§ 1701.21 - Exemption of the Office of the Director of National Intelligence (ODNI) systems of records.

§ 1701.21 Exemption of National Counterterrorism Center (NCTCthe Office of the Director of National Intelligence (ODNI) systems of records.

(a) The ODNI exempts the following systems of records listed in § 1701.22 from the requirements of subsections paragraphs (c)(3); (d)(1), (2), (3) and (4); (e)(1) ; and (e)(4)(G), (H), and (I); and (f) of the Privacy Act (5 U.S.C. 552a) to the extent that information in the system is subject to exemption pursuant subsections to paragraph (k)(1) and , (k)(2), or (k)(5) of the Act :

(1) NCTC Human Resources Management System (ODNI/NCTC-001).

(2) [Reserved]

(b) Exemptions from the particular subsections are justified

as noted in § 1701.22. ODNI also derivatively preserves the exempt status of records it receives from source agencies when the reason for the exemption remains valid, as set forth in § 1701.20.

(b) Systems of records utilized by the Office of the Intelligence Community Inspector General (ICIG) are additionally exempted from the requirements of paragraphs (c)(4); (e)(2); (e)(3); (e)(5); (e)(8); (e)(12); and (g) of the Privacy Act (5 U.S.C. 552a) to the extent that information in the system is subject to exemption pursuant to paragraph (j)(2) of the Privacy Act (5 U.S.C. 552a).

(c) Exemption of records in these systems from any or all of the enumerated requirements may be necessary for the following reasons:

(1) From

subsection

paragraph (c)(3) of the Privacy Act (5 U.S.C. 552a) (accounting of disclosures) because an accounting of disclosures from records concerning the record subject would specifically reveal an intelligence or investigative interest on the part of

the

ODNI or the recipient agency and could result in release of properly classified national security or foreign policy information.

(2) From

subsections

paragraph (

d

c)(

1), (2), (3) and (4) (

4) of the Privacy Act (5 U.S.C. 552a) (notice of amendment to record recipients) because the system is exempted from the access and amendment provisions of paragraph (d) of the Privacy Act.

(3) From paragraphs (d)(1) through (4) of the Privacy Act (5 U.S.C. 552a) (record subject's right to access and amend records) because affording access and amendment rights could alert the record subject to the investigative interest of intelligence or law enforcement agencies or compromise sensitive information classified in the interest of national security. In the absence of a national security basis for exemption, records in this system may be exempted from access and amendment to the extent necessary to honor promises of confidentiality to persons providing information concerning a candidate for position. Inability to maintain such confidentiality would restrict the free flow of information vital to a determination of a candidate's qualifications and suitability.

(

3

4) From

subsection

paragraph (e)(1) of the Privacy Act (5 U.S.C. 552a) (maintain only relevant and necessary records) because it is not always possible to establish relevance and necessity before all information is considered and evaluated in relation to an intelligence concern. In the absence of a national security basis for exemption under

subsection

paragraph (k)(1) of the Privacy Act (5 U.S.C. 552a), records in this system may be exempted from the relevance requirement pursuant to

subsection

paragraphs (k)(2) and (5) of the Privacy Act (5 U.S.C. 552a) because it is not possible to determine in advance what exact information may assist in determining the qualifications and suitability of a candidate for position. Seemingly irrelevant details, when combined with other data, can provide a useful composite for determining whether a candidate should be appointed.

(

4

5) From

subsections

paragraph (e)(

4)(G) and (H) (publication of procedures for notifying subjects of the existence of records about them and how they may access records and contest contents) because the system is exempted from subsection (d) provisions regarding access and amendment, and from the subsection (f) requirement to promulgate agency rules. Nevertheless, the ODNI has published notice concerning notification, access, and contest procedures because it may in certain circumstances determine it appropriate to provide subjects access to all or a portion of the records about them in a system of records.

(5) From subsection (e)(4)(I) (identifying sources of records in the system of records) because identifying sources could result in disclosure of properly classified national defense or foreign policy information, intelligence sources and methods, and investigatory techniques and procedures. Notwithstanding its proposed exemption from this requirement, ODNI identifies record sources in broad categories sufficient to provide general notice of the origins of the information it maintains in its systems of records.

(6) From subsection (f) (agency rules for notifying subjects to the existence of records about them, for accessing and amending records, and for assessing fees) because the system is exempt from subsection (d) provisions regarding access and amendment of records by record subjects. Nevertheless, the ODNI has published agency rules concerning notification of a subject in response to his request if any system of records named by the subject contains a record pertaining to him and procedures by which the subject may access or amend the records. Notwithstanding exemption, the ODNI may determine it appropriate to satisfy a record subject's access request.

(c) The ODNI exempts the following systems of records from the requirements of subsections (c)(3); (d)(1), (2), (3) and (4); (e)(1); (e)(4)(G), (H), (I); and (f) of the Privacy Act to the extent that information in the system is subject to exemption pursuant to subsection (k)(1) of the Act:

(1) NCTC Access Authorization Records (ODNI/NCTC-002).

(2) NCTC Telephone Directory (ODNI/NCTC-003).

(3) NCTC Partnership Management Records (ODNI/NCTC-006).

(4) NCTC Tacit Knowledge Management Records (ODNI/NCTC-007).

(d) Exemptions from the particular subsections are justified for the following reasons:

(1) From subsection (c)(3) (accounting of disclosures) because an accounting of disclosures from records concerning the record subject would specifically reveal an investigative interest on the part of the ODNI or recipient agency and could result in release of properly classified national security or foreign policy information.

(2) From subsections (d)(1), (2), (3) and (4) (record subject's right to access and amend records) because affording access and amendment rights could alert the record subject to the investigative interest of intelligence or law enforcement agencies or compromise sensitive information classified in the interest of national security.

(3) From subsection (e)(1) (maintain only relevant and necessary records) because it is not always possible to establish relevance and necessity before all information is considered and evaluated in relation to an intelligence concern.

(4) From subsections (e)(4)(G) and (H) (

2) of the Privacy Act (5 U.S.C. 552a) (collection directly from the individual) because application of this provision would alert the subject of a counterterrorism investigation, study, or analysis to that fact, permitting the subject to frustrate or impede the activity. Counterterrorism investigations necessarily rely on information obtained from third parties rather than information furnished by subjects themselves.

(6) From paragraph (e)(3) of the Privacy Act (5 U.S.C. 552a) (provide Privacy Act Statement to subjects furnishing information) because the system is exempted from requirements in paragraph (e)(2) of the Privacy Act to collect information directly from the subject.

(7) From paragraphs (e)(4)(G) and (H) of the Privacy Act (5 U.S.C. 552a) (publication of procedures for notifying subjects of the existence of records about them and how they may access records and contest contents) because the system is exempted from

subsection

provisions in paragraph (d)

provisions

of the Privacy Act (5 U.S.C. 552a) regarding access and amendment, and from the

subsection

requirement in paragraph (f)

requirement

of the Privacy Act to promulgate agency rules for notification, access, and amendment. Nevertheless,

the

ODNI has published notice concerning notification, access, and contest procedures because it may in certain circumstances determine it appropriate to provide subjects access to all or a portion of the records about them in a system of records.

(

5

8) From

subsection

paragraph (e)(4)(I) of the Privacy Act (5 U.S.C. 552a) (identifying sources of records in the system of records) because identifying sources could result in disclosure of properly classified national defense or foreign policy information, intelligence sources and methods, and investigatory techniques and procedures. Notwithstanding its

proposed

exemption from this requirement, ODNI identifies record sources in broad categories sufficient to provide general notice of the origins of the information it maintains in its systems of records.

(

6

9) From

subsection

paragraph (

f

e)(

agency rules for notifying subjects to the existence of records about them, for accessing and amending records, and for assessing fees) because the system is exempt from subsection (d) provisions regarding access and amendment of records by record subjects. Nevertheless, the ODNI has published agency rules concerning notification of a subject in response to his request if any system of records named by the subject contains a record pertaining to him and procedures by which the subject may access or amend the records. Notwithstanding exemption, the ODNI may determine it appropriate to satisfy a record subject's access request.

(e) The ODNI exempts the following systems of records from the requirements of subsections (c)(3); (d)(1), (2), (3), (4); (e)(1); (e)(4)(G), (H), (I); and (f) of the Privacy Act, to the extent that information in the system is subject to exemption pursuant to subsections (k)(1) and (k)(2) of the Act:

(1) NCTC Knowledge Repository (SANCTUM) (ODNI/NCTC-004).

(2) NCTC Online (ODNI/NCTC-005).

(3) NCTC Terrorism Analysis Records (ODNI/NCTC-008).

(4) NCTC Terrorist Identities Records (ODNI/NCTC-009).

(f) Exemptions from the particular subsections are justified for the following reasons:

(1) From subsection (c)(3) (accounting of disclosures) because an accounting of disclosures from records concerning the record subject would specifically reveal an investigative interest on the part of the ODNI as well as the recipient agency and could: Result in release of properly classified national security or foreign policy information; compromise ongoing efforts to investigate a known or suspected terrorist; reveal sensitive investigative or surveillance techniques; or identify a confidential source. With this information, the record subject could frustrate counterintelligence measures; impede an investigation by destroying evidence or intimidating potential witnesses; endanger the physical safety of sources, witnesses, and law enforcement and intelligence personnel and their families; or evade apprehension or prosecution by law enforcement personnel.

(2) From subsections (d)(1), (2), (3) and (4) (record subject's right to access and amend records) because these provisions concern individual access to and amendment of counterterrorism, investigatory and intelligence records. Affording access and amendment rights could alert the record subject to the fact and nature of an investigation or the investigative interest of intelligence or law enforcement agencies; permit the subject to frustrate such investigation, surveillance or potential prosecution; compromise sensitive information classified in the interest of national security; identify a confidential source or disclose information which would reveal a sensitive investigative or intelligence technique; and endanger the health or safety of law enforcement personnel, confidential informants, and witnesses. In addition, affording subjects access and amendment rights would impose an impossible administrative burden to continuously reexamine investigations, analyses, and reports.

(3) From subsection (e)(1) (maintain only relevant and necessary records) because it is not always possible for intelligence or law enforcement agencies to know in advance what information about an encounter with a known or suspected terrorist will be relevant for the purpose of conducting an operational response. Relevance and necessity are questions of judgment and timing, and only after information is evaluated can relevance and necessity be established. In addition, information in the system of records may relate to matters under the investigative jurisdiction of another agency, and may not readily be segregated. Furthermore, information in these systems of records, over time, aid in establishing patterns of criminal activity that can provide leads for other law enforcement agencies.

(4) From subsections (e)(4)(G) and (H) (publication of procedures for notifying subjects of the existence of records about them and how they may access records and contest contents) because the system is exempted from subsection (d) provisions regarding access and amendment and from the subsection (f) requirement to promulgate agency rules. Nevertheless, the ODNI has published notice concerning notification, access, and contest procedures because it may in certain circumstances determine it appropriate to provide subjects access to all or a portion of the records about them in a system of records.

(5) From subsection (e)(4)(I) (identifying sources of records in the system of records) because identifying sources could result in disclosure of properly classified national defense or foreign policy information. Additionally, exemption from this provision is necessary to protect the privacy and safety of witnesses and sources of information, including intelligence sources and methods and investigatory techniques and procedures. Notwithstanding its proposed exemption from this requirement, ODNI identifies record sources in broad categories sufficient to provide general notice of the origins of the information it maintains in its systems of records.

(6) From subsection (f) (

5) of the Privacy Act (5 U.S.C. 552a) (maintain timely, accurate, complete and up-to-date records) because many of the records in the system are derived from other domestic and foreign agency record systems over which ODNI exercises no control. In addition, in collecting information for counterterrorism, intelligence, and law enforcement purposes, it is not possible to determine in advance what information is accurate, relevant, timely, and complete. With the passage of time and the development of additional facts and circumstances, seemingly irrelevant or dated information may acquire significance. The restrictions imposed by paragraph (e)(5) of the Privacy Act (5 U.S.C. 552a) would limit the ability of intelligence analysts to exercise judgment in conducting investigations and impede development of intelligence necessary for effective counterterrorism and law enforcement efforts.

(10) From paragraph (e)(8) of the Privacy Act (5 U.S.C. 552a) (notice of compelled disclosures) because requiring individual notice of legally compelled disclosure poses an impossible administrative burden and could alert subjects of counterterrorism, law enforcement, or intelligence investigations to the previously unknown fact of those investigations.

(11) From paragraph (e)(12) of the Privacy Act (public notice of matching activity) because, to the extent such activities are not otherwise excluded from the matching requirements of the Privacy Act (5 U.S.C. 552a), publishing advance notice in the Federal Register would frustrate the ability of intelligence analysts to act quickly in furtherance of analytical efforts.

(12) From paragraph (f) of the Privacy Act (5 U.S.C. 552a) (agency rules for notifying subjects to the existence of records about them, for accessing and amending records, and for assessing fees) because the system is exempt from

subsection

provisions in paragraph (d)

provisions

of the Privacy Act regarding access and amendment of records by record subjects. Nevertheless,

the

ODNI has published agency rules concerning notification of a subject in response to his request if any system of records named by the subject contains a record pertaining to him and procedures by which the subject may access or amend the records. Notwithstanding exemption,

the

ODNI may determine it appropriate to satisfy a record subject's access request.

(13) From paragraph (g) of the Privacy Act (5 U.S.C. 552a) (civil remedies) to the extent that the civil remedies relate to provisions of 5 U.S.C. 552a from which this rule exempts the system.

[84 FR 31195, July 1, 2019]