[Code of Federal Regulations]
[Title 43, Volume 1, Parts 1 to 999]
[Revised as of October 1, 1997]
From the U.S. Government Printing Office via GPO Access
[CITE: 43CFR2]
[Page 21-33]
TITLE 43--PUBLIC LANDS: INTERIOR
Subtitle A--Office of the Secretary of the Interior
PART 2--RECORDS AND TESTIMONY; FREEDOM OF INFORMATION ACT--Table of Contents
Subpart D--Privacy Act
Source: 40 FR 44505, Sept. 26, 1975, unless otherwise noted.
Sec. 2.45 Purpose and scope.
This subpart contains the regulations of the Department of the
Interior implementing section 3 of the Privacy Act. Sections 2.47
through 2.57 describe the procedures and policies of the Department
concerning maintenance of records which are subject to the Act. Sections
2.60 through 2.66 describe the procedure under which individuals may
determine whether systems of records subject to the Act contain records
relating to them and the procedure under which they may seek access to
existing records. Sections 2.70 through 2.77 describe the procedure
under which individuals may petition for amendment of records subject to
the Act relating to them. Section 2.79 lists records systems that have
been exempted from certain requirements of the Act.
[48 FR 56583, Dec. 22, 1983]
Sec. 2.46 Definitions.
(a) Act. As used in this subpart, ``Act'' means section 3 of the
Privacy Act, 5 U.S.C. 552a.
(b) Bureau. For purposes of this subpart, a ``bureau'' is any
constituent bureau or office of the Department, including the Office of
the Secretary and any other Departmental office.
(c) Individual. As used in this subpart, ``individual'' means a
citizen of the United States or an alien lawfully admitted for permanent
residence.
(d) Maintain. As used in this subpart, the term ``maintain''
includes maintain, collect, use or disseminate.
(e) Record. As used in this subpart, ``record'' means any item,
collection, or grouping of information about an individual that is
maintained by the Department or a bureau thereof, including, but not
limited to, education, financial transactions, medical history, and
criminal or employment history and that contains the individual's name,
or the identifying number, symbol, or other identifying particular
assigned to the individual, such as a finger or voice print, or a
photograph.
(f) System of records. As used in this subpart, ``System of
records'' means a group of any records under the control of the
Department or a bureau thereof from which information is retrieved by
the name of the individual or by some identifying number, symbol, or
other identifying particular assigned to the individual.
(g) Medical records. As used in this subpart, ``medical records''
means records which relate to the identification, prevention, cure or
alleviation of any disease, illness or injury including psychological
disorders, alcoholism and drug addiction.
(h) Office of Personnel Management personnel records. As used in the
subpart, ``Office of Personnel Management personnel records'' means
records maintained for the Office of Personnel Management by the
Department and used for personnel management programs or processes such
as staffing, employee development, retirement, and grievances and
appeals.
(i) Statistical records. As used in this subpart, ``statistical
records'' means records in a system of records maintained for
statistical research or reporting purposes only and not used in whole or
in part in making any determination about an identifiable individual.
[[Page 22]]
(j) Routine use. As used in this subpart, ``routine use'' means a
use of a record for a purpose which is compatible with the purpose for
which it was collected.
(k) System notice. As used in this subpart, ``system notice'' means
the notice describing a system of records required by 5 U.S.C.
552a(e)(4) to be published in the Federal Register upon establishment or
revision of the system of records.
(l) System manager. As used in this subpart, ``system manager''
means the official designated in a system notice as having
administrative responsibility for a system of records.
(m) Departmental Privacy Act Officer. As used in this subpart,
``Departmental Privacy Act Officer'' means the official in the Office of
the Assistant Secretary--Policy, Budget and Administration charged with
responsibility for assisting the Assistant Secretary--Policy, Budget and
Administration in carrying out the functions assigned in this subpart
and for coordinating the activities of the bureaus of the Department in
carrying out the functions which they are assigned in this subpart.
(n) Bureau Privacy Act Officer. As used in this subpart, ``Bureau
Privacy Act Officer'' means the official within each bureau assigned
responsibility for bureau implementation of the Act and the regulations
of this subpart.
(o) Working day. As used in this subpart, ``working day'' means a
regular Federal work day. It does not include Saturdays, Sundays or
public legal holidays.
[40 FR 44505, Sept. 26, 1975, as amended at 47 FR 38327, Aug. 31, 1982;
48 FR 56583, Dec. 22, 1983; 53 FR 3749, Feb. 9, 1988]
Sec. 2.47 Records subject to Privacy Act.
The Privacy Act applies to all ``records,'' as that term is defined
in Sec. 2.46(e), which the Department maintains in a ``system of
records,'' as that term is defined in Sec. 2.46(f).
Sec. 2.48 Standards for maintenance of records subject to the Act.
(a) Content of records. Records subject to the Act shall contain
only such information about an individual as is relevant and necessary
to accomplish a purpose of the agency required to be accomplished by
statute or Executive Order of the President.
(b) Standards of accuracy. Records subject to the Act which are used
in making any determination about any individual shall be maintained
with such accuracy, relevance, timeliness, and completeness as is
reasonably necessary to assure fairness to the individual in making the
determination.
(c) Collection of information. (1) Information which may be used in
making determinations about an individual's rights, benefits, and
privileges under Federal programs shall, to the greatest extent
practicable, be collected directly from that individual.
(2) In deciding whether collection of information from an
individual, as opposed to a third party source, is practicable, the
following factors, among others, may be considered:
(i) Whether the nature of the information sought is such that it can
only be obtained from a third party;
(ii) Whether the cost of collecting the information from the
individual is unreasonable when compared with the cost of collecting it
from a third party;
(iii) Whether there is a risk that information collected from third
parties, if inaccurate, could result in an adverse determination to the
individual concerned;
(iv) Whether the information, if supplied by the individual, would
have to be verified by a third party; or
(v) Whether provisions can be made for verification, by the
individual, of information collected from third parties.
(d) Advice to individuals concerning uses of information. (1) Each
individual who is asked to supply information about him or herself which
will be added to a system of records shall be informed of the basis for
requesting the information, how it may be used, and what the
consequences, if any, are of not supplying the information.
(2) At a minimum, the notice to the individual must state:
(i) The authority (whether granted by statute or Executive Order of
the President) which authorizes the solicitation of the information and
whether disclosure of such information is mandatory or voluntary;
[[Page 23]]
(ii) The principal purpose or purposes for which the information is
intended to be used;
(iii) The routine uses which may be made of the information; and
(iv) The effects on the individual, if any, of not providing all or
any part of the requested information.
(3)(i) When information is collected on a standard form, the notice
to the individual shall be provided on the form, on a tear-off sheet
attached to the form, or on a separate sheet, whichever is most
practical.
(ii) When information is collected by an interviewer, the
interviewer shall privide the individual with a written notice which the
individual may retain. If the interview is conducted by telephone,
however, the interviewer may summarize the notice for the individual and
need not provide a copy to the individual unless the individual requests
a copy.
(iii) An individual may be asked to acknowledge, in writing, that
the notice required by this section has been provided.
(e) Records concerning activity protected by the First Amendment. No
record may be maintained describing how any individual exercises rights
guaranteed by the First Amendment to the Constitution unless the
maintenance of the record is (1) expressly authorized by statute or by
the individual about whom the record is maintained or (2) pertinent to
and within the scope of an authorized law enforcement activity.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56583, Dec. 22, 1983]
Sec. 2.49 [Reserved]
Sec. 2.50 Federal Register notices describing systems of records.
(a) The Privacy Act requires publication of a notice in the Federal
Register describing each system of records subject to the Act. Such
notice will be published prior to the establishment or a revision of the
system of records. 5 U.S.C. 552a(e)(4).
(b) Each bureau shall notify the Departmental Privacy Act Officer
promptly of any modifications or amendments which are required in the
then-current notice describing a system of records for which it is
responsible.
(c) A bureau desiring to establish a new system of records or a new
use for an existing system of records shall notify the Departmental
Privacy Act Officer, no fewer than ninety (90) calendar days in advance.
[48 FR 56583, Dec. 22, 1983]
Sec. 2.51 Assuring integrity of records.
(a) Statutory requirement. The Privacy Act requires that records
subject to the Act be maintained with appropriate administrative,
technical and physical safeguards to insure the security and
confidentiality of records and to protect against any anticipated
threats or hazards to their security or integrity which could result in
substantial harm, embarassment, inconvenience, or unfairness to any
individual on whom information is maintained, 5 U.S.C. 552a(e)(10).
(b) Records maintained in manual form. When maintained in manual
form, records subject to the Privacy Act shall be maintained in a manner
commensurate with the sensitivity of the information contained in the
system of records. The following minimum safeguards, or safeguards
affording comparable protection, are applicable to Privacy Act systems
of records containing sensitive information:
(1) Areas in which the records are maintained or regularly used
shall be posted with an appropriate warning stating that access to the
records is limited to authorized persons. The warning also shall
summarize the requirements of Sec. 2.52 and state that the Privacy Act
contains a criminal penalty for the unauthorized disclosure of records
to which it applies.
(2) During working hours, (i) the area in which the records are
maintained or regularly used shall be occupied by authorized personnel
or (ii) access to the records shall be restricted by their storage in
locked metal file cabinets or a locked room.
(3) During non-working hours, access to the records shall be
restricted by their storage in locked metal file cabinets or a locked
room.
(4) Where a locked room is the method of security provided for a
system, the bureau responsible for the system
[[Page 24]]
shall supplement that security by (i) providing lockable file cabinets
or containers for the records or (ii) changing the lock or locks for the
room so that they may not be opened with a master key. For the purposes
of this paragraph, a master key is a key which may be used to open rooms
other than the room containing records subject to the Privacy Act,
unless those rooms are utilized by officials or employees authorized to
have access to the records subject to the Privacy Act.
(c) Records maintained in computerized form. When maintained in
computerized form, records subject to the Privacy Act shall be
maintained, at a minimum, subject to safeguards based on those
recommended in the National Bureau of Standard's booklet ``Computer
Security Guidelines for Implementing the Privacy Act of 1974'' (May 30,
1975), and any supplements thereto, which are adequate and appropriate
to assuring the integrity of records in the system.
(d) Office of Personnel Management personnel records. A system of
records made up of Office of Personnel Management personnel records
shall be maintained under the security requirements set out in 5 CFR
293.106 and 293.107.
(e) Bureau responsibility. (1) The bureau responsible for a system
of records shall be responsible for assuring that specific procedures
are developed to assure that the records in the system are maintained
with security meeting the requirements of the Act and this section.
(2) These procedures shall be in writing and shall be posted or
otherwise periodically brought to the attention of employees working
with the records contained in the system.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56583, Dec. 22, 1983]
Sec. 2.52 Conduct of employees.
(a) Handling of records subject to the Act. Employees whose duties
require handling of records subject to the Privacy Act shall, at all
times, take care to protect the integrity, security and confidentiality
of these records.
(b) Disclosure of records. No employee of the Department may
disclose records subject to the Privacy Act unless disclosure is
permitted under Sec. 2.56 or is to the individual to whom the record
pertains.
(c) Alteration of records. No employee of the Department may alter
or destroy a record subject to the Privacy Act unless (1) such
alteration or destruction is properly undertaken in the course of the
employee's regular duties or (2) such alteration or destruction is
required by a decision under Secs. 2.70 through 2.75 or the decision of
a court of competent jurisdiction.
(d) Bureau responsibility. The bureau responsible for a system of
records shall be responsible for assuring that employees with access to
the system are made aware of the requirements of this section and of 5
U.S.C. 552a(i)(1), which imposes criminal penalties for knowingly and
willfully disclosing a record about an individual without the written
request or consent of that individual unless disclosure is permitted
under one of the exceptions listed in Sec. 2.56 (b) and (c).
Sec. 2.53 Government contracts.
(a) Required contract provisions. When a contract provides for the
operation by or on behalf of the Department of a system of records to
accomplish a Department function, the contract shall, consistent with
the Department's authority, cause the requirements of 5 U.S.C. 552a and
the regulations contained in this subpart to be applied to such system.
(b) System manager. The head of the bureau responsible for the
contract shall designate a regular employee of the bureau to be the
manager for a system of records operated by a contractor.
Secs. 2.54-2.55 [Reserved]
Sec. 2.56 Disclosure of records.
(a) Prohibition of disclosure. No record contained in a system of
records may be disclosed by any means of communication to any person, or
to another agency, except pursuant to a written request by, or with the
prior written consent of, the individual to whom the record pertains.
(b) General exceptions. The prohibition contained in paragraph (a)
does not apply where disclosure of the record would be:
[[Page 25]]
(1) To those officers or employees of the Department who have a need
for the record in the performance of their duties; or
(2) Required by the Freedom of Information Act, 5 U.S.C. 552.
(c) Specific exceptions. The prohibition contained in paragraph (a)
of this section does not apply where disclosure of the record would be:
(1) For a routine use as defined in Sec. 2.46(j) which has been
described in a system notice published in the Federal Register;
(2) To the Bureau of the Census for purposes of planning or carrying
out a census or survey or related activity pursuant to the provisions of
Title 13, U.S. Code.
(3) To a recipient who has provided the system manager responsible
for the system in which the record is maintained with advance adequate
written assurance that the record will be used solely as a statistical
research or reporting record, and the record is to be transferred in a
form that is not individually identifiable;
(4) To the National Archives and Records Administration as a record
which has sufficient historical or other value to warrant its continued
preservation by the U.S. Government, or for evaluation by the Archivist
of the United States or the designee of the Archivist to determine
whether the record has such value;
(5) To another agency or to an instrumentality of any governmental
jurisdiction within or under the control of the United States for a
civil or criminal law enforcement activity if the activity is authorized
by law, and if the head of the agency or instrumentality has made a
written request to the Department specifying the particular portion
desired and the law enforcement activity for which the record is sought;
(6) To a person pursuant to a showing of compelling circumstances
affecting the health or safety of an individual if upon such disclosure
notification is transmitted to the last known address of such
individual;
(7) To either House of Congress, or, to the extent of matter within
its jurisdiction, any committee or subcommittee thereof, any joint
committee of Congress or subcommittee of any such joint committee;
(8) To the Comptroller General, or any of his authorized
representatives, in the course of the performance of the duties of the
General Accounting Office;
(9) Pursuant to the order of a court of competent jurisdiction; or
(10) To a consumer reporting agency in accordance with section 3(d)
of the Federal Claims Collection Act of 1966, as amended (31 U.S.C.
3711(f)).
(d) Reviewing records prior to disclosure. (1) Prior to any
disclosure of a record about an individual, unless disclosure is
required by the Freedom of Information Act, reasonable efforts shall be
made to assure that the records are accurate, complete, timely and
relevant for agency purposes.
(2) When a record is disclosed in connection with a Freedom of
Information request made under subpart B of this part and it is
appropriate and administratively feasible to do so, the requester shall
be informed of any information known to the Department indicating that
the record may not be fully accurate, complete, or timely.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56584, Dec. 22, 1983;
50 FR 45114, Oct. 30, 1985]
Sec. 2.57 Accounting for disclosures.
(a) Maintenance of an accounting. (1) Where a record is disclosed to
any person, or to another agency, under any of the specific exceptions
provided by Sec. 2.56 (c), an accounting shall be made.
(2) The accounting shall record (i) the date, nature, and purpose of
each disclosure of a record to any person or to another agency and (ii)
the name and address of the person or agency to whom the disclosure was
made.
(3) Accountings prepared under this section shall be maintained for
at least five years or the life of the record, whichever is longer,
after the disclosure for which the accounting is made.
(b) Access to accountings. (1) Except for accountings of disclosures
made under Sec. 2.56(c)(5), accountings of all disclosures of a record
shall be made available to the individual to whom the record relates at
the individual's request.
[[Page 26]]
(2) An individual desiring access to an accounting of disclosures of
a record pertaining to the individual shall submit a request by
following the procedures of Sec. 2.63.
(c) Notification of disclosure. When a record is disclosed pursuant
to Sec. 2.56(c)(9) as the result of the order of a court of competent
jurisdiction, reasonable efforts shall be made to notify the individual
to whom the record pertains as soon as the order becomes a matter of
public record.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56584, Dec. 22, 1983]
Secs. 2.58-2.59 [Reserved]
Sec. 2.60 Request for notification of existence of records: Submission.
(a) Submission of requests. (1)(i) Individuals desiring to determine
under the Privacy Act whether a system of records contains records
pertaining to them shall address inquiries to the system manager having
responsibility for the system unless the system notice describing the
system prescribes or permits submission to some other official or
officials.
(ii) If a system notice describing a system requires individuals to
contact more than two officials concerning the existence of records in
the system, individuals desiring to determine whether the system
contains records pertaining to them may contact the system manager for
assistance in determining which official is most likely to be in
possession of records pertaining to those individuals.
(2) Individuals desiring to determine whether records pertaining to
them are maintained in two or more systems shall make a separate inquiry
concerning each system.
(b) Form of request. (1) An inquiry to determine whether a system of
records contains records pertaining to an individual shall be in
writing.
(2) To insure expeditious handling, the request shall be prominently
marked, both on the envelope and on the face of the request, with the
legend ``PRIVACY ACT INQUIRY.''
(3) The request shall state that the individual is seeking
information concerning records pertaining to him or herself and shall
supply such additional identifying information, if any, as is called for
in the system notice describing the system.
(4) Individuals who have reason to believe that information
pertaining to them may be filed under a name other than the name they
are currently using (e.g., maiden name), shall include such information
in the request.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56584, Dec. 22, 1983]
Sec. 2.61 Requests for notification of existence of records: Action on.
(a) Decisions on request. (1) Individuals inquiring to determine
whether a system of records contains records pertaining to them shall be
promptly advised whether the system contains records pertaining to them
unless (i) the records were compiled in reasonable anticipation of a
civil action or proceeding or (ii) the system of records is one which
has been excepted from the notification provisions of the Privacy Act by
rulemaking (Sec. 2.79).
(2) If the records were compiled in reasonable anticipation of a
civil action or proceeding or the system of records is one which has
been excepted from the notification provisions of the Privacy Act by
rulemaking, the individuals will be promptly notified that they are not
entitled to notification of whether the system contains records
pertaining to them.
(b) Authority to deny requests. A decision to deny a request for
notification of the existence of records shall be made by the system
manager responsible for the system of records concerning which inquiry
has been made and shall be concurred in by the bureau Privacy Act
officer for the bureau which maintains the system, provided, however
that the head of a bureau may, in writing, require (1) that the decision
be made by the bureau Privacy Act officer and/or (2) that the bureau
head's own concurrence in the decision be obtained.
(c) Form of decision. (1) No particular form is required for a
decision informing individuals whether a system of records contains
records pertaining to them.
(2) A decision declining to inform an individual whether or not a
system of records contains records pertaining to
[[Page 27]]
him or her shall be in writing and shall:
(i) State the basis for denial of the request.
(ii) Advise the individual that an appeal of the declination may be
made to the Assistant Secretary--Policy, Budget and Administration
pursuant to Sec. 2.65 by writing to the Privacy Act Officer, Office of
the Assistant Secretary--Policy, Budget and Administration, U.S.
Department of the Interior, Washington, DC 20240.
(iii) State that the appeal must be received by the foregoing
official within twenty (20) working days of the date of the decision.
(3) If the decision declining a request for notification of the
existence of records involves Department employee records which fall
under the jurisdiction of the Office of Personnel Management, the
individual shall be informed in a written response which shall:
(i) State the reasons for the denial.
(ii) Include the name, position title, and address of the official
responsible for the denial.
(iii) Advise the individual that an appeal of the declination may be
made only to the Assistant Director for Workforce Information, Personnel
Systems Oversight Group, Office of Personnel Management, 1900 E Street
NW., Washington, DC 20415.
(4) Copies of decisions declining a request for notification of the
existence of records made pursuant to paragraphs (c)(2) and (c)(3) of
this section shall be provided to the Departmental and Bureau Privacy
Act Officers.
[48 FR 56584, Dec. 22, 1983, as amended at 53 FR 3749, Feb. 9, 1988]
Sec. 2.62 Requests for access to records.
The Privacy Act permits individuals, upon request, to gain access to
their records or to any information pertaining to them which is
contained in a system and to review the records and have a copy made of
all or any portion thereof in a form comprehensive to them. 5 U.S.C.
552a(d)(1). A request for access shall be submitted in accordance with
the procedures in this subpart.
[48 FR 56584, Dec. 22, 1983]
Sec. 2.63 Requests for access to records: Submission.
(a) Submission of requests. (1)(i) Requests for access to records
shall be submitted to the system manager having responsibility for the
system in which the records are maintained unless the system notice
describing the system prescribes or permits submission to some other
official or officials.
(ii) If a system notice describing a system requires individuals to
contact more than two officials concerning access to records in the
system, individuals desiring to request access to records pertaining to
them may contact the system manager for assistance in determining which
official is most likely to be in custody of records pertaining to that
individual.
(2) Individuals desiring access to records maintained in two or more
separate systems shall submit a separate request for access to the
records in each system.
(b) Form of request. (1) A request for access to records subject to
the Privacy Act shall be in writing.
(2) To insure expeditious handling, the request shall be prominently
marked, both on the envelope and on the face of the request, with the
legend ``PRIVACY ACT REQUEST FOR ACCESS.''
(3) Requesters shall specify whether they seek all of the records
contained in the system which relate to them or only some portion
thereof. If only a portion of the records which relate to the individual
are sought, the request shall reasonably describe the specific record or
records sought.
(4) If the requester seeks to have copies of the requested records
made, the request shall state the maximum amount of copying fees which
the requester is willing to pay. A request which does not state the
amount of fees the requester is willing to pay will be treated as a
request to inspect the requested records. Requesters are further
notified that under Sec. 2.64(d) the failure to state willingness to pay
fees as high as are anticipated by the Department will delay processing
of a request.
(5) The request shall supply such identifying information, if any,
as is
[[Page 28]]
called for in the system notice describing the system.
(6) Requests failing to meet the requirements of this paragraph
shall be returned to the requester with a written notice advising the
requester of the deficiency in the request.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56585, Dec. 22, 1983]
Sec. 2.64 Requests for access to records: Initial decision.
(a) Decisions on requests. A request made under this subpart for
access to a record shall be granted promptly unless (1) the record was
compiled in reasonable anticipation of a civil action or proceeding or
(2) the record is contained in a system of records which has been
excepted from the access provisions of the Privacy Act by rulemaking
(Sec. 2.79).
(b) Authority to deny requests. A decision to deny a request for
access under this subpart shall be made by the system manager
responsible for the system of records in which the requested record is
located and shall be concurred in by the bureau Privacy Act officer for
the bureau which maintains the system, provided, however, that the head
of a bureau may, in writing, require (1) that the decision be made by
the bureau Privacy Act officer and/or (2) that the bureau head's own
concurrence in the decision be obtained.
(c) Form of decision. (1) No particular form is required for a
decision granting access to a record. The decision shall, however,
advise the individual requesting the record as to where and when the
record is available for inspection or, as the case may be, where and
when copies will be available. If fees are due under Sec. 2.64(d), the
individual requesting the record shall also be notified of the amount of
fees due or, if the exact amount has not been determined, the
approximate amount of fees due.
(2) A decision denying a request for access, in whole or part, shall
be in writing and shall:
(i) State the basis for denial of the request.
(ii) Contain a statement that the denial may be appealed to the
Assistant Secretary--Policy, Budget and Administration pursuant to
Sec. 2.65 by writing to the Privacy Act Officer, Office of the Assistant
Secretary--Policy, Budget and Administration, U.S. Department of the
Interior, Washington, DC 20240.
(iii) State that the appeal must be received by the foregoing
official within twenty (20) working days of the date of the decision.
(3) If the decision denying a request for access involves Department
employee records which fall under the jurisdiction of the Office of
Personnel Management, the individual shall be informed in a written
response which shall:
(i) State the reasons for the denial.
(ii) Include the name, position title, and address of the official
responsible for the denial.
(iii) Advise the individual that an appeal of the denial may be made
only to the Assistant Director for Workforce Information, Personnel
Systems and Oversight Group, Office of Personnel Management, 1900 E
Street NW., Washington, DC 20415.
(4) Copies of decisions denying requests for access made pursuant to
paragraphs (c)(2) and (c)(3) of this section will be provided to the
Departmental and Bureau Privacy Act Officers.
(d) Fees. (1) No fees may be charged for the cost of searching for
or reviewing a record in response to a request made under Sec. 2.63.
(2) Fees for copying a record in response to a request made under
Sec. 2.63 shall be charged in accordance with the schedule of charges
contained in Appendix A to this part, unless the official responsible
for processing the request determines that reduction or waiver of fees
is appropriate.
(3) Where it is anticipated that fees chargeable in connection with
a request will exceed the amount the person submitting the request has
indicated a willingness to pay, the official processing the request
shall notify the requester and shall not complete processing of the
request until the requester has agreed, in writing, to pay fees as high
as are anticipated.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56585, Dec. 22, 1983;
53 FR 3749, Feb. 9, 1988]
[[Page 29]]
Sec. 2.65 Requests for notification of existence of records and for
access to records: Appeals.
(a) Right of appeal. Except for appeals pertaining to Office of
Personnel Management records, individuals who have been notified that
they are not entitled to notification of whether a system of records
contains records pertaining to them or have been denied access, in whole
or part, to a requested record may appeal to the Assistant Secretary--
Policy, Budget and Administration.
(b) Time for appeal. (1) An appeal must be received by the Privacy
Act Officer no later than twenty (20) working days after the date of the
initial decision on a request.
(2) The Assistant Secretary--Policy, Budget and Administration may,
for good cause shown, extend the time for submission of an appeal if a
written request for additional time is received within twenty (20)
working days of the date of the initial decision on the request.
(c) Form of appeal. (1) An appeal shall be in writing and shall
attach copies of the initial request and the decision on the request.
(2) The appeal shall contain a brief statement of the reasons why
the appellant believes the decision on the initial request to have been
in error.
(3) The appeal shall be addressed to Privacy Act Officer, Office of
the Assistant Secretary--Policy, Budget and Administration, U.S.
Department of the Interior, Washington, DC 20240.
(d) Action on appeals. (1) Appeals from decisions on initial
requests made pursuant to Secs. 2.61 and 2.63 shall be decided for the
Department by the Assistant Secretary--Policy, Budget and Administration
or an official designated by the Assistant Secretary after consultation
with the Solicitor.
(2) The decision on an appeal shall be in writing and shall state
the basis for the decision.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56585, Dec. 22, 1983;
53 FR 3749, Feb. 9, 1988]
Sec. 2.66 Requests for access to records: Special situations.
(a) Medical records. (1) Medical records shall be disclosed to the
individual to whom they pertain unless it is determined, in consultation
with a medical doctor, that disclosure should be made to a medical
doctor of the individual's choosing.
(2) If it is determined that disclosure of medical records directly
to the individual to whom they pertain could have an adverse effect on
that individual, the individual may designate a medical doctor to
receive the records and the records will be disclosed to that doctor.
(b) Inspection in presence of third party. (1) Individuals wishing
to inspect records pertaining to them which have been opened for their
inspection may, during the inspection, be accompanied by a person of
their own choosing.
(2) When such a procedure is deemed appropriate, individuals to whom
the records pertain may be required to furnish a written statement
authorizing discussion of their records in the accompanying person's
presence.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56585, Dec. 22, 1983]
Secs. 2.67-2.69 [Reserved]
Sec. 2.70 Amendment of records.
The Privacy Act permits individuals to request amendment of records
pertaining to them if they believe the records are not accurate,
relevant, timely or complete. 5 U.S.C. 552a(d)(2). A request for
amendment of a record shall be submitted in accordance with the
procedures in this subpart.
[48 FR 56585, Dec. 22, 1983]
Sec. 2.71 Petitions for amendment: Submission and form.
(a) Submission of petitions for amendment. (1) A request for
amendment of a record shall be submitted to the system manager for the
system of records containing the record unless the system notice
describing the system prescribes or permits submission to a different
official or officials. If an individual wishes to request amendment of
records located in more than one system, a separate petition must be
submitted to each system manager.
(2) A petition for amendment of a record may be submitted only if
the individual submitting the petition has previously requested and been
granted
[[Page 30]]
access to the record and has inspected or been given a copy of the
record.
(b) Form of petition. (1) A petition for amendment shall be in
writing and shall specifically identify the record for which amendment
is sought.
(2) The petition shall state, in detail, the reasons why the
petitioner believes the record, or the objectionable portion thereof, is
not accurate, relevant, timely or complete. Copies of documents or
evidence relied upon in support of these reasons shall be submitted with
the petition.
(3) The petition shall state, specifically and in detail, the
changes sought in the record. If the changes involve rewriting the
record or portions thereof or involve adding new language to the record,
the petition shall propose specific language to implement the changes.
[48 FR 56585, Dec. 22, 1983]
Sec. 2.72 Petitions for amendment: Processing and initial decision.
(a) Decisions on petitions. In reviewing a record in response to a
petition for amendment, the accuracy, relevance, timeliness and
completeness of the record shall be assessed against the criteria set
out in Sec. 2.48. In addition, personnel records shall be assessed
against the criteria for determining record quality published in the
Federal Personnel Manual and the Departmental Manual addition thereto.
(b) Authority to decide. An initial decision on a petition for
amendment may be made only by the system manager responsible for the
system of records containing the challenged record. If the system
manager declines to amend the record as requested, the bureau Privacy
Act officer for the bureau which maintains the system must concur in the
decision, provided, however, that the head of a bureau may, in writing,
require (1) that the decision be made by the bureau Privacy Act officer
and/or (2) that the bureau head's own concurrence in the decision be
obtained.
(c) Acknowledgement of receipt. Unless processing of a petition is
completed within ten (10) working days, the receipt of the petition for
amendment shall be acknowledged in writing by the system manager to whom
it is directed.
(d) Inadequate petitions. (1) If a petition does not meet the
requirements of Sec. 2.71, the petitioner shall be so advised and shall
be told what additional information must be submitted to meet the
requirements of Sec. 2.71.
(2) If the petitioner fails to submit the additional information
within a reasonable time, the petition may be rejected. The rejection
shall be in writing and shall meet the requirements of paragraph (e) of
this section.
(e) Form of decision. (1) A decision on a petition for amendment
shall be in writing and shall state concisely the basis for the
decision.
(2) If the petition for amendment is rejected, in whole or part, the
petitioner shall be informed in a written response which shall:
(i) State concisely the basis for the decision.
(ii) Advise the petitioner that the rejection may be appealed to the
Assistant Secretary--Policy, Budget and Administration by writing to the
Privacy Act Officer, Office of the Assistant Secretary--Policy, Budget
and Administration, U.S. Department of the Interior, Washington, DC
20240.
(iii) State that the appeal must be received by the foregoing
official within twenty (20) working days of the decision.
(3) If the petition for amendment involves Department employee
records which fall under the jurisdiction of the Office of Personnel
Management and is rejected, in whole or part, the petitioner shall be
informed in a written response which shall:
(i) State concisely the basis for the decision.
(ii) Advise the petitioner that an appeal of the rejection may be
made pursuant to 5 CFR 297.306 only to the Assistant Director for
Workforce Information, Personnel Systems and Oversight Group, Office of
Personnel Management, 1900 E Street NW., Washington, DC 20415.
(4) Copies of rejections of petitions for amendment made pursuant to
paragraphs (e)(2) and (e)(3) of this section will be provided to the
Departmental and Bureau Privacy Act Officers.
(f) Implementation of initial decision. If a petition for amendment
is accepted,
[[Page 31]]
in whole or part, the bureau maintaining the record shall:
(1) Correct the record accordingly and,
(2) Where an accounting of disclosures has been made pursuant to
Sec. 2.57, advise all previous recipients of the record that the
correction was made and the substance of the correction.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56585, Dec. 22, 1983;
53 FR 3750, Feb. 9, 1988]]
Sec. 2.73 Petitions for amendments: Time limits for processing.
(a) Acknowledgement of receipt. The acknowledgement of receipt of a
petition required by Sec. 2.72(c) shall be dispatched not later than ten
(10) working days after receipt of the petition by the system manager
responsible for the system containing the challenged record, unless a
decision on the petition has been previously dispatched.
(b) Decision on petition. A petition for amendment shall be
processed promptly. A determination whether to accept or reject the
petition for amendment shall be made within thirty (30) working days
after receipt of the petition by the system manager responsible for the
system containing the challenged record.
(c) Suspension of time limit. The thirty (30) day time limit for a
decision on a petition shall be suspended if it is necessary to notify
the petitioner, pursuant to Sec. 2.72(d), that additional information in
support of the petition is required. Running of the thirty (30) day time
limit shall resume on receipt of the additional information by the
system manager responsible for the system containing the challenged
record.
(d) Extensions of time. (1) The thirty (30) day time limit for a
decision on a petition may be extended if the official responsible for
making a decision on the petition determines that an extension is
necessary for one of the following reasons:
(i) A decision on the petition requires analysis of voluminous
record or records;
(ii) Some or all of the challenged records must be collected from
facilities other than the facility at which the official responsible for
making the decision is located.
(iii) Some or all of the challenged records are of concern to
another bureau of the Department or another agency of the Federal
Government whose assistance and views are being sought in processing the
request.
(2) If the official responsible for making a decision on the
petition determines that an extension is necessary, the official shall
promptly inform the petitioner of the extension and the date on which a
decision is expected to be dispatched.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56586, Dec. 22, 1983;
53 FR 3750, Feb. 9, 1988]
Sec. 2.74 Petitions for amendment: Appeals.
(a) Right of appeal. Except for appeals pertaining to Office of
Personnel Management records, where a petition for amendment has been
rejected in whole or in part, the individual submitting the petition may
appeal the denial to the Assistant Secretary--Policy, Budget and
Administration.
(b) Time for appeal. (1) An appeal must be received no later than
twenty (20) working days after the date of the decision on a petition.
(2) The Assistant Secretary--Policy, Budget and Administration may,
for good cause shown, extend the time for submission of an appeal if a
written request for additional time is received within twenty (20)
working days of the date of the decision on a petition.
(c) Form of appeal. (1) An appeal shall be in writing and shall
attach copies of the initial petition and the decision on that petition.
(2) The appeal shall contain a brief statement of the reasons why
the appellant believes the decision on the petition to have been in
error.
(3) The appeal shall be addressed to Privacy Act Officer, Office of
the Assistant Secretary--Policy, Budget and Administration, U.S.
Department of the Interior, Washington, DC 20240.
[40 FR 44505, Sept. 26, 1975, as amended at 47 FR 38328, Aug. 31, 1982;
53 FR 3750, Feb. 9, 1988]
Sec. 2.75 Petitions for amendment: Action on appeals.
(a) Authority. Appeals from decisions on initial petitions for
amendment
[[Page 32]]
shall be decided for the Department by the Assistant Secretary--Policy,
Budget and Administration or an official designated by the Assistant
Secretary, after consultation with the Solicitor.
(b) Time limit. (1) A final determination on any appeal shall be
made within thirty (30) working days after receipt of the appeal.
(2) The thirty (30) day period for decision on an appeal may be
extended, for good cause shown, by the Secretary of the Interior. If the
thirty (30) day period is extended, the individual submitting the appeal
shall be notified of the extension and of the date on which a
determination on the appeal is expected to be dispatched.
(c) Form of decision. (1) The final determination on an appeal shall
be in writing and shall state the basis for the determination.
(2) If the determination upholds, in whole or part, the initial
decision rejecting the petition for amendment, the determination shall
also advise the individual submitting the appeal:
(i) Of his or her right to file a concise statement of the reasons
for disagreeing with the decision of the agency;
(ii) Of the procedure established by Sec. 2.77 for the filing of the
statement of disagreement;
(iii) That the statement which is filed will be made available to
anyone to whom the record is subsequently disclosed together with, at
the discretion of the Department, a brief statement by the Department
summarizing its reasons for refusing to amend the record;
(iv) That prior recipients of the challenged record will be provided
a copy of any statement of dispute to the extent that an accounting of
disclosure was maintained; and
(v) Of his or her right to seek judicial review of the Department's
refusal to amend the record.
(3) If the determination reverses, in whole or in part, the initial
decision rejecting the petition for amendment, the system manager
responsible for the system containing the challenged record shall be
directed to:
(i) Amend the challenged record accordingly; and
(ii) If an accounting of disclosures has been made, advise all
previous recipients of the record of the amendment and its substance.
[40 FR 44505, Sept. 26, 1975, as amended at 48 FR 56586, Dec. 22, 1983;
53 FR 3750, Feb. 9, 1988]
Sec. 2.76 [Reserved]
Sec. 2.77 Statements of disagreement.
(a) Filing of statement. If the determination of the Assistant
Secretary--Policy, Budget and Administration under Sec. 2.75 rejects in
whole or part, a petition for amendment, the individual submitting the
petition may file with the system manager for the system containing the
challenged record a concise written statement setting forth the reasons
for disagreement with the determination of the Department.
(b) Disclosure of statements. In any disclosure of a record
containing information about which an individual has filed a statement
of disagreement under this section which occurs after the filing of the
statement, the disputed portion of the record will be clearly noted and
the recipient shall be provided copies of the statement of disagreement.
If appropriate, a concise statement of the reasons of the Department for
not making the requested amendments may also be provided to the
recipient.
(c) Maintenance of statements. System managers shall develop
procedures to assure that statements of disagreement filed with them
shall be maintained in such a way as to assure dissemination of the
statements to recipients of the records to which the statements pertain.
[48 FR 56586, Dec. 22, 1983]
Sec. 2.78 [Reserved]
Sec. 2.79 Exemptions.
(a) Criminal law enforcement records exempt under 5 U.S.C.
552a(j)(2). Pursuant to 5 U.S.C 552a(j)(2) the following systems of
records have been exempted from all of the provisions of 5 U.S.C. 552a
and the regulations in the subpart except paragraphs (b), (c) (1) and
(2), (e)(4) (A) through (F), (e) (6), (7), (9), (10), and (11), and (i)
of 5 U.S.C. 552a and the portions of the regulations in this subpart
implementing these paragraphs:
[[Page 33]]
(1) Investigative Case File System, Interior/FWS-20.
(2) Law Enforcement Services System, Interior/BIA-18.
(3) Law Enforcement Statistical Reporting System, Interior/NPS-19.
(4) Investigative Records, Interior/Office of Inspector General--2.
(b) Law enforcement records exempt under 5 U.S.C. 552a(k)(2).
Pursuant to 5 U.S.C. 552a(k)(2), the following systems of records have
been exempted from paragraphs (c)(3), (d), (e)(1), (e)(4) (G), (H), and
(I), and (f) of 5 U.S.C. 552a and the provisions of the regulations in
this subpart implementing these paragraphs:
(1) Investigative Records, Interior/Office of Inspector General--2.
(2) Permits System, Interior/FWS-21.
(3) Criminal Case Investigation System, Interior/BLM-18.
(4) Civil Trespass Case Investigations, Interior/BLM-19.
(5) Employee Conduct Investigations, Interior/BLM-20.
(6)-(7) [Reserved]
(8) Employee Financial Irregularities, Interior/NPS-17.
(9) Trespass Cases, Interior/Reclamation-37.
(10) Litigation, Appeal and Case Files System, Interior/Office of
the Solicitor-1 to the extent that it consists of investigatory material
compiled for law enforcement purposes.
(11) Endangered Species Licenses System, Interior/FWS-19.
(12) Investigative Case File, Interior/ FWS-20.
(13) Timber Cutting and Trespass Claims Files, Interior/BIA-24.
(c) Investigatory records exempt under 5 U.S.C. 552a(k)(5), the
following systems of records have been exempted from subsections (c)(3),
(d), (e)(1), (e)(4) (G), (H), and (I) and (f) of 5 U.S.C. 552a and the
provisions of the regulations in this subpart implementing these
subsections:
(1) [Reserved]
(2) National Research Council Grants Program, Interior/GS-9
(3) Committee Management Files, Interior/Office of the Secretary--
68.
(5 U.S.C. 301, 552a and 5 U.S.C. app. sections 9(a)(1)(D) and 9(b); 5
U.S.C. 301, 552, and 552a; 31 U.S.C. 483a; and 43 U.S.C. 1460)
[40 FR 44505, Sept. 26, 1975, as amended at 40 FR 54790, Nov. 26, 1975;
47 FR 38328, Aug. 31, 1982; 48 FR 37412, Aug. 18, 1983; 48 FR 56586,
Dec. 22, 1983; 49 FR 6907, Feb. 24, 1984]