Privacy Act of 1974; System of Records, 43508-43512 [2024-10811]

Download as PDF 43508 Federal Register / Vol. 89, No. 97 / Friday, May 17, 2024 / Notices amended; 49 CFR 1.49; and DOT Order 1351.29A. Nanda Narayanan Srinivasan, Associate Administrator, Research and Program Development. [FR Doc. 2024–10851 Filed 5–16–24; 8:45 am] BILLING CODE 4910–59–P DEPARTMENT OF TRANSPORTATION Office of the Secretary [Docket No.: DOT–OST–2023–0136] Privacy Act of 1974; System of Records Federal Motor Carrier Safety Administration (FMCSA), Department of Transportation (DOT). ACTION: Notice of a new system of records. AGENCY: In accordance with the Privacy Act of 1974, the Department of Transportation (DOT) proposes a new system of records titled ‘‘DOT/FMCSA 014 Electronic Logging Device (ELD) Records’’. This system of records is used to facilitate the retrieval, transfer, and collection of hours-of-service (HOS) data from electronic ELD files submitted by motor carriers and the review of HOS data by authorized safety officials. The system retrieves data recorded by a motor carrier’s ELD via an ELD output file. Upon receipt of this ELD output file, the system analyzes the data, identifies instances of potential noncompliance, and notifies the authorized safety official of these instances. FMCSA maintains ELD data for use in investigations and enforcement actions and to determine compliance with HOS requirements. The primary purpose of the ELD system is to allow authorized safety officials to assess electronic ELD files rapidly and accurately at roadside and during reviews and safety audits to determine whether the driver is in compliance with the HOS regulations. The ELD system will also be used to assess whether ELDs meet certain technical specifications that are set forth in the HOS regulations. Additionally, the Agency may use ELD data internally to inform research efforts related to enforcement of safety regulations, including driving hours, as such research may ultimately improve compliance with HOS requirements. DATES: Comments on the system will be accepted on or before 30 days from the date of publication of this notice. The system will be effective 30 days after publication of this notice. Routine uses will be effective at that time. khammond on DSKJM1Z7X2PROD with NOTICES SUMMARY: VerDate Sep<11>2014 17:20 May 16, 2024 Jkt 262001 You may submit comments, identified by docket number OST2023–0136 by one of the following methods: • Federal e-Rulemaking Portal: https://www.regulations.gov. • Mail: Docket Management Facility, U.S. Department of Transportation, 1200 New Jersey Ave. SE, West Building Ground Floor, Room W12–140, Washington, DC 20590–0001. • Hand Delivery or Courier: West Building Ground Floor, Room W12–140, 1200 New Jersey Ave. SE, between 9 a.m. and 5 p.m. ET, Monday through Friday, except Federal holidays. Instructions: You must include the agency name and docket number DOT– OST–2023–0136. All comments received will be posted without change to https://www.regulations.gov, including any personal information provided. ADDRESSES: For general and privacy questions, please contact: Karyn Gorman, Departmental Chief Privacy Officer, Department of Transportation, S–83, Washington, DC 20590, Email: privacy@dot.gov, Tel. (202) 366–3140. SUPPLEMENTARY INFORMATION: FOR FURTHER INFORMATION CONTACT: Background In accordance with the Privacy Act of 1974, the Department of Transportation is proposing a new system of records titled ‘‘Department of Transportation (DOT)/Federal Motor Carrier Safety Administration (FMCSA) 014, Electronic Logging Device Records.’’ This system will access hours-of-service (HOS) data via electronic logging device (ELD) files submitted by motor carriers and will allow authorized safety officials to assess these electronic ELD files rapidly and accurately at roadside and during reviews and safety audits to determine whether the driver is in compliance with the HOS regulations. This system will also assess whether ELDs meet certain technical specifications that are set forth in HOS regulations and support removals from a list of self-certified devices. See 49 CFR part 395 subpart B, app. A. Additionally, the Agency may use data from this system internally and/or in aggregated and anonymized form to inform research efforts related to enforcement of safety regulations, including driving hours, as such research may ultimately improve compliance with HOS requirements. For example, the use of ELD data in research related to operational testing of electronic, in-motion commercial motor vehicle (CMV) inspections may increase roadside inspection capacity and further PO 00000 Frm 00139 Fmt 4703 Sfmt 4703 facilitate enforcement of HOS requirements. Section 32301(b) of the Commercial Motor Vehicle Safety Enhancement Act of 2012 (enacted as part of the Moving Ahead for Progress in the 21st Century Act (MAP–21)) codified at 49 U.S.C. 31137, mandated that the Secretary of Transportation adopt regulations requiring that CMVs, operated in interstate commerce by drivers required to maintain records of duty status (RODS), be equipped with ELDs. The statute also set forth specific provisions to be addressed by the regulations, including ELD design and performance standards and certification requirements. In addition, the statute addresses privacy protections and the use of ELD data, requiring that the regulations ensure that ELDs are not used to harass a CMV operator. On December 16, 2015, FMCSA, acting primarily under the authority of MAP– 21 (and several concurrent statutory authorities), published a final rule, Electronic Logging Devices and Hours of Service Supporting Documents (80 FR 78292) requiring the use of ELDs for recording HOS information. Under the regulations, which were implemented on December 18, 2017, CMVs operated in interstate commerce, by drivers required to maintain RODS, must be equipped with ELDs. The regulations also establish ELD performance and design standards, require ELDs to be certified and registered with FMCSA, and address privacy protections for CMV operators. The ELD regulations are set forth in 49 CFR part 395, subpart B. FMCSA’s ELD system consists of the following components: • Electronic Record of Duty Status (eRODS) HOS review tool • ELD website and database • ELD provider web service • Enforcement ELD web service • Enforcement ELD summary data web service Electronic Record of Duty Status (eRODS) HOS review tool. eRODS is a software application installed on authorized safety officials’ computers that is used to retrieve and display the information on an ELD output file. eRODS allows enforcement users to analyze a driver’s HOS data and perform a roadside inspection or an investigation. There is also a web-based version of eRODS that consists of all the functionality included in the desktop version but is accessible via the ELD website described below. ELD devices used by motor carriers are required to support one of two options for providing an ELD file to FMCSA for analysis via the eRODS HOS review tool: E:\FR\FM\17MYN1.SGM 17MYN1 khammond on DSKJM1Z7X2PROD with NOTICES Federal Register / Vol. 89, No. 97 / Friday, May 17, 2024 / Notices Option 1 is the telematics transfer method. ELD devices that utilize the telematics transfer method support transfer of ELD files to the FMCSA’s ELD system via web services transfer or encrypted email transfer. With the web service transfer method, the ELD device sends the ELD file directly to FMCSA servers via a secure call to the ELD provider web service, which makes the ELD file available to eRODS. For the email transfer, the ELD device sends the data file via secure, encrypted email to FMCSA servers which process the email and make the ELD file available to eRODS. Option 2 is local transfer, which consists of Bluetooth connection or USB transfer. The Bluetooth connection allows the motor carrier’s ELD to use the safety official’s internet connection to transfer the ELD file to the ELD provider web service. The USB transfer method uses the safety official’s self-encrypting USB device to transfer the ELD file from the motor carrier’s ELD device to the safety official’s eRODS application. This is the only method that does not require internet connectivity. ELD website and database. The ELD website and database is the centerpiece of FMCSA’s ELD system. The website includes a section for each stakeholder. ELD vendors use the website to register their organization with FMCSA and to self-certify their devices’ compliance with ELD regulations. ELD vendors also have access to tools necessary to build and test their interfaces with FMCSA. Motor carriers and drivers can access the ELD website to obtain information on the ELD Rule and other communications that educate them on the ELD process. They can also review the list of self-certified ELD devices. Enforcement users can access ELD policy and training information related to ELDs and can access web eRODS to review motor carrier HOS compliance. The FMCSA vendor vetting team also reviews ELD vendor submissions for completeness. ELD provider web service. The ELD provider web service provides the means for a registered, self-certified ELD device to transfer, via web service or blue-tooth transfer options, an ELD file to FMCSA. During the self-certification process for an ELD device, the ELD vendor provides FMCSA with their public certificate and receives FMCSA’s public certificate and additional information on building the connection between their ELD and FMCSA’s ELD provider web service. Once the connection is established, the ELD can submit output files of a driver’s HOS data to FMCSA via this service. VerDate Sep<11>2014 17:20 May 16, 2024 Jkt 262001 Enforcement ELD web service. The enforcement ELD web service is used to transfer the ELD files submitted to FMCSA to the safety official’s eRODS HOS review tool. Both the desktop and web-based eRODS tools connect to this service. Files that are submitted via ELD provider web service, Bluetooth connection, or email can be accessed by enforcement via a connection to this service. Enforcement ELD summary data web service. This service provides safety officials summary information derived from the contents of an ELD file that was submitted to the ELD system. This summary data enables safety officials to review indicators prompting further analysis and also allows implementation of a direct link to eRODS tool for HOS analysis. FMCSA’s ELD system of records will also serve as a central repository of ELD information. FMCSA has also included DOT General Routine Uses, to the extent they are compatible with the purposes of this System. As recognized by the Office of Management and Budget (OMB) in its Privacy Act Implementation Guidance and Responsibilities (65 FR 19746 (July 9, 1975)), the routine uses include proper and necessary uses of information in the system, even if such uses occur infrequently. FMCSA has included in this notice routine uses for disclosures to law enforcement when the record, on its face, indicates a violation of law, to DOJ for litigation purposes, or when necessary to investigate or respond to a breach or potential breach of this system or other agencies’ systems. DOT may disclose to Federal, State, local, or foreign agency information relevant to law enforcement, litigation, and proceedings before any court or adjudicative or administrative body. OMB has long recognized that these types of routine uses are ‘‘proper and necessary’’ uses of information and qualify as compatible with agency systems (65 FR 19476, April 11, 2000). In addition, OMB Memorandum M– 17–12, directed agencies to include routine uses that will permit sharing of information when needed to investigate, respond to, and mitigate a breach of a Federal information system. DOT also has included routine uses that permit sharing with the National Archives and Records Administration when necessary for an inspection, to any Federal Government agency engaged in audit or oversight related to this system, or when DOT determines that the disclosure will detect, prevent, or mitigate terrorism activity. These types of disclosures are necessary and proper uses of information in this system because they PO 00000 Frm 00140 Fmt 4703 Sfmt 4703 43509 further DOT’s obligation to fulfill its records management and program management responsibilities by facilitating accountability to agencies charged with oversight in these areas, and DOT’s obligation under the Intelligence Reform and Terrorism Prevention Act of 2004, Public Law 108–456, and Executive Order 13388 (Oct. 25, 2005) to share information necessary and relevant to detect, prevent, disrupt, preempt, or mitigate the effects of terrorist activities against the territory, people, and interests of the United States. Privacy Act The Privacy Act (5 U.S.C. 552a) governs the means by which Federal Government agencies collect, maintain, use, and disseminate individuals’ records. The Privacy Act applies to information that is maintained in a ‘‘system of records.’’ A ‘‘system of records’’ is a group of any records under the control of an agency from which information is retrieved by the name of an individual or by some identifying number, symbol, or other identifying particular assigned to the individual. The Privacy Act extends rights and protections to individuals who are U.S. citizens and lawful permanent residents. Additionally, the Judicial Redress Act (JRA) provides a covered person with a statutory right to make requests for access and amendment to covered records, as defined by the JRA, along with judicial review for denials of such requests. In addition, the JRA prohibits disclosures of covered records, except as otherwise permitted by the Privacy Act. Below is the description of the Electronic Logging Device System of Records. In accordance with 5 U.S.C. 552a(r), DOT has provided a report of this system of records to the OMB and to Congress. SYSTEM NAME AND NUMBER: Department of Transportation (DOT)/ Federal Motor Carrier Safety Administration (FMCSA) 014 Electronic Logging Device (ELD) Records. SECURITY CLASSIFICATION: Unclassified. SYSTEM LOCATION: Records are maintained in a FedRAMP-certified third-party cloud environment. The contracts are maintained by DOT at 1200 New Jersey Avenue SE, Washington, DC 20590. SYSTEM MANAGER(S): Division Chief, Enforcement Division, Office of Enforcement and Compliance, FMCSA, U.S. Department of E:\FR\FM\17MYN1.SGM 17MYN1 43510 Federal Register / Vol. 89, No. 97 / Friday, May 17, 2024 / Notices Transportation, 1200 New Jersey Avenue SE, Washington, DC 20590. AUTHORITY FOR MAINTENANCE OF THE SYSTEM: Section 32301(b) of the Commercial Motor Vehicle Safety Enhancement Act, enacted as part of the Moving Ahead for Progress in the 21st Century Act (Pub. L. 112–141, 126 Stat. 405, (July 6, 2012), codified at 49 U.S.C. 31137. (MAP–21); 49 CFR parts, 385, 386, 390, and 395. PURPOSE(S) OF THE SYSTEM: The purposes of the system are to (1) allow Federal and State law enforcement agencies to match an interstate CMV driver’s name with his or her HOS record; (2) allow authorized safety officials to perform HOS compliance-assurance and enforcement functions for the purposes of using personal information to verify the time, date, and location for duty status changes of interstate CMV drivers to ensure that motor carriers and interstate drivers comply with applicable HOS regulations; (3) allow for assessment of particular ELD models and units to determine that they meet the technical specifications set forth in the HOS regulations; and (4) allow ELD data to inform research efforts related to safety regulations, including driving hours, to improve compliance with HOS requirements. CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM: Categories of individuals within this system include commercial motor vehicle CMV drivers. khammond on DSKJM1Z7X2PROD with NOTICES CATEGORIES OF RECORDS IN THE SYSTEM: Categories of records in the system include the following information about CMV Drivers. Data elements marked with an asterisk ‘‘*’’ may be PII linked to ELD username or driver/co-driver name or license number. • ELD username • Driver’s first name, last name • Co-driver first name, last name (if there is a co-driver) • Co-driver ELD username (if there is a co-driver) • Driver’s license number or commercial driver’s license number • State of license issuance* • Duty status* • Date and time of each change of duty status* • Location of CMV when the CMV’s engine is turned on and turned off, at each change of duty status, and at intervals of no more than 60 minutes when the CMV is in motion.* • Starting time for each 24-hour period (e.g., 12 midnight, 12 noon). This is a requirement for paper RODS and carries over to ELDs. The reason is that VerDate Sep<11>2014 17:20 May 16, 2024 Jkt 262001 many elements of the HOS regulations are based on activities within 24-hour periods.* • Hours in each duty status to 1minute accuracy.* • Special driving mode status (e.g., personal conveyance, yard move).* • Log of user activity (‘‘user’’ is generally the driver, but could be a technician test-driving the CMV or a yard-hotelier repositioning the CMV)* • 17-digit vehicle identification number (VIN)* RECORD SOURCE CATEGORIES: CMV drivers and motor carrier submit records to assist authorized safety officials to determine if drivers comply with applicable HOS regulations. ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND PURPOSES OF SUCH USES: In addition to those disclosures generally permitted under 5 U.S.C. 552a(b), all or a portion of the records or information contained in this system may be disclosed outside DOT as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows: System Specific Routine Uses 1. To Motor Carrier Safety Assistance Program (MCSAP) State partner agencies for use during investigations, safety audits, and roadside inspections of motor carriers. This routine use enables the MCSAP agencies to review and analyze motor carrier and driver HOS practices and data to enforce the HOS regulations. Department General Routine Uses 2. In the event that a system of records maintained by DOT to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation, or order issued pursuant thereto. 3a. Routine Use for Disclosure for Use in Litigation. It shall be a routine use of the records in this system of records to disclose them to the Department of Justice or other Federal agency conducting litigation when—(a) DOT, or any agency thereof, or (b) Any employee of DOT or any agency thereof, in their official capacity, or (c) Any employee of DOT or any agency thereof, in their individual capacity where the PO 00000 Frm 00141 Fmt 4703 Sfmt 4703 Department of Justice has agreed to represent the employee, or (d) The United States or any agency thereof, where DOT determines that litigation is likely to affect the United States, is a party to litigation or has an interest in such litigation, and the use of such records by the Department of Justice or other Federal agency conducting the litigation is deemed by DOT to be relevant and necessary in the litigation, provided, however, that in each case, DOT determines that disclosure of the records in the litigation is a use of the information contained in the records that is compatible with the purpose for which the records were collected. 3b. Routine Use for Agency Disclosure in Other Proceedings. It shall be a routine use of records in this system to disclose them in proceedings before any court or adjudicative or administrative body before which DOT or any agency thereof, appears, when—(a) DOT, or any agency thereof, or (b) Any employee of DOT or any agency thereof in their official capacity, or (c) Any employee of DOT or any agency thereof in their individual capacity where DOT has agreed to represent the employee, or (d) The United States or any agency thereof, where DOT determines that the proceeding is likely to affect the United States, is a party to the proceeding or has an interest in such proceeding, and DOT determines that use of such records is relevant and necessary in the proceeding, provided, however, that in each case, DOT determines that disclosure of the records in the proceeding is a use of the information contained in the records that is compatible with the purpose for which the records were collected. 4. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual. In such cases, however, the Congressional office does not have greater rights to records than the individual. Thus, the disclosure may be withheld from delivery to the individual where the file contains investigative or actual information or other materials which are being used, or are expected to be used, to support prosecution or fines against the individual for violations of a statute, or of regulations of the Department based on statutory authority. No such limitations apply to records requested for Congressional oversight or legislative purposes; release is authorized under 49 CFR 10.35(9). 5. One or more records from a system of records may be disclosed routinely to the National Archives and Records Administration (NARA) in records E:\FR\FM\17MYN1.SGM 17MYN1 khammond on DSKJM1Z7X2PROD with NOTICES Federal Register / Vol. 89, No. 97 / Friday, May 17, 2024 / Notices management inspections being conducted under the authority of 44 U.S.C. 2904 and 2906. 6. DOT may make available to another agency or instrumentality of any government jurisdiction, including State and local governments, listings of names from any system of records in DOT for use in law enforcement activities, either civil or criminal, or to expose fraudulent claims, regardless of the stated purpose for the collection of the information in the system of records. These enforcement activities are generally referred to as matching programs because two lists of names are checked for match using automated assistance. This routine use is advisory in nature and does not offer unrestricted access to systems of records for such law enforcement and related antifraud activities. Each request will be considered on the basis of its purpose, merits, cost effectiveness and alternatives using Instructions on reporting computer matching programs to the Office of Management and Budget, OMB, Congress, and the public, published by the Director, OMB, dated September 20, 1989. 7. DOT may disclose records from this system, as a routine use, to appropriate agencies, entities, and persons when (1) DOT suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (2) DOT has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by DOT or another agency or entity) that rely upon the compromised information; and (3) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with DOT’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. 8. DOT may disclose records from this system, as a routine use, to the Office of Government Information Services for the purpose of (a) resolving disputes between FOIA requesters and Federal agencies and (b) reviewing agencies’ policies, procedures, and compliance in order to recommend policy changes to Congress and the President. 9. DOT may disclose records from the system, as a routine use, to contractors and their agents, experts, consultants, and others performing or working on a contract, service, cooperative agreement, or other assignment for DOT, when necessary to accomplish an agency VerDate Sep<11>2014 17:20 May 16, 2024 Jkt 262001 function related to this system of records. 10. DOT may disclose records from this system, as a routine use, to an agency, organization, or individual for the purpose of performing audit or oversight operations related to this system of records, but only such records as are necessary and relevant to the audit or oversight activity. This routine use does not apply to intra-agency sharing authorized under section (b)(1) of the Privacy Act. 11. DOT may disclose from this system, as a routine use, records consisting of, or relating to, terrorism information (6 U.S.C. 485(a)(5)), homeland security information (6 U.S.C. 482(f)(1)), or Law enforcement information (Guideline 2 Report attached to White House Memorandum, ‘‘Information Sharing Environment’’, November 22, 2006) to a Federal, State, local, Tribal, territorial, foreign government and/or multinational agency, either in response to its request or upon the initiative of the Component, for purposes of sharing such information as is necessary and relevant for the agencies to detect, prevent, disrupt, preempt, and mitigate the effects of terrorist activities against the territory, people, and interests of the United States of America, as contemplated by the Intelligence Reform and Terrorism Prevention Act of 2004 (Pub. L. 108–458) and Executive Order 13388 (October 25, 2005). POLICIES AND PRACTICES FOR STORAGE OF RECORDS: Records in this system are stored electronically on a contractormaintained cloud storage service. POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS: ELD and driver records may be retrieved by the following data elements: ELD file submittal date; Carrier Name, Carrier USDOT Number; Driver First Name; Driver Last Name; Driver License State; Driver License Number; ELD File Comment. ELD vendor records may be retrieved by the following data elements: ELD vendor name, phone number, address, email, ELD device name, ELD Identifier, ELD registration ID. Records of a driver may be retrieved by the following data elements: driver name, license state, license number, motor carrier name, USDOT number, investigation code, and file submittal date. POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS: Motor carriers must retain records for six months from date of receipt. In accordance with FMCSA’s MCMIS PO 00000 Frm 00142 Fmt 4703 Sfmt 4703 43511 record schedule Job Number N1–557– 05–007, item 5a for MCMIS inputs, where the data will be deleted after the information is converted or copied to the MCMIS master data files, backed up, and verified. ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS: Records in this system are safeguarded in accordance with applicable rules and policies, including all applicable DOT automated systems security and access policies. Appropriate controls have been imposed to minimize the risk of compromising the information that is being stored and ensuring confidentiality of communications using tools such as encryption, authentication of sending parties, and compartmentalizing databases; and employing auditing software. ELD data is encrypted at rest and in transit. Access to records in this system is limited to those individuals who have a need to know the information for the performance of their official duties and who have appropriate clearances or permissions. All personnel with access to data are screened through background investigations commensurate with the level of access required to perform their duties. RECORD ACCESS PROCEDURES: Individuals seeking access to and notification of any record contained in this system of records, or seeking to contest its content, may submit a request to the System Manager in writing to the address provided under ‘‘System Manager and Address.’’ • When an individual is seeking records about himself or herself from this system of records or any other Departmental system of records, the request must conform with the Privacy Act regulations set forth in 49 CFR part 10. The individual must verify their identity by providing their full name, current address, and date and place of birth. The individual must sign the request, and the individual’s signature must either be notarized or submitted under 28 U.S.C. 1746, a law that permits statements to be made under penalty of perjury as a substitute for notarization. No specific form is required. In addition, the individual should: • Explain why the individual believes the Department would possess information on him/her; • Identify which component(s) of the Department the individual believes may have the information about them; • Specify when the individual believes the records would have been created; and E:\FR\FM\17MYN1.SGM 17MYN1 43512 Federal Register / Vol. 89, No. 97 / Friday, May 17, 2024 / Notices • Provide any other information that will help the FOIA staff determine which DHS component agency may have responsive records. If an individual seeks records pertaining to another living individual, the requesting individual must include a statement from the second individual certifying their agreement to the requested access. Without the above information, the Department may not be able to conduct an effective search, and the individual’s request may be denied due to lack of specificity or lack of compliance with applicable regulations. khammond on DSKJM1Z7X2PROD with NOTICES CONTESTING RECORD PROCEDURES: FMCSA depends upon drivers and motor carriers to submit data as accurately as possible. The ELD drivers review their records of duty status daily and certify their correctness prior to submission to the motor carriers and FMCSA. If a driver notices that information is missing or contains errors, the driver would use the motor carrier’s ELD device to make the necessary corrections or enter missing information. After a driver submits his or her certified daily records to the motor carrier, the motor carrier reviews those records. If the carrier identifies additional errors, the carrier may request the driver to make additional edits. However, motor carriers or dispatchers that suggest a change to a drivers’ HOS records following submission to the carrier are to have the driver confirm or reject, and then recertify the accuracy of the record. All edits have to be annotated to document the reason for the change. This procedure is intended to protect the integrity of the ELD records and to prevent related instances of potential driver harassment. In support of a roadside inspection, investigation, or safety audit, a motor carrier submits his or her certified daily records to safety officials for an HOS review, the safety official may cite a violation based on these records. FMCSA has a redress process to challenge inspection, investigation, and safety audit data. The process, called DataQs, is accessible at https:// dataqs.fmcsa.dot.gov. DataQs provides an electronic method for motor carriers and drivers to file concerns about information maintained in FMCSA systems (principally, roadside inspection results included in MCMIS). The DataQs system automatically forwards data concerns to the appropriate Federal or State office for processing and resolution. Any challenges to data provided by State agencies are resolved by the appropriate VerDate Sep<11>2014 17:20 May 16, 2024 Jkt 262001 State agency. The system also allows filers to monitor the status of each filing. Under the DataQs process, FMCSA cannot ‘‘correct the information associated with the ELD records’’ that are stored in the motor carrier’s information systems. If an interstate CMV driver is incorrectly identified in an enforcement action, the DataQs system provides an avenue for a driver or motor carrier to request FMCSA to correct enforcement information that it may store in its own information systems. Individuals seeking to contest the content of any record pertaining to themselves in this system may also contact the System Manager following the Privacy Act procedures in 49 CFR part 10, subpart E, Correction of Records. Written requests for correction must conform with the Privacy Act regulations set forth in 49 CFR part 10. You must sign your request, and your signature must either be notarized or submitted under 28 U.S.C. 1746, a law that permits statements to be made under penalty of perjury as a substitute for notarization. While no specific form is required, you may obtain forms for this purpose from the FMCSA Freedom of Information Act Officer https:// www.fmcsa.dot.gov/foia/foia-requestsor foia2@dot.gov. NOTIFICATION PROCEDURES: Individuals seeking to contest the content of any record pertaining to themselves in the system may contact the System Manager following the procedures described in ‘‘Record Access Procedures’’ above. EXEMPTIONS PROMULGATED FOR THE SYSTEM: None. HISTORY: None. Issued in Washington, DC. Karyn Gorman, Departmental Chief Privacy Officer. [FR Doc. 2024–10811 Filed 5–16–24; 8:45 am] BILLING CODE 4910–9X–P DEPARTMENT OF THE TREASURY Office of Foreign Assets Control Publication of the List of Services, Software, and Hardware Incident to Communications Office of Foreign Assets Control, Treasury. ACTION: Publication of a list of items determined to be incident to communications in the Iranian Transactions and Sanctions Regulations. AGENCY: PO 00000 Frm 00143 Fmt 4703 Sfmt 4703 The Department of the Treasury’s Office of Foreign Assets Control (OFAC) is publishing a list of items that have been determined to be incident to communications and therefore authorized for export or reexport to Iran under a general license issued pursuant to the Iranian Transactions and Sanctions Regulations (ITSR). The list previously existed as an annex to ITSR General License D and its subsequent iterations, General License D–1 and General License D–2, all of which were previously made available on OFAC’s website. Concurrent with publication of the list, OFAC is publishing an updated version of the list that, effective 30 days after publication, will restrict the computing power of certain items on the list. DATES: This list is effective May 17, 2024. FOR FURTHER INFORMATION CONTACT: OFAC: Assistant Director for Licensing, 202–622–2480; Assistant Director for Regulatory Affairs, 202–622–4855; or Assistant Director for Sanctions Compliance & Evaluation, 202–622– 2490. SUPPLEMENTARY INFORMATION: SUMMARY: Electronic Availability The text of the List of Services, Software, and Hardware Incident to Communications is available on the Iran Sanctions page on OFAC’s website, and additional information concerning OFAC is available on OFAC’s website (www.treasury.gov/ofac). Background On May 30, 2013, OFAC, in consultation with the Departments of State and Commerce, issued General License (GL) D under the Regulations. GL D was made available on OFAC’s website and in the Federal Register (78 FR 43278, July 19, 2013). GL D authorized the exportation or reexportation, directly or indirectly, from the United States or by U.S. persons, wherever located, to persons in Iran of additional services, software, and hardware incident to personal communications, including fee-based versions of the software and services authorized in § 560.540. GL D also contained an Annex that listed items authorized for export or reexport that had been determined to be incident to personal communications. On February 7, 2014, OFAC issued GL D–1, which replaced and superseded GL D in its entirety. GL D–1 was made available on OFAC’s website and in the Federal Register (79 FR 13736, March 11, 2014). GL D–1 clarified certain aspects of GL D and added certain new E:\FR\FM\17MYN1.SGM 17MYN1

Agencies

[Federal Register Volume 89, Number 97 (Friday, May 17, 2024)]
[Notices]
[Pages 43508-43512]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2024-10811]


-----------------------------------------------------------------------

DEPARTMENT OF TRANSPORTATION

Office of the Secretary

[Docket No.: DOT-OST-2023-0136]


Privacy Act of 1974; System of Records

AGENCY: Federal Motor Carrier Safety Administration (FMCSA), Department 
of Transportation (DOT).

ACTION: Notice of a new system of records.

-----------------------------------------------------------------------

SUMMARY: In accordance with the Privacy Act of 1974, the Department of 
Transportation (DOT) proposes a new system of records titled ``DOT/
FMCSA 014 Electronic Logging Device (ELD) Records''. This system of 
records is used to facilitate the retrieval, transfer, and collection 
of hours-of-service (HOS) data from electronic ELD files submitted by 
motor carriers and the review of HOS data by authorized safety 
officials. The system retrieves data recorded by a motor carrier's ELD 
via an ELD output file. Upon receipt of this ELD output file, the 
system analyzes the data, identifies instances of potential non-
compliance, and notifies the authorized safety official of these 
instances. FMCSA maintains ELD data for use in investigations and 
enforcement actions and to determine compliance with HOS requirements. 
The primary purpose of the ELD system is to allow authorized safety 
officials to assess electronic ELD files rapidly and accurately at 
roadside and during reviews and safety audits to determine whether the 
driver is in compliance with the HOS regulations. The ELD system will 
also be used to assess whether ELDs meet certain technical 
specifications that are set forth in the HOS regulations. Additionally, 
the Agency may use ELD data internally to inform research efforts 
related to enforcement of safety regulations, including driving hours, 
as such research may ultimately improve compliance with HOS 
requirements.

DATES: Comments on the system will be accepted on or before 30 days 
from the date of publication of this notice. The system will be 
effective 30 days after publication of this notice. Routine uses will 
be effective at that time.

ADDRESSES: You may submit comments, identified by docket number OST- 
2023-0136 by one of the following methods:
     Federal e-Rulemaking Portal: https://www.regulations.gov.
     Mail: Docket Management Facility, U.S. Department of 
Transportation, 1200 New Jersey Ave. SE, West Building Ground Floor, 
Room W12-140, Washington, DC 20590-0001.
     Hand Delivery or Courier: West Building Ground Floor, Room 
W12-140, 1200 New Jersey Ave. SE, between 9 a.m. and 5 p.m. ET, Monday 
through Friday, except Federal holidays.
    Instructions: You must include the agency name and docket number 
DOT-OST-2023-0136. All comments received will be posted without change 
to https://www.regulations.gov, including any personal information 
provided.

FOR FURTHER INFORMATION CONTACT: For general and privacy questions, 
please contact: Karyn Gorman, Departmental Chief Privacy Officer, 
Department of Transportation, S-83, Washington, DC 20590, Email: 
[email protected], Tel. (202) 366-3140.

SUPPLEMENTARY INFORMATION:

Background

    In accordance with the Privacy Act of 1974, the Department of 
Transportation is proposing a new system of records titled ``Department 
of Transportation (DOT)/Federal Motor Carrier Safety Administration 
(FMCSA) 014, Electronic Logging Device Records.'' This system will 
access hours-of-service (HOS) data via electronic logging device (ELD) 
files submitted by motor carriers and will allow authorized safety 
officials to assess these electronic ELD files rapidly and accurately 
at roadside and during reviews and safety audits to determine whether 
the driver is in compliance with the HOS regulations. This system will 
also assess whether ELDs meet certain technical specifications that are 
set forth in HOS regulations and support removals from a list of self-
certified devices. See 49 CFR part 395 subpart B, app. A. Additionally, 
the Agency may use data from this system internally and/or in 
aggregated and anonymized form to inform research efforts related to 
enforcement of safety regulations, including driving hours, as such 
research may ultimately improve compliance with HOS requirements. For 
example, the use of ELD data in research related to operational testing 
of electronic, in-motion commercial motor vehicle (CMV) inspections may 
increase roadside inspection capacity and further facilitate 
enforcement of HOS requirements.
    Section 32301(b) of the Commercial Motor Vehicle Safety Enhancement 
Act of 2012 (enacted as part of the Moving Ahead for Progress in the 
21st Century Act (MAP-21)) codified at 49 U.S.C. 31137, mandated that 
the Secretary of Transportation adopt regulations requiring that CMVs, 
operated in interstate commerce by drivers required to maintain records 
of duty status (RODS), be equipped with ELDs. The statute also set 
forth specific provisions to be addressed by the regulations, including 
ELD design and performance standards and certification requirements. In 
addition, the statute addresses privacy protections and the use of ELD 
data, requiring that the regulations ensure that ELDs are not used to 
harass a CMV operator. On December 16, 2015, FMCSA, acting primarily 
under the authority of MAP-21 (and several concurrent statutory 
authorities), published a final rule, Electronic Logging Devices and 
Hours of Service Supporting Documents (80 FR 78292) requiring the use 
of ELDs for recording HOS information. Under the regulations, which 
were implemented on December 18, 2017, CMVs operated in interstate 
commerce, by drivers required to maintain RODS, must be equipped with 
ELDs. The regulations also establish ELD performance and design 
standards, require ELDs to be certified and registered with FMCSA, and 
address privacy protections for CMV operators. The ELD regulations are 
set forth in 49 CFR part 395, subpart B.
    FMCSA's ELD system consists of the following components:

 Electronic Record of Duty Status (eRODS) HOS review tool
 ELD website and database
 ELD provider web service
 Enforcement ELD web service
 Enforcement ELD summary data web service

    Electronic Record of Duty Status (eRODS) HOS review tool. eRODS is 
a software application installed on authorized safety officials' 
computers that is used to retrieve and display the information on an 
ELD output file. eRODS allows enforcement users to analyze a driver's 
HOS data and perform a roadside inspection or an investigation. There 
is also a web-based version of eRODS that consists of all the 
functionality included in the desktop version but is accessible via the 
ELD website described below. ELD devices used by motor carriers are 
required to support one of two options for providing an ELD file to 
FMCSA for analysis via the eRODS HOS review tool:

[[Page 43509]]

    Option 1 is the telematics transfer method. ELD devices that 
utilize the telematics transfer method support transfer of ELD files to 
the FMCSA's ELD system via web services transfer or encrypted email 
transfer. With the web service transfer method, the ELD device sends 
the ELD file directly to FMCSA servers via a secure call to the ELD 
provider web service, which makes the ELD file available to eRODS. For 
the email transfer, the ELD device sends the data file via secure, 
encrypted email to FMCSA servers which process the email and make the 
ELD file available to eRODS.
    Option 2 is local transfer, which consists of Bluetooth connection 
or USB transfer. The Bluetooth connection allows the motor carrier's 
ELD to use the safety official's internet connection to transfer the 
ELD file to the ELD provider web service. The USB transfer method uses 
the safety official's self-encrypting USB device to transfer the ELD 
file from the motor carrier's ELD device to the safety official's eRODS 
application. This is the only method that does not require internet 
connectivity.
    ELD website and database. The ELD website and database is the 
centerpiece of FMCSA's ELD system. The website includes a section for 
each stakeholder. ELD vendors use the website to register their 
organization with FMCSA and to self-certify their devices' compliance 
with ELD regulations. ELD vendors also have access to tools necessary 
to build and test their interfaces with FMCSA. Motor carriers and 
drivers can access the ELD website to obtain information on the ELD 
Rule and other communications that educate them on the ELD process. 
They can also review the list of self-certified ELD devices. 
Enforcement users can access ELD policy and training information 
related to ELDs and can access web eRODS to review motor carrier HOS 
compliance. The FMCSA vendor vetting team also reviews ELD vendor 
submissions for completeness.
    ELD provider web service. The ELD provider web service provides the 
means for a registered, self-certified ELD device to transfer, via web 
service or blue-tooth transfer options, an ELD file to FMCSA. During 
the self-certification process for an ELD device, the ELD vendor 
provides FMCSA with their public certificate and receives FMCSA's 
public certificate and additional information on building the 
connection between their ELD and FMCSA's ELD provider web service. Once 
the connection is established, the ELD can submit output files of a 
driver's HOS data to FMCSA via this service.
    Enforcement ELD web service. The enforcement ELD web service is 
used to transfer the ELD files submitted to FMCSA to the safety 
official's eRODS HOS review tool. Both the desktop and web-based eRODS 
tools connect to this service. Files that are submitted via ELD 
provider web service, Bluetooth connection, or email can be accessed by 
enforcement via a connection to this service.
    Enforcement ELD summary data web service. This service provides 
safety officials summary information derived from the contents of an 
ELD file that was submitted to the ELD system. This summary data 
enables safety officials to review indicators prompting further 
analysis and also allows implementation of a direct link to eRODS tool 
for HOS analysis. FMCSA's ELD system of records will also serve as a 
central repository of ELD information.
    FMCSA has also included DOT General Routine Uses, to the extent 
they are compatible with the purposes of this System. As recognized by 
the Office of Management and Budget (OMB) in its Privacy Act 
Implementation Guidance and Responsibilities (65 FR 19746 (July 9, 
1975)), the routine uses include proper and necessary uses of 
information in the system, even if such uses occur infrequently. FMCSA 
has included in this notice routine uses for disclosures to law 
enforcement when the record, on its face, indicates a violation of law, 
to DOJ for litigation purposes, or when necessary to investigate or 
respond to a breach or potential breach of this system or other 
agencies' systems. DOT may disclose to Federal, State, local, or 
foreign agency information relevant to law enforcement, litigation, and 
proceedings before any court or adjudicative or administrative body. 
OMB has long recognized that these types of routine uses are ``proper 
and necessary'' uses of information and qualify as compatible with 
agency systems (65 FR 19476, April 11, 2000).
    In addition, OMB Memorandum M-17-12, directed agencies to include 
routine uses that will permit sharing of information when needed to 
investigate, respond to, and mitigate a breach of a Federal information 
system. DOT also has included routine uses that permit sharing with the 
National Archives and Records Administration when necessary for an 
inspection, to any Federal Government agency engaged in audit or 
oversight related to this system, or when DOT determines that the 
disclosure will detect, prevent, or mitigate terrorism activity. These 
types of disclosures are necessary and proper uses of information in 
this system because they further DOT's obligation to fulfill its 
records management and program management responsibilities by 
facilitating accountability to agencies charged with oversight in these 
areas, and DOT's obligation under the Intelligence Reform and Terrorism 
Prevention Act of 2004, Public Law 108-456, and Executive Order 13388 
(Oct. 25, 2005) to share information necessary and relevant to detect, 
prevent, disrupt, preempt, or mitigate the effects of terrorist 
activities against the territory, people, and interests of the United 
States.
    Privacy Act
    The Privacy Act (5 U.S.C. 552a) governs the means by which Federal 
Government agencies collect, maintain, use, and disseminate 
individuals' records. The Privacy Act applies to information that is 
maintained in a ``system of records.'' A ``system of records'' is a 
group of any records under the control of an agency from which 
information is retrieved by the name of an individual or by some 
identifying number, symbol, or other identifying particular assigned to 
the individual. The Privacy Act extends rights and protections to 
individuals who are U.S. citizens and lawful permanent residents. 
Additionally, the Judicial Redress Act (JRA) provides a covered person 
with a statutory right to make requests for access and amendment to 
covered records, as defined by the JRA, along with judicial review for 
denials of such requests. In addition, the JRA prohibits disclosures of 
covered records, except as otherwise permitted by the Privacy Act.
    Below is the description of the Electronic Logging Device System of 
Records. In accordance with 5 U.S.C. 552a(r), DOT has provided a report 
of this system of records to the OMB and to Congress.

SYSTEM NAME AND NUMBER:
    Department of Transportation (DOT)/Federal Motor Carrier Safety 
Administration (FMCSA) 014 Electronic Logging Device (ELD) Records.

SECURITY CLASSIFICATION:
    Unclassified.

SYSTEM LOCATION:
    Records are maintained in a FedRAMP-certified third-party cloud 
environment. The contracts are maintained by DOT at 1200 New Jersey 
Avenue SE, Washington, DC 20590.

SYSTEM MANAGER(S):
    Division Chief, Enforcement Division, Office of Enforcement and 
Compliance, FMCSA, U.S. Department of

[[Page 43510]]

Transportation, 1200 New Jersey Avenue SE, Washington, DC 20590.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    Section 32301(b) of the Commercial Motor Vehicle Safety Enhancement 
Act, enacted as part of the Moving Ahead for Progress in the 21st 
Century Act (Pub. L. 112-141, 126 Stat. 405, (July 6, 2012), codified 
at 49 U.S.C. 31137. (MAP-21); 49 CFR parts, 385, 386, 390, and 395.

PURPOSE(S) OF THE SYSTEM:
    The purposes of the system are to (1) allow Federal and State law 
enforcement agencies to match an interstate CMV driver's name with his 
or her HOS record; (2) allow authorized safety officials to perform HOS 
compliance-assurance and enforcement functions for the purposes of 
using personal information to verify the time, date, and location for 
duty status changes of interstate CMV drivers to ensure that motor 
carriers and interstate drivers comply with applicable HOS regulations; 
(3) allow for assessment of particular ELD models and units to 
determine that they meet the technical specifications set forth in the 
HOS regulations; and (4) allow ELD data to inform research efforts 
related to safety regulations, including driving hours, to improve 
compliance with HOS requirements.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    Categories of individuals within this system include commercial 
motor vehicle CMV drivers.

CATEGORIES OF RECORDS IN THE SYSTEM:
    Categories of records in the system include the following 
information about CMV Drivers. Data elements marked with an asterisk 
``*'' may be PII linked to ELD username or driver/co-driver name or 
license number.
     ELD username
     Driver's first name, last name
     Co-driver first name, last name (if there is a co-driver)
     Co-driver ELD username (if there is a co-driver)
     Driver's license number or commercial driver's license 
number
     State of license issuance*
     Duty status*
     Date and time of each change of duty status*
     Location of CMV when the CMV's engine is turned on and 
turned off, at each change of duty status, and at intervals of no more 
than 60 minutes when the CMV is in motion.*
     Starting time for each 24-hour period (e.g., 12 midnight, 
12 noon). This is a requirement for paper RODS and carries over to 
ELDs. The reason is that many elements of the HOS regulations are based 
on activities within 24-hour periods.*
     Hours in each duty status to 1-minute accuracy.*
     Special driving mode status (e.g., personal conveyance, 
yard move).*
     Log of user activity (``user'' is generally the driver, 
but could be a technician test-driving the CMV or a yard-hotelier 
repositioning the CMV)*
     17-digit vehicle identification number (VIN)*

RECORD SOURCE CATEGORIES:
    CMV drivers and motor carrier submit records to assist authorized 
safety officials to determine if drivers comply with applicable HOS 
regulations.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND PURPOSES OF SUCH USES:
    In addition to those disclosures generally permitted under 5 U.S.C. 
552a(b), all or a portion of the records or information contained in 
this system may be disclosed outside DOT as a routine use pursuant to 5 
U.S.C. 552a(b)(3) as follows:

    System Specific Routine Uses

    1. To Motor Carrier Safety Assistance Program (MCSAP) State partner 
agencies for use during investigations, safety audits, and roadside 
inspections of motor carriers. This routine use enables the MCSAP 
agencies to review and analyze motor carrier and driver HOS practices 
and data to enforce the HOS regulations.

    Department General Routine Uses

    2. In the event that a system of records maintained by DOT to carry 
out its functions indicates a violation or potential violation of law, 
whether civil, criminal or regulatory in nature, and whether arising by 
general statute or particular program pursuant thereto, the relevant 
records in the system of records may be referred, as a routine use, to 
the appropriate agency, whether Federal, State, local or foreign, 
charged with the responsibility of investigating or prosecuting such 
violation or charged with enforcing or implementing the statute, or 
rule, regulation, or order issued pursuant thereto.
    3a. Routine Use for Disclosure for Use in Litigation. It shall be a 
routine use of the records in this system of records to disclose them 
to the Department of Justice or other Federal agency conducting 
litigation when--(a) DOT, or any agency thereof, or (b) Any employee of 
DOT or any agency thereof, in their official capacity, or (c) Any 
employee of DOT or any agency thereof, in their individual capacity 
where the Department of Justice has agreed to represent the employee, 
or (d) The United States or any agency thereof, where DOT determines 
that litigation is likely to affect the United States, is a party to 
litigation or has an interest in such litigation, and the use of such 
records by the Department of Justice or other Federal agency conducting 
the litigation is deemed by DOT to be relevant and necessary in the 
litigation, provided, however, that in each case, DOT determines that 
disclosure of the records in the litigation is a use of the information 
contained in the records that is compatible with the purpose for which 
the records were collected.
    3b. Routine Use for Agency Disclosure in Other Proceedings. It 
shall be a routine use of records in this system to disclose them in 
proceedings before any court or adjudicative or administrative body 
before which DOT or any agency thereof, appears, when--(a) DOT, or any 
agency thereof, or (b) Any employee of DOT or any agency thereof in 
their official capacity, or (c) Any employee of DOT or any agency 
thereof in their individual capacity where DOT has agreed to represent 
the employee, or (d) The United States or any agency thereof, where DOT 
determines that the proceeding is likely to affect the United States, 
is a party to the proceeding or has an interest in such proceeding, and 
DOT determines that use of such records is relevant and necessary in 
the proceeding, provided, however, that in each case, DOT determines 
that disclosure of the records in the proceeding is a use of the 
information contained in the records that is compatible with the 
purpose for which the records were collected.
    4. Disclosure may be made to a Congressional office from the record 
of an individual in response to an inquiry from the Congressional 
office made at the request of that individual. In such cases, however, 
the Congressional office does not have greater rights to records than 
the individual. Thus, the disclosure may be withheld from delivery to 
the individual where the file contains investigative or actual 
information or other materials which are being used, or are expected to 
be used, to support prosecution or fines against the individual for 
violations of a statute, or of regulations of the Department based on 
statutory authority. No such limitations apply to records requested for 
Congressional oversight or legislative purposes; release is authorized 
under 49 CFR 10.35(9).
    5. One or more records from a system of records may be disclosed 
routinely to the National Archives and Records Administration (NARA) in 
records

[[Page 43511]]

management inspections being conducted under the authority of 44 U.S.C. 
2904 and 2906.
    6. DOT may make available to another agency or instrumentality of 
any government jurisdiction, including State and local governments, 
listings of names from any system of records in DOT for use in law 
enforcement activities, either civil or criminal, or to expose 
fraudulent claims, regardless of the stated purpose for the collection 
of the information in the system of records. These enforcement 
activities are generally referred to as matching programs because two 
lists of names are checked for match using automated assistance. This 
routine use is advisory in nature and does not offer unrestricted 
access to systems of records for such law enforcement and related 
antifraud activities. Each request will be considered on the basis of 
its purpose, merits, cost effectiveness and alternatives using 
Instructions on reporting computer matching programs to the Office of 
Management and Budget, OMB, Congress, and the public, published by the 
Director, OMB, dated September 20, 1989.
    7. DOT may disclose records from this system, as a routine use, to 
appropriate agencies, entities, and persons when (1) DOT suspects or 
has confirmed that the security or confidentiality of information in 
the system of records has been compromised; (2) DOT has determined that 
as a result of the suspected or confirmed compromise there is a risk of 
harm to economic or property interests, identity theft or fraud, or 
harm to the security or integrity of this system or other systems or 
programs (whether maintained by DOT or another agency or entity) that 
rely upon the compromised information; and (3) the disclosure made to 
such agencies, entities, and persons is reasonably necessary to assist 
in connection with DOT's efforts to respond to the suspected or 
confirmed compromise and prevent, minimize, or remedy such harm.
    8. DOT may disclose records from this system, as a routine use, to 
the Office of Government Information Services for the purpose of (a) 
resolving disputes between FOIA requesters and Federal agencies and (b) 
reviewing agencies' policies, procedures, and compliance in order to 
recommend policy changes to Congress and the President.
    9. DOT may disclose records from the system, as a routine use, to 
contractors and their agents, experts, consultants, and others 
performing or working on a contract, service, cooperative agreement, or 
other assignment for DOT, when necessary to accomplish an agency 
function related to this system of records.
    10. DOT may disclose records from this system, as a routine use, to 
an agency, organization, or individual for the purpose of performing 
audit or oversight operations related to this system of records, but 
only such records as are necessary and relevant to the audit or 
oversight activity. This routine use does not apply to intra-agency 
sharing authorized under section (b)(1) of the Privacy Act.
    11. DOT may disclose from this system, as a routine use, records 
consisting of, or relating to, terrorism information (6 U.S.C. 
485(a)(5)), homeland security information (6 U.S.C. 482(f)(1)), or Law 
enforcement information (Guideline 2 Report attached to White House 
Memorandum, ``Information Sharing Environment'', November 22, 2006) to 
a Federal, State, local, Tribal, territorial, foreign government and/or 
multinational agency, either in response to its request or upon the 
initiative of the Component, for purposes of sharing such information 
as is necessary and relevant for the agencies to detect, prevent, 
disrupt, preempt, and mitigate the effects of terrorist activities 
against the territory, people, and interests of the United States of 
America, as contemplated by the Intelligence Reform and Terrorism 
Prevention Act of 2004 (Pub. L. 108-458) and Executive Order 13388 
(October 25, 2005).

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
    Records in this system are stored electronically on a contractor-
maintained cloud storage service.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
    ELD and driver records may be retrieved by the following data 
elements: ELD file submittal date; Carrier Name, Carrier USDOT Number; 
Driver First Name; Driver Last Name; Driver License State; Driver 
License Number; ELD File Comment. ELD vendor records may be retrieved 
by the following data elements: ELD vendor name, phone number, address, 
email, ELD device name, ELD Identifier, ELD registration ID. Records of 
a driver may be retrieved by the following data elements: driver name, 
license state, license number, motor carrier name, USDOT number, 
investigation code, and file submittal date.

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
    Motor carriers must retain records for six months from date of 
receipt. In accordance with FMCSA's MCMIS record schedule Job Number 
N1-557-05-007, item 5a for MCMIS inputs, where the data will be deleted 
after the information is converted or copied to the MCMIS master data 
files, backed up, and verified.

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
    Records in this system are safeguarded in accordance with 
applicable rules and policies, including all applicable DOT automated 
systems security and access policies. Appropriate controls have been 
imposed to minimize the risk of compromising the information that is 
being stored and ensuring confidentiality of communications using tools 
such as encryption, authentication of sending parties, and 
compartmentalizing databases; and employing auditing software. ELD data 
is encrypted at rest and in transit. Access to records in this system 
is limited to those individuals who have a need to know the information 
for the performance of their official duties and who have appropriate 
clearances or permissions. All personnel with access to data are 
screened through background investigations commensurate with the level 
of access required to perform their duties.

RECORD ACCESS PROCEDURES:
    Individuals seeking access to and notification of any record 
contained in this system of records, or seeking to contest its content, 
may submit a request to the System Manager in writing to the address 
provided under ``System Manager and Address.''
     When an individual is seeking records about himself or 
herself from this system of records or any other Departmental system of 
records, the request must conform with the Privacy Act regulations set 
forth in 49 CFR part 10. The individual must verify their identity by 
providing their full name, current address, and date and place of 
birth. The individual must sign the request, and the individual's 
signature must either be notarized or submitted under 28 U.S.C. 1746, a 
law that permits statements to be made under penalty of perjury as a 
substitute for notarization. No specific form is required. In addition, 
the individual should:
     Explain why the individual believes the Department would 
possess information on him/her;
     Identify which component(s) of the Department the 
individual believes may have the information about them;
     Specify when the individual believes the records would 
have been created; and

[[Page 43512]]

     Provide any other information that will help the FOIA 
staff determine which DHS component agency may have responsive records.
    If an individual seeks records pertaining to another living 
individual, the requesting individual must include a statement from the 
second individual certifying their agreement to the requested access. 
Without the above information, the Department may not be able to 
conduct an effective search, and the individual's request may be denied 
due to lack of specificity or lack of compliance with applicable 
regulations.

CONTESTING RECORD PROCEDURES:
    FMCSA depends upon drivers and motor carriers to submit data as 
accurately as possible. The ELD drivers review their records of duty 
status daily and certify their correctness prior to submission to the 
motor carriers and FMCSA. If a driver notices that information is 
missing or contains errors, the driver would use the motor carrier's 
ELD device to make the necessary corrections or enter missing 
information.
    After a driver submits his or her certified daily records to the 
motor carrier, the motor carrier reviews those records. If the carrier 
identifies additional errors, the carrier may request the driver to 
make additional edits. However, motor carriers or dispatchers that 
suggest a change to a drivers' HOS records following submission to the 
carrier are to have the driver confirm or reject, and then re-certify 
the accuracy of the record. All edits have to be annotated to document 
the reason for the change. This procedure is intended to protect the 
integrity of the ELD records and to prevent related instances of 
potential driver harassment.
    In support of a roadside inspection, investigation, or safety 
audit, a motor carrier submits his or her certified daily records to 
safety officials for an HOS review, the safety official may cite a 
violation based on these records.
    FMCSA has a redress process to challenge inspection, investigation, 
and safety audit data. The process, called DataQs, is accessible at 
https://dataqs.fmcsa.dot.gov. DataQs provides an electronic method for 
motor carriers and drivers to file concerns about information 
maintained in FMCSA systems (principally, roadside inspection results 
included in MCMIS). The DataQs system automatically forwards data 
concerns to the appropriate Federal or State office for processing and 
resolution. Any challenges to data provided by State agencies are 
resolved by the appropriate State agency. The system also allows filers 
to monitor the status of each filing.
    Under the DataQs process, FMCSA cannot ``correct the information 
associated with the ELD records'' that are stored in the motor 
carrier's information systems. If an interstate CMV driver is 
incorrectly identified in an enforcement action, the DataQs system 
provides an avenue for a driver or motor carrier to request FMCSA to 
correct enforcement information that it may store in its own 
information systems.
    Individuals seeking to contest the content of any record pertaining 
to themselves in this system may also contact the System Manager 
following the Privacy Act procedures in 49 CFR part 10, subpart E, 
Correction of Records. Written requests for correction must conform 
with the Privacy Act regulations set forth in 49 CFR part 10. You must 
sign your request, and your signature must either be notarized or 
submitted under 28 U.S.C. 1746, a law that permits statements to be 
made under penalty of perjury as a substitute for notarization. While 
no specific form is required, you may obtain forms for this purpose 
from the FMCSA Freedom of Information Act Officer https://www.fmcsa.dot.gov/foia/[email protected].

NOTIFICATION PROCEDURES:
    Individuals seeking to contest the content of any record pertaining 
to themselves in the system may contact the System Manager following 
the procedures described in ``Record Access Procedures'' above.

EXEMPTIONS PROMULGATED FOR THE SYSTEM:
    None.

HISTORY:
    None.

    Issued in Washington, DC.
Karyn Gorman,
Departmental Chief Privacy Officer.
[FR Doc. 2024-10811 Filed 5-16-24; 8:45 am]
BILLING CODE 4910-9X-P


This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.