you not to include identifying or contact 
information that you do not want to be publicly disclosed in your 
comment submission. The NRC will post all comment submissions at 
https://www.regulations.gov as well as enter the comment submissions 
into ADAMS. The NRC does not routinely edit comment submissions to 
remove identifying or contact information.
    If you are requesting or aggregating comments from other persons 
for submission to the NRC, then you should inform those persons not to 
include identifying or contact information that they do not want to be 
publicly disclosed in their comment submission. Your request should 
state that the NRC does not routinely edit comment submissions to 
remove such information before making the comment submissions available 
to the public or entering the comment into ADAMS.

II. Background

    Pursuant to the Privacy Act of 1974 and OMB Circular No. A-108, 
``Federal Agency Responsibilities for Review, Reporting, and 
Publication under the Privacy Act,'' notice is hereby given that the 
NRC proposes to establish this system of records notice.
    The proposed new system requires an advance period for public 
comment.
    A report on this new system has been sent to OMB, the Committee on 
Homeland Security and Governmental Affairs of U.S. Senate, and the 
Committee on Oversight and Reform of the U.S. House of Representatives, 
as required by the Privacy Act.
    If changes are made based on the NRC's review of comments received, 
the NRC will publish a subsequent notice.

SUPPLEMENTARY INFORMATION: The text of the report is attached.

    Dated: November 2, 2021.

    For the Nuclear Regulatory Commission.
Scott C. Flanders,
Senior Agency Official for Privacy, Office of the Chief Information 
Officer.

Attachment--Nuclear Regulatory Commission Privacy Act Systems of 
Records

NRC Systems of Records

46. Health Emergency Records--NRC

    This system of record is maintained by the NRC and contains 
personal information about individuals from which information is 
retrieved by an individual's name or identifier.
    The notice for this system of records states the name and location 
of the record system, the authority for and manner of its operation, 
the categories of individuals that it covers, the types of records that 
it contains, the sources of information in those records, and the 
routine uses. This notice also includes the business address of the NRC 
official who will inform interested persons of the procedures whereby 
they may gain access to and request amendment of records pertaining to 
them.
    The Privacy Act provides certain safeguards for an individual 
against an invasion of personal privacy by requiring Federal agencies 
to protect records contained in an agency system of records from 
unauthorized disclosure and to ensure that information is current and 
accurate for its intended use and that adequate safeguards are provided 
to prevent misuse of such information.

SYSTEM NAME AND NUMBER:
    Health Emergency Records--NRC 46.

SECURITY CLASSIFICATION:
    Unclassified.

SYSTEM LOCATION:
    Headquarters, 11555 Rockville Pike, Rockville, Maryland. Records 
may be maintained at all locations at which the NRC, or contractors on 
behalf of the NRC, operate or at which NRC operations are supported.

SYSTEM MANAGER(S):
    Chief Human Capital Officer, Office of the Chief Human Capital 
Officer, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    Workforce safety Federal requirements, including the Occupational 
Safety and Health Act of 1970; Executive Order 12196, ``Occupational 
safety and health programs for Federal employees;'' 5 U.S.C. 7902, 
``Safety programs;'' Federal laws related to a specific public health 
emergency or high-consequence public health threats, including, 
Executive Order 13991, ``Protecting the Federal Workforce and Requiring 
Mask-Wearing,'' Executive Order 13994, ``Ensuring a Data-Driven 
Response to COVID-19 and Future High-Consequence Public Health 
Threats,'' Executive Order 14042, ``Ensuring Adequate COVID Safety 
Protocols for Federal Contractors,'' and Executive Order 14043, 
``Requiring Coronavirus Disease 2019 Vaccination for Federal 
Employees,'' Federal laws that authorize the NRC to create and maintain 
Federal records of agency activities, including 44 U.S.C. 3101; the 
Religious Freedom Restoration Act of 1933, 42 U.S.C. Chapter 21B; Title 
VII of the Civil Rights Act of 1964, as amended, 42 U.S.C. 2000e; and 
the Rehabilitation Act of 1973, as amended, 29 U.S.C. 701 et seq.

PURPOSE(S) OF THE SYSTEM:
    This system is to maintain records necessary and relevant to NRC 
activities responding to and mitigating high-consequence public health 
threats, including, but not limited to: COVID-19 or diseases and 
illnesses relating to a public health emergency, pandemic, or other 
high-consequence public health threat. The President's September 9, 
2021, Executive Order 14043, requires all Federal workers to be 
vaccinated, except in limited circumstances as required by law. 
Accordingly, this this system of records is also designed to collect 
records related to vaccination status, including requests for an 
exception to the vaccination requirement. Such records may include, but 
are not limited to, those records needed to understand the impact of an 
illness or disease on the NRC workforce, to assist the NRC in 
protecting its workforce from a declared public health emergency, 
pandemic, or other high-consequence public health threat, as well as 
those records submitted by NRC personnel, or the lawful representative 
of such personnel, requesting an exception to the vaccination 
requirement contained in Executive Order 14043, or other applicable 
law.
    Among other things, the NRC may use the information collected to 
facilitate the provision of vaccines to NRC personnel, including 
employees, interns, and contractors; to inform individuals who may have 
been in proximity of a person possibly infected with a disease, 
illness, or other high-consequence public health threat at or on 
buildings, grounds, and properties that are owned, leased, or used by 
the NRC; to confirm which personnel have received vaccinations to 
prevent such disease or illness to spread throughout the NRC's 
workforce; to consider requests for an exception to the COVID-19 
vaccination requirement; to respond to inquiries regarding such 
vaccinations for purposes related to official agency travel, access to 
licensee facilities, NRC site access, or implementation/lifting of 
access restrictions; or to determine and report the aggregate number of 
vaccinated NRC staff, or the number of staff that received a legal 
exception to the vaccine requirement.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    NRC's personnel, including employees, interns, and contractors.

[[Page 61333]]

CATEGORIES OF RECORDS IN THE SYSTEM:
    Records maintained in this system may include:
    A. Full name, NRC employee ID number; telephone number, worksite, 
email address, supervisor's name, address and contact information and/
or the contractor's supervisor/contracting officer representative name, 
address and contact information.
    B. Date(s) and circumstances of the individual's suspected or 
actual exposure to disease or illness including symptoms, as well as 
locations within the NRC workplace where the individual may have 
contracted or been exposed to the disease or illness.
    C. Other information of the individual directly related to the 
disease or illness (e.g., testing results/information, symptoms, 
treatments, and source of exposure).
    D. Appointment scheduling information, including the date, time, 
and location of a scheduled appointment.
    E. Medical screening information, including the individual's name, 
date of birth, age, category of employment, current medical status, 
vaccination history, and any relevant medical history.
    F. Vaccination records, including the date, type, and dose of 
vaccine administered to the individual.
    G. Requests for an exception to the COVID-19 vaccination 
requirement, including, but not limited to, the employee's name and 
relevant information related to the request.

RECORD SOURCE CATEGORIES:
    Records may be obtained from NRC personnel, including employees, 
contractors, and interns, who may provide relevant information on a 
suspected or confirmed disease or illness, or the prevention of such 
disease or illness, which is the subject of a declared public health 
emergency, or information related to a request for an exception from 
the COVID-19 vaccination requirement. Information may also be sourced 
from personnel at medical facilities, or from existing systems of 
records, including but not limited to NRC-43, ``Employee Health Center 
Records,'' (84 FR 71536; December 27, 2019) or OPM/GOVT-10, ``Employee 
Medical File System Records,'' (75 FR 35099; June 21, 2010), and 
modified on November 30, 2015 (80 FR 74815).

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND THE PURPOSES OF SUCH USES:
    In addition to the disclosures permitted under subsection (b) of 
the Privacy Act, the NRC may disclose information contained in this 
system of records without the consent of the persons or entities 
mentioned herein if the disclosure is compatible with the purpose for 
which the record was collected under the following routine uses:
    A. To appropriate medical facilities, or Federal, State, local, 
Tribal, territorial or foreign government agencies, to the extent 
permitted by law, for the purpose of protecting the vital interests of 
individual(s), including to assist the United States Government in 
responding to or mitigating high-consequence public health threats, or 
diseases and illnesses relating to a public health emergency.
    B. To determine eligibility for access to NRC buildings, NRC 
licensee facilities or sites, or other Federal facilities.
    C. To provide licensees information needed for unescorted access or 
access to the licensee's facility(s).
    D. Where a record, either alone or in conjunction with other 
information, indicates a violation or potential violation of law--
criminal, civil, or regulatory in nature--the relevant records may be 
referred to the appropriate Federal, State, local, territorial, Tribal, 
or foreign law enforcement authority or other appropriate entity 
charged with the responsibility for investigating or prosecuting such 
violation or charged with enforcing or implementing such law.
    E. In an appropriate proceeding before a court, grand jury, or 
administrative or adjudicative body, when the NRC determines that the 
records are arguably relevant to its proceeding; or in an appropriate 
proceeding before an administrative or adjudicative body when the 
adjudicator determines the records to be relevant to the proceeding.
    F. To contractors, grantees, experts, consultants, students, and 
others performing or working on a contract, service, grant, cooperative 
agreement, or other assignment for the Federal Government, when 
necessary to accomplish an NRC function related to this system of 
records.
    G. A record on an employee or contractor from this system of 
records may be disclosed as a routine use to a Federal, State, local, 
territorial, Tribal, or foreign agency requesting a record that is 
relevant and necessary to its decision on a matter of hiring or 
retaining an employee, issuing a security clearance, reporting an 
investigation of that individual, letting a contract, or issuing a 
license, grant, or other benefit.
    H. A record on an employee or contractor from this system of 
records may be disclosed as a routine use to a Congressional office in 
response to an inquiry from the Congressional office made at the 
request of that individual.
    I. To the National Archives and Records Administration for purposes 
of records management inspections conducted under the authority of 44 
U.S.C. 2904 and 2906.
    J. To appropriate agencies, entities, and persons when (1) the NRC 
suspects or has confirmed that there has been a breach of the system of 
records. (2) the NRC has determined that as a result of the suspected 
or confirmed breach there is a risk of harm to an individual(s), the 
NRC (including its information systems, programs, and operations), the 
Federal Government, or national security; and (3) the disclosure made 
to such agencies, entities, and persons is reasonably necessary to 
assist in connection with the NRC's efforts to respond to the suspected 
or confirmed breach or to prevent, minimize, or remedy such harm.
    K. To another Federal agency or Federal entity, when the NRC 
determines that information from this system of records is necessary to 
assist the recipient agency or entity in (1) responding to a suspected 
or confirmed breach, or (2) preventing, minimizing, or remedying the 
risk of harm to individuals, the recipient agency or entity (including 
its information systems, programs, and operations), the Federal 
Government, or national security, resulting from a suspected or 
confirmed breach.
    L. To any agency, organization, or individual for the purpose of 
performing authorized audit or oversight operations of the NRC and 
meeting related reporting requirements.
    M. To such recipients and under such circumstances and procedures 
as are mandated by Federal statute or treaty.
    N. A record from this system of records may be disclosed as a 
routine use to NRC-paid experts or consultants, and those under 
contract with the NRC on a ``need-to-know'' basis for purpose within 
the scope of the pertinent NRC task. This access will be granted to an 
NRC contractor or employee of such contractor by a system manager only 
after satisfactory justification has been provided to the system 
manager.
    O. To a Federal agency employee, expert, consultant, or contractor 
in performing a Federal duty for purposes of authorizing, arranging, 
and/or claiming reimbursement for official travel, including, but not 
limited to, traveler profile information.

[[Page 61334]]

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
    All records in this system of records are maintained and in 
compliance with applicable executive orders, statutes, and agency 
implementing recommendations. Electronic records are stored in 
databases and/or on hard disks, removable storage devices, or other 
electronic media. Paper records are maintained in a secure, access 
controlled room, with access limited to authorized personnel.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
    Records will be retrieved by any of the categories of records, 
including name, location, date of vaccination, or work status.

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
    To the extent applicable, to ensure compliance with Americans with 
Disabilities Act, the Rehabilitation Act, and the Genetic Information 
Nondiscrimination Act of 2008, medical information must be ``maintained 
on separate forms and in separate medical files and be treated as a 
confidential medical record.'' 42 U.S.C. 12112(d)(3)(B); 42 U.S.C. sec 
2000ff-5(a); 29 CFR 1630.14(b)(1), (c)(1),(d)(4)(i); and 29 CFR 
1635.9(a). This means that medical information and documents must be 
stored separately from other personnel records. As such, the NRC must 
keep medical records for at least 1 year from creation date. 29 CFR 
1602.14. Further, records compiled under this system of record notices 
will be maintained in accordance with the National Archives and Records 
Administration General Records Schedule 2.7 Employee Health and Safety 
Records, Items 010, 070, or 080 to the extent applicable.
    GRS 2.7 item 010 (DAA-GRS-2017-0010-0001)--Clinic scheduling 
records. Temporary. Destroy when 3 years old, but longer retention is 
authorized if needed for business use.
    GRS 2.7 item 070 (DAA-GRS-2017-0010-0012)--Non-occupational 
individual case files. Temporary. Destroy 10 years after the most 
recent encounter, but longer retention is authorized if needed for 
business use.
    GRS 2.7 item 080 (DAA-GRS-2017-0010-0013)--Non-occupational health 
and wellness program records. Temporary. Destroy 3 years after the 
project/activity/or transaction is completed or superseded, but longer 
retention is authorized if needed for business use.

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
    The NRC safeguards records in this system according to applicable 
rules and polices, including all applicable NRC automated systems 
security and access policies. The NRC has imposed controls to minimize 
the risk of compromising the information that is being stored. Users of 
individual computers can only gain access to the data by valid user 
identification and password. Paper records are maintained in a secure, 
access- controlled room, with access limited to authorized personnel.

RECORDS ACCESS PROCEDURES:
    Same as ``Notification procedures.''

CONTESTING RECORD PROCEDURES:
    Same as ``Notification procedures.''

NOTIFICATION PROCEDURES:
    Individuals seeking to determine whether this system of records 
contains information about them should write to the Freedom of 
Information Act Officer or Privacy Act Officer, Office of the Chief 
Information Officer, U.S. Nuclear Regulatory Commission, Washington, DC 
20555-0001, and comply with procedures contained in NRC's Privacy Act 
regulations, 10 CFR part 9.

EXEMPTIONS CLAIMED FOR THE SYSTEM:
    None.

HISTORY:
    None.
    Addendum I--List of U.S. Nuclear Regulatory Commission Locations

    Part 1--NRC Headquarters Offices
    1. One White Flint North, 11555 Rockville Pike, Rockville, 
Maryland.
    2. Two White Flint North, 11545 Rockville Pike, Rockville, 
Maryland.

    Part 2--NRC Regional Offices
    1. NRC Region I, 2100 Renaissance Boulevard, Suite 100, King of 
Prussia, Pennsylvania.
    2. NRC Region II, Marquis One Tower, 245 Peachtree Center Avenue 
NE, Suite 1200, Atlanta, Georgia.
    3. NRC Region III, 2443 Warrenville Road, Suite 210, Lisle, 
Illinois.
    4. NRC Region IV, 1600 East Lamar Boulevard, Arlington, Texas.
    5. NRC Technical Training Center, Osborne Office Center, 5746 
Marlin Road, Suite 200, Chattanooga, Tennessee.

[FR Doc. 2021-24283 Filed 11-4-21; 8:45 am]
BILLING CODE 7590-01-P