Privacy Act of 1974; System of Records, 42399-42401 [2023-13908]

Agencies

• Postal Service

[Federal Register Volume 88, Number 125 (Friday, June 30, 2023)]
[Notices]
[Pages 42399-42401]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2023-13908]


=======================================================================
-----------------------------------------------------------------------

POSTAL SERVICE


Privacy Act of 1974; System of Records

AGENCY: Postal Service[supreg].

ACTION: Notice of modified systems of records.

-----------------------------------------------------------------------

SUMMARY: The United States Postal Service[supreg] (USPS) is proposing 
to revise one Customer Privacy Act System of Records (SOR). These 
modifications are being made to support an initiative to allow the 
linking of USPS.com accounts with approved third-party platforms used 
for the purchase of postage and fees for USPS shipping and mailing 
services.

DATES: These revisions will become effective without further notice on 
July 31, 2023, unless responses to comments received on or before that 
date result in a contrary determination.

ADDRESSES: Comments may be submitted via email to the Privacy and 
Records Management Office, United States Postal Service Headquarters 
([email protected]). To facilitate public inspection, 
arrangements to view copies of written comments received may be made 
upon request.

FOR FURTHER INFORMATION CONTACT: Janine Castorina, Chief Privacy and 
Records Management Officer, Privacy and Records Management Office, via 
([email protected] or 202-268-2000).

[[Page 42400]]


SUPPLEMENTARY INFORMATION: 

I. Background

    This notice is in accordance with the Privacy Act requirement that 
agencies publish their systems of records in the Federal Register when 
there is a revision, change, or addition, or when the agency 
establishes a new system of records. The Postal Service has determined 
that Customer Privacy Act System of Records, USPS SOR 810.100, 
www.usps.com Registration, should be revised to support an initiative 
to allow the linking of USPS.com accounts with approved third-party 
platforms that provide additional options and convenience for customers 
to purchase postage and print mailing labels for USPS shipping and 
mailing services.

II. Rationale for Changes to USPS Privacy Act Systems of Records

    The Postal Service has a long and storied history delivering for 
the American people. Technological advances have brought about 
significant changes to how people buy and sell a variety of products, 
allowing small businesses to reach an ever-increasing network of 
customers. The Postal Service is developing an initiative that supports 
innovation, grows revenue and meets changing marketplace needs.
    One of the Postal Service's responses to this new commerce 
landscape is to enhance Click-n-Ship[supreg], a Postal product that 
allows customers to print their own shipping labels right from their 
own computer. The Postal Service now seeks to upgrade Click-n-Ship's 
convenience, functionality and versatility by allowing usps.com users 
to link their Postal Service accounts with authorized third-party 
marketplaces that can assist business customers in meeting their USPS 
shipping and mailing needs.

III. Description of the Modified System of Records

    To allow for the linking of accounts, this SOR will be revised as 
follows:

--Two new purposes, 17 and 18.
--One new category of records, 9.
--Additional elements in category of records 1.

    Pursuant to 5 U.S.C. 552a(e)(11), interested persons are invited to 
submit written data, views, or arguments on this proposal. A report of 
the proposed revisions has been sent to Congress and to the Office of 
Management and Budget for their evaluations. The Postal Service does 
not expect this amended system of records to have any adverse effect on 
individual privacy rights. USPS SOR 810.100 www.usps.com Registration 
is provided below in its entirety.

SYSTEM NAME AND NUMBER:
    USPS 810.100, www.usps.com Registration.

SECURITY CLASSIFICATION:
    None.

SYSTEM LOCATION:
    Computer Operations Service Centers.

SYSTEM MANAGER(S):
    Chief Customer and Marketing Officer and Executive Vice President, 
United States Postal Service, 475 L'Enfant Plaza SW, Washington, DC 
20260-5005, (202) 268-7536.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    39 U.S.C. 401, 403, and 404.

PURPOSE(S) OF THE SYSTEM:
    1. To provide online registration with single sign-on services for 
customers.
    2. To facilitate online registration, provide enrollment 
capability, and administer internet-based services or features.
    3. To maintain current and up-to-date address information to assure 
accurate and reliable delivery and fulfillment of postal products, 
services, and other material.
    4. To obtain accurate contact information in order to deliver 
requested products, services, and other material.
    5. To authenticate customer logon information for usps.com.
    6. To permit customer feedback in order to improve usps.com or USPS 
products and services.
    7. To enhance understanding and fulfillment of customer needs.
    8. To verify a customer's identity when the customer establishes or 
attempts to access his or her account.
    9. To identify, prevent, and mitigate the effects of fraudulent 
transactions.
    10. To enhance the customer experience by improving the security of 
Change of Address (COA) and Hold Mail processes.
    11. To protect USPS customers from becoming potential victims of 
mail fraud and identity theft.
    12. To identify and mitigate potential fraud in the COA and Hold 
Mail processes.
    13. To verify a customer's identity when applying for COA and Hold 
Mail services.
    14. To provide online registration for Informed Address platform 
service for customers.
    15. To authenticate customer logon information for Informed Address 
platform services.
    16. To verify the name and address of the sender or the authority 
of the sender's representative when submitting an online International 
inquiry for a lost or damaged package on usps.com, such as the use of 
the International Assistant tool.
    17. To link usps.com customer accounts with authorized third-party 
vendor accounts that allow customers to purchase postage and/or fees 
and print labels for USPS shipping and mailing services.
    18. To facilitate the transmission of customer shipping information 
from third-party vendors to Click-n-Ship[supreg].

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    Customers who register via the USPS website at usps.com.

CATEGORIES OF RECORDS IN THE SYSTEM:
    1. Customer information: Name; customer ID(s); company name; job 
title and role; home, business, and billing address; phone number(s) 
and fax number; email(s); URL; text message number(s) and carrier; 
Automated Clearing House (ACH) information; and account-linking 
identifier.
    2. Identity verification information: Question, answer, username, 
user ID, password, email address, text message address and carrier, and 
results of identity proofing validation.
    3. Business specific information: Business type and location, 
business IDs, annual revenue, number of employees, industry, nonprofit 
rate status, mail owner, mail service provider, PC postage user, PC 
postage vendor, product usage information, annual and/or monthly 
shipping budget, payment method and information, planned use of 
product, age of website, and information submitted by, or collected 
from, business customers in connection with promotional marketing 
campaigns.
    4. Customer preferences: Preferences to receive USPS marketing 
information, preferences to receive marketing information from USPS 
partners, preferred means of contact, preferred email language and 
format, preferred on-screen viewing language, product and/or service 
marketing preference.
    5. Customer feedback: Method of referral to website.
    6. Registration information: Date of registration.
    7. Online user information: Internet Protocol (IP) address, domain 
name, operating system versions, browser version, date and time of 
connection, Media Access Control (MAC) address, device identifier, 
information about the software acting on behalf of the user (i.e., user 
agent), and geographic location.
    8. International Inquiries: Name and address in Customer 
Registration

[[Page 42401]]

account profile used to match with Sender name and address or Sender's 
representative authority to file an international inquiry for a lost or 
damaged package.
    9. Click-n-Ship Account Linking Information: Customer Address 
Details, Authentication, Customer Contact Name, Currency, Label 
Metadata, Marketplace Label data, Order ID, Order Status, Shipping 
Code, Value, IP Address, MAC Address, Device Type, Browser Type, OAuth 
accessToken, OAuth expiry, OAuth refreshToken, OAuth 
refreshTokenExpiry, OAuth tokenType, Marketplace Data ID, Marketplace 
Data Version, Marketplace Data Account Type, Marketplace Data Account 
Identifier, Marketplace Data Reference ID, Marketplace Data Labels.

RECORD SOURCE CATEGORIES:
    Customers, Individual Sender and Sender's representative filing an 
international inquiry for lost or damaged packages.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND PURPOSES OF SUCH USES:
    Standard routine uses 1. through 7., 10., and 11. apply.

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
    Automated database, computer storage media, and paper.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
    By customer name, customer ID(s), phone number, mail, email 
address, IP address, text message address, and any customer information 
or online user information.
    By tracking number for International package shipments for which an 
individual sender or sender's representative is filing an online 
International inquiry for loss or damage.

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
    1. ACH records are retained up to 2 years.
    2. Records stored in the registration database are retained until 
the customer cancels the profile record, 3 years after the customer 
last accesses records, or until the relationship ends.
    3. For small business registration, records are retained 5 years 
after the relationship ends.
    4. Online user information may be retained for 6 months. Records 
existing on paper are destroyed by burning, pulping, or shredding. 
Records existing on computer storage media are destroyed according to 
the applicable USPS media sanitization practice.

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
    Paper records, computers, and computer storage media are located in 
controlled-access areas under supervision of program personnel. Access 
to these areas is limited to authorized personnel, who must be 
identified with a badge.
    Access to records is limited to individuals whose official duties 
require such access. Contractors and licensees are subject to contract 
controls and unannounced on-site audits and inspections. Computers are 
protected by mechanical locks, card key systems, or other physical 
access control methods. The use of computer systems is regulated with 
installed security software, computer logon identifications, and 
operating system controls including access controls, terminal and 
transaction logging, and file management software. Online data 
transmissions are protected by encryption.
    For small business registration, computer storage tapes and disks 
are maintained in controlled-access areas or under general scrutiny of 
program personnel. Access is controlled by logon ID and password as 
authorized by the Marketing organization via secure website. Online 
data transmissions are protected by encryption.

RECORD ACCESS PROCEDURES:
    Requests for access must be made in accordance with the 
Notification Procedure above and USPS Privacy Act regulations regarding 
access to records and verification of identity under 39 CFR 266.5.

CONTESTING RECORD PROCEDURES:
    See Notification Procedures and Record Access Procedures.

NOTIFICATION PROCEDURES:
    Customers wanting to know if information about them is maintained 
in this system of records must address inquiries in writing to the 
system manager. Inquiries must contain name, address, and other 
identifying information.

EXEMPTIONS PROMULGATED FOR THE SYSTEM:
    None.

HISTORY:
    March 8, 2023, 88 FR 14400; December 27, 2018, 83 FR 66768; August 
25, 2016, 81 FR 58542; June 30, 2016, 81 FR 42760; June 20, 2014, 79 FR 
35389; January 23, 2014, 79 FR 3881; July 11, 2012, 77 FR 40921; 
October 24, 2011, 76 FR 65756; May 08, 2008, 73 FR 26155; April 29, 
2005, 70 FR 22516.

Sarah Sullivan,
Attorney, Ethics and Legal Compliance.
[FR Doc. 2023-13908 Filed 6-29-23; 8:45 am]
BILLING CODE 7710-12-P