E9-23487. Privacy Act of 1974; Privacy Act System of Records

AGENCY:

National Aeronautics and Space Administration (NASA).

ACTION:

Notice of proposed revisions to an existing Privacy Act system of records.

SUMMARY:

Pursuant to the provisions of the Privacy Act of 1974 (5 U.S.C. 552a), the National Aeronautics and Space Administration is issuing public notice of its proposal to modify its previously noticed system of records: This notice publishes updates of those systems of records as set forth below under the caption SUPPLEMENTARY INFORMATION.

DATES:

Submit comments within 30 calendar days from the date of this publication.

ADDRESSES:

Patti F. Stockman, Privacy Act Officer, Office of the Chief Information Officer, National Aeronautics and Space Administration Headquarters, Washington, DC 20546-0001, [phone], [e-mail].

FOR FURTHER INFORMATION CONTACT:

NASA Privacy Act Officer, Patti F. Stockman, [phone], [e-mail].

SUPPLEMENTARY INFORMATION:

Modifications of the NASA systems of records include: Clarification of categories of individuals on whom records are maintained, how the records are retrieved, the safeguards for protecting the records, and records source categories; update of routine uses to reflect new legislation; and update of system and subsystem managers' titles.

Changes for specific NASA systems of records are set forth below:

Aircraft Crewmembers' Qualifications and Performance Records/NASA 10ACMQ: A separate records retention schedule has been added for historically significant records on crewmembers who are astronauts.

Biographical Records for Public Affairs/NASA 10BRPA: Updated to change the title of the system manager.

National Aeronautics and Space Administration Foreign National Management System/NASA 10FNMS: Updated to clarify categories of individuals covered by the system, and to reflect new location and office name change of the system manager.

G overnment Motor Vehicle Operations Permit Records/NASA 10GMVP: Updated to change system location.

Inspector General Investigations Case Files/NASA 10IGIC: Updated routine uses to reflect changes due to enactment of two statues—the Inspectors General (IG) Reform Act of 2008 that established the Council of the Inspectors General on Integrity and Efficiency, replacing the President's Council on Integrity and Efficiency; and the American Recovery and Reinvestment Act that created an oversight board to coordinate and conduct oversight of spending of recovery act funds and to which IGs are to make reports.

Security Records System/NASA 10SECR: Updated to reflect an office name change for the system manager.

Exchange Records on Individuals/NASA 10XROI: Updated to more adequately reflect descriptions of individuals of records and categories of records covered by the system, as well to update titles of subsystem managers.

Integrated Financial Management (IFM) Program—Core Financial System/NASA 10IMF1: Retention and Disposal description is updated to change the name of the IT system in which the records are stored. Record Source Categories are updated to also reflect source system changes. System Manager updated to reflect new manager.

NASA Systems of Records, Appendix A: Updated to reflect a new mailing address for the NASA Office of Inspector General post in New Jersey.

Submitted by:

Bobby L. German,

NASA Chief Information Officer (Acting).

NASA 10ACMQ

SYSTEM NAME:

Aircraft Crewmembers' Qualifications and Performance Records.

SECURTIY CLASSIFICATION:

None.

SYSTEM LOCATION:

Locations 1 through 11 inclusive as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on Crewmembers of NASA aircraft.

CATEGORIES OF RECORDS IN THE SYSTEM:

System contains: (1) Records of experience, and currency, (e.g., flight hours day, night, and instrument), types of approaches and landings, crew position, type of aircraft, flight check ratings and related examination results, and training performed; and (2) flight itineraries and passenger manifests.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

42 U.S.C. 2473 and 44 U.S.C. 3101.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The following are routine uses: (1) In cases of accident investigations, including mishap and collateral investigations, access to this system of records may be granted to Federal, State, or local agencies or to foreign governments; (2) to Federal, State, or local agencies, companies, or governments requesting qualifications of crewmembers prior to authorization to participate in their flight programs, or to Federal, State, or local agencies, companies, or governments whose crewmembers may participate in NASA's flight programs; (3) public or press releases either by prior approval of the individual, or in the case of public release of information from mishap or collateral investigation reports, pursuant to NASA regulations at 14 CFR part 1213; and (4) NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained as hard-copy documents and on electronic media.

RETRIEVABILITY:

Records are retrieved from the system by aircrew identifier.

SAFEGUARDS:

Computerized records access is limited to only users with a business need for access and user accounts employ secure user authentication; non-electronic records are maintained in accordance with the requirements and procedures which appear at 14 CFR 1212.605, utilizing locked file cabinets and/or secured rooms.

RETENTION AND DISPOSAL:

Records for other than astronauts are maintained in Agency files and destroyed 5 years after crewmember separates from NASA in accordance with NASA Records Retention Schedules (NRRS), Schedule 8 Item 32. Records of crewmembers who are astronauts are permanent and will be transferred to the National Archives in accordance with NRRS, Schedule 8 Item 34.

SYSTEM MANAGER(S) AND ADDRESS:

Director, Aircraft Management Office, Location 1. Subsystem Managers: Deputy Chief, Flight Control and Cockpit Integration Branch, Location 2; Chief, Dryden Research Aircraft Operations Division, Location 3; Head, Aeronautical Programs Branch, Location 4; Chief, Aircraft Operations Division, Location 5; Chief, Aircraft Operations Office, Location 6; Chief, Flight Operations and Engineering Branch, Location 7; Chief, Aircraft Operations Office, Location 8; Chief, Aircraft Operations, Location 9; Chief, Contract Management, Location 10; Aircraft Management Officer, Location 11 (Locations are set forth in Appendix A).

NOTIFICATION PROCEDURE:

Information may be obtained from the cognizant system or subsystem manager listed above.

RECORD ACCESS PROCEDURES:

Requests from individuals should be addressed to the same address as stated in the Notification section above.

CONTESTING RECORD PROCEDURES:

The NASA regulations for requesting amendments to records and contesting record contents appear at 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

Individuals, training schools or instructors, medical units or doctors.

NASA 10BRPA

SYSTEM NAME:

Biographical Records for Public Affairs.

SECURTIY CLASSIFICATION:

None.

SYSTEM LOCATION:

Locations 1, 3 through 9 inclusive, and Locations 11 and 18, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on principal and prominent management and staff officials, program and project managers, scientists, engineers, speakers, other selected employees involved in newsworthy activities, and other participants in Agency programs.

CATEGORIES OF RECORDS IN THE SYSTEM:

Current biographical information about the individuals with a recent photograph when available. Data items are those generally required by NASA or the news media in preparing news or feature stories about the individual and/or the individual's activity with NASA.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

42 U.S.C. 2473 and 44 U.S.C. 3101.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

The information contained in this system of records is compiled, updated, and maintained at NASA Centers for ready reference material and for immediate availability when required by the news media for news stories about the individual generally involving participation in a major NASA activity.

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The following are routine uses: These records are made available via the Internet to professional societies, civic clubs, industrial and other organizations, news media representatives, researchers, authors, Congress, other agencies and other members of the public.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained as hard-copy documents and on electronic media.

RETRIEVABILITY:

Records are retrieved from the system by individual's name.

SAFEGUARDS:

Because the records are a matter of public information, no safeguard requirements are necessary.

RETENTION AND DISPOSAL:

Records are maintained in Agency files and destroyed when there is no longer a potential for public interest in them in accordance with NASA Records Retention Schedules, Schedule 1, Item 40.

SYSTEM MANAGER(S) AND ADDRESS:

Director, News Services Division, Office of Public Affairs, Location 1. Subsystem Managers: Public Affairs Officer at Locations 3 through 9 and Location 11; Manager, Customer Satisfaction and Communication Office, Location 18; as set forth in Appendix A.

NOTIFICATION PROCEDURE:

An individual desiring to find out if a Biographical System of Records contains a record pertaining to him/her should call, write, or visit the Public Affairs Office at the appropriate NASA Center.

RECORD ACCESS PROCEDURES:

An individual may request access to his/her record by calling, writing, or visiting the Public Affairs Office at the appropriate NASA locations. Individuals may examine or obtain a copy of their biographical record at any time.

CONTESTING RECORD PROCEDURES:

The information in the record was provided voluntarily by the individual with the understanding that the information will be used for public release. The individual is at liberty at any time to revise, update, add, or delete information in his/her biographical record to his/her own satisfaction.

RECORD SOURCE CATEGORIES:

Information in the biography of an individual in the system of records is provided voluntarily by the individual generally with the aid of a form questionnaire.

NASA 10 FNMS

SYSTEM NAME:

National Aeronautics and Space Administration Foreign National Management System.

SECURTIY CLASSIFICATION:

None.

SYSTEM LOCATION:

The centralized data system is located at the Extranet Security Portals Group, 2720 Prosperity Avenue, Suite 30, Fairfax, VA 22031

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on all non-U.S. citizens, to include Lawful Permanent Residents seeking access to NASA facilities, resources, laboratories, contractor sites, Federally Funded Research and Development Centers or NASA sponsored events for unclassified purposes to include employees of NASA or NASA contractors; prospective NASA or NASA contractor employees; employees of other U.S. Government agencies or their contractors; foreign students at U.S. institutions; officials or other persons employed by foreign governments or other foreign institutions who may or may not be involved in cooperation with NASA under international agreements; foreign media representatives; and representatives or agents of foreign national governments seeking access to NASA facilities, to include high-level protocol visits; or international relations.

CATEGORIES OF RECORDS IN THE SYSTEM:

Records in this system include information about the individuals seeking access to NASA resources. Information about individual may include, but is not limited to: Name, home address, place of birth and citizenship, U.S. visitor/travel document numbers, employment information, Tax Identification Numbers (Social Security number), and reason and length of proposed NASA access.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

Section 304(a) of the National Aeronautics and Space Act, codified at 42 USC § 2455; Federal Property Management Regulation, 41 CFR Ch. 101; 14 CFR parts 1203 through 1203b; 14 CFR 1213; 15 CFR 744; 22 CFR 62; 22 CFR 120-130; 40 USC 1441, and 44 U.S.C. 3101, and Executive Order 9397.

PURPOSE(S):

Records are maintained and used by NASA to document, track, manage, analyze, and/or report on foreign visit and assignment access to NASA facilities including Headquarters, Field Offices, National Laboratories, Federally Funded Research and Development Centers, Contractor Sites, components facilities (NASA Management Office, Wallops Flight Facility, White Sands Test Facility, White Sands Complex, Independent Validation & Verification Facility, Michoud Assembly Center, Moffett Federal Airfield, Goldstone Deep Space Communications Complex, Goddard Institute for Space Studies, National Scientific Balloon Facility, Plum Brook Station).

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information.

1. A record from this system may be disclosed to authorized contractors who are responsible for NASA security and who require this information to perform their contractual obligations to NASA.

2. A record from this system may be disclosed to contractors, grantees, participants in cooperative agreements, collaborating researchers, or their employees, if required for the performance of their responsibilities with respect to national security, international visit and assignment, or foreign access.

3. A record from this system may be disclosed to a member of Congress submitting a request involving a constituent when the constituent has requested assistance from the member with respect to the subject matter of his or her own record. The member of Congress must provide a copy of the constituent's request for assistance.

4. A record from this system may be disclosed to foreign governments or international organizations if required by treaties, international conventions, or executive agreements.

5. A record from this system may be disclosed to members of a NASA Advisory Committee or Committees and interagency boards charged with responsibilities pertaining to international visits and assignments and/or national security when authorized by the individual or to the extent the committee(s) is so authorized and such disclosure is required by law.

6. A record from this system may be disclosed to Federal intelligence organizations, when required by applicable law.

7. A record from this system may be disclosed to Federal agencies for the purpose of determining preliminary visa eligibility when authorized by the individual or as required by law.

8. A record from this system may be disclosed to respond to White House inquiries when required by law.

9. A record from this system may be disclosed to a NASA contractor, subcontractor, grantee, or other Government organization involved in an investigation or administrative inquiry concerning a violation of a Federal or State statute or NASA regulation on the part of an officer or employee of the contractor, subcontractor, grantee, or other Government organization, when and to the extent the information is required by law.

10. A record from this system may be disclosed to an internal or external organization or element thereof, conducting audit activities of a NASA contractor or subcontractor to the extent required by law.

11. A record from this system may be disclosed to provide personal identifying data to Federal, State, local, or foreign law enforcement representatives seeking confirmation of identity of persons under investigation, to the extent necessary and required by law.

12. NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system will be stored in electronic format.

RETRIEVABILITY:

Records may be retrieved by name and other personal identifiers. Records are indexed by individual's name, file number, badge number, decal number, payroll number, passport or visa numbers, and/or Social Security Number.

SAFEGUARDS:

An approved security plan for this system has been established in accordance with OMB Circular A-130, Management of Federal Information Resources. Individuals will have access to the system only when and to the extent such access is legally authorized, each item of information is required for his or her job, and the access is in accordance with approved authentication methods. Only key authorized employees with appropriately configured system roles can access the system.

RETENTION AND DISPOSAL:

Records are stored in the Foreign National Management System and managed, retained and dispositioned in accordance with the guidelines defined in NASA Procedural Requirements (NPR) 1441.1D, NASA Records Retention Schedules, Schedule 1, item 35.

SYSTEM MANAGER(S) AND ADDRESS:

Director, Identity and Systems Management Division, Office of Protective Services, Location 1, as set forth in Appendix A.

NOTIFICATION PROCEDURES:

Individuals inquiring about their records should notify the System Manager at the address given above.

RECORDS ACCESS PROCEDURES:

Individuals who wish to gain access to their records should submit their request in writing to the System Manager at the address given above. Requests must contain the following identifying data concerning the requestor: First, middle, and last name; date and place of birth; Visa/Passport/Social Security Number; period and place of visit/assignment/employment with NASA.

CONTESTING RECORD PROCEDURES:

The NASA regulations governing access to records and the procedures for contesting the contents and appealing initial determinations are set forth in 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

Records, including official government documentation, are provided by individuals requesting access to NASA facilities and contractor sites, from existing databases containing this information at Federally Funded Research and Development Centers, and from other Federally funded sources located at NASA facilities.

NASA 10GMVP

SYSTEM NAME:

Government Motor Vehicle Operators Permit Records.

SECURTIY CLASSIFICATION:

None.

SYSTEM LOCATION:

Location 3 as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on NASA employees and contractor employees.

CATEGORIES OF RECORDS IN THE SYSTEM:

Name, home address, Social Security Number, physical description of individual, physical condition of individual, traffic record.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

42 U.S.C. 2473; 44 U.S.C. 3101; 41 CFR subpart 101-38.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORES OF USERS AND THE PURPOSES OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. NASA may disclose records from this system in accordance with NASA standard routine as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained as hard-copy documents and on electronic media.

RETRIEVABILITY:

Records are retrieved from the system by individual's name.

SAFEGUARDS:

Records are kept in locked cabinets with access limited to those whose official duties require access. Room is locked during nonduty hours.

RETENTION AND DISPOSAL:

Records will be maintained in Agency files and destroyed 3 years after permit expires or holder leaves NASA in accordance with NASA Records Retention Schedules, Schedule 6 Item 12.

SYSTEM MANAGER(S) AND ADDRESS:

Subsystem Managers: Transportation Officer, Location 3 and Chief, Transportation Branch, Location 6. Locations are as set forth in Appendix A.

NOTIFICATION PROCEDURE:

Information may be obtained from the cognizant system manager listed above.

RECORD ACCESS PROCEDURES:

Requests from individuals should be addressed to the same address as stated in the Notification section above.

CONTESTING RECORD PROCEDURES:

The NASA regulations for access to records and for contesting contents and appealing initial determinations by the individual concerned appear at 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

Individual NASA employees and individual contractor employees supply information on their own traffic records.

NASA 10IGIC

SYSTEM NAME:

Inspector General Investigations Case Files.

SECURTIY CLASSIFICATION:

Some of the material contained in the system has been classified in the interests of national security pursuant to Executive Order 11652.

SYSTEM LOCATION:

Locations 1 through 11, 14, 16 and 17 as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on current and former employees of NASA, contractors, and subcontractors, and others whose actions have affected NASA.

CATEGORIES OF RECORDS IN THE SYSTEM:

Case files pertaining to matters including, but not limited to, the following classifications of cases: (1) Fraud against the Government, (2) theft of Government property, (3) bribery, (4) lost or stolen lunar samples, (5) misuse of Government property, (6) conflict of interest, (7) waiver of claim for overpayment of pay, (8) leaks of Source Evaluation Board information; (9) improper personal conduct, (10) irregularities in awarding contracts; (11) computer crimes; (12) research misconduct; and (13) whistleblower protection.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

42 U.S.C. 2473; 44 U.S.C. 3101; 5 U.S.C. Appendix 3.

PURPOSE(S):

Information in this system of records is collected in the course of investigating alleged crimes and other violations of law or regulation that affect NASA. The information is used by prosecutors, Agency managers, law enforcement agencies, Congress, NASA contractors, and others to address the crimes and other misconduct discovered during investigations.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The following are routine uses: (1) Responding to the White House, the Office of Management and Budget, and other organizations in the Executive Office of the President regarding matters inquired of; (2) disclosure to a congressional office from the record of an individual in response to a written inquiry from the congressional office made at the request of that individual; (3) providing data to Federal intelligence elements; (4) providing data to any source from which information is requested in the course of an investigation, to the extent necessary to identify the individual, inform the source of the nature and purpose of the investigation, and to identify the type of information requested; (5) providing personal identifying data to Federal, State, local, or foreign law enforcement representative seeking confirmation of identity of persons under investigations; (6) disclosing, as necessary, to a contractor, subcontractor, or grantee firm or institution, to the extent that the disclosure is in NASA's interest and is relevant and necessary in order that the contractor, subcontractor, or grantee is able to take administrative or corrective action; (7) disclosing to any official (including members of the Council of the Inspectors General on Integrity and Efficiency and staff and authorized officials of the Department of Justice and Federal Bureau of Investigation) charged with the responsibility to conduct qualitative assessment reviews of internal safeguards and management procedures employed in OIG operations; (8) disclosing to members of the Council of the Inspectors General on Integrity and Efficiency for the preparation of reports to the President and Congress on the activities of the Inspectors General; (9) disclosing to the Recovery Accountability and Transparency Board for preparation of reports on oversight of American Recovery and Reinvestment Act funds; (10) disclosing to the public when: The matter under investigation has become public knowledge, or when the Inspector General determines that such disclosure is necessary to preserve confidence in the integrity of the OIG investigative process, or to demonstrate the accountability of NASA officers, or employees, or other individuals covered by this system, unless the Inspector General determines that disclosure of the specific information in the context of a particular case would constitute an unwarranted invasion of personal privacy; (11) disclosing to the news media and public when there exists a legitimate public interest (e.g., to provide information on events in the criminal process, such as indictments), or when necessary for protection from imminent threat to life or property; (12) NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained as hard-copy documents and on electronic media.

RETRIEVABILITY:

Information is retrieved from the system by name of the individual.

SAFEGUARDS:

Information is kept in locked cabinets and in secured vaults and computer rooms. Information stored on computers is on a restricted-access server and is protected by an official password and user identification. Access is limited to Inspector General personnel with an official need to know.

RETENTION AND DISPOSAL:

Records are maintained in Agency files and destroyed in accordance with NASA Procedural Requirements (NPR) 1441.1, NASA Records Retention Schedules, Schedule 9. Files containing information of an investigative nature but not related to a specific investigation are destroyed in accordance with NPR 1441.1. Significant case files are scheduled for disposition with the National Archives and Records Administration when closed. All other case files are destroyed 10 years after file is closed.

SYSTEM MANAGER(S) AND ADDRESS:

Assistant Inspector General for Investigations, Location 1. Subsystem Managers: Special and Resident Agents in Charge, Location 2, 4 through 11 inclusive, 16, and 17 as set forth in Appendix A.

NOTIFICATION PROCEDURE:

None. System is exempt (see below).

RECORD ACCESS PROCEDURES:

None. System is exempt (see below).

CONTESTING RECORD PROCEDURES:

None. System is exempt (see below).

RECORD SOURCE CATEGORIES:

Exempt.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

(1) The Inspector General Investigations Case Files system of records is exempt from any part of the Privacy Act (5 U.S.C. 552a), EXCEPT the following subsections: (b) relating to conditions of disclosure; (c)(1) and (2) relating to keeping and maintaining a disclosure accounting; (e)(4)(A)-(F) relating to publishing a system notice setting forth name, location, categories of individuals and records, routine uses, and policies regarding storage, retrievability, access controls, retention and disposal of the records; (e)(6), (7), (9), (10), and (11) relating to dissemination and maintenance of records; and (i) relating to criminal penalties. This exemption applies to those records and information contained in the system of records pertaining to the enforcement of criminal laws.

(2) To the extent that there may exist noncriminal investigative files within this system of records, the Inspector General Investigations Case Files system of records is exempt from the following subsections of the Privacy Act (5 U.S.C. 552a): (c)(3) relating to access to disclosure accounting; (d) relating to access to reports; (e)(1) relating to the type of information maintained in the records; (e)(4)(G), (H), and (I) relating to publishing the system notice information as to agency procedures for access and amendment and information as to the categories of sources of records; and (f) relating to developing agency rules for gaining access and making corrections.

The determination to exempt this system of records has been made by the Administrator of NASA in accordance with 5 U.S.C. 552a(j) and (k) and subpart 5 of the NASA regulations appearing in 14 CFR part 1212, for the reason that a component of the Office of Inspector General, NASA, performs as its principal function activities pertaining to the enforcement of criminal laws, within the meaning of 5 U.S.C. 552a(j)(2).

NASA 10SECR

SYSTEM NAME:

Security Records System.

SECURITY CLASSIFICATION:

None.

SYSTEM LOCATION:

Locations 1 through 9 and Locations 11, 12, and 14 as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on Civil Servant Employees, applicants, NASA committee members, NASA consultants, NASA experts, NASA Resident Research Associates, guest workers, contractor employees, detailees, visitors, correspondents (written and telephonic), Faculty Fellows, Intergovernmental Personnel Mobility Act (IPA) Employees, Grantees, Cooperative Employees, and Remote Users of NASA Non-Public Information Technology Resources.

CATEGORIES OF RECORDS IN THE SYSTEM:

Personnel Security Records, Personal Identity Records including NASA visitor files, Emergency Data Records, Criminal Matters, and Traffic Management. Specific records fields include, but are not limited to: Name, former names, date of birth, place of birth, social security number, home address, phone numbers, citizenship, traffic infraction, security violation, security incident, security violation discipline status and action taken.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

42 U.S.C. 2451, et seq., the National Aeronautics and Space Act of 1958, as amended; Espionage and Information Control Statutes, 18 U.S.C. 793-799; Sabotage Statutes, 18 U.S.C. 2151-2157; Conspiracy Statute, 18 U.S.C. 371; 18 U.S.C. 202-208, 3056; Internal Security Act of 1950; Atomic Energy Act of 1954, as amended; Executive Order 12958, as amended, Classified National Security Information; Executive Order 12968, as amended, Access to Classified Information; Executive Order 10865, Safeguarding Classified Information Within Industry; Executive Order 10450, Security Requirements for Government Employees; Pub. L. 81-733; Pub. L. 107-347, Federal Information Security Management Act 2002; 41 CFR Chapter 101; 14 CFR part 1203; and 44 U.S.C. 3101; Homeland Security Presidential Directive (HSPD) 12, Policy for a Common Identification Standard for Federal Employees and Contractors, August 27, 2004.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The records and information in these records may be disclosed:

1. To the Department of Justice (DOJ) when: (a) The agency or any component thereof; (b) any employee of the agency in his or her official capacity; (c) any employee of the agency in his or her individual capacity where agency or the DOJ has agreed to represent the employee; or (d) the United States Government, is a party to litigation or has an interest in such litigation, and by careful review, the agency determines that the records are both relevant and necessary to the litigation and the use of such records by DOJ is therefore deemed by the agency to be for a purpose compatible with the purpose for which the agency collected the records.

2. To a court or adjudicative body in a proceeding when: (a) The agency or any component thereof; (b) any employee of the agency in his or her official capacity; (c) any employee of the agency in his or her individual capacity where agency or the Department of Justice has agreed to represent the employee; or (d) the United States Government, is a party to litigation or has an interest in such litigation, and by careful review, the agency determines that the records are both relevant and necessary to the litigation and the use of such records is therefore deemed by the agency to be for a purpose that is compatible with the purpose for which the agency collected the records.

3. To an Agency in order to provide a basis for determining preliminary visa eligibility.

4. To a Member of Congress or to a Congressional staff member in response to an inquiry of the Congressional office made at the written request of the constituent about whom the record is maintained.

5. To a staff member of the Executive Office of the President in response to an inquiry from the White House.

6. To the National Archives and Records Administration or to the General Services Administration for records management inspections conducted under 44 U.S.C. §§ 2904 and 2906.

7. To agency contractors, grantees, or volunteers who have been engaged to assist the agency in the performance of a contract service, grant, cooperative agreement, or other activity related to this system of records and who need to have access to the records in order to perform their activity. Recipients shall be required to comply with the requirements of the Privacy Act of 1974, as amended, 5 U.S.C. § 552a.

8. To other Federal agencies and relevant contractor facilities to determine eligibility of individuals to access classified National Security information.

9. To any official investigative or judicial source from which information is requested in the course of an investigation, to the extent necessary to identify the individual, inform the source of the nature and purpose of the investigation, and to identify the type of information requested.

10. To the news media or the general public, factual information the disclosure of which would be in the public interest and which would not constitute an unwarranted invasion of personal privacy, consistent with Freedom of Information Act standards.

11. To a Federal, State, or local agency, or other appropriate entities or individuals, or through established liaison channels to selected foreign governments, in order to enable an intelligence agency to carry out its responsibilities under the National Security Act of 1947 as amended, the CIA Act of 1949 as amended, Executive Order 12333 or any successor order, applicable national security directives, or classified implementing procedures approved by the Attorney General and promulgated pursuant to such statutes, orders or directives.

12. In order to notify an employee's next-of-kin or contractor in the event of a mishap involving that employee or contractor.

13. To notify another Federal agency when, or verify whether, a PIV card is no longer valid.

14. To provide relevant information to an internal or external organization or element thereof conducting audit activities of a NASA contractor or subcontractor.

15. To a NASA contractor, subcontractor, grantee, or other Government organization information developed in an investigation or administrative inquiry concerning a violation of a Federal or state statute or regulation on the part of an officer or employee of the contractor, subcontractor, grantee, or other Government organization.

16. NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained on electronic media and hard-copy documents.

RETRIEVABILITY:

Records are retrieved from the system by individual's name, file number, badge number, decal number, payroll number, Agency-specific unique personal identification code, and/or Social Security Number.

SAFEGUARDS:

Access to system records is controlled by either Government personnel or selected personnel of NASA contractor guard/security force and contractor personnel. After presenting proper identification and requesting a file or record, a person with an official need to know and, if appropriate, a proper clearance may have access to a file or records only after it has been retrieved and approved for release by a NASA security representative. These records are secured in security storage equipment, and/or information technology systems employing security countermeasures.

RETENTION AND DISPOSAL:

The Personnel Security Records are maintained in Agency files and destroyed upon notification of the death or within 5 years after separation or transfer of employee or within 5 years after contract relationship expires, whichever is applicable in accordance with NASA Records Retention Schedules (NRRS), Schedule 1 Item 103.

The Personal Identity Records are maintained in Agency files and destroyed upon notification of the death or within 5 years after separation or transfer of employee or within 5 years after contract relationship expires, whichever is applicable in accordance with NRRS, Schedule 1 Item 103. Visitor files are maintained and destroyed in accordance with NRRS, Schedule 1 Item 114.

The Emergency Data Records are maintained in Agency files and destroyed when superseded or obsolete in accordance with NRRS 1, Item 100B.

The Criminal Matter Records are maintained in Agency files and destroyed in accordance with Items A and B of National Archives and Records Administration Disposition Authorization N1-255-07-2 after its approval by the Archivist of the United States.

The Traffic Management Records are maintained in Agency files and destroyed in accordance with Item C of National Archives and Records Administration Disposition Authorization N1-255-07-2 after its approval by the Archivist of the United States.

SYSTEM MANAGER(S) AND ADDRESS:

Director, Identity and Systems Management Division, Office of Protective Services, Location 1. Subsystem Managers: Chief, Protective Services Division, Location 2; Chief, Security Branch, Locations 4 and 5; Security Officer, Location 3, 8, and 11; Chief, Protective Services Office, Location 6; Head, Office of Security and Public Safety, Location 7; Chief, Security Division, Location 9; Chief, Administration Office, Location 12; Safety and Security Officer at Location 14. Locations are as set forth in Appendix A.

NOTIFICATION PROCEDURE:

Information may be obtained from the cognizant system or subsystem manager listed above. Requests must contain the following identifying data concerning the requestor: First, middle, and last name; date of birth; Social Security Number; period and place of employment with NASA, if applicable.

RECORD ACCESS PROCEDURES:

Personnel Security Records compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian employment, Federal contracts, or access to classified information have been exempted by the Administrator under 5 U.S.C. 552a(k)(5) from the access provisions of the Act.

Personal Identity Records: Requests from individuals should be addressed to the same address as stated in the Notification section above.

Emergency Data Records: Requests from individuals should be addressed to the same address as stated in the Notification section above.

Criminal Matter Records compiled for civil or criminal law enforcement purposes have been exempted by the Administrator under 5 U.S.C. 552a(k)(2) from the access provision of the Act.

Traffic Management Records: Requests from individuals should be addressed to the same address as stated in the Notification section above.

CONTESTING RECORD PROCEDURES:

For Personnel Security Records and Criminal Matters Records, see Record Access Procedures, above. For Personal Identity Records, Emergency Data Records, and Traffic Management Records, the NASA rules for access to records and for contesting contents and appealing initial determinations by the individual concerned appear at 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

Information is obtained from a variety of sources including the employee, contractor, or applicant via use of the Standard Form (SF) SF-85, SF-85P, or SF-86 and personal interviews; employers' and former employers' records; FBI criminal history records and other databases; financial institutions and credit reports; medical records and health care providers; educational institutions; interviews of witnesses such as neighbors, friends, coworkers, business associates, teachers, landlords, or family members; tax records; and other public records. Security violation information is obtained from a variety of sources, such as guard reports, security inspections, witnesses, supervisor's reports, audit reports.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

Personnel Security Records compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian employment, Federal contracts, or access to classified information, but only to the extent that the disclosure of such material would reveal the identity of a confidential source, are exempt from the following sections of the Privacy Act of 1974, 5 U.S.C. 552a: (c)(3) relating to access to the disclosure accounting; (d) relating to access to the records; (e)(1) relating to the type of information maintained in the records; (e)(4)(G), (H) and (I) relating to publishing in the annual system notice information as to agency procedures for access and correction and information as to the categories of sources of records; and (f) relating to developing agency rules for gaining access and making corrections. The determination to exempt the Personnel Security Records portion of the Security Records System has been made by the Administrator of NASA in accordance with 5 U.S.C. 552a(k)(5) and Subpart 5 of the NASA regulations appearing in 14 CFR part 1212.

Criminal Matter Records to the extent they constitute investigatory material compiled for law enforcement purposes are exempt from the following sections of the Privacy Act of 1974, 5 U.S.C. 552a: (c)(3) relating to access to the disclosure accounting; (d) relating to access to the records; (e)(1) relating to the type of information maintained in the records; (e)(4)(G), (H) and (I) relating to publishing in the annual system notice information as to agency procedures for access and correction and information as to the categories of sources of records; and (f) relating to developing agency rules for gaining access and making corrections. The determination to exempt the Criminal Matter Records portion of the Security Records System has been made by the Administrator of NASA in accordance with 5 U.S.C. 552a(k)(2) and subpart 5 of the NASA regulations appearing in 14 CFR part 1212.

Records subject to the provisions of 5 U.S.C. 552(b)(1) required by Executive Order to be kept secret in the interest of national defense or foreign policy are exempt from the following sections of the Privacy Act of 1974, 5 U.S.C. 552a: (c)(3) relating to access to the disclosure accounting; (d) relating to the access to the records; (e)(1) relating to the type of information maintained in the records; (e)(4)(G), (H) and (I) relating to publishing in the annual system notice information as to agency procedures for access and correction and information as to the categories of sources of records; and (f) relating to developing agency rules for gaining access and making corrections.

The determination to exempt this portion of the Security Records System has been made by the Administrator of NASA in accordance with 5 U.S.C. 552a(k)(1) and subpart 5 of the NASA regulations appearing in 14 CFR part 1212.

NASA 10XROI

SYSTEM NAME:

Exchange Records on Individuals.

SECURTIY CLASSIFICATION:

None.

SYSTEM LOCATION:

Locations 1-9, 11 and 18, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on present and former employees of, and applicants for employment with, NASA Exchanges, Recreational Associations, and Employees' Clubs at NASA Centers and members of or participants in NASA Exchange activities, clubs and/or recreational associations.

CATEGORIES OF RECORDS IN THE SYSTEM:

Exchange employees' personnel and payroll records, including injury claims, unemployment claims, biographical data, performance evaluations, annual and sick leave records, membership and participation records on Exchange-sponsored activities, clubs and/or recreational associations, and all other employee records.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

42 U.S.C. 2473 and 44 U.S.C. 3101.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSE OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The following are routine uses: (1) To Furnish a third party a verification of an employee's status upon written request of the employee; (2) to facilitate the verification of employee contributions for insurance data with carriers and collection agents; (3) to provide various Federal, State, and local taxing authorities itemized listing of withholdings for individual income taxes; (4) to respond to State employment compensation requests for wage and separation data on former employees; (5) to report previous job injuries to worker's compensation organizations; (6) for person to notify in an emergency; (7) to report unemployment records to appropriate State and local authorities; (8) when requested, provide other employers with work records; and (9) NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained as hard-copy documents and on electronic media.

RETRIEVABILITY:

Records are retrieved from the system by the individual's name.

SAFEGUARDS:

Records are protected in accordance with the requirements and procedures that appear in the NASA regulations at 14 CFR 1212.605, utilizing locked file cabinets and/or secured rooms.

RETENTION AND DISPOSAL:

Records are maintained in Agency files and destroyed when 5 years old in accordance with NASA Records Retention Schedules, Schedule 9 Item 6/D.

SYSTEM MANAGERS AND ADDRESSES:

Contractor Industrial Relations Officer, Location 1.

Subsystem Managers: Exchange Store Operations Manager, Location 1; Exchange Council Chair, Location 2; Exchange Operations Manager, Locations 3-5; Chairperson, Exchange Council, Locations 6 and 7; Treasurer, NASA Exchange, Location 8; Exchange Operations Manager, Location 9; President, NASA Exchange, Location 11; and NSSC Exchange Counsel, Location 18. Locations are as set forth in Appendix A.

NOTIFICATION PROCEDURE:

Individuals may obtain information from the cognizant Subsystem Managers listed above.

RECORD ACCESS PROCEDURES:

Requests from individuals should be directed to the same address as stated in the Notification section above.

CONTESTING RECORD PROCEDURES:

The NASA rules for access to records and for contesting contents and appealing initial determinations by the individual concerned appear in the NASA rules at 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

Individual on whom the record is maintained and the individual's supervisor.

NASA 10IEM1

SYSTEM NAME:

Integrated Enterprise Management Program (IEMP)—Core Financial System.

SECURTIY CLASSIFICATION:

This system is categorized in accordance with OMB Circular A-11 as a Special Management Attention Major Information System. A security plan for this system has been established in accordance with OMB Circular A-130, Management of Federal Information Resources.

SYSTEM LOCATION:

George C. Marshall Space Flight Center, National Aeronautics and Space Administration, Marshall Space Flight Center, AL 35812.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

Individuals covered by the NASA Core Financial (CF) System include former and current NASA employees and non-NASA individuals requiring any type of payment.

CATEGORIES OF RECORDS IN THE SYSTEM:

Records in this system may include information about the individuals including Social Security Number (Tax Identification Number), home address, telephone number, e-mail address, and bank account information.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

National Aeronautics and Space Act of 1958, et seq. as amended. 42 U.S.C. 2473 (2003); Federal Records Act, 44 U.S.C. 3101 (2003); Chief Financial Officers Act of 1990 205(a), 31 U.S.C. 901 (2003); Financial Management Improvement Act of 1996 802, 31 U.S.C. 3512 (2003).

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSE OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The following are routine uses: (1) Furnish data to the Department of Treasury for financial reimbursement of individual expenses, such as travel, books, and other miscellaneous items; (2) Process payments and collections in which an individual is reimbursing the Agency; (3) Ongoing administration and maintenance of the records, which is performed by authorized NASA employees, both civil servants and contractors; and (4) NASA Standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained on electronic media.

RETRIEVABILITY:

Records are retrieved from the system by name or SSN (Tax ID).

SAFEGUARDS:

An approved security plan for this system has been established in accordance with OMB Circular A-130, Management of Federal Information Resources. Individuals will have access to the system only in accordance with approved authentication methods. Only key authorized employees with appropriately configured system roles can access the system and only from workstations within the NASA Intranet.

RETENTION AND DISPOSAL:

Records are stored in the NASA Enterprise Application Competency Center (NEACC) database and managed, retained and dispositioned in accordance with the guidelines defined in the NASA Procedural Requirements (NPR) 1441.1D, NASA Records Retention Schedules, Schedule 9, Items 11 and 13.

SYSTEM MANAGERS AND ADDRESSES:

IS01/Manager of the NEACC, George C. Marshall Space Flight Center, National Aeronautics and Space Administration, Marshall Space Flight Center, AL 35812.

NOTIFICATION PROCEDURE:

Individuals interested in inquiring about their records should notify the System Manager at the address given above.

RECORD ACCESS PROCEDURE:

Individuals who wish to gain access to their records should submit their request in writing to the System Manager at the address given above.

CONTESTING RECORD PROCEDURES:

The NASA regulations governing access to records, procedures for contesting the contents and for contesting the contents and for appealing initial determinations are set forth in 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

The information is received by the NEACC Financial Systems through an electronic interface from the Federal Personnel Payroll System (FPPS). In certain circumstances, updates to this information may be submitted by NASA employees and recorded directly into the NEACC Financial Systems.

APPENDIX A

Location Numbers and Mailing Addresses of NASA Installations at Which Records Are Located

Location 1.

NASA Headquarters, National Aeronautics and Space Administration, Washington, DC 20546-0001

Location 2.

Ames Research Center, National Aeronautics and Space Administration, Moffett Field, CA 94035-1000

Location 3.

Dryden Flight Research Center, National Aeronautics and Space Administration, PO Box 273, Edwards, CA 93523-0273

Location 4.

Goddard Space Flight Center, National Aeronautics and Space Administration, Greenbelt, MD 20771-0001

Location 5.

Lyndon B. Johnson Space Center, National Aeronautics and Space Administration, Houston, TX 77058-3696

Location 6.

John F. Kennedy Space Center, National Aeronautics and Space Administration, Kennedy Space Center, FL 32899-0001

Location 7.

Langley Research Center, National Aeronautics and Space Administration, Hampton, VA 23681-2199

Location 8.

John H. Glenn Research Center at Lewis Field, National Aeronautics and Space Administration, 21000 Brookpark Road, Cleveland, OH 44135-3191

Location 9.

George C. Marshall Space Flight Center, National Aeronautics and Space Administration, Marshall Space Flight Center, AL 35812-0001

Location 10.

HQ NASA Management Office-JPL, National Aeronautics and Space Administration, 4800 Oak Grove Drive, Pasadena, CA 91109-8099

Location 11.

John C. Stennis Space Center, National Aeronautics and Space Administration, Stennis Space Center, MS 39529-6000

Location 12.

JSC White Sands Test Facility, National Aeronautics and Space Administration, PO Drawer MM, Las Cruces, NM 88004-0020

Location 13.

GRC Plum Brook Station, National Aeronautics and Space Administration, Sandusky, OH 44870

Location 14.

MSFC Michoud Assembly Facility, National Aeronautics and Space Administration, PO Box 29300, New Orleans, LA 70189

Location 15.

NASA Independent Verification and Validation Facility (NASA IV&V), 100 University Drive, Fairmont, WV 26554

Location 16.

New Jersey Post of Duty, 402 East State Street, Trenton, NJ 08608

Location 17.

Western Field Office, Glenn Anderson Federal Building, 501 West Ocean Blvd., Long Beach, CA 90802-4222

Location 18.

NASA Shared Services Center (NSSC), Building 5100, Stennis Space Center, MS 39529-6000

APPENDIX B

Standard Routine Uses—NASA

The following routine uses of information contained in SORs, subject to the Privacy Act of 1974, are standard for many NASA systems. They are cited by reference in the paragraph “Routine uses of records maintained in the system, including categories of users and the purpose of such uses” of the Federal Register Notice on those systems to which they apply.

Standard Routine Use No. 1—LAW ENFORCEMENT—In the event this system of records indicates a violation or potential violation of law, whether civil, criminal, or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the SOR may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

Standard Routine Use No. 2—DISCLOSURE OF REQUESTED INFORMATION—A record from this SOR may be disclosed as a “routine use” to a Federal, State, or local agency maintaining civil, criminal, or other relevant enforcement information or other pertinent information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant, or other benefit.

Standard Routine Use No. 3—DISCLOSURE OF REQUESTED INFORMATION—A record from this SOR may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

Standard Routine Use No. 4—DISCLOSURE TO THE DEPARTMENT OF JUSTICE FOR USE IN LITIGATION—It shall be a routine use of the records in this system of records to disclose them to the Department of Justice when (a) the Agency, or any component thereof; or (b) any employee of the Agency in his or her official capacity; or (c) any employee of the Agency in his or her individual capacity where the Department of Justice or the Agency has agreed to represent the employee; or (d) the United States, where the Agency determines that litigation is likely to affect the Agency or any of its components, is a party to litigation or has an interest in such litigation, and the use of such records by the Department of Justice or the Agency is deemed by the Agency to be relevant and necessary to the litigation provided, however, that in each case it has been determined that the disclosure is compatible with the purpose for which the records were collected.

Standard Routine Use 5—ROUTINE USE FOR AGENCY DISCLOSURE IN LITIGATION—It shall be a routine use of the records in this system of records to disclose them in a proceeding before a court or adjudicative body before which the agency is authorized to appear, when: (a) The Agency, or any component thereof; or (b) any employee of the Agency in his or her official capacity; or (c) any employee of the Agency in his or her individual capacity where the Agency has agreed to represent the employee; or (d) the United States, where the Agency determines that litigation is likely to affect the Agency or any of its components, is a party to litigation or has an interest in such litigation, and the use of such records by the Agency is deemed to be relevant and necessary to the litigation, provided, however, that in each case, the Agency has determined that the disclosure is compatible with the purpose for which the records were collected.

Standard Routine Use No. 6—SUSPECTED OR CONFIRMED CONFIDENTIALITY COMPROMISE—A record from this SOR may be disclosed to appropriate agencies, entities, and persons when (1) NASA suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (2) NASA has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by NASA or another agency or entity) that rely upon the compromised information; and (3) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with NASA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.