E7-19266. Privacy Act of 1974; Privacy Act System of Records Appendices

AGENCY:

National Aeronautics and Space Administration (NASA).

ACTION:

Revisions of NASA appendices to Privacy Act system of records.

SUMMARY:

Notice is hereby given that NASA is amending the standard appendices that it regularly publishes with the Agency's systems of records under the Privacy Act of 1974. In this notice, NASA (1) names an additional location, the NASA Shared Services Center, and updates Locations 16 and 17 for clarity in Appendix A where NASA systems of records may be maintained; (2) updates Office of Inspector General locations; (3) revises its previous routine use in Appendix B, the Agency's Standard Routine Uses to ensure the Agency's litigation routine use is in compliance with the Office of Management and Budget (OMB) Privacy Act Guidance—Update dated May 24, 1985; and (4) sets forth a new routine use in Appendix B, the Agency's Standard Routine Uses as required by OMB Memorandum 07-16 dated May 22, 2007 entitled “Safeguarding Against and Responding to the Breach of Personally Identifiable Information.” This new routine use enables the Agency to quickly and effectively respond to a breach of personally identifiable information through disclosure of information regarding the breach to those individuals affected by it, as well as to persons and entities in a position to cooperate, either by assisting in notification to affected individuals or playing a role in preventing or minimizing harms from the breach.

DATES:

Submit comments on or before 30 calendar days from the date of this publication. These changes will be effective as proposed at the end of the comment period unless comments are received which would require a contrary determination.

ADDRESSES:

Patti F. Stockman, Privacy Act Officer, Office of the Chief Information Officer, National Aeronautics and Space Administration Headquarters, Washington, DC 20546-0001, [phone], [e-mail].

FOR FURTHER INFORMATION CONTACT:

NASA Privacy Act Officer, Patti F. Stockman, [phone], [e-mail].

Jonathan Q. Pettus,

NASA Chief Information Officer.

Appendix A—Location Numbers and Mailing Addresses of NASA Installations at Which Records Are Located

Location 1

NASA Headquarters, National Aeronautics and Space Administration Washington, DC 20546-0001

Location 2

Ames Research Center, National Aeronautics and Space Administration, Moffett Field, CA 94035-1000

Location 3

Dryden Flight Research Center, National Aeronautics and Space Administration, P.O. Box 273, Edwards, CA 93523-0273

Location 4

Goddard Space Flight Center, National Aeronautics and Space Administration, Greenbelt, MD 20771-0001

Location 5

Lyndon B. Johnson Space Center, National Aeronautics and Space Administration, Houston, TX 77058-3696

Location 6

John F. Kennedy Space Center, National Aeronautics and Space Administration, Kennedy Space Center, FL 32899-0001

Location 7

Langley Research Center, National Aeronautics and Space Administration, Hampton, VA 23681-2199

Location 8

John H. Glenn Research Center at Lewis Field, National Aeronautics and Space Administration, 21000 Brookpark Road, Cleveland, OH 44135-3191

Location 9

George C. Marshall Space Flight Center, National Aeronautics and Space Administration, Marshall Space Flight Center, AL 35812-0001

Location 10

HQ NASA Management Office—JPL, National Aeronautics and Space Administration, 4800 Oak Grove Drive, Pasadena, CA 91109-8099

Location 11

John C. Stennis Space Center, National Aeronautics and Space Administration, Stennis Space Center, MS 39529-6000

Location 12

JSC White Sands Test Facility, National Aeronautics and Space Administration, P.O. Drawer MM, Las Cruces, NM 88004-0020

Location 13

GRC Plum Brook Station, National Aeronautics and Space Administration, Sandusky, OH 44870

Location 14

MSFC Michoud Assembly Facility, National Aeronautics and Space Administration, P.O. Box 29300, New Orleans, LA 70189

Location 15

NASA Independent Verification and Validation Facility (NASA IV & V), 100 University Drive, Fairmont, WV 26554

Location 16

Office of Inspector General, Post of Duty, 402 E. State Street, Suite 3036, Trenton, NJ 08608

Location 17

Office of Inspector General, Western Field Office, Glenn Anderson Federal Building, 501 West Ocean Blvd., Long Beach, CA 90802-4222

Location 18

NASA Shared Services Center (NSSC), Building 5100, Stennis Space Center, MS 39529-6000

APPENDIX B STANDARD ROUTINE USES—NASA

The following routine uses of information contained in SORs, subject to the Privacy Act of 1974, are standard for many NASA systems. They are cited by reference in the paragraph “Routine uses of records maintained in the system, including categories of users and the purpose of such uses” of the Federal Register Notice on those systems to which they apply.

Standard Routine Use No. 1—LAW ENFORCEMENT—In the event this system of records indicates a violation or potential violation of law, whether civil, criminal, or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the SOR may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

Standard Routine Use No. 2—DISCLOSURE WHEN REQUESTING INFORMATION—A record from this SOR may be disclosed as a “routine use” to a Federal, State, or local agency maintaining civil, criminal, or other relevant enforcement information or other pertinent information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant, or other benefit.

Standard Routine Use No. 3—DISCLOSURE OF REQUESTED INFORMATION—A record from this SOR may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

Standard Routine Use No. 4—DISCLOSURE TO THE DEPARTMENT OF JUSTICE FOR USE IN LITIGATION:

A record from this SOR may be disclosed to the Department of Justice when (a) the Agency, or any component thereof; or (b) any employee of the Agency in his or her official capacity; or (c) any employee of the Agency in his or her individual capacity where the Department of Justice or the Agency has agreed to represent the employee; or (d) the United States, where the Agency determines that litigation is likely to affect the Agency or any of its components, is a party to litigation or has an interest in such litigation, and the use of such records by the Department of Justice or the Agency is deemed by the Agency to be relevant and necessary to the litigation provided, however, that in each case it has been determined that the disclosure is compatible with the purpose for which the records were collected.

Standard Routine Use 5: ROUTINE USE FOR AGENCY DISCLOSURE IN LITIGATION

It shall be a routine use of the records in this system of records to disclose them in a proceeding before a court or adjudicative body before which the agency is authorized to appear, when: (a) The Agency, or any component thereof; or (b) any employee of the Agency in his or her official capacity; or (c) any employee of the Agency in his or her individual capacity where the Agency has agreed to represent the employee; or (d) the United States, where the Agency determines that litigation is likely to affect the Agency or any of its components, is a party to litigation or has an interest in such litigation, and the use of such records by the Agency is deemed to be relevant and necessary to the litigation, provided, however, that in each case, the Agency has determined that the disclosure is compatible with the purpose for which the records were collected.

Standard Routine Use No. 6—SUSPECTED OR CONFIRMED CONFIDENTIALITY COMPROMISE—A record from this SOR may be disclosed to appropriate agencies, entities, and persons when (1) NASA suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (2) NASA has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by NASA or another agency or entity) that rely upon the compromised information; and (3) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with NASA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.