SORN_DHS/ALL-004 General Information Technology Access Account

jlentini on DSKJ8SOYB1PROD with NOTICES

49882

Federal Register / Vol. 74, No. 187 / Tuesday, September 29, 2009 / Notices

notification of institutions that
recovered organs and tissues from that
donor.
For tissues, disease transmission
reports are less frequent but include
transmission of HCV, Group A
streptococcus, Clostridium spp, and
Chryseobacterium meningosepticum.
Unlike solid organs, risk of disease
transmission depends on multiple
factors related to the graft, including the
feasibility and effectiveness of
processing, which may vary according
to tissue type and specific processing or
manipulation procedures. The Food and
Drug Administration (FDA), Center for
Biologics Evaluation and Research,
regulates articles containing or
consisting of human cells or tissues
intended for implantation,
transplantation, infusion, or transfer
into a human recipient as human cells,
tissues, or cellular or tissue-based
products (HCT/Ps). HCT/P
establishments are required to report to
FDA all serious infections following
graft transplantation. However,
healthcare providers are not required to
report adverse events, and healthcare
facilities that do not perform any steps
in tissue manufacture (recovery,
processing, storage, labeling, packaging,
distribution, or donor screening or
testing) are not subject to any FDA
regulation for HCT/Ps.
Because organs and tissues can come
from the same donor, a TSN should
provide the mechanism for
standardizing allograft identifiers,
tracking of organ and tissue receipt,
rapid notification of and response to
potential disease transmissions,
benchmarking of sentinel events and
integration into a national biovigilance
network. Specifically utilizing these
system characteristics, all relevant
recovery, processing, distributing and
implanting institutions could rapidly
communicate when a possible disease
transmission is identified. This may
prevent any further use of allografts
with transmissible diseases in
additional recipients after a problem is
recognized and allow for earlier
initiation of treatment or prophylaxis of
recipients, potentially resulting in
reduction of transmission events or
resulting morbidity and mortality.
A national TSN needs to avoid
duplication of the OPTN or of FDA
reporting mechanisms; however,
interfacing with these existing systems
is critical. A national TSN could be
coordinated by CDC in collaboration
with other agencies of the Department of
Health and Human Services (HHS) and
external partners. In addition, HHS has
recognized health information
technology (IT) data and exchange

VerDate Nov<24>2008

16:18 Sep 28, 2009

Jkt 217001

standards to promote the exchange of
health information across the healthcare
landscape. The National Health IT
activities initiated by the HHS Office of
the National Coordinator for Health IT
(ONC) has examined incorporating
reporting criteria into Electronic Health
Records (EHRs) which could assist in
the possible identification and reporting
of public health cases and adverse
events. Reporting criteria which are
incorporated and utilized by EHRs may
include: general and specific reporting
considerations, as well as the
identification of data and events that
may trigger a report, additional
questions that may need to be asked of
reporters, and the identification of
specific data that may need to be
reported. Integrating these requirements
into a national TSN system is vital to
the long term viability of the program.
Tanja Popovic,
Chief Science Officer, Centers for Disease
Control and Prevention.
[FR Doc. E9–23427 Filed 9–28–09; 8:45 am]
BILLING CODE P

DEPARTMENT OF HOMELAND
SECURITY
Office of the Secretary
[Docket No. DHS–2009–0038]

Privacy Act of 1974; Department of
Homeland Security/ALL–004 General
Information Technology Access
Account Records System of Records
Privacy Office; DHS.
Notice of Privacy Act system of
records update.
AGENCY:
ACTION:

SUMMARY: In accordance with the
Privacy Act of 1974 the Department of
Homeland Security proposes to update
and reissue a Department of Homeland
Security system of records notice titled,
Department of Homeland Security/ALL–
004 General Information Technology
Access Account Records System of
Records. As a result of the biennial
review of this system, the Department
proposes to include the addition of
social security numbers in the categories
of records covered by the system for the
purpose of identifying an individual for
system access. Additionally, a new
routine use has been added for the
purpose of sharing with the media
where appropriate. This updated system
will be included in the Department of
Homeland Security’s inventory of
record systems.
DATES: Written comments must be
submitted on or before October 29,
2009.

PO 00000

Frm 00035

Fmt 4703

Sfmt 4703

ADDRESSES: You may submit comments,
identified by Docket Number DHS–
2009–0038 by one of the following
methods:
• Federal e-Rulemaking Portal: http://
www.regulations.gov. Follow the
instructions for submitting comments.
• Fax: 703–483–2999.
• Mail: Mary Ellen Callahan, Chief
Privacy Officer, Privacy Office,
Department of Homeland Security,
Washington, DC 20528.
• Instructions: All submissions
received must include the agency name
and docket number for this rulemaking.
All comments received will be posted
without change to http://
www.regulations.gov, including any
personal information provided.
• Docket: For access to the docket to
read background documents or
comments received go to http://
www.regulations.gov.
FOR FURTHER INFORMATION CONTACT: For
general questions and for privacy issues
please contact: Mary Ellen Callahan
(703–235–0780), Chief Privacy Officer,
Privacy Office, U.S. Department of
Homeland Security, Washington, DC
20528.
SUPPLEMENTARY INFORMATION:

I. Background
As part of its efforts to maintain its
Privacy Act record systems, the
Department of Homeland Security
(DHS) is updating and reissuing a
Department-wide system of records
under the Privacy Act (5 U.S.C. 552a)
for DHS/ALL–004 General Information
Technology Access Account Records
System of Records (73 FR 28139, May
15, 2008). This will ensure that all
components of DHS follow the same
privacy rules for collecting and
handling information technology access
account records. The collection and
maintenance of this information will
assist DHS in managing the
Department’s information technology
access account records.
This system of records is part of DHS’
ongoing record integration and
management efforts. This system
consists of information collected in
order to provide authorized individuals
with access to DHS information
technology resources. This information
includes user name, business affiliation,
account information and passwords.
In accordance with the Privacy Act of
1974, DHS is giving notice that it
proposes to update and reissue a DHS
system of records notice titled, DHS/
ALL–004 General Information
Technology Access Account Records
System of Records. As a result of the
biennial review of this system, the

E:\FR\FM\29SEN1.SGM

29SEN1

Federal Register / Vol. 74, No. 187 / Tuesday, September 29, 2009 / Notices
Department proposes to include the
addition of social security numbers in
the categories of records covered by the
system for the purpose of identifying an
individual for system access.
Additionally, a new routine use has
been added for the purpose of sharing
with the media where appropriate. This
updated system will be included in
DHS’s inventory of record systems.

jlentini on DSKJ8SOYB1PROD with NOTICES

II. Privacy Act
The Privacy Act embodies fair
information principles in a statutory
framework governing the means by
which the United States Government
collects, maintains, uses, and
disseminates individuals’ records. The
Privacy Act applies to information that
is maintained in a ‘‘system of records.’’
A ‘‘system of records’’ is a group of any
records under the control of an agency
for which information is retrieved by
the name of an individual or by some
identifying number, symbol, or other
identifying particular assigned to the
individual. In the Privacy Act, an
individual is defined to encompass
United States citizens and lawful
permanent residents. As a matter of
policy, DHS extends administrative
Privacy Act protections to all
individuals where systems of records
maintain information on U.S. citizens,
lawful permanent residents, and
visitors. Individuals may request access
to their own records that are maintained
in a system of records in the possession
or under the control of DHS by
complying with DHS Privacy Act
regulations, 6 CFR Part 5.
The Privacy Act requires each agency
to publish in the Federal Register a
description denoting the type and
character of each system of records that
the agency maintains, and the routine
uses that are contained in each system
in order to make agency record keeping
practices transparent, to notify
individuals regarding the uses to which
their records are put, and to assist
individuals to more easily find such
files within the agency. Below is the
description of DHS/ALL–004 General
Information Technology Access
Account Records System of Records.
In accordance with 5 U.S.C. 552a(r),
DHS has provided a report of this
system of records to the Office of
Management and Budget and to
Congress.
SYSTEM OF RECORDS:

DHS/ALL–004.
SYSTEM NAME:

Department of Homeland Security
General Information Technology Access
Account Records System of Records.

VerDate Nov<24>2008

16:18 Sep 28, 2009

Jkt 217001

SECURITY CLASSIFICATION:

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

Sensitive but unclassified.

5 U.S.C. 301; 44 U.S.C. 3101; and EO
9397 (SSN).

SYSTEM LOCATION:

Records are maintained at several
Headquarters locations and in
component offices of the Department of
Homeland Security, in both
Washington, DC and field locations.
CATEGORIES OF INDIVIDUALS COVERED BY THE
SYSTEM:

Categories of individuals covered by
this system include:
All persons who are authorized to
access DHS information technology
resources, including employees,
contractors, grantees, private enterprises
and any lawfully designated
representative of the above and
including representatives of Federal,
State, territorial, tribal, local,
international, or foreign government
agencies or entities, in furtherance of
the DHS mission. Also covered by this
system are individuals who serve on
DHS boards and committees;
individuals who have business with
DHS and who have provided personal
information in order to facilitate access
to DHS information technology
resources; and individuals who are
points of contact provided for
government business, operations, or
programs, and the individual(s) they list
as emergency contacts.
CATEGORIES OF RECORDS IN THE SYSTEM:

• Name;
• Social Security Number;
• Business and affiliations;
• Facility positions held;
• Business telephone numbers;
• Cellular phone numbers;
• Pager numbers;
• Numbers where individuals can be
reached while on travel or otherwise
away from the office;
• Citizenship;
• Level of access;
• Home addresses;
• Electronic mail addresses of senders
and recipients;
• Records on access to DHS
computers and networks including user
ID and passwords;
• Date and time of access;
• IP address of access;
• Logs of internet activity and records
on the authentication of the access
request;
• Records on the names and phone
numbers of other contacts; and
• Positions or titles of contacts, their
business/organizational affiliations and
other contact information provided to
the Department that is derived from
other sources to facilitate authorized
access to DHS Information Technology
resources.

PO 00000

Frm 00036

Fmt 4703

Sfmt 4703

49883

PURPOSE(S):

This system will collect a discreet set
of personally identifiable information in
order to provide authorized individuals
access to or interact with DHS
information technology resources. The
information collected by the system will
include full name, user name, account
information, citizenship, business/
organizational affiliation, contact
information, and passwords. Directly
resulting from the use of DHS
information technology resources is the
collection, review, and maintenance of
any logs, audits, or other such security
data regarding the use of such
information technology resources.
The system enables DHS to maintain:
Account information required for
approved access to information
technology; lists of individuals who are
appropriate organizational points of
contact; and lists of individuals who are
emergency points of contact. The system
will also enable DHS to provide
individuals access to certain programs
and meeting attendance and where
appropriate allow for sharing of
information between individuals in the
same operational program to facilitate
collaboration.
ROUTINE USES OF RECORDS MAINTAINED IN THE
SYSTEM, INCLUDING CATEGORIES OF USERS AND
THE PURPOSES OF SUCH USES:

In addition to those disclosures
generally permitted under 5 U.S.C.
552a(b) of the Privacy Act, all or a
portion of the records or information
contained in this system may be
disclosed outside DHS as a routine use
pursuant to 5 U.S.C. 552a(b)(3), limited
by privacy impact assessments, data
sharing, or other agreements, as follows:
A. To the Department of Justice
(including United States Attorney
Offices) or other Federal agency
conducting litigation or in proceedings
before any court, adjudicative or
administrative body, when it is
necessary to the litigation and one of the
following is a party to the litigation or
has an interest in such litigation:
1. DHS or any component thereof;
2. Any employee of DHS in his/her
official capacity;
3. Any employee of DHS in his/her
individual capacity where DOJ or DHS
has agreed to represent the employee; or
4. The United States or any agency
thereof, is a party to the litigation or has
an interest in such litigation, and DHS
determines that the records are both
relevant and necessary to the litigation
and the use of such records is

E:\FR\FM\29SEN1.SGM

29SEN1

jlentini on DSKJ8SOYB1PROD with NOTICES

49884

Federal Register / Vol. 74, No. 187 / Tuesday, September 29, 2009 / Notices

compatible with the purpose for which
DHS collected the records.
B. To a congressional office from the
record of an individual in response to
an inquiry from that congressional office
made at the request of the individual to
whom the record pertains.
C. To the National Archives and
Records Administration or other Federal
government agencies pursuant to
records management inspections being
conducted under the authority of 44
U.S.C. 2904 and § 2906.
D. To an agency, organization, or
individual for the purpose of performing
audit or oversight operations as
authorized by law, but only such
information as is necessary and relevant
to such audit or oversight function.
E. To appropriate agencies, entities,
and persons when:
1. DHS suspects or has confirmed that
the security or confidentiality of
information in the system of records has
been compromised;
2. The Department has determined
that as a result of the suspected or
confirmed compromise there is a risk of
harm to economic or property interests,
identity theft or fraud, or harm to the
security or integrity of this system or
other systems or programs (whether
maintained by DHS or another agency or
entity) or harm to the individual that
rely upon the compromised
information; and
3. The disclosure made to such
agencies, entities, and persons is
reasonably necessary to assist in
connection with DHS’s efforts to
respond to the suspected or confirmed
compromise and prevent, minimize, or
remedy such harm.
F. To contractors and their agents,
grantees, experts, consultants, and
others performing or working on a
contract, service, grant, cooperative
agreement, or other assignment for DHS,
when necessary to accomplish an
agency function related to this system of
records. Individuals provided
information under this routine use are
subject to the same Privacy Act
requirements and limitations on
disclosure as are applicable to DHS
officers and employees.
G. To an appropriate Federal, State,
tribal, local, international, or foreign law
enforcement agency or other appropriate
authority charged with investigating or
prosecuting a violation or enforcing or
implementing a law, rule, regulation, or
order, where a record, either on its face
or in conjunction with other
information, indicates a violation or
potential violation of law, which
includes criminal, civil, or regulatory
violations and such disclosure is proper

VerDate Nov<24>2008

16:18 Sep 28, 2009

Jkt 217001

and consistent with the official duties of
the person making the disclosure.
H. To sponsors, employers,
contractors, facility operators, grantees,
experts, and consultants in connection
with establishing an access account for
an individual or maintaining
appropriate points of contact and when
necessary to accomplish a DHS mission
function or objective related to this
system of records.
I. To other individuals in the same
operational program supported by an
information technology system, where
appropriate notice to the individual has
been made that his or her contact
information will be shared with other
members of the same operational
program in order to facilitate
collaboration.
J. To Federal agencies such as Office
of Personnel Management, the Merit
Systems Protection Board, the Office of
Management and Budget, Federal Labor
Relations Authority, Government
Accountability Office, and the Equal
Employment Opportunity Commission
in the fulfillment of these agencies’
official duties.
K. To international, Federal, State and
local, tribal, private and/or corporate
entities for the purpose of the regular
exchange of business contact
information in order to facilitate
collaboration for official business.
L. To appropriate agencies, entities,
and persons when: It is suspected or
confirmed that the security or
confidentiality of information in the
system of records has been
compromised; DHS has determined that,
as a result of the suspected or confirmed
compromise, there is a risk of harm to
economic or property interests, identity
theft or fraud, or harm to the security or
integrity of this system or other systems
or programs (whether maintained by
DHS or another agency or entity) that
rely upon the compromised
information; and the disclosure is made
to such agencies, entities, and persons
who are reasonably necessary to assist
in DHS’s efforts to respond to the
suspected or confirmed compromise
and prevent, minimize, or remedy such
harm.
M. To the news media and the public,
with the approval of the Chief Privacy
Officer in consultation with counsel,
when there exists a legitimate public
interest in the disclosure of the
information or when disclosure is
necessary to preserve confidence in the
integrity of DHS or is necessary to
demonstrate the accountability of DHS’s
officers, employees, or individuals
covered by the system, except to the
extent it is determined that release of
the specific information in the context

PO 00000

Frm 00037

Fmt 4703

Sfmt 4703

of a particular case would constitute an
unwarranted invasion of personal
privacy.
DISCLOSURE TO CONSUMER REPORTING
AGENCIES:

None.
POLICIES AND PRACTICES FOR STORING,
RETRIEVING, ACCESSING, RETAINING, AND
DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:

Records in this system are on paper
and/or in digital or other electronic
form. Digital and other electronic
images are stored on a storage area
network in a secured environment.
Records, whether paper or electronic,
may be stored at the DHS Headquarters
or at the component level.
RETRIEVABILITY:

Information may be retrieved, sorted,
and/or searched by an identification
number assigned by computer, social
security number, by facility, by business
affiliation, e-mail address, or by the
name of the individual, or other
employee data fields previously
identified in this SORN.
SAFEGUARDS:

Information in this system is
safeguarded in accordance with
applicable laws, rules and policies,
including the DHS Information
Technology Security Program Handbook
and DHS Information Security Program
Policy and Handbook. Further,
Department of Homeland Security/ALL–
004 General Information Technology
Access Account Records system of
records security protocols will meet
multiple National Institute of Standards
and Technology (NIST) Security
Standards from Authentication to
Certification and Accreditation. Records
in the Department of Homeland
Security/ALL–004 General Information
Technology Access Account Records
system of records will be maintained in
a secure, password protected electronic
system that will utilize security
hardware and software to include:
multiple firewalls, active intruder
detection, and role-based access
controls. Additional safeguards will
vary by component and program. All
records are protected from unauthorized
access through appropriate
administrative, physical, and technical
safeguards. These safeguards include:
restricting access to authorized
personnel who have a ‘‘need to know;’’
using locks; and password protection
identification features. Classified
information is appropriately stored in
accordance with applicable
requirements. DHS file areas are locked

E:\FR\FM\29SEN1.SGM

29SEN1

Federal Register / Vol. 74, No. 187 / Tuesday, September 29, 2009 / Notices
after normal duty hours and the
facilities are protected from the outside
by security personnel.
RETENTION AND DISPOSAL:

Records are securely retained and
disposed of in accordance with the
National Archives and Records
Administration’s General Records
Schedule 24, section 6, ‘‘User
Identification, Profiles, Authorizations,
and Password Files.’’ Inactive records
will be destroyed or deleted 6 years after
the user account is terminated or
password is altered, or when no longer
needed for investigative or security
purposes, whichever is later.
SYSTEM MANAGER AND ADDRESS:

For Headquarters and components of
DHS, the System Manager is the Chief
Privacy Officer and Chief Freedom of
Information Act Officer, Privacy Office,
Department of Homeland Security,
Washington, DC 20528. For components
of DHS, the System Manager can be
found at http://www.dhs.gov/foia under
‘‘contacts.’’

jlentini on DSKJ8SOYB1PROD with NOTICES

NOTIFICATION PROCEDURE:

Individuals seeking notification of
and access to any record contained in
this system of records, or seeking to
contest its content, may submit a
request in writing to the Headquarters’
or component’s FOIA Officer, whose
contact information can be found at
http://www.dhs.gov/foia under
‘‘contacts.’’ If an individual believes
more than one component maintains
Privacy Act records concerning him or
her, the individual may submit the
request to the Chief Privacy Officer and
Chief Freedom of Information Act
Officer, Privacy Office, Department of
Homeland Security, 245 Murray Drive,
SW., Building 410, STOP–0655,
Washington, DC 20528.
When seeking records about yourself
from this system of records or any other
Departmental system of records, your
request must conform with the Privacy
Act regulations set forth in 6 CFR Part
5. You must first verify your identity,
meaning that you must provide your full
name, current address and date and
place of birth. You must sign your
request, and your signature must either
be notarized or submitted under 28
U.S.C. 1746, a law that permits
statements to be made under penalty of
perjury as a substitute for notarization.
While no specific form is required, you
may obtain forms for this purpose from
the Chief Privacy Officer and Chief
Freedom of Information Act Officer,
http://www.dhs.gov or 1–866–431–0486.
In addition you should provide the
following:

VerDate Nov<24>2008

16:18 Sep 28, 2009

Jkt 217001

• An explanation of why you believe
the Department would have information
on you;
• Identify which component(s) of the
Department you believe may have the
information about you;
• Specify when you believe the
records would have been created;
• Provide any other information that
will help the FOIA staff determine
which DHS component agency may
have responsive records; and
• If your request is seeking records
pertaining to another living individual,
you must include a statement from that
individual certifying his/her agreement
for you to access his/her records.
Without this bulleted information the
component(s) may not be able to
conduct an effective search, and your
request may be denied due to lack of
specificity or lack of compliance with
applicable regulations.
RECORD ACCESS PROCEDURES:

A request for access to records in this
system may be made by writing to the
System Manager, identified above, in
conformance with 6 CFR Part 5, which
provides the rules for requesting access
to Privacy Act records maintained by
DHS.
CONTESTING RECORD PROCEDURES:

Same as ‘‘Records Access Procedures’’
above.
RECORD SOURCE CATEGORIES:

Information contained in this system
is obtained from affected individuals/
organizations/facilities, public source
data, other government agencies and/or
information already in other DHS
records systems.
EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.
Dated: September 23, 2009.
Mary Ellen Callahan
Chief Privacy Officer, Department of
Homeland Security.
[FR Doc. E9–23513 Filed 9–28–09; 8:45 am]
BILLING CODE 9110–9B–P

DEPARTMENT OF HOMELAND
SECURITY
U.S. Citizenship and Immigration
Services
Agency Information Collection
Activities: Form I–129F; Extension of
an Existing Information Collection;
Comment Request
ACTION: 60-Day Notice of Information
Collection Under Review; Form I–129F,
Petition for Alien Fiance(e); OMB
Control No. 1615–0001.

PO 00000

Frm 00038

Fmt 4703

Sfmt 4703

49885

The Department of Homeland
Security, U.S. Citizenship and
Immigration Services (USCIS) has
submitted the following information
collection request for review and
clearance in accordance with the
Paperwork Reduction Act of 1995. The
information collection is published to
obtain comments from the public and
affected agencies. Comments are
encouraged and will be accepted for
sixty days until November 30, 2009.
During this 60 day period, USCIS will
be evaluating whether to revise the
Form I–129F. Should USCIS decide to
revise Form I–129F we will advise the
public when we publish the 30-day
notice in the Federal Register in
accordance with the Paperwork
Reduction Act. The public will then
have 30 days to comment on any
revisions to the Form I–129F.
Written comments and/or suggestions
regarding the item(s) contained in this
notice, especially regarding the
estimated public burden and associated
response time, should be directed to the
Department of Homeland Security
(DHS), USCIS, Chief, Regulatory
Products Division, Clearance Officer,
111 Massachusetts Avenue, NW.,
Washington, DC 20529–2210.
Comments may also be submitted to
DHS via facsimile to 202–272–8352 or
via e-mail at rfs.regs@dhs.gov When
submitting comments by e-mail, please
make sure to add OMB Control No.
1615–0001 in the subject box. Written
comments and suggestions from the
public and affected agencies concerning
the collection of information should
address one or more of the following
four points:
(1) Evaluate whether the proposed
collection of information is necessary
for the proper performance of the
functions of the agency, including
whether the information will have
practical utility;
(2) Evaluate the accuracy of the
agencies estimate of the burden of the
proposed collection of information,
including the validity of the
methodology and assumptions used;
(3) Enhance the quality, utility, and
clarity of the information to be
collected; and
(4) Minimize the burden of the
collection of information on those who
are to respond, including through the
use of appropriate automated,
electronic, mechanical, or other
technological collection techniques or
other forms of information technology,
e.g., permitting electronic submission of
responses.

E:\FR\FM\29SEN1.SGM

29SEN1