95-28446. Freedom of Information and Privacy Act of 1974  

  • [Federal Register Volume 60, Number 226 (Friday, November 24, 1995)]
    [Proposed Rules]
    [Pages 57970-57980]
    From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
    [FR Doc No: 95-28446]
    
    
    
    -----------------------------------------------------------------------
    
    
    SMALL BUSINESS ADMINISTRATION
    13 CFR Parts 102 and 137
    
    
    Freedom of Information and Privacy Act of 1974
    
    AGENCY: Small Business Administration.
    
    ACTION: Proposed rule.
    
    -----------------------------------------------------------------------
    
    SUMMARY: In response to President Clinton's government-wide regulatory 
    reform initiative, the Small Business Administration (SBA) has 
    completed a page-by-page, line-by-line review of all of its existing 
    regulations to determine which might be revised or eliminated. This 
    proposed rule would delete duplicative statutory and unnecessary 
    language and rewrite the remainder in plain English. There are some 
    substantive changes, as follows:
        The proposed rule revises the Agency's regulations implementing 
    Executive Order 12600 and would require SBA to give submitters of 
    information the opportunity, at the time they submit the information, 
    to identify information the disclosure of which would cause them 
    substantial competitive harm.
        The rule would establish a procedure for appealing FOIA fee 
    determinations which parallels the procedure for appealing a decision 
    to withhold information. 
    
    [[Page 57971]]
    
        The rule would remove the Program Official from the Privacy Act 
    management function and vest all responsibilities in Systems Managers 
    and the Privacy Act Officer.
        Part 137 deals with the treatment of classified information. Since 
    SBA generates no such documents, SBA regulations need deal only with 
    classified information which SBA acquires from other Agencies. The rule 
    would place the needed portion of Part 137 in Part 102 and eliminate 
    the remainder.
        There are other, minor changes detailed below.
    
    DATES: Comments must be submitted on or before December 26, 1995.
    
    ADDRESSES: Written comments should be addressed to David R. Kohler, 
    Regulatory Reform Team Leader, (102), Small Business Administration, 
    409 3rd Street SW., Suite 13, Washington, D.C. 20416.
    
    FOR FURTHER INFORMATION CONTACT: Timothy C. Treanor, Attorney Advisor, 
    Office of General Counsel, at (202) 205-6885.
    
    SUPPLEMENTARY INFORMATION: On March 4, 1995, President Clinton issued a 
    Memorandum to all federal agencies, directing them to simplify their 
    regulations. In response to this directive, SBA has completed a page-
    by-page, line-by-line review of all of its existing regulations to 
    determine which might be revised or eliminated.
        SBA reorganized and simplified Part 102. A conversion table of 
    distribution follows:
    
    ------------------------------------------------------------------------
                 Present part 102                     Proposed part 102     
    ------------------------------------------------------------------------
    Sec.  102.1(a)............................  Sec.  102.1                 
    Sec.  102.1(b)............................  deleted                     
    Sec.  102.2...............................  deleted                     
    Sec.  102.3(a)............................  deleted                     
    Sec.  102.3(b)............................  deleted                     
    Sec.  102.3(c)............................  deleted                     
    Sec.  102.3(d)............................  deleted                     
    Sec.  102.3(e)............................  deleted                     
    Sec.  102.3(f)............................  deleted                     
    Sec.  102.3(g)............................  deleted                     
    Sec.  102.3(h)............................  deleted                     
    Sec.  102.3(i)............................  deleted                     
    Sec.  102.3(j)............................  deleted                     
    Sec.  102.3(k)............................  deleted                     
    Sec.  102.3(l)............................  Sec.  102.10                
    Sec.  102.4(a)............................  deleted                     
    Sec.  102.4(b)............................  Sec.  102.2(a)              
    Sec.  102.4(c)............................  Sec.  102.2(b)              
    Sec.  102.4(d)............................  deleted                     
    Sec.  102.4(e)(1).........................  Sec.  102.3(a)              
                                                Sec.  102.3(c)              
    Sec.  102.4(e)(2).........................  Sec.  102.4(b)              
    Sec.  102.4(e)(3).........................  Sec.  102.5                 
    Sec.  102.5(a)............................  deleted                     
    Sec.  102.5(b)(1).........................  Sec.  102.6(a)              
    Sec.  102.5(b)(2).........................  deleted                     
    Sec.  102.5(b)(3).........................  Sec.  102.6(b)              
    Sec.  102.5(c)............................  deleted                     
    Sec.  102.5(d)............................  Sec.  102.6(a)              
                                                Sec.  102.6(d)(1)(i)        
                                                Sec.  102.6(d)(2)(i)        
    Sec.  102.5(e)............................  Sec.  102.7                 
    Sec.  102.5(f)............................  Sec.  102.6(d)(1)(ii)       
                                                Sec.  102.6(d)(2)(ii)       
    Sec.  102.5(g)............................  Sec.  102.6(d)(4)           
    Sec.  102.5(h)............................  Sec.  102.6(f)              
    Sec.  102.5(i)(1).........................  Sec.  102.6(d)(1)(i)        
                                                Sec.  102.6(d)(2)(i)        
    Sec.  102.5(i)(2).........................  Sec.  102.6(c)              
    Sec.  102.5(i)(3).........................  deleted                     
    Sec.  102.5(i)(4).........................  deleted                     
    Sec.  102.6(a)............................  deleted                     
    Sec.  102.6(b)............................  Sec.  102.9(b)              
    Sec.  102.6(c)............................  Sec.  102.9(c)(1)           
    Sec.  102.6(d)............................  Sec.  102.9(a)              
    Sec.  102.6(e)(1).........................  Sec.  102.9(d)              
    Sec.  102.6(e)(2).........................  Sec.  102.9(f)(1)           
    Sec.  102.6(e)(3).........................  Sec.  102.9(e)              
    Sec.  102.7(a)(1).........................  deleted                     
    Sec.  102.7(a)(2).........................  deleted                     
    Sec.  102.7(a)(3).........................  deleted                     
    Sec.  102.7(a)(4).........................  deleted                     
    Sec.  102.7(a)(5).........................  Sec.  102.8(d)              
    Sec.  102.7(a)(6).........................  Sec.  102.8(b)(1)           
    Sec.  102.7(a)(7).........................  Sec.  102.8(b)(2)           
    Sec.  102.7(a)(8).........................  Sec.  102.8(b)(4)           
    Sec.  102.7(b)(1).........................  Sec.  102.8(a)(1)           
    Sec.  102.7(b)(2).........................  Sec.  102.8(a)(2)           
    Sec.  102.7(b)(3).........................  Sec.  102.8(a)(3)           
    Sec.  102.7(b)(4).........................  Sec.  102.8(a)(4)           
    Sec.  102.7(b)(5)(i)......................  Sec.  102.8(a)(5)           
    Sec.  102.7(b)(5)(ii).....................  Sec.  102.8(a)(6)           
    Sec.  102.7(b)(6).........................  Sec.  102.8(b)(uosp)        
                                                Sec.  102.8(c)              
                                                Sec.  102.8(e)              
                                                Sec.  102.8(h)              
    Sec.  102.7(b)(7).........................  Sec.  102.8(g)              
    Sec.  102.7(c)(1).........................  Sec.  102.8(d)              
    Sec.  102.7(c)(2).........................  Sec.  102.8(b)(uosp)        
                                                Sec.  102.8(b) (1-3)        
    Sec.  102.7(c)(3).........................  Sec.  102.8(b)(uosp)        
                                                Sec.  102.8(b)(4)           
    Sec.  102.7(c)(4).........................  Sec.  102.8(c)              
    Sec.  102.7(d)(1).........................  Sec.  102.8(l)(1)           
    Sec.  102.7(d)(2).........................  Sec.  102.8(m)              
    Sec.  102.7(d)(3).........................  Sec.  102.8(n)              
    Sec.  102.7(d)(4)(i)......................  Sec.  102.8(i)              
    Sec.  102.7(d)(4)(ii).....................  Sec.  102.8(i)              
    Sec.  102.7(d)(4)(iii)....................  Sec.  102.3(c)              
    Sec.  102.7(d)(5).........................  deleted                     
    Sec.  102.7(e)............................  Sec.  102.8(o)              
    Sec.  102.8...............................  Sec.  102.13                
    Sec.  102.20(a)...........................  Sec.  102.20(a)(1)          
    Sec.  102.20(b)...........................  Sec.  102.20(a)(2)          
    Sec.  102.20(c)...........................  Sec.  102.20(a)(3)          
    Sec.  102.20(d)...........................  Sec.  102.20(b)             
    Sec.  102.20(e)...........................  Sec.  102.20(c)             
    Sec.  102.21(a)...........................  deleted                     
    Sec.  102.21(b)...........................  deleted                     
    Sec.  102.21(c)...........................  Sec.  102.26                
    Sec.  102.21(d)...........................  deleted                     
    Sec.  102.21(e)...........................  Sec.  102.24                
    Sec.  102.21(f)...........................  Sec.  102.25                
    Sec.  102.21(g)...........................  deleted                     
    Sec.  102.21(h)...........................  deleted                     
    Sec.  102.22(a)(1)........................  Sec.  102.32(b)             
    Sec.  102.22(a)(2)........................  Sec.  102.32(c)             
    Sec.  102.22(a)(3)........................  Sec.  102.32(d)             
    Sec.  102.22(a)(4)........................  Sec.  102.32(e)             
    Sec.  102.22(a)(5)........................  deleted                     
    Sec.  102.22(a)(6)........................  deleted                     
    Sec.  102.22(a)(7)........................  deleted                     
    Sec.  102.22(b)(1)........................  Sec.  102.32(a)             
    Sec.  102.22(b)(2)........................  deleted                     
    Sec.  102.22(b)(3)........................  deleted                     
    Sec.  102.22(b)(4)........................  deleted                     
    Sec.  102.22(b)(5)........................  deleted                     
    Sec.  102.22(c)...........................  deleted                     
    Sec.  102.22(d)...........................  Sec.  102.29                
    Sec.  102.23UOP...........................  Sec.  102.22(a)             
    Sec.  102.23(a)...........................  Sec.  102.22(b)             
    Sec.  102.23(b)...........................  Sec.  102.22(c)             
    Sec.  102.23(c)...........................  Sec.  102.22(d)             
    Sec.  102.23(d)...........................  Sec.  102.22(e)             
    Sec.  102.23(e)...........................  Sec.  102.22(f)             
    Sec.  102.23(f)...........................  Sec.  102.22(g)             
    Sec.  102.23(g)...........................  Sec.  102.22(h)             
    Sec.  102.23(h)...........................  Sec.  102.22(i)             
    Sec.  102.23(i)...........................  Sec.  102.22(j)             
    Sec.  102.23(j)...........................  Sec.  102.22(k)             
    Sec.  102.23(k)...........................  Sec.  102.22(l)             
    Sec.  102.24..............................  Sec.  102.28                
    Sec.  102.25..............................  deleted                     
    Sec.  102.26(a)...........................  deleted                     
    Sec.  102.26(b)(UOP)......................  deleted                     
    Sec.  102.26(b)(1)........................  deleted                     
    Sec.  102.26(b)(2)........................  deleted                     
    Sec.  102.26(b)(3)........................  Sec.  102.60                
    Sec.  102.26(b)(4)........................  Sec.  102.47(a)             
                                                Sec.  102.47(b)             
    Sec.  102.26(c)...........................  deleted                     
    Sec.  102.27(a)...........................  Sec.  102.61(a)             
    Sec.  102.27(b)(UOP)......................  Sec.  102.61(b)             
    Sec.  102.27(b)(1)........................  Sec.  102.61(a)             
    Sec.  102.27(b)(2)........................  Sec.  102.61(a)             
    Sec.  102.27(b)(3)........................  Sec.  102.61(a)             
    Sec.  102.27(c)...........................  Sec.  102.61(a)             
    Sec.  102.27(d)...........................  Sec.  102.61(a)             
    Sec.  102.27(e)...........................  Sec.  102.61(a)             
    Sec.  102.27(f)...........................  Sec.  102.61(a)             
    Sec.  102.27(g)...........................  Sec.  102.61(a)             
    Sec.  102.28(a)...........................  Sec.  102.34(a)             
                                                Sec.  102.58                
    Sec.  102.28(b)...........................  Sec.  102.34(b)             
    Sec.  102.28(c)...........................  Sec.  102.34(c)             
    Sec.  102.28(d)...........................  Sec.  102.36(b)             
    Sec.  102.28(e)...........................  Sec.  102.35                
                                                Sec.  102.36                
    Sec.  102.29(a)...........................  Sec.  102.38(c)             
    Sec.  102.29(a)...........................  Sec.  102.39                
    Sec.  102.29(b)...........................  Sec.  102.41                
    Sec.  102.29(c)...........................  Sec.  102.40                
    Sec.  102.29(d)...........................  deleted                     
    Sec.  102.30(a)...........................  Sec.  102.42                
    Sec.  102.30(b)...........................  Sec.  102.43                
                                                Sec.  102.46                
    Sec.  102.30(b)...........................  Sec.  102.47                
    Sec.  102.30(c)...........................  deleted                     
    Sec.  102.30(d)...........................  Sec.  102.47(a)             
                                                Sec.  102.47(b)             
    Sec.  102.31(a)...........................  Sec.  102.48                
                                                Sec.  102.49(c)             
                                                Sec.  102.50                
    Sec.  102.31(b)...........................  Sec.  102.51                
    Sec.  102.31(c)...........................  Sec.  102.52                
    Sec.  102.31(d)...........................  Sec.  102.52                
    Sec.  102.31(e)...........................  Sec.  102.53(b)(1)          
                                                Sec.  102.53(c)(2)          
    Sec.  102.31(f)...........................  Sec.  102.58(b)(3)          
                                                Sec.  102.58(c)(2)          
    Sec.  102.32(a)(1)........................  Sec.  102.21(a)             
    Sec.  102.32(a)(2)........................  Sec.  102.21(b)             
    Sec.  102.32(a)(3)........................  Sec.  102.55                
    Sec.  102.32(a)(4)........................  deleted                     
    Sec.  102.32(b)...........................  deleted                     
    Sec.  102.32(c)...........................  Sec.  102.32(f)             
    
    [[Page 57972]]
                                                                            
    Sec.  102.33(a)...........................  Sec.  102.23(a)             
    Sec.  102.33(b)...........................  deleted                     
    Sec.  102.33(c)...........................  Sec.  102.56                
    Sec.  102.33(d)...........................  deleted                     
    Sec.  102.33(e)...........................  Sec.  102.57                
    Sec.  102.33(f)...........................  Sec.  102.58                
    Sec.  102.33(g)...........................  Sec.  102.58(d)             
                                                Sec.  102.58(e)             
    Sec.  102.33(h)...........................  deleted                     
    Sec.  102.34..............................  Sec.  102.59                
    Sec.  102.35(a)...........................  Sec.  102.27(d)(uosp)       
    Sec.  102.35(b)...........................  Sec.  102.27(d) (1-3)       
    Sec.  102.35(c)...........................  Sec.  102.27(e)             
    Sec.  102.36(a)...........................  Sec.  102.27(a)             
    Sec.  102.36(b)...........................  Sec.  102.27(b)             
    Sec.  102.36(c)...........................  Sec.  102.27(c)             
    Sec.  102.37..............................  Sec.  102.54                
    ------------------------------------------------------------------------
    
    
    
        The principal substantive changes are as follows: (1) Changes in 
    Implementation of Executive Order 12600. Under the present regulations, 
    when someone requests business information even arguably exempt under 5 
    U.S.C. Sec. 552(b)(4), SBA notifies the submitter and allows five 
    working days to identify information the disclosure of which would 
    cause substantial competitive harm. If SBA decides that it must 
    disclose such information anyway, SBA must give the submitter an 
    additional five working days to respond. The operation of this 
    regulation makes it difficult for SBA to respond to FOIA requests 
    within the statutory ten working day limit. To facilitate FOIA's ten 
    working day requirement, SBA proposes to ask the submitter to identify 
    this confidential information at the time of submission, and that the 
    Agency thereafter would notify the submitter only if it intended to 
    disclose information previously identified as confidential, or other 
    information the release of which the Agency believed would cause 
    substantial competitive harm. This proposed regulation would also 
    provide that where SBA decided to release information the disclosure of 
    which the submitter sought to prevent, SBA would give the submitter the 
    ``maximum notice possible before disclosure without violating the time 
    constraints imposed by the Freedom of Information Act'' rather than 
    five working days. SBA proposes this change so that the Agency can 
    assure that its responses to FOIA requests remain within the ten 
    working day time limits imposed by the Freedom of Information Act 
    itself.
        (2) Adoption of an Appeals Process for Fee Determinations. This 
    rule would establish a quick and simple appeal procedure for requesters 
    who are dissatisfied with the fee SBA has charged for their FOIA 
    requests. The procedure parallels the process by which requesters may 
    appeal SBA decisions to withhold information. Interest would begin to 
    accrue 31 days after SBA's response to the request, regardless of a fee 
    appeal.
        (3) Elimination of Program Official from Privacy Act Regulations. 
    Under current Privacy Act regulations, Systems Managers function as the 
    primary liaison with Privacy Act requesters, conveying requests to 
    Program Officials and responses to the requesters. SBA has decided to 
    streamline by empowering Systems Managers to assume the Program 
    Official's responsibilities directly. Under the new rule, requesters 
    will direct their requests to Systems Managers, who will make initial 
    decisions as to access and amendment.
        (4) Elimination of Part 137. SBA enacted Part 137 in 1984 in 
    response to Executive Order 12356, which required Agencies to have 
    regulations dealing with their handling of classified material. Since 
    SBA has no classification authority, SBA has decided to repeal that 
    portion of the existing regulation, maintaining only a provision 
    (Sec. 102.12) which refers requests for any classified material in 
    SBA's possession back to their originating agencies.
        SBA also proposes some minor changes proposed to its fee structure. 
    SBA currently waives fees less than $15; the proposed regulations would 
    waive fees less than $25. SBA currently charges $18 an hour for 
    professional record searches and $9 for clerical searches. Since SBA 
    generally does not use clerical personnel to perform manual searches, 
    and computer searches are billed separately, at cost, the proposed 
    regulations eliminate the reference to clerical searches and bill all 
    searches at $18 an hour.
    
    Section By Section Analysis
    
        Proposed Sec. 102.1 describes the purpose of Subpart A: to describe 
    SBA's compliance with the Freedom of Information Act.
        Proposed Sec. 102.2 describes what documents requesters can obtain 
    by going to offices and what documents requesters must obtain through 
    writing. Proposed Sec. 102.2 directs the requester to the nearest 
    District Office or to the Agency's FOIA office; either will forward the 
    request to the proper office.
        Proposed Sec. 102.3 describes how long SBA may take to respond to a 
    FOIA request. Paragraphs (a) and (c) set forth the statutory 
    requirements and (with respect to the fee portion) OMB requirements for 
    all Agencies (See 52 FR 10012). Paragraph (b), which provides that the 
    clock does not begin to run until the proper office receives the 
    request, replicates the present regulation.
        Proposed Sec. 102.4 describes possible responses to a FOIA request, 
    including notices of appeal rights. Proposed Sec. 102.5 makes it clear 
    that SBA will supply only that information that is in the office as of 
    the close of the day upon which the office receives the request. None 
    of these proposed sections vary from the current regulations.
        Proposed Secs. 102.6 and 102.8 describe SBA's compliance with 
    Executive Order 12600. Businesses submitting information after January 
    1, 1996 can designate items whose disclosure would cause them 
    substantial competitive harm. If SBA proposes to release information so 
    designated, or other information which SBA believes could cause such 
    harm, SBA will give notice to the submitter and allow five business 
    days to submit reasons why SBA should not release the information. If 
    SBA decides to release the information over the submitter's objections, 
    SBA then will give the submitter as much additional notice as feasible 
    consistent with SBA's responsibilities under the Freedom of Information 
    Act. With respect to information submitted prior to January 1, 1996, 
    SBA's procedure will remain the same as it is now, except that the 
    notice SBA gives in the event that it intends to release information 
    over the submitter's objection will now be the maximum notice 
    consistent with the Agency's obligations under FOIA, rather than five 
    working days.
        Proposed Sec. 102.8 sets forth a fee schedule which, with two minor 
    exceptions, remains the same: (1) A waiver of fees under $25, instead 
    of the present regulation's $15; (2) A charge of $18 per hour for 
    manual searches rather than $9 per hour for clerical searches and $18 
    per hour for professional searches. At SBA, professionals typically 
    conduct manual searches. Computer searches are billed at SBA's actual 
    cost and handled separately in the regulations. By setting all search 
    fees at $18 per hour, SBA can simplify recordkeeping. The new 
    regulation also codifies the present practice of charging the actual 
    cost of certifying records and sending records (at the request of the 
    FOIA requester) by other than first class mail. The remainder of the 
    proposed regulation simply restates the current regulation.
        Proposed Sec. 102.9 sets forth a proposed appeal system for both 
    denial of records and for fees which parallels the current system for 
    appealing SBA decisions to withhold information. 
    
    [[Page 57973]]
    
        Proposed Sec. 102.10 matches the present regulations concerning the 
    Public Index.
        Proposed Sec. 102.11 notes that if the requester asks for a 
    document generated by another Agency, SBA will forward it to the Agency 
    which generated the document. This process implements policy guidance 
    which the Department of Justice has given Agencies on this issue.
        Proposed Sec. 102.12 deals with a particular sort of document 
    generated from another Agency: classified documents. This section is 
    all that remains of present Part 137. SBA had previously issued that 
    Part to establish the system by which SBA would manage classified 
    documents, as required by Executive Order 12356. However, SBA does not 
    generate classified documents and has neither classification nor 
    declassification authority. Accordingly, any classified documents in 
    SBA's possession were generated by another Agency. SBA will refer any 
    request for such a document to the generating Agency, just as it does 
    with all documents generated by another Agency.
        Proposed Sec. 102.13 matches the present regulations concerning 
    compulsory process against SBA, except that the Associate General 
    Counsel for Litigation may under the proposed regulation delegate 
    authority to resist a subpoena to field counsel.
        SBA has substantially reorganized Subpart B, but without 
    significant substantive changes. Proposed Sec. 102.20 describes the 
    purpose of the Privacy Act subpart. Proposed Sec. 102.21 sets forth the 
    basic principles of privacy maintenance. Proposed Sec. 102.22 describes 
    the circumstances, unchanged from the present, under which SBA will 
    disclose records. In proposed Sec. 102.23, SBA notes that personnel 
    files are not governed by Part 102 but rather by 5 CFR Parts 293 and 
    297. It also notes that EEO Complaint files are governed by 29 CFR Part 
    1611. This is the state of the law; the proposed regulation corrects 
    anachronistic references in present Part 102. Proposed Secs. 102.24, 
    102.25, and 102.26 provide definitions for terms used in the 
    regulations. Proposed Sec. 102.27 describes records which are exempt 
    from the Privacy Act under certain circumstances, or which are exempt 
    on a regular basis from certain provisions of the Privacy Act for all 
    purposes. This section replicates present Secs. 102.35 and 102.36, with 
    the single exception that the new regulation does not exempt EEO 
    Complaint files, Litigation and Claims files, Standards of Conduct 
    files, and Civil Rights Compliance files from the full range of Privacy 
    Act provisions since they are not records maintained by the Inspector 
    General. Proposed Sec. 102.28 makes it clear that the Privacy Act does 
    not give individuals access to records compiled for civil litigation.
        Proposed Secs. 102.29 through 102.33 establish the responsibilities 
    of SBA employees who administer the Privacy Act. With one important 
    exception, these responsibilities remain the same. The present 
    regulations divide Privacy Act responsibilities among the Privacy Act 
    Officer, the Program Official for each program or office, and the 
    Systems Manager for each program or office. The new regulations 
    eliminate Program Officials from Privacy Act responsibilities and 
    allocate most of their responsibilities to the Systems Managers. This 
    will free Program Officials to discharge their other substantive SBA 
    duties.
        Proposed Secs. 102.34-102.41 provide instructions for a person who 
    has records in an SBA system of records and who wants to look at those 
    records. Proposed Secs. 102.42-102.53 provide instructions for a person 
    who wishes to have his SBA record amended. Proposed Sec. 102.54 governs 
    judicial review. None of these sections reflect any substantive changes 
    from the present regulations.
        Proposed Secs. 102.55 through 102.60 group together miscellaneous 
    commonly-asked Privacy Act questions which the regulations currently 
    treat in disparate sections of Part 102. These proposed regulations do 
    not enact any substantive changes in the answers to those questions, 
    except that (1) SBA will no longer provide a first copy of files 
    requested under the Privacy Act for free, (2) SBA will waive fees under 
    $25 (instead of the current $15) for Privacy Act requests and, (3) 
    noncustodial parents will not be allowed to obtain their children's 
    records under the Privacy Act.
        SBA's current regulations regarding the Computer Matching and 
    Privacy Protection Act of 1988 are moved to Sec. 102.61. Under the 
    proposed regulation, the statutory provisions are incorporated by 
    reference rather than separately set out.
        The proposed regulations eliminate references to various 
    recordkeeping and reporting requirements which have been mandated by 
    statute; since the statute imposes those requirements on SBA it would 
    be superfluous to restate them in regulations.
        These proposed regulations eliminate many existing provisions of 
    Part 102 either because they are duplicative or because they set forth 
    in regulation provisions which are better governed by internal Agency 
    guidance. For example, the proposed regulations do not detail the 
    recordkeeping obligations of the Privacy Act Officer. This does not 
    mean, of course, that SBA will not comply with the recordkeeping 
    requirements of the Privacy Act. It simply indicates that it will be an 
    Agency decision, not subject to the provisions of the Administrative 
    Procedures Act, as to which of its employees discharges which of the 
    recordkeeping responsibilities.
        The elimination of an existing provision is not--except as noted 
    above--meant to change substantive procedures. For example, the 
    proposed regulations would eliminate those provisions of present 
    Sec. 102.3 which set forth what documents the SBA would routinely make 
    available and what documents the SBA routinely withholds. This does not 
    signal a change in SBA policy on withholding. SBA will continue to 
    provide all required documents, along with such additional documents as 
    it considers appropriate, but SBA sees no reason to give this 
    unexceptional policy the weight of regulation.
    
    Compliance With Executive Orders 12612, 12778, and 12866, the 
    Regulatory Flexibility Act (5 U.S.C. 601, et seq.), and the Paperwork 
    Reduction Act (44 U.S.C. Ch. 35)
    
        SBA certifies that this proposed rule would not have a significant 
    economic impact on a substantial number of small entities within the 
    meaning of Executive Order 12866 or the Regulatory Flexibility Act, 5 
    U.S.C. 601, et seq. This proposed regulation would merely make the 
    Agency's FOIA and PA procedures clearer. It will institute governmental 
    efficiencies at no cost to small businesses. Therefore, it is not 
    likely to have an annual economic effect of $100 million or more, 
    result in a major increase in costs or prices, or have a significant 
    adverse effect on competition or the United States economy.
        For purposes of the Paperwork Reduction Act, 44 U.S.C. Ch. 35, SBA 
    certifies that this proposed rule, if adopted in final form, would 
    contain no new reporting or record keeping requirements.
        For purposes of Executive Order 12612, SBA certifies that this rule 
    would not have any federalism implications warranting the preparation 
    of a Federalism Assessment.
        For purposes of Executive Order 12778, SBA certifies that this rule 
    is drafted, to the extent practicable, in accordance with the standards 
    set forth in Section 2 of that Order. 
    
    [[Page 57974]]
    
    
    List of Subjects
    
    13 CFR Part 102
    
        Freedom of information, Privacy.
    
    13 CFR Part 137
    
        Classified information.
    
        For the reasons set forth above, SBA hereby proposes to amend Title 
    13 of the Code of Federal Regulations, as follows:
        1. Part 102 would be revised to read as follows:
    
    PART 102--RECORD DISCLOSURE AND PRIVACY
    
    Subpart A--Disclosure of Information
    
    Sec.
    102.1  Purpose.
    102.2  How can I get records from SBA?
    102.3  How long will it take for SBA to respond to my request for 
    records?
    102.4  How will SBA respond to my request?
    102.5  If SBA grants my request, which records will be supplied?
    102.6  How will SBA respond to requests for business information?
    102.7  Procedures for submitters of business information to SBA 
    after January 1, 1996.
    102.8  What fees will SBA charge?
    102.9  How may I appeal a denial of my request for information or a 
    fee determination?
    102.10  How can I get the Public Index of SBA materials?
    102.11  What happens if I ask SBA for a record that another Federal 
    Agency generated?
    102.12  What happens if I ask for classified records?
    102.13  What happens if I subpoena records or testimony of employees 
    in connection with a civil lawsuit, criminal proceeding, or 
    administrative proceeding?
    
    Subpart B--The Privacy Act
    
    102.20  What privacy rights does this subpart regulate?
    102.21  How will SBA maintain records?
    102.22  When will SBA disclose records?
    102.23  Special rules about personnel and equal employment 
    opportunity files.
    102.24  What is a record?
    102.25  What is a system of records?
    102.26  What does this subpart mean by ``person to whom a record 
    pertains'' or ``you''?
    102.27  What records are partially exempt from the provisions of the 
    Privacy Act?
    102.28  Information compiled for civil action.
    102.29  Who administers SBA's responsibilities under the Privacy 
    Act?
    102.30  How can I write to the Privacy Act Officer?
    102.31  Who appoints Systems Managers?
    102.32  What do Systems Managers do?
    102.33  How can I write to a Systems Manager?
    102.34  How can I see records kept on me?
    102.35  How long will it take SBA to respond to my request?
    102.36  How will SBA respond to my request?
    102.37  How may I appeal a decision to deny me access to my records?
    102.38  To whom should my appeal be addressed?
    102.39  When must I appeal to the Privacy Act Officer?
    102.40  When will SBA respond to my appeal?
    102.41  How will SBA respond to my appeal?
    102.42  How can I get SBA to amend a record kept on me?
    102.43  What should my petition say?
    102.44  For what reasons will SBA amend my record?
    102.45  Will SBA ask me for more information after I make my 
    request?
    102.46  When will SBA respond to my request?
    102.47  How will SBA respond to my request?
    102.48  How do I appeal a refusal to amend a record kept on me?
    102.49  To whom should I address my appeal?
    102.50  By when must I submit my appeal?
    102.51  By what standards will the Privacy Officer review my appeal?
    102.52  When will SBA respond to my appeal?
    102.53  How will SBA respond to my appeal?
    102.54  How can I obtain judicial review about an SBA Privacy Act 
    decision?
    102.55  What must SBA tell the individuals from whom it collects 
    information?
    102.56  Will SBA sell my name or address?
    102.57  Do I have to give SBA my Social Security Number?
    102.58  When will SBA show personnel records to my representative?
    102.59  What fees will SBA charge me for my records?
    102.60  May I be informed of disclosures made of my record?
    102.61  Matching Program procedures.
    
        Authority: 5 U.S.C. 552; 44 U.S.C. et seq.; 5 U.S.C. 552a; 18 
    U.S.C. 4203 (a)(1); 31 U.S.C. 1 et seq.; 31 U.S.C. 67 et seq.; E.O. 
    12600, 3 CFR 1987 Comp. p. 235.
    
    PART 102--RECORD DISCLOSURE AND PRIVACY
    
    Subpart A--Disclosure of Information
    
    
    Sec. 102.1  Purpose.
    
        This subpart describes the procedures by which the Small Business 
    Administration makes documents available under the Freedom of 
    Information Act (5 U.S.C. 552).
    
    
    Sec. 102.2  How can I get records from SBA?
    
        (a) You can go to the SBA office at which the records are kept, and 
    photocopy any final SBA decision, policy statement, or standard 
    operating procedure.
        (b) For copies of all other records, you must send a letter request 
    to the SBA office at which the records are kept. The letter must 
    describe specific records you want. If you don't know which SBA office 
    keeps the records, you may send your letter to the nearest SBA District 
    Office. You may also send your letter to the Chief, Freedom of 
    Information Act and Privacy Act, 409 Third Street SW., Suite 5900, 
    Washington D.C. 20416. The office receiving your letter will forward it 
    to the correct office.
    
    
    Sec. 102.3  How long will it take for SBA to respond to my request for 
    records?
    
        (a) If you have met the fee requirements of Sec. 102.8, SBA will 
    respond within ten working days after the correct office receives your 
    request, except under unusual circumstances. Unusual circumstances 
    include especially large numbers of records requested, records not 
    located in the office handling the request, or the need to consult with 
    more than one interested government office. If you make your request on 
    behalf of another person, SBA will respond within ten working days 
    after you present a document signed by that person authorizing you to 
    request information on his behalf. If you make your request on behalf 
    of another person without including such signed authorization, SBA will 
    inform you of the requirements of this paragraph.
        (b) If you send your request to the wrong office, that office will 
    send it to the correct office within ten working days and will send you 
    an acknowledgement letter.
        (c) If SBA determines that it will be unusually difficult to comply 
    with your request within ten working days, SBA will respond within 
    twenty working days of the date upon which the correct office receives 
    your request, and will notify you that the extra time is required.
    
    
    Sec. 102.4  How will SBA respond to my request?
    
        Within the time limit described in Sec. 102.3, SBA will either:
        (a) Give you the records you requested,
        (b) Give you some or none of the records you requested, explain why 
    SBA has decided not to comply fully with your request, citing specific 
    exemptions where applicable, and explain how to appeal that decision, 
    or
        (c) Tell you that you will not receive a response until you have 
    either paid your fee or committed to the amount of fee you will pay, as 
    applicable.
    
    
    Sec. 102.5  If SBA grants my request, which records will be supplied?
    
        SBA will give you copies of all records or portions of records 
    requested which are in the processing office as of the close of the day 
    upon which that office received your request. 
    
    [[Page 57975]]
    
    
    
    Sec. 102.6  How will SBA respond to requests for business information?
    
        (a) What is business information? Business information is a trade 
    secret, or commercial or financial information, contained in records 
    provided to the SBA by any person and which may be protected from 
    disclosure under Exemption Four of the Freedom of Information Act (5 
    U.S.C. 552(b)(4)).
        (b) Who is the submitter of business information? The submitter is 
    the business entity to which the business information pertains and 
    which submitted the information to SBA, either directly or through an 
    intermediary such as a bank, SBIC licensee, or representative.
        (c) What if the business information has previously been released 
    to the general public? SBA will disclose such business information upon 
    request and payment of any required fees.
        (d) What if the business information has not previously been 
    released to the general public? Except as provided in paragraph (e) of 
    this section:
        (1) For all business information submitted prior to January 1, 
    1996:
        (i) Unless SBA intends to deny the request to disclose business 
    information entirely, SBA will notify the submitter of the request upon 
    receipt, and will describe or provide the submitter with a copy of the 
    records it intends to disclose.
        (ii) SBA will ask the submitter to identify business information 
    which would likely cause substantial competitive harm if disclosed and 
    why the harm would occur. The submitter will have 5 working days to 
    provide its response.
        (2) For all business information submitted after January 1, 1996:
        (i) Upon receipt of the request, SBA will notify the submitter when 
    it intends to release business information which previously has been 
    identified by the submitter as confidential and likely to cause 
    substantial competitive harm if disclosed. If other business 
    information is requested which SBA believes may cause substantial 
    competitive harm if disclosed, SBA will notify the submitter of that 
    request as well.
        (ii) SBA will ask the submitter to explain why the identified 
    information would be likely to cause substantial competitive harm if 
    disclosed. The submitter will have 5 working days to provide its 
    response.
        (3) SBA will carefully consider the submitter's objections to 
    disclosure, if any, but will not be bound by it. If a submitter objects 
    to the disclosure of information which SBA believes it must disclose, 
    SBA will disclose that information.
        (4) If SBA decides to disclose information which the submitter 
    requested be withheld, SBA will give the submitter the maximum notice 
    possible before disclosure without violating the time constraints 
    imposed by the Freedom of Information Act. In this notice, SBA will 
    tell the submitter what it intends to disclose, and when it intends to 
    make disclosure.
        (e) If SBA does not intend to release any business information it 
    will not notify the submitter of the request.
        (f) SBA will promptly notify the submitter of any suit filed 
    against SBA to compel disclosure.
    
    
    Sec. 102.7  Procedures for submitters of business information to SBA 
    after January 1, 1996.
    
        (a) Submitters may mark or identify business information at the 
    time of submission which would likely cause them substantial 
    competitive harm if disclosed.
        (b) After ten years from submission SBA will regard the previous 
    assertion as no longer in effect unless the submitter has renewed its 
    assertion in writing that disclosure would likely cause substantial 
    competitive harm.
    
    
    Sec. 102.8  What fees will SBA charge?
    
        (a) Basic fees. (1) For manual record search. SBA will charge $18 
    per hour.
        (2) For computer record searches. SBA will charge the actual costs.
        (3) For review and disclosure determinations. SBA will charge $18 
    per hour.
        (4) Duplication. SBA will charge ten cents per page for photocopy 
    duplication, and the actual cost of reproduction for other methods.
        (5) Certifying records. SBA will charge actual costs.
        (6) For requested special types of delivery other than first-class 
    mail. SBA may charge the actual cost.
        (b) If you are a representative of an educational institution, a 
    non-commercial scientific institution, or a member of the news media. 
    SBA will charge you only for the cost of duplication after the first 
    100 pages.
        (1) What is an educational institution? A state-certified 
    preschool, elementary or secondary school, an accredited college or 
    university, an accredited institution of professional education, or any 
    accredited or state-certified institute of vocational education which 
    operates a program or programs of scholarly research.
        (2) What is a non-commercial scientific institution? An 
    organization which is operated solely for the purpose of conducting 
    scientific research, the results of which are not intended to promote 
    any particular product or industry.
        (3) What is a representative of an educational or non-commercial 
    scientific institution? A requester seeking records on behalf of that 
    institution who is authorized by that institution to do so, and who is 
    seeking those records for scholarly or scientific reasons, as long as 
    there is no commercial purpose to the request for records.
        (4) What is a representative of the news media? An individual who 
    is actively gathering news for an entity that is organized and operated 
    to disseminate information to the general public. To be considered 
    ``news media'', this organization may provide information by 
    subscription and may target its dissemination to a narrow section of 
    the general public as long as any member of the general public may 
    purchase information from it. If you are not employed by the news 
    media, but have a reasonable expectation that you will sell the 
    information you obtain to the news media, SBA may conclude that you are 
    a representative of the news media. SBA will not consider you to be a 
    representative of the news media if your request has a commercial 
    purpose, beyond the commercial purpose of selling information to the 
    general public.
        (c) Member of the general public. If you are a member of the 
    general public, SBA will not charge you for the first two hours of 
    search time, the first hundred pages of photocopy duplication, or for 
    review and disclosure determinations. The general public is anyone who 
    is not a representative of an educational institution, a representative 
    of the news media, or a commercial requester.
        (d) Commercial requester. If you are a commercial requester you 
    must pay all the basic fees set forth in paragraph (a) of this section. 
    A commercial requester is anyone seeking information for commercial, 
    trade, or profit interests of the requester or someone he or she is 
    trying to help.
        (e) How does SBA determine what category of requester I am? The SBA 
    office processing your request will determine the appropriate category. 
    If you are not a commercial requester, you must show us what category 
    of requester you are.
        (f) Tell us how much you are willing to pay. To get the quickest 
    possible response, you must tell SBA how much money you are willing to 
    pay in fees when you make your request for records.
        (g) If you don't tell us how much you are willing to pay and SBA 
    estimates that the fee will exceed $25.00, SBA 
    
    [[Page 57976]]
    will estimate the fee and will not process your request until you tell 
    SBA that you are willing to pay the estimated amount, or until you 
    narrow the request so that the fee is less than $25.
        (h) SBA will waive fees less than $25.
        (i) If the fee is more than $250, or if you have a history of 
    failing to pay FOIA fees in a timely manner, SBA will ask you to remit 
    the estimated amount and any past due charges before sending you the 
    records.
        (j) Who determines the fee? The SBA office which processes your 
    request.
        (k) When do you pay the fee? You will be billed when SBA responds 
    to your request and you must pay within thirty-one calendar days.
        (l) Failure to pay fees. (1) After the thirty-first day following 
    the date upon which you were billed, SBA will charge interest at the 
    maximum rate allowed under Title 31 of the United States Code, section 
    3717.
        (2) If you owe fees for previous FOIA responses, SBA will not 
    respond to further requests unless you satisfy the amount due.
        (3) If you do not pay the amount due within ninety calendar days of 
    the date you must pay, SBA may notify consumer credit reporting agents 
    of your delinquency.
        (m) Unsuccessful searches. If SBA's search for records is 
    unsuccessful, it will still bill you for the search.
        (n) Multiple requests. If you make multiple requests at the same 
    time, or at roughly the same time, SBA will aggregate your requests for 
    records. In no case will SBA give you more than the first two hours of 
    search time, or more than the first one hundred pages of duplication 
    without charge.
        (o) Reduction of fees in the public interest. If SBA determines 
    that disclosure of the information you seek is in the public interest 
    because it is likely to contribute significantly to public 
    understanding of the operations or activities of the government, and 
    that you are not seeking the information in your own commercial 
    interests, SBA may waive or reduce the fee.
    
    
    Sec. 102.9  How may I appeal a denial of my request for information or 
    a fee determination?
    
        (a) You must write to the Chief, Freedom of Information Act and 
    Privacy Act Office at 409 Third Street SW., Suite 5900, Washington, 
    D.C. 20416.
        (b) The Chief must receive your written appeal within 45 calendar 
    days of the date of the SBA fee determination from which you are 
    appealing.
        (c)(1) If you are appealing a denial of your request for 
    information, the appeal must contain the following information:
        (i) What records were denied.
        (ii) The name and title of the individual responsible for denying 
    the request and the address of his or her office.
        (iii) Any other information you deem appropriate.
        (2) If you are appealing a fee determination, the appeal must 
    contain the following information:
        (i) The address of the office which made the fee determination from 
    which you are appealing.
        (ii) The fee that office charged.
        (iii) The fee, if any, you believe should have been charged.
        (iv) The reasons you believe that your fee should be lower than the 
    fee which the Agency charged.
        (v) Any other information you deem appropriate.
        (d) If anybody other than the Chief was the person who originally 
    made the determination you are appealing, the Chief will decide your 
    appeal. If the Chief was the person who originally made the 
    determination you are appealing, SBA's Assistant Administrator for 
    Hearings and Appeals will decide your appeal.
        (e) SBA will take no more than twenty working days from the date 
    upon which it receives your appeal to decide it, unless unusual 
    circumstances require a thirty working days response time.
        (f)(1) If you are appealing a decision to deny your request for 
    records, SBA will in response either:
        (i) Give you the records you requested, or
        (ii) Decline to give you the records you requested, tell you why 
    SBA has concluded that the records were exempt from disclosure under 
    the Freedom of Information Act, and tell you how to obtain judicial 
    review of SBA's decision.
        (2) If you are appealing a fee determination, SBA will in response 
    either charge the fee you request or charge another fee and explain why 
    SBA has concluded that the fee it has decided to charge is appropriate.
    
    
    Sec. 102.10  How can I get the Public Index of SBA materials?
    
        (a) The Public Index is a document which provides identifying 
    information about official documents which SBA has issued.
        (b) SBA has administratively determined, as permitted by the 
    Freedom of Information Act, that periodic publication and distribution 
    is unnecessary and impracticable.
        (c) The Public Index is set forth in Appendix 3 of SBA Standard 
    Operating Procedure 40 03. You can review and photocopy the Public 
    Index, along with Standard Operating Procedure 40 03, at any SBA 
    office.
    
    
    Sec. 102.11  What happens if I ask SBA for a record that another 
    Federal Agency generated?
    
        Such a request is a request directed to the wrong office, as that 
    term is used in Sec. 102.3(b). SBA will forward your request to the 
    generating Agency.
    
    
    Sec. 102.12  What happens if I ask for classified records?
    
        SBA does not have original classification authority. Therefore, any 
    national security information or materials (as defined by Executive 
    Order 12356) in SBA's possession must have been classified by another 
    agency. If you ask for such material, SBA will forward that request to 
    the agency which originally classified those materials, with its 
    recommendations, if any.
    
    
    Sec. 102.13  What happens if I subpoena records or testimony of 
    employees in connection with a civil lawsuit, criminal proceeding or 
    administrative proceeding?
    
        (a) If your subpoena requires either the testimony of an SBA 
    employee or records within SBA's possession, the records themselves, or 
    both, the person to whom the subpoena is directed must consult with SBA 
    counsel in the relevant SBA office, who will in turn obtain approval 
    from the Associate General Counsel for Litigation. The Associate 
    General Counsel may delegate the authorization for production of 
    documents or testimony as appropriate to local SBA counsel.
        (b) If SBA counsel approves of compliance with the subpoena, SBA 
    will comply.
        (c) If SBA counsel disapproves of compliance with the subpoena, SBA 
    will not comply, and will base such noncompliance on an appropriate 
    legal basis such as privilege or a statute.
        (d) A copy of a subpoena relating to a criminal matter should be 
    provided by SBA counsel to SBA's Inspector General.
    
    Subpart B--The Privacy Act
    
    
    Sec. 102.20  What privacy rights does this subpart regulate?
    
        This subpart establishes SBA's policy and procedures safeguarding 
    an individual against an invasion of personal privacy.
        (a) Except as otherwise provided by law or regulation, SBA will 
    permit you to do the following:
        (1) Determine what records pertaining to you are collected, 
    maintained, used, or disseminated by the SBA;
        (2) Object when records pertaining to you are obtained by SBA for a 
    particular 
    
    [[Page 57977]]
    purpose and are proposed to be used or made available for another 
    purpose without your consent; and
        (3) Gain access to information pertaining to you in records, have a 
    copy made of all or any portion of those records, and correct or amend 
    such records as appropriate;
        (b) SBA will collect, maintain, use, or disseminate any record of 
    identifiable personal information in a manner that assures that such 
    action is for a necessary and lawful purpose, that the information is 
    current and accurate for its intended use, and that adequate safeguards 
    are provided to prevent misuse of such information.
        (c) SBA will permit exemptions from the requirements of 5 U.S.C. 
    552a (Privacy Act of 1974) only where an important public policy need 
    for such exemption has been determined by specific statutory authority.
    
    
    Sec. 102.21  How will SBA maintain records?
    
        SBA records will:
        (a) Contain only such information about an individual as is 
    relevant and necessary to accomplish a purpose of the Agency required 
    to be accomplished by statute, regulation, or by Executive Order of the 
    President.
        (b) Be comprised, to the maximum practical extent, of an 
    individual's own statements when the information may result in an 
    adverse determination about an individual's rights, benefits, or 
    privileges under a Federal program.
    
    
    Sec. 102.22  When will SBA disclose records?
    
        SBA will not disclose to anyone any record which is contained in a 
    system of records, except that it will disclose a record:
        (a) To the person about whom the record is maintained, or to that 
    person's agent, within the limits discussed in this subpart.
        (b) To those employees of the Agency who have a need for the record 
    to perform their duties;
        (c) When required under 5 U.S.C. 552 (Freedom of Information Act);
        (d) For a routine use of the record compatible with the purpose for 
    which it was collected;
        (e) To the Bureau of the Census for purposes of planning or 
    carrying out a census, survey, or related activity pursuant to Title 
    13, United States Code;
        (f) To a recipient who has provided the Agency with advance 
    adequate written assurance that the record will be used solely as a 
    statistical research or reporting record, where the record is 
    transferred in a form that is not individually identifiable;
        (g) To the National Archives of the United States as a record which 
    has sufficient historical or other value to warrant its continued 
    preservation by the U.S. Government, or for evaluation by the 
    Administrator of General Services or his or her designee to determine 
    whether the record has such value;
        (h) To another agency or to an instrumentality of any governmental 
    jurisdiction within or under the control of the United States for a 
    civil or criminal law enforcement activity if:
        (1) The activity is authorized by law, and
        (2) The head of the agency or instrumentality has made a written 
    request to the Privacy Act Officer specifying the particular portion 
    desired and the law enforcement activity for which the record is 
    sought;
        (i) To a person pursuant to a showing of compelling circumstances 
    affecting the health or safety of an individual. Upon disclosure 
    notification will be transmitted to the last known address of such 
    individual;
        (j) To either House of Congress, or, to the extent of matter within 
    its jurisdiction, any committee or subcommittee thereof, or any joint 
    committee of Congress or subcommittee of any such joint committee;
        (k) To the Comptroller General, or any of his or her authorized 
    representatives, in the course of the performance of the duties of the 
    General Accounting Office;
        (l) Pursuant to the order of a court of competent jurisdiction; or
        (m) To a consumer reporting agency in accordance with section 
    3711(f) of title 31.
    
    
    Sec. 102.23  Special rules about personnel and equal employment 
    opportunity files.
    
        (a) All SBA files which the Office of Personnel Management 
    determines are personnel files will be governed by the provisions of 
    parts 293 and 297 of Title 5 of the Code of Federal Regulations.
        (b) All Equal Employment Opportunity complaint files will be 
    governed by the provisions of part 1611 of Title 29 of the Code of 
    Federal Regulations.
    
    
    Sec. 102.24  What is a record?
    
        A record is information which SBA maintains on an individual and 
    which includes either his name or some other symbol (such as a 
    fingerprint, a social security number, or a photograph) by which he or 
    she can be identified.
    
    
    Sec. 102.25  What is a system of records?
    
        A system of records is one or more records which SBA routinely 
    keeps for official purposes, and from which SBA can retrieve records by 
    using a name or personal identifier.
    
    
    Sec. 102.26  What does this subpart mean by ``person to whom a record 
    pertains'' or ``you''?
    
        When this subpart refers to the ``person to whom a record 
    pertains'' or uses the pronoun ``you'', it refers to a United States 
    citizen or a lawfully admitted alien. It does not refer to a 
    corporation, partnership, or sole proprietorship.
    
    
    Sec. 102.27  What records are partially exempt from the provisions of 
    the Privacy Act?
    
        (a) The following systems of records are exempt from certain 
    provisions of the Privacy Act: Audit Reports (system of records #SBA 
    015), Litigation and Claims Files (#SBA 070), Personnel Security Files 
    (#SBA 100), Security and Investigations Files (#SBA 120), Office of 
    Inspector General Referrals (#SBA 125), Investigations Division 
    Management Information System (#SBA 130), and Standards of Conduct 
    Files (#SBA 140).
        (b) The provisions of the Privacy Act from which these systems of 
    records are exempt are subsections (c)(3)(Accounting of Certain 
    Disclosures), (d)(Access to Records), (e)(1), 4G, H, and I (Agency 
    Requirements), and (f)(Agency Rules) of the Privacy Act.
        (c) The systems of records described in paragraph (a) are exempt 
    from the provisions of the Privacy Act described in paragraph (b) in 
    order to:
        (1) Prevent the subject of investigations from frustrating the 
    investigatory process;
        (2) Protect investigatory material compiled for law enforcement 
    purposes;
        (3) Fulfill commitments made to protect the confidentiality of 
    sources and to maintain access to necessary sources of information; or
        (4) Prevent interference with law enforcement proceedings.
        (d) In addition to the foregoing exemptions, the systems of records 
    described in paragraph (a) of this section which are numbered as 
    numbers SBA 015, 100, 120, 125 and 130 are fully exempt from the 
    Privacy Act to the extent that they contain:
        (1) Information compiled for the purpose of identifying individual 
    criminal offenders and alleged offenders and consisting only of 
    identifying data and notations of arrests, confinement, release, and 
    parole and probation status;
        (2) Information compiled for the purpose of criminal investigation, 
    including reports of informants and investigators, and associated with 
    an identifiable individual; or
        (3) Reports associated with an identifiable individual compiled at 
    any stage of the process of enforcement of 
    
    [[Page 57978]]
    the criminal laws from arrest or indictment through release from 
    supervision.
        (e) The systems of records described in paragraph (d) are fully 
    exempt from the Privacy Act to the extent described in that paragraph 
    because they are records maintained by the Investigations Division of 
    the Inspector General, which is a component of SBA which performs as 
    its principal function activities pertaining to the enforcement of 
    criminal laws within the meaning of 5 U.S.C. 552a(j)(2). They are 
    exempt in order to:
        (1) Prevent the subjects of OIG investigations from using the 
    Privacy Act to frustrate the investigative process;
        (2) Protect the identity of Federal employees who furnish a 
    complaint or information to the OIG, consistent with section 7(b) of 
    the Inspector General Act of 1978, 5 U.S.C. App. I;
        (3) Protect the confidentiality of other sources of information;
        (4) Avoid endangering confidential sources and law enforcement 
    personnel;
        (5) Prevent interference with law enforcement proceedings;
        (6) Assure access to sources of confidential information, including 
    that contained in Federal, State, and local criminal law enforcement 
    information systems;
        (7) Prevent the disclosure of investigative techniques; or
        (8) Prevent the disclosure of classified information.
    
    
    Sec. 102.28  Information compiled for civil action.
    
        Nothing in the regulations in the subpart allows an individual 
    access to any information compiled by the Agency in reasonable 
    anticipation of a civil action or proceeding. In the event that there 
    should be a question as to whether information should be disclosed 
    pursuant to this section, the Systems Manager for the System of Records 
    involved will obtain an opinion from Agency counsel, and will also 
    consult with the Privacy Act Officer.
    
    
    Sec. 102.29  Who administers SBA's responsibilities under the Privacy 
    Act?
    
        The Privacy Act Officer has overall responsibility for 
    administering the Privacy Act for SBA, and the Systems Manager is 
    responsible for administering the Privacy Act as to systems of records 
    within an SBA Office.
    
    
    Sec. 102.30  How can I write to the Privacy Act Officer?
    
        You can write to the Privacy Act Officer at 409 Third Street S.W., 
    Suite 5900, Washington, D.C. 20416.
    
    
    Sec. 102.31  Who appoints Systems Managers?
    
        The Senior official in each field office and each Headquarters 
    program area designates himself or herself or appoints another as the 
    Systems Manager for that office.
    
    
    Sec. 102.32  What do Systems Managers do?
    
        Systems Managers have the following responsibilities, among others, 
    for the offices for which they are appointed:
        (a) Acting as the initial contact person to individuals seeking 
    access or amendment of their records.
        (b) Responding to requests for information.
        (c) Discussing the availability of records with individuals.
        (d) Amending records in cases where amended information is not 
    controversial and does not involve policy decision making.
        (e) Informing individuals of any reproduction fees to be charged.
        (f) Assuring that their systems of records contains no record 
    describing how any individual exercises rights guaranteed by the First 
    Amendment unless expressly authorized by statute or by the individual 
    about whom the record is maintained, or unless pertinent to and within 
    the scope of an authorized law enforcement activity. First Amendment 
    rights include, but are not limited to, freedom to follow religious and 
    political beliefs, freedom of speech and of the press, and freedom of 
    assembly and the right to petition government.
    
    
    Sec. 102.33  How can I write to a Systems Manager?
    
        You can write to a Systems Manager by writing to the SBA Office 
    which maintains the record you are seeking. If you do not know which 
    office that is, or you do not know the address of that office, you can 
    write to the Privacy Act Officer at 409 3rd Street S.W., Suite 5900, 
    Washington, D.C. 20416, who will forward your request to the proper 
    Systems Manager.
    
    
    Sec. 102.34  How can I see records kept on me?
    
        (a) You may look at any information pertaining to yourself if it is 
    contained in any SBA system of records, unless some law or regulation 
    prohibits it.
        (b) In order to see this information, you must ask for it in 
    writing and the writing must identify what records you want. The 
    writing should be addressed to the Systems Manager overseeing the 
    system of records.
        (c) The Systems Manager (or, when appropriate, the Privacy Act 
    Officer) may ask for more specific information about the system of 
    records in which the document you are seeking is kept, and may ask you 
    for identification. The Systems Manager may ask you for your social 
    security number but you are not obliged to present it and your request 
    will not be denied simply because you do not provide it. The Systems 
    Manager may, however, deny your request if he or she cannot determine 
    that you are the person about whom the information pertains.
    
    
    Sec. 102.35  How long will it take SBA to respond to my request?
    
        The Systems Manager will respond within ten working days.
    
    
    Sec. 102.36  How will SBA respond to my request?
    
        The Systems Manager will inform you that:
        (a) Your request is denied, in which case he or she will set forth 
    the reasons for denial and your rights to appeal; or
        (b) Your request is granted and you may view your record, in which 
    case he or she will set forth the time and date for you to review your 
    record in the presence of an SBA employee; or
        (c) Your request is granted and, unless you object, SBA will mail 
    you a copy of your record. SBA will mail you your record only if it 
    determines that there are no other reasonable means for you to obtain 
    access to your record.
    
    
    Sec. 102.37  How may I appeal a decision to deny me access to my 
    records?
    
        Your appeal should be in writing and should set forth any 
    information you think would show that you should have access to your 
    records.
    
    
    Sec. 102.38  To whom should my appeal be addressed?
    
        (a) Denial of a personnel file. Address an appeal of a denial of a 
    request for a personnel file to the Office of Personnel Management, 
    1900 E Street N.W., Washington, D.C. 20006.
        (b) Denial of an Equal Employment Opportunity Complaint File. 
    Address an appeal of a denial of an Equal Employment Opportunity 
    Complaint File to the Equal Employment Opportunity Commission, 1801 L 
    Street N.W., Washington, D.C. 20036.
        (c) All other appeals. You may appeal to the Privacy Act Officer a 
    decision to deny you access to any other record. See Sec. 102.30, 
    above.
    
    
    Sec. 102.39  When must I appeal to the Privacy Act Officer?
    
        Your appeal must reach the Privacy Act Officer on or before 30 
    calendar days after the date the denial was issued. If your appeal is 
    based on the failure of the Systems Manager to 
    
    [[Page 57979]]
    answer your request, your appeal must reach the Privacy Act Officer on 
    or before 90 calendar days after the date by which the Systems Manager 
    should have responded under section 102.35.
    
    
    Sec. 102.40  When will SBA respond to my appeal?
    
        The Privacy Act Officer will respond to you within 30 working days 
    of the date when your appeal was received.
    
    
    Sec. 102.41  How will SBA respond to my appeal?
    
        The Privacy Act Officer will inform you that:
        (a) Your request is denied, in which case the reasons for denial 
    will be set forth along with your rights to judicial review of SBA's 
    decision; or
        (b) Your request is granted and you may view your record, in which 
    case the time and date for you to review your records in the presence 
    of an SBA employee will be set forth; or
        (c) Your request is granted and, unless you object, SBA will mail 
    you a copy of your record. SBA will mail you your record only if it 
    determines that there are no other reasonable means for you to obtain 
    access to your record.
    
    
    Sec. 102.42  How can I get SBA to amend a record kept on me?
    
        You can petition to have records kept on you amended by writing to 
    the Systems Manager who oversees the system of records in which the 
    record you wish amended is kept. If you are unable to determine who 
    that Systems Manager is, you may send your petition to the Privacy Act 
    Officer, who will forward it to the right Systems Manager. See 
    Sec. 102.30.
    
    
    Sec. 102.43  What should my petition say?
    
        Your petition should include the following:
        (a) In what system of records the record you want amended is kept.
        (b) What record you want amended.
        (c) What specific information in that record you want amended.
        (d) Why you want the record amended.
        (e) Any information you have, including copies of evidence, which 
    you think will persuade the Systems Manager to amend the record.
        (f) What the record should say.
    
    
    Sec. 102.44  For what reasons will SBA amend my record?
    
        SBA will maintain only accurate, complete, and up-to-date records 
    which are relevant to accomplish some purpose of the Agency required by 
    law, regulation, or Executive Order of the President. There are four 
    grounds for amending a record. They are:
        (a) The record is not accurate.
        (b) The record is not relevant to any legitimate SBA concern.
        (c) The record is out-of-date. For example, there may have been 
    events since the date of the record which have affected some of the 
    information contained in the record.
        (d) The record is incomplete. There may be relevant information 
    about the material contained in the record which was not included in 
    the record.
    
    
    Sec. 102.45  Will SBA ask me for more information after I make my 
    request?
    
        The Systems Manager (or, when appropriate, the Privacy Act Officer) 
    may ask for more specific information about the system of records in 
    which the document you are seeking is kept, and may ask you for 
    identification. The Systems Manager may ask you for your social 
    security number, but you are not obliged to present it and your request 
    will not be denied simply because you do not provide it. The Systems 
    Manager may, however, deny your request if he or she cannot determine 
    that you are the person about whom the information pertains.
    
    
    Sec. 102.46  When will SBA respond to my request?
    
        The Systems Manager will acknowledge receipt of your request within 
    10 working days and issue a written response within 30 working days.
    
    
    Sec. 102.47  How will SBA respond to my request?
    
        The Systems Manager will:
        (a) Make the amendment you request, in which case he or she will 
    send all individuals who had previously received a copy of that record 
    a copy of the amended record; or
        (b) Amend the record, but not in complete accordance with your 
    request, in which case he or she will send all individuals who had 
    previously received a copy of that record a copy of the amended record 
    and will, in addition, tell you why your request was not granted in 
    full and tell you of your appeal rights; or
        (c) Decline to amend the record, in which case he or she will tell 
    you why your request was not granted and tell you of your appeal 
    rights.
    
    
    Sec. 102.48  How do I appeal a refusal to amend a record kept on me?
    
        Your appeal should be in writing and include the following:
        (a) All of the information contained in your original request to 
    amend the record.
        (b) The response of the Systems Manager, if any, including the 
    reasons for denying your request, if any.
        (c) Any information you wish to submit in response to the Systems 
    Manager's findings.
    
    
    Sec. 102.49  To whom should I address my appeal?
    
        (a) Personnel file. Address your appeal to the Office of Personnel 
    Management, 1900 E Street NW., Washington, DC 20006.
        (b) Equal Employment Opportunity Complaint File. Address your 
    appeal to the Equal Employment Opportunity Commission, 1801 L Street 
    NW., Washington, DC 20036.
        (c) All other appeals. Address your appeal to the Privacy Act 
    Officer. See Sec. 102.30.
    
    
    Sec. 102.50  By when must I submit my appeal?
    
        Your appeal must be received by the Privacy Act Officer within 30 
    calendar days of the date upon which the Systems Manager declined to 
    amend your records, or within 90 calendar days of the date upon which 
    the Systems Manager should have responded to your request under 
    Sec. 102.46 if the Systems Manager did not so respond.
    
    
    Sec. 102.51  By what standards will the Privacy Officer review my 
    appeal?
    
        The Privacy Act Officer will decide your appeal using the criteria 
    of accuracy, relevance, timeliness, and completeness described in 
    Sec. 102.44. The Privacy Act Officer will review all relevant 
    information and may seek the views of other SBA personnel. The Privacy 
    Act Officer may review information not available to or not used by the 
    Systems Manager.
    
    
    Sec. 102.52  When will SBA respond to my appeal?
    
        The Privacy Act Officer will respond to your appeal within 30 
    working days of the date upon which it is received, unless the 
    Administrator determines that unusual circumstances exist, in which 
    case the Privacy Act Officer will notify you of the presence of these 
    unusual circumstances within 30 working days of the date upon which he 
    or she received your appeal, and will respond to your appeal within 60 
    working days of the date of receipt.
    
    
    Sec. 102.53  How will SBA respond to my appeal?
    
        The Privacy Act Officer will:
        (a) Make the amendment you request, in which case he or she will 
    send all individuals who had previously received a copy of that record 
    a copy of the amended record; or 
    
    [[Page 57980]]
    
        (b) Amend the record, but not in complete accordance with your 
    request, in which case he or she will
        (1) Send all individuals who had previously received a copy of that 
    record a copy of the amended record, and
        (2) Tell you why your request was not granted in full and tell you 
    of your rights to judicial review, and
        (3) Mark the areas of dispute, include your statement of 
    disagreement in the file, and, if appropriate, include a concise 
    statement of why the Agency refused to amend the record in accordance 
    with your request, and send this material to all individuals who had 
    previously received a copy of that record; or
        (c) Decline to amend the record in any respect, in which case he or 
    she will
        (1) Tell you why your request was not granted and tell you of your 
    rights to judicial review, and
        (2) Mark the areas of dispute, include your statement of 
    disagreement in the file, and, if appropriate, include a concise 
    statement of why the Agency refused to amend the record in accordance 
    with your request, and send this material to all individuals who had 
    previously received a copy of that record.
    
    
    Sec. 102.54  How can I obtain judicial review about an SBA Privacy Act 
    decision?
    
        You may bring a civil action against SBA in a district court of the 
    United States whenever the SBA:
        (a) Makes a final determination not to provide you with access to 
    or to amend your record in accordance with your request;
        (b) Fails to maintain your records with such accuracy, relevance, 
    timeliness and completeness as is necessary to assure fairness in any 
    determination relating to the qualifications, character, rights, or 
    opportunities of, or benefits to you that may be made on the basis of 
    such record, and consequently a determination is made which harms you, 
    or
        (c) Fails to comply with any other provisions of the Privacy Act (5 
    U.S.C. 552a) or the implementing regulations in this subpart, in such a 
    way as to cause harm to you.
    
    
    Sec. 102.55  What must SBA tell the individuals from whom it collects 
    information?
    
        When SBA collects information from an individual, it must, either 
    on the form which collects the information or on a separate form which 
    the individual may keep, state:
        (a) Whether disclosure of the information is voluntary or 
    mandatory;
        (b) By what authority SBA is collecting the information;
        (c) For what principal purpose or purposes SBA is collecting the 
    information;
        (d) What routine uses might be made of that information; and
        (e) What will happen if the information isn't supplied.
    
    
    Sec. 102.56  Will SBA sell my name or address?
    
        SBA will not sell your name or address to anyone. Someone might 
    acquire it, though, under the Freedom of Information Act (5 U.S.C. 
    552).
    
    
    Sec. 102.57  Do I have to give SBA my Social Security Number?
    
        (a) No. You need not give SBA your Social Security Number, even if 
    SBA asks for it.
        (b) If SBA asks you for your Social Security Number, it must also 
    tell you under what authority it is seeking to know your Social 
    Security Number, and for what purpose.
        (c) SBA cannot withhold a benefit solely because you refuse to tell 
    it your Social Security Number.
    
    
    Sec. 102.58  When will SBA show personnel records to a representative?
    
        (a) If you go to where the records are kept, SBA will permit one 
    person of your choosing to inspect the records with you.
        (b) If you want your representative to inspect the records without 
    you, you must give SBA a written authorization.
        (c) SBA will mail a copy of the record to your representative if 
    you direct SBA to do so in writing.
        (d) You may inspect the records of a minor if you present evidence 
    that you are the custodial parent (including joint custodial parent) or 
    legal guardian of that minor. An affidavit or declaration, signed by 
    you under penalty of perjury, is normally sufficient evidence unless 
    SBA has information to the contrary.
        (e) You may inspect the records of an adult incompetent if you 
    present evidence that you are the legal guardian of that person. A 
    guardianship order is sufficient evidence of your guardianship. Other 
    evidence may be considered.
    
    
    Sec. 102.59  What fees will SBA charge me for my records?
    
        SBA will charge you only for photocopying at the rate of ten cents 
    per page. SBA will not charge you for finding or reviewing your 
    records. Fees less than $25 will be waived.
    
    
    Sec. 102.60  May I be informed of disclosures made of my records?
    
        SBA will tell you what disclosures it made of your records if you 
    ask us, except that SBA will not tell you about disclosures it made to 
    another federal agency or government entity for law enforcement 
    purposes.
    
    
    Sec. 102.61  Matching Program procedures.
    
        (a) SBA will comply with the Computer Matching and Privacy 
    Protection Act of 1988. (Public Law 100-503, as amended). This Act 
    establishes procedures federal agencies must use if they want to match 
    their computer lists.
        (b) If SBA adopts any procedures to supplement its compliance with 
    the Computer Matching and Privacy Protection Act of 1988 which are not 
    mandated in that Act, SBA will publish those procedures in Standard 
    Operating Procedure (SOP) 40 04. You can get a copy of SOP 40 04 at any 
    SBA Office.
        (c) If SBA enters into an agreement with any Federal agency, 
    contractor of any Federal Agency, State or Local Government, or agency 
    of any State or Local Government to disclose records for purposes of a 
    computer matching program, SBA will make a copy of that agreement 
    available to the general public. You can get a copy of all such 
    agreements by writing to the Privacy Act Officer.
    
    PART 137--[REMOVED]
    
        2. Part 137 is removed.
    
        Dated: November 13, 1995.
    Philip Lader,
    Administrator.
    [FR Doc. 95-28446 Filed 11-22-95; 8:45 am]
    BILLING CODE 8025-01-P
    
    

Document Information

Published:
11/24/1995
Department:
Small Business Administration
Entry Type:
Proposed Rule
Action:
Proposed rule.
Document Number:
95-28446
Dates:
Comments must be submitted on or before December 26, 1995.
Pages:
57970-57980 (11 pages)
PDF File:
95-28446.pdf
CFR: (243)
13 CFR 102.3(a)
13 CFR 102.5(a)
13 CFR 102.4(a)
13 CFR 102.7(a)(1)
13 CFR 102.7(a)(2)
More ...