E8-21104. Privacy Act of 1974; System of Records

AGENCY:

Office of the Secretary, DoD.

ACTION:

Notice to amend a system of records notice.

SUMMARY:

The Office of the Secretary of Defense is amending a system of records notice in its existing inventory of record systems subject to the Privacy Act of 1974, (5 U.S.C. 552a), as amended.

DATES:

This proposed action will be effective without further notice on October 14, 2008 unless comments are received which result in a contrary determination.

ADDRESSES:

Send comments to the Privacy Act Officer, Office of Freedom of Information, Washington Headquarters Services, 1155 Defense Pentagon, Washington, DC 20301-1155.

FOR FURTHER INFORMATION CONTACT:

Mrs. Cindy Allard at [phone].

SUPPLEMENTARY INFORMATION:

The Office of the Secretary of Defense systems of records notices subject to the Privacy Act of 1974, (5 U.S.C. 552a), as amended, have been published in the Federal Register and are available from the address above.

The specific changes to the record systems being amended are set forth below followed by the notice, as amended, published in its entirety. The proposed amendments are not within the purview of subsection (r) of the Privacy Act of 1974, (5 U.S.C. 552a), as amended, which requires the submission of a new or altered system report.

Dated: September 3, 2008.

Patricia L. Toppings,

OSD Federal Register Liaison Officer, Department of Defense.

DMDC 10

SYSTEM NAME:

Defense Biometric Identification System (DBIDS) (February 19, 2008, 73 FR 9100).

CHANGE:

* * * * *

RETENTION AND DISPOSAL:

Delete entry and replace with “Discontinue records on deactivation or confiscation of card. Delete data when 3-5 years old or when no longer needed for security purposes. Destroy by shredding or incineration as appropriate.”

* * * * *

DMDC 10

SYSTEM NAME:

Defense Biometric Identification System (DBIDS).

SYSTEM LOCATION:

Defense Manpower Data Center, 400 Gigling Road, Seaside, CA 93955-6771. For a list of backup locations, contact the system manager.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

Active duty, Reserve, and Guard personnel from the Armed Forces and their family members; retired Armed Forces personnel and their families; DoD and non-DoD employees and dependents, U.S. residents abroad, foreign nationals and corporate employees and dependents who have access to U.S. installations in the continental U.S. and overseas.

CATEGORIES OF RECORDS IN THE SYSTEM:

The system includes personal data to include name, grade, Social Security Number, status, date and place of birth, weight, height, eye color, hair color, gender, passport number, country of citizenship, geographic and electronic home and work addresses and telephone numbers, marital status, fingerprints, photographs, iris scans, hand geometry template and identification card issue and expiration dates. The system also includes vehicle information such as manufacturer, model year, color and vehicle type, vehicle identification number (VIN), license plate type and number, decal number, current registration, automobile insurance data, and driver's license data. The system also contains data on government-issued and personal weapons such as type, serial number; manufacturer, caliber, firearm registration date, and storage location data to include unit, room, building, and phone number.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

5 U.S.C. 301 Departmental regulations; 10 U.S.C. 113, Secretary of Defense, Note at Pub. L. 106-65; 10 U.S.C. 136, Under Secretary of Defense for Personnel and Readiness; 18 U.S.C. 1029, Fraud and related activity in connection with access devices; 18 U.S.C. 1030, Fraud and related activity in connection with computers; 40 U.S.C. Chapter 25, Information technology management; 50 U.S.C. Chapter 23, Internal Security; Pub. L. 106-398, Government Information Security Act; Pub. L. 100-235, Computer Security Act of 1987; Pub. L. 99-474, Computer Fraud and Abuse Act; E.O. 12958, Classified National Security Information as amended by E.O. 13142 and 13292; E.O. 10450, Security Requirements for Government Employees; and E.O. 9397 (SSN).

PURPOSE(S):

To support DoD physical security and access control programs, the information assurance program, used for identity verification purposes, to record personal property registered with the Department, and for producing installation management reports.

Routine Uses of Records Maintained in the System, Including Categories of Users and the Purpose of Such Uses:

In addition to those disclosures generally permitted under 5 U.S.C. 552a(b) of the Privacy Act, these records or information contained therein may specifically be disclosed outside the DoD as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows:

The DoD ‘Blanket Routine Uses’ set forth at the beginning of the OSD compilation of systems of records notices apply to this system.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Paper records in file folders and electronic storage media.

RETRIEVABILITY:

Retrieved primarily by name, Social Security Number (SSN), vehicle identifiers, or weapon identification data. However, data may also be retrieved by other data elements such as passport number, photograph, fingerprint data, and similar elements in the database.

SAFEGUARDS:

Computerized records are maintained in a controlled area accessible only to authorized personnel. Entry is restricted by the use of locks, guards, and administrative procedures. Access to personal information is limited to those who require the records in the performance of their official duties, and to the individuals who are the subjects of the record or their authorized representatives. Access to personal information is further restricted by the use of unique logon and passwords, which are changed periodically.

RETENTION AND DISPOSAL:

Discontinue records on deactivation or confiscation of card. Delete data when 3-5 years old or when no longer needed for security purposes. Destroyed by shredding or incineration as appropriate.

SYSTEM MANAGER(S) AND ADDRESS:

Director, Defense Manpower Data Center, 1600 Wilson Boulevard, Suite 400, Arlington VA 22209-2593,

Deputy Director, Defense Manpower Data Center, DoD Center Monterey Bay, 400 Gigling Road, Seaside, CA 93955-6771.

NOTIFICATION PROCEDURE:

Individuals seeking to determine whether information about themselves is contained in this system should address written inquiries to the Privacy Act Officer, Office of Freedom of Information, Washington Headquarters Services, 1155 Defense Pentagon, Washington, DC 20301-1155.

Written requests should contain the full name, Social Security Number (SSN), date of birth, and current address and telephone number of the individual.

RECORD ACCESS PROCEDURES:

Individuals seeking access to information about themselves contained in this system should address written inquiries to the Privacy Act Officer, Office of Freedom of Information, Washington Headquarters Services, 1155 Defense Pentagon, Washington, DC 20301-1155.

Written requests should contain the full name, Social Security Number (SSN), date of birth, and current address and telephone number of the individual.

CONTESTING RECORDS PROCEDURES:

The OSD rules for accessing records, for contesting contents and appealing initial agency determinations are published in OSD Administrative Instruction 81; 32 CFR part 311; or may be obtained from the Privacy Act Officer, Office of Freedom of Information, Washington Headquarters Services, 1155 Defense Pentagon, Washington, DC 20301-1155.

RECORD SOURCE CATEGORIES:

Data is collected from existing DoD databases, the Military Services, DoD Components, and from the individual.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.