CFPB.004, CFPB Enforcement Database

Consumer Financial Protection Bureau CFPB http://www.gpo.gov/fdsys/pkg/FR-2011-08-01/pdf/2011-19424.pdf CFPB.004, CFPB Enforcement Database http://www.gpo.gov/fdsys/pkg/FR-2011-08-01/pdf/2011-19426.pdf CFPB.006, CFPB Social Networks and Citizen Engagement System http://www.gpo.gov/fdsys/pkg/FR-2011-08-01/pdf/2011-19427.pdf CFPB.003, CFPB Non-depository Supervision Database http://www.gpo.gov/fdsys/pkg/FR-2011-08-01/pdf/2011-19425.pdf CFPB.007, CFPB Directory Database http://www.gpo.gov/fdsys/pkg/FR-2011-08-01/pdf/2011-19428.pdf CFPB.002, CFPB Depository Institution Supervision Database http://www.gpo.gov/fdsys/pkg/FR-2011-08-01/pdf/2011-19429.pdf CFPB.001, CFPB Freedom of Information Act/Privacy Act System http://www.gpo.gov/fdsys/pkg/FR-2011-11-04/pdf/2011-28594.pdf CFPB.008, CFPB Transit Subsidy Program http://www.gpo.gov/fdsys/pkg/FR-2011-11-04/pdf/2011-28596.pdf CFPB.005, CFPB Consumer Response System http://www.gpo.gov/fdsys/pkg/FR-2011-11-17/pdf/2011-29689.pdf CFPB.009, Employee Administrative Records System http://www.gpo.gov/fdsys/pkg/FR-2011-12-21/pdf/2011-32718.pdf CFPB.011, CFPB Correspondence Tracking Database

.001 CFPB Freedom of Information Act/Privacy Act System.

Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.

Individuals covered by this system are persons who cite the Freedom of Information Act or Privacy Act to request access to records or whose information requests are treated as FOIA requests. Other individuals covered include CFPB staff assigned to process such requests, and employees who may have responsive records or are mentioned in such records. FOIA requests are subject to the PA only to the extent that they concern individuals; information pertaining to corporations and other business entities and organizations are not subject to the PA.

Records in the system may contain: (1) Correspondence with the requester including initial requests and appeals; (2) documents generated or compiled during the search and processing of the request; (3) fee schedules, cost calculations, and accessed cost for disclosed FOIA records; (4) documents and memoranda supporting the decision made in response to the request, referrals, and copies of records provided or withheld; (5) CFPB staff assigned to process, consider, and respond to requests and, where a request has been referred to another agency with equities in a responsive document, information about the individual handling the request on behalf of that agency; (6) information identifying the entity that is subject to the requests or appeals; (7) requester information, including name, address, phone number, email address; FOIA tracking number, phone number, fax number, or some combination thereof; and (8) for access requests under the Privacy Act, identifying information regarding both the party who is making the written request or appeal, and the individual on whose behalf such written requests or appeals are made, including name, social security number (SSNs may be submitted with documentation or as proof of identification), address, phone number, email address, FOIA number, phone number, fax number, or some combination thereof.

Pub. L. 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511; The Freedom of Information Act of 1996, as amended 5 U.S.C. 552; Privacy Act of 1974, as amended 5 U.S.C. 552a.[1]

[1] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB. Pursuant to that authority, Treasury published rules on the Disclosure of Records and Information within 12 CFR Chapter X. This SORN is published pursuant to those rules and the Privacy Act.

The information in the system is being collected to enable the CFPB to carry out its responsibilities under the FOIA and the PA, including enabling staff to receive, track, and respond to requests. This requires maintaining documentation gathered during the consideration and disposition process, administering annual reporting requirements, managing FOIA-related fees and calculations, and delivering responsive records.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the CFR to:

(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB"s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;

(2) Another Federal or state agency to: (a) Permit a decision as to access, amendment, or correction of records to be made in consultation with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to or amendment or correction of records;

(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or activities;

(6) Any authorized agency or component of the Department of Treasury, the Department of Justice, the Federal Reserve System, the Federal Deposit Insurance Corporation or other law enforcement authorities including disclosure by such authorities:

(a) To the extent relevant and necessary in connection with litigation in proceedings before a court or other adjudicative body, where (i) The United States is a party to or has an interest in the litigation, including where the agency, or an agency component, or an agency official or employee in his or her official capacity, or an individual agency official or employee whom the Department of Justice or the Bureau has agreed to represent, is or may likely become a party, and (ii) the litigation is likely to affect the agency or any component thereof; or

(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;

(7) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

(8) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings; and

(9) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or witnesses in the course of investigations, to the extent necessary to secure information relevant to the investigation.

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including, but not limited to, the requester"s name, the subject matter of request, requestor"s organization, FOIA tracking number, and staff member assigned to process the request. Records may also be searched by the address, phone number, fax number, e-mail address of the requesting party, and subject matter of the request, or by some combination thereof.

Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.

Computer and paper records will be maintained in accordance with published National Archives and Records Administration Disposition Schedule, Transmittal No. 22, General Records Schedule 14, Information Service Records.

Consumer Financial Protection Bureau, Chief FOIA Officer, 1801 L Street, NW., Washington, DC 20036.

Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information." Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1801 L St., NW., Washington, DC 20036.

See "Notification Procedure" above.

Information in this system covers individuals about whom records are maintained; agency staff assigned to help process, consider, and respond to the request, including any appeals; entities filing requests or appeals on behalf of the requestor; other governmental authorities; and entities that are the subjects of the request or appeals.

None.

.002 CFPB Depository Institution Supervision Database.

Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.

Individuals covered by this system are: (1) Individuals who themselves are, and current and former directors, officers, employees, agents, shareholders, and independent contractors of banks, savings associations, or credit unions; (2) Current and former consumers who are or have been in the past serviced by banks, savings associations, or credit unions subject to the supervision of the CFPB; and (3) CFPB employees assigned to supervise banks, savings associations, or credit unions. Information collected regarding consumer products and services is subject to the Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other business entities is not subject to the Privacy Act.

Records in the system may contain information provided by a supervised institution, by individuals who are or have been serviced by a supervised institution, or other government authorities, to the CFPB in the exercise of CFPB"s responsibilities and used to assess an institution"s compliance with various statutory and regulatory obligations. This may include: (1) Personally identifiable information from customers of banks, savings associations, or credit unions, including without limitation, name, account numbers, address, phone number, e-mail address, and date of birth; (2) contact information of officials of institutions such as members of the Board of Directors, Audit Committee Chair, Chief Executive Officer, Chief Compliance Officer, Internal Auditor, and Independent Auditor including, without limitation, name, address, phone number and e-mail address; (3) information about CFPB employees assigned to depository institution supervision tasks, including, without limitation, name, phone number, e-mail address, address, and other employment information; and (4) Confidential Supervision Information or Personal Information, including information relating to individuals that is derived from Confidential Supervisory Information or from consumer complaints. This information may include, without limitation, reports of examinations and associated documentation regarding compliance with consumer financial protection laws; documents assessing the current and past safety and soundness/risk management of a covered person or service provider; reports of consumer complaints; and correspondence relating to any category of information discussed above and actions taken to remedy deficiencies in these areas.

Information contained in the Depository Institution Supervision Database is collected from a variety of sources, including, without limitation: (1) The individuals who own, control, or work for covered persons or service providers; (2) existing databases maintained by other Federal and state regulatory associations, law enforcement agencies, and related entities; (3) third parties with relevant information about covered persons or services providers; and (4) information generated by CFPB employees or about CFPB employees assigned supervisory tasks. Whenever practicable, the CFPB will collect information about an individual directly from that individual.

Public Law 111-203, Title X, Section 1011, 1012, 1021, 1025, codified at 12 U.S.C. 5491, 5492, 5511, 5515.[1]

The information in the system is being collected to enable the CFPB to carry out its responsibilities with respect to banks, savings associations, credit unions, and their affiliates and service providers, including the coordination and conduct of examinations, supervisory evaluations and analyses, enforcement actions, actions in Federal court, and coordination with other financial regulatory agencies. The information collected in this system will also support the conduct of investigations or be used as evidence by the CFPB or other supervisory or law enforcement agencies. This may result in criminal referrals, referral to the Federal Reserve Office of Inspector General, or the initiation of administrative or Federal court actions. This system will track and store examination and inspection documents created during the performance of the CFPB"s statutory duties. This system also will enable the CFPB to monitor and coordinate regular examinations and required reports, supervisory evaluations and analyses, and enforcement actions internally and with other Federal and state regulators.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the CFR to:

(2) Another Federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to, or amendment or correction of records;

(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

(8) A grand jury pursuant either to a Federal or state grand jury subpoena, or to a prosecution request that such record be released for the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;

(9) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings;

(10) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or witnesses in the course of investigations, to the extent necessary to secure information relevant to the investigation;

(11) Appropriate Federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and

(12) An entity or person that is the subject of supervision or enforcement activities including examinations, investigations, administrative proceedings, and litigation, and the attorney or non-attorney representative for that entity or person.

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including without limitation the individual"s name, complaint/inquiry case number, address, account number, transaction number, phone number, date of birth, or by some combination thereof.

The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the CFPB"s records disposition schedule.

Consumer Financial Protection Bureau, Assistant Director of Large Bank Supervision, 1801 L Street, NW., Washington, DC 20036.

See "Notification Procedures" above.

Information in this system is obtained from banks, savings associations, credit unions, and their affiliates and service providers, persons subject to the CFPB"s authority, and current, former, and prospective consumers who are or have been customers or prospective customers of covered persons, and others with information relevant to the enforcement of Federal consumer financial laws.

Portions of the records in this system are compiled for law enforcement purposes and are exempt from disclosure under CFPB"s Privacy Act regulations and 5 U.S.C. 552a(k)(2). Federal criminal law enforcement investigatory reports maintained as part of this system may be the subject of exemptions imposed by the originating agency pursuant to 5 U.S.C. 552a(j)(2).

.003 CFPB Non-depository Supervision Database.

Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.

Individuals covered by this system are: (1) Individuals who themselves are current and former directors, officers, employees, agents, shareholders, and independent contractors of non-depository covered persons subject to the supervision of the CFPB; (2) Current and former consumers who are or have been in the past serviced by non-depository covered persons subject to the supervision of the CFPB; and (3) CFPB employees assigned to supervise non-depository covered persons. Information collected regarding consumer products and services is subject to the Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other organizations is not subject to the Privacy Act.

Records in the system may contain information provided by a covered person, by individuals who are or have been serviced by a covered person, or other governmental authorities, to the CFPB in the exercise of the CFPB"s responsibilities and used to assess a covered person"s compliance with various statutory and regulatory obligations. This may include: (1) Personally identifiable information from customers of non-depository covered persons, including without limitation, name, social security number, account numbers, address, phone number, email address, and date of birth; (2) contact information for officials of non-depository covered persons such as members of the Board of Directors, Audit Committee Chair, Chief Executive Officer, Chief Compliance Officer, Internal Auditor, and Independent Auditor including, without limitation, name, address, phone number and email address; (3) information about CFPB employees assigned supervision tasks for non-depository covered persons; and (4) confidential supervision information or personal information, including information relating to individuals that is derived from such information or from consumer complaints. This information may include, without limitation, reports of examinations and associated documentation regarding compliance with consumer financial law; documents assessing the current and past safety and soundness/risk management of a covered person or service provider; reports of consumer complaints; and correspondence relating to any category of information discussed above and actions taken to remedy deficiencies in these areas.

Information contained in the Non-depository Supervision Database is collected from a variety of sources, including, without limitation: (1) The individuals who own, control, or work for covered persons or service providers; (2) existing databases maintained by other federal and state regulatory associations, law enforcement agencies, and related entities; (3) third-parties with relevant information about covered persons or service providers; and (4) information generated by CFPB employees. Whenever practicable, the CFPB will collect information about an individual directly from that individual.

Public Law 111-203, Title X, Section 1011, 1012, 1021, 1024, codified at 12 U.S.C. 5491, 5492, 5511, 5514.[1]

The information in the system is being collected to enable the CFPB to carry out its responsibilities with respect to non-depository covered persons and service providers, including the coordination and conduct of examinations, supervisory evaluations and analyses, enforcement actions, actions in federal court, and coordination with other financial regulatory agencies. The information collected in this system will also support the conduct of investigations or could be used as evidence by the CFPB or other supervisory or law enforcement agencies. This may result in criminal referrals, referral to the Federal Reserve Office of the Inspector General, or the initiation of administrative or federal court actions. This system will track and store examination and inspection documents created during the performance of the CFPB"s statutory duties. This system also will enable the CFPB to monitor and coordinate regular examinations and required reports, supervisory evaluations and analyses, and enforcement actions internally and with other federal and state regulators.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the CFR to:

(1) Appropriate agencies, entities, and persons when: (a) the CFPB suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB"s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;

(2) Another federal or state agency to: (a) permit a decision as to access, amendment or correction of records to be made in consultation with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to or amendment or correction of records;

(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(a) To the extent relevant and necessary in connection with litigation in proceedings before a court or other adjudicative body, where (i) the United States is a party to or has an interest in the litigation, including where the agency, or an agency component, or an agency official or employee in his or her official capacity, or an individual agency official or employee whom the Department of Justice or the Bureau has agreed to represent, is or may likely become a party, and (ii) the litigation is likely to affect the agency or any component thereof; or

(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

(8) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;

(11) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including, but not limited to, the individual"s name, complaint/inquiry case number, address, account number, transaction number, phone number, date of birth, or by some combination thereof.

Access to electronic records is restricted to authorized personnel who have been issued non-transferable access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.

The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the CFPB"s records disposition schedule.

Consumer Financial Protection Bureau, Assistant Director of Nonbank Supervision,1801 L Street, NW., Washington, DC 20036.

See "Notification Procedures" above.

Information in this system is obtained from covered persons subject to the CFPB"s authority, and current, former, and prospective consumers who are or have been customers or prospective customers of covered persons, and others with information relevant to the enforcement of federal consumer financial laws.

Portions of the records in this system are complied for law enforcement purposes and are exempt from disclosure under the CFPB"s Privacy Act regulations and 5 U.S.C. 552a(k)(2). Federal criminal law enforcement investigatory reports maintained as part of this system may be the subject of exemptions imposed by the originating agency pursuant to 5 U.S.C. 552a(j)(2).

.004 CFPB Enforcement Database.

Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.

Covered individuals include:

(1) Individuals who are current or former directors, officers, employees, shareholders, agents, and independent contractors of covered persons or service providers, who are or have been the subjects of or otherwise associated with an investigation or enforcement action by the CFPB, or have been named in connection with suspicious activity reports or administrative enforcement orders or agreement. Covered persons and service providers include banks, savings associations, credit unions, thrifts, non-depository institutions, or other persons, offering, providing, or assisting with the provision of consumer financial products or services.

(2) Current, former, and prospective consumers who are or have been customers or prospective customers of, solicited by, or serviced by covered persons or service providers if such individuals have provided information, including complaints about covered persons or service providers, or are or have been witnesses in or otherwise associated with an enforcement action by the CFPB.

(3) Applicants, current and former directors, officers, employees, shareholders, agents, and independent contractors of persons and entities that have business relationships with covered persons or service providers who are or have been the subject of an enforcement action by the CFPB.

(4) Current, former, and prospective customers of persons and entities that have business relationships with covered persons or service providers that are or have been the subject of an enforcement action by the CFPB, and the customers are complainants against covered persons or service providers, or witnesses in or otherwise associated with an enforcement action.

(5) Other individuals who have inquired about or may have information relevant to an investigation or proceeding concerning a possible violation of federal consumer financial law. Information collected regarding consumer financial products and services is subject to the Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other business entities and aggregate, non-identifiable information is not subject to the Privacy Act.

Records maintained in the system may contain: Identifiable information about individuals such as name, address, e-mail address, phone number, social security number, employment status, age, date of birth, financial information, credit information, and personal history. Records in this system are collected and generated during the investigation of potential violations and enforcement of laws and regulations under the jurisdiction of the CFPB and may include (1) Records provided to the CFPB about potential or pending investigations, administrative proceedings, and civil litigation; (2) evidentiary materials gathered or prepared by the CFPB or obtained for use in investigations, proceedings, or litigation, and work product derived from or related thereto; (3) staff working papers, memoranda, analyses, databases, and other records and work product relating to possible or actual investigations, proceedings, or litigation; (4) databases, correspondence, and reports tracking the initiation, status, and closing of investigations, proceedings, and litigation; (5) correspondence and materials used by the CFPB to refer criminal and other matters to the appropriate agency or authority, and records reflecting the status of any outstanding referrals; (6) correspondence and materials shared between the CFPB and other federal and state agencies; (7) consumer complaints made or referred to the CFPB.

Public Law 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511.[1]

The information in the system is being collected to enable the CFPB to carry out its responsibilities with respect to enforcement of Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act and other federal consumer financial law, including: (1) The investigation of potential violations of federal consumer financial law; (2) the pursuit of administrative or civil enforcement actions; and (3) the referral of matters, as appropriate, to the Department of Justice or other federal or state agencies.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the CFR to:

(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB"s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;

(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to, or amendment or correction of records;

(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job or other activity on behalf of the CFPB or Federal Government and who have a need to access information in the performance of their duties or activities;

(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including without limitation the individual"s name, address, account number, social security number, transaction number, phone number, date of birth, or by some combination thereof.

The CFPB will maintain computer and paper records indefinitely until the National Archives and Record Administration approves the CFPB"s records disposition schedule.

The Consumer Financial Protection Bureau, Assistant Director for Enforcement, 1801 L Street, NW., Washington, DC 20036.

See "Notification Procedures" above.

Information in this system is obtained from banks, savings associations, credit unions, or non-depository institutions or other persons offering or providing consumer financial products or services, current, former, and prospective consumers who are or have been customers or prospective employees and agents of such persons, and current, former, and prospective customers of such entities and persons, and others with information relevant to the enforcement of federal consumer financial laws.

Portions of the records in this system are complied for law enforcement purposes and are exempt from disclosure under CFPB"s Privacy Act regulations and 5 U.S.C. 552a(k)(2). Federal criminal law enforcement investigatory reports maintained as part of this system may be the subject of exemptions imposed by the originating agency pursuant to 5 U.S.C. 552a(j)(2).

.005 CFPB Consumer Response System.

Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20006.

Individuals covered by this system are individuals who submit complaints or inquiries to the CFPB (on their own or others" behalf); individuals on whose behalf complaints or inquiries are submitted by others (such as attorneys, members of Congress, third party advocates, and/or other governmental organizations); and individuals or employees of entities about whom complaints or inquiries have been received by prudential regulators, the Federal Trade Commission, other federal agencies, state agencies or the CFPB. The term "prudential regulators" refers to any federal banking agency, as that term is defined in section 3 of the Federal Deposit Insurance Act, and the National Credit Union Administration. Information collected regarding consumer products and services is subject to the Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other business entities and organizations is not subject to the Privacy Act.

Records in the system may contain: (1) Correspondence or other information received; (2) information from the entity or individual referring the inquiry or complaint; (3) records created of verbal communications by or with complainants or other individuals; (4) information regarding third party advocates or others who submit complaints or inquiries on another"s behalf; (5) information identifying the entity that is subject to the complaint or inquiry or its employees; (6) communication with or by the entity that is subject to the complaint or inquiry or its employees; (7) unique identifiers, codes, and descriptors categorizing each complaint or inquiry file; (8) information about how complaints or inquiries were responded to or referred, including any resolution; (9) records used to respond to or refer complaints or inquiries, including information in the CFPB"s other systems of records; and (10) identifiable information regarding both the individual who is making the inquiry or complaint, and the individual on whose behalf such inquiry or complaint is made, and employees of the entity about which the complaint or inquiry was made, including name, social security number, account numbers, address, phone number, email address, date of birth.

Pub. L. 111-203, Title X, Sections 1011, 1012, 1013(b)(3), 1021, 1034, codified at 12 U.S.C. 5491, 5492, 5493(b)(3), 5511, 5534.[1]

[1] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB. Pursuant to that authority, Treasury published interim final rules on the Disclosure of Records and Information within 12 CFR chapter X. This SORN is published pursuant to those rules and the Privacy Act.

The information in the system is being collected to enable the CFPB to receive, respond to, and refer complaints or inquiries regarding consumer financial products or services. The system serves as a record of the complaint or inquiry, and is used for collecting complaint or inquiry data; responding to or referring the complaint or inquiry; aggregating data that will be used to inform other functions of the CFPB and, as appropriate, other agencies and/or the public; and preparing reports as required by law. This system consists of complaints or inquiries received by the CFPB or other entities and information concerning responses to or referrals of these complaints or inquiries, as appropriate.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the CFR to:

(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings;

(8) Appropriate agencies, entities, and persons, to the extent necessary to obtain information needed to investigate, resolve, respond, or refer to a complaint or inquiry;

(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license;

(10) An entity or person that is the subject of the complaint or inquiry and the counsel or non-attorney representative for that entity or person; and

(11) Federal and state agencies for the purpose of facilitating the data sharing requirements described in 12 U.S.C. 5493(b)(3)(D) concerning consumer financial products and services complaints.

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including without limitation the individual"s name, social security number, complaint/inquiry case number, address, account number, transaction number, phone number, date of birth, or by some combination thereof.

The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the CFPB"s records disposition schedule.

The Consumer Financial Protection Bureau, Assistant Director of Response Center, 1700 G Street NW., Washington, DC 20006.

See "Notification Procedures" above.

Information in this system is obtained from individuals and entities filing complaints and inquiries, other governmental authorities, and entities that are the subjects of complaints and inquiries.

None.

.006 CFPB Social Networks and Citizen Engagement System.

Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.

Users of social media who interact with the CFPB through various social media outlets, including but not limited to third-party sites and services such as Facebook, Twitter, YouTube, and Flickr. Other covered individuals may include those who sign on to various parts of the CFPB web site with a user identity provided by a third-party, such as Disqus. These may be members of the public, employees, or contractors.

Records maintained in the system may contain information that an individual shares with the CFPB through various social media sites and services. They may also contain information that is stored to ensure that an individual can access web sites where a login is required. This may include without limitation: name, username, email address, birth date, security questions, IP addresses, location, passwords, authentication, business affiliation, demographic information, videos, photos, and other general information.

Public Law 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511. OMB Open Government Directive, M-10-06, Dec. 8, 2009. Presidential Memorandum to the Heads of Executive Departments and Agencies on Transparency and Open Government, January 21, 2009. OMB Guidance for Online Use of Web Measurement and Customization Technologies, M-10-22, June 25, 2010. OMB Guidance for Agency Use of Third-Party Websites and Applications, M-10-23, June 25, 2010. Executive Order 13571, Streamlining Service Delivery and Improving Customer Service, April 27, 2011.[1]

The information in the system is being collected to facilitate internal and external interactions concerning the CFPB and CFPB programs. The use of social media platforms will increase collaboration and transparency with the public, as well as employees and contractors. The use of social media will enable the CFPB to interact with the public in effective and meaningful ways, encourage the wide sharing of consumer financial information and the strengthening of an online community of consumers, and ensure that critical information about the agency and key consumer finance issues is distributed.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the CFR to:

(1) Appropriate agencies, entities, and persons when (a) the CFPB suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB"s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;

(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

Storage:

Paper and electronic records.

Records are retrievable by full-text search. Records may also be retrieved by personal identifiers which may include without limitation: name, username, e-mail address, IP addresses, geographic information, and demographic information.

Access to electronic records that are not otherwise available to the general public by virtue of their presence on social media sites is restricted to authorized personnel who have been issued non-transferrable access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.

The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the CFPB"s records deposition schedule.

Consumer Financial Protection Bureau, Chief Technology Officer, 1801 L Street, NW., Washington, DC 20036.

See "Notification Procedures" above.

Information in this system is obtained from individuals who interact with the CFPB through social media networks or as a result of public outreach.

None.

.007 CFPB Directory Database.

Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.

Individuals covered by this system are: (1) Individuals who directly, indirectly, or acting through or concert with one or more other individuals, own or control an entity offering or providing, or materially assisting in the offering or provision of, consumer financial products or services (collectively, "covered persons" and "service providers"); (2) current and former directors, officers, employees, shareholders, agents, and independent contractors of such entities; (3) other related persons, as necessary, including without limitation, persons who have personal financial arrangements with covered persons, representatives or counsel of covered persons or related persons; and (4) individuals who provide information on covered persons or entities such as employees of state attorneys general offices. Information contained in the Directory Database is subject to the Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other business entities and aggregate, non-identifiable information is not subject to the Privacy Act.

Records maintained in this system may contain, without limitation, the following types of personally identifiable information: name, address, e-mail address, phone number, social security number, alien registration number, passport number, driver"s license or state identification number, or other unique number used to establish identity of the owner or controlling person, employment status, age, gender, ethnicity, and date of birth. Additionally, records may contain information relating to the business activities and transactions of covered persons and entities and their associated persons. Other information may include without limitation: name, location, charter number, charter type, and date of last examination of each entity and the types of financial products offered by each organization.

Information contained in the Directory Database will be collected from a variety of sources, including, without limitation: (1) The individuals who own, control, or work for covered persons or service providers; (2) existing databases maintained by other Federal and state regulatory associations, agencies, and related entities; (3) third-parties with relevant information about covered persons or services providers; and (4) information generated by CFPB employees. Whenever practicable, the CFPB will collect information about an individual directly from that individual.

Pub. L. No. 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511.[1]

The information in the system is being collected to create an agency-wide repository of identifying and registration information concerning entities and their affiliates offering or providing, or materially assisting in the offering or provision of, consumer financial products or services. By ensuring the use of consistent information across the agency, the Directory Database will enable the CFPB to carry out its supervisory, enforcement, and regulatory authorities in an efficient and effective manner.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the CFR to:

(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

(10) Appropriate Federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including without limitation the individual"s name, social security number, passport number, driver"s license or state identification number, or other unique number used to establish identity of the owner or controlling person, address, account number, phone number, or by some combination thereof.

The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the CFPB"s records disposition schedule.

Consumer Financial Protection Bureau, Chief Technology Officer, 1801 L Street, NW., Washington, DC 20036.

See "Notification Procedures" above.

Information in this system is obtained from entities offering or providing consumer financial products or services.

None.

.008 CFPB Transit Subsidy Program.

Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20006.

CFPB employees applying for or who participate in the public transportation transit subsidy program and vanpool transit subsidies to and from the workplace, and applicants for or holders of parking permits.

Records maintained in this system will contain the Transit Subsidy Program application containing the participant or applicant"s name, home address, office address, office telephone number, grade, duty hours, unique numeric identifier chosen by the individual, or the last four of the Social Security number, previous method of transportation to and from the workplace, costs of transportation, and the type of fare subsidy requested including records of parking permit holders. It will include subsidies authorized under the Federal Workforce Transportation Program. Reports will be submitted to the Department of Transportation and to the Bureau of Public Debt in accordance with the CFPB Transit Subsidy Program.

Public Law 111-203; Title X, sections 1012 and 1013, codified at 12 U.S.C. 5492, 5493; [1] Public Law 103-172; Title V, section 1(a), codified at 5 U.S.C. 7902.

The purpose of the information collection is to establish and maintain systems for providing transportation subsidies to employees. This includes mass transportation, vanpools, and parking permits. Information is used to determine the eligibility of applicants for transportation subsidies and to disburse subsidies to eligible employees through the Department of Transportation, and for parking management. The system also enables the CFPB to compare these records with other federal agencies to ensure that employee transportation programs subsidies are not abused.

These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070 et seq., to:

(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

(8) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including, but not limited to, the individual"s name, home address, work organization, location, unique numeric identifier chosen by the individual, or the last four of the Social Security number, mode of transportation, or by some combination thereof.

The CFPB will maintain electronic and paper records in accordance with published National Archives and Records Administration Disposition Schedule, General Records Schedule 9, Federal Employee Transportation Subsidy Program. Temporary. Destroy when 3 years old. (General Records Schedule (GRS) 9, item 7)

The Consumer Financial Protection Bureau, Chief Operating Officer, 1700 G Street NW., Washington, DC 20006.

See "Notification Procedures" above.

Information in this system is maintained about employees who have applied for or hold parking permits, or applied for or participate in the transportation subsidy program, the subsidy program managers and other appropriate agency officials, or other federal agencies.

None.

.009 Employee Administrative Records System.

Consumer Financial Protection Bureau, 1700 G St. NW., Washington, DC 20006.

Current and former CFPB employees and their named dependents and/or beneficiaries, and individuals who have been extended offers of employment.

Records in the system may contain data relating to individuals who have been extended offers of employment, current and former CFPB employees and their named dependents and/or beneficiaries, including but not limited to the following: (1) Identification and contact information; (2) demographic data; (3) payroll data; (4) employment related programs such as performance reports, training, and other information relative to employment by the CFPB; (5) benefits data, such as health, life, travel and disability insurance information; and (6) retirement benefits information.

Pub. L. No. 111-203, Title X, Sections 1012, 1021, codified at 12 U.S.C. §§ 5492, 5511.[1]

The information in the system is being collected to enable the CFPB to administer payroll, benefits, and other employment-related programs including retirement calculations and pay for current and former CFPB employees and their named dependents and/or beneficiaries.

These records may be disclosed, consistent with the CFPB"s rules relating to Disclosure of Records and Information. Rules are promulgated at 12 CFR 1070 et seq to:

(3) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(4) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or activities;

(5) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;

(6) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;

(8) Appropriate agencies, entities, and persons to the extent necessary to obtain information relevant to current and former CFPB employees" benefits, compensation, and employment;

(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organization or agency responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license;

(10) National, state or local income security and retirement agencies or entities involved in administration of employee retirement and benefits programs (e.g., state unemployment compensation agencies and state pension plans) and any of such agencies" contractors or plan administrators, when necessary to determine employee eligibility to participate in retirement or employee benefits programs, process employee participation in those programs, process claims with respect to individual employee participation in those programs, audit benefits paid under those programs, or perform any other administrative function in connection with those programs;

(11) An executor of the estate of a current or former employee, a government entity probating the will of a current or former employee, a designated beneficiary of a current or former employee, or any person who is responsible for the care of a current or former employee, where the employee has died, has been declared mentally incompetent, or is under other legal disability, to the extent necessary to assist in obtaining any employment benefit or working condition for the current or former employee;

(12) The Internal Revenue Service and other governmental entities that are authorized to tax employees" compensation with wage and tax information in accordance with a withholding agreement with the CFPB pursuant to 5 U.S.C. 5516, 5517, and 5520, for the purpose of furnishing employees with IRS Forms W-2 that report such tax distributions;

(13) Unions recognized as exclusive bargaining representatives under the Civil Service Reform Act of 1978, 5 U.S.C. 7111, 7114; and

(14) Carriers, providers and other federal agencies involved in administration of employee retirement and benefits programs and such agencies" contractors or plan administrators, when necessary to determine employee eligibility to participate in retirement and benefits programs, process employee participation in those programs, process claims with respect to individual employee participation in those programs, audit benefits paid under those programs, or perform any other administrative function in connection with those programs and federal agencies that perform payroll and personnel processing and employee retirement and benefits plan services under interagency agreements or contracts, including the issuance of paychecks to employees, the distribution of wages, the administration of deductions from paychecks for retirement and benefits programs, and the distribution and receipt of those deductions. These agencies include, without limitation, the Department of Labor, the Department of Veterans Affairs, the Social Security Administration, the Federal Retirement Thrift Investment Board, the Department of Defense, the Office of Personnel Management, the Board of Governors of the Federal Reserve System, the Department of the Treasury, and the National Finance Center at the U.S. Department of Agriculture.

Storage:

Paper and electronic records.

Records are retrievable by a variety of fields including, without limitation, the individual"s name, social security number, address, account number, transaction number, phone number, date of birth, or by some combination thereof.

Consumer Financial Protection Bureau, Chief Technology Officer, 1700 G St. NW., Washington, DC 20006.

The CFPB will maintain electronic and paper records under the National Archives and Records Administration (NARA) schedules General Records Schedule (GRS) GRS 01 and GRS 02.

Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may inquire in writing in accordance with instructions appearing in 12 CFR 1070.50 et seq. Address such requests to: Chief Privacy Officer, Consumer Financial Protection Bureau, 1700 G St., NW., Washington, DC 20006.

See "Notification Procedures" above.

Information in this system is obtained from individuals and entities associated with benefits, retirement, human resource, and payroll systems administration.

None.

.011 CFPB Correspondence Tracking Database.

Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20006.

Individuals covered by this system are those whose correspondence is submitted to the CFPB and members of the CFPB assigned to help process, review and/or respond to the correspondence.

Records maintained in the database may contain (1) Correspondence (including, without limitation, official letters, memoranda, faxes, telegrams, and emails) received and sent; (2) mailing lists of correspondence submitters; (3) identifying information regarding both the individual who is submitting the correspondence or the individual or entity on whose behalf such correspondence is submitted, such as the individual"s name, phone number, address, email address, and any other disclosed identifiable information; (4) information concerning the CFPB employees responsible for processing the correspondence; (5) correspondence disposition information; (6) correspondence tracking dates; and (7) internal office assignment information. Supporting records may include correspondence between the CFPB and the individual. Records related to consumer complaints will not be contained in this system.

Public Law 111-203, Title X, Sections 1011, 1012, 1013, codified at 12 U.S.C. 5491, 5492, 5493.[2]

[2] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB. Pursuant to that authority, Treasury published rules on the Disclosure of Records and Information within 12 CFR Chapter X. This SORN is published pursuant to those rules and the Privacy Act.

The purpose of the Correspondence Tracking Database is to enable the CFPB to track correspondence, including responsibilities for processing, tracking, responding to, or referring sensitive and/or time-critical correspondence for appropriate processing and responsive action.

These records may be disclosed, consistent with the CFPB Confidentiality Rules, promulgated at 12 CFR part 1070 et seq to:

(2) Another Federal or state agency to: (a) permit a decision as to access, amendment or correction of records to be made in consultation with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to or amendment or correction of records;

(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person"s behalf;

(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;

(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding before a court, adjudicative body, or other administrative body where the use of such information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:

(a) The CFPB;

(b) Any employee of the CFPB in his or her official capacity;

(d) The United States, where the CFPB determines that litigation is likely to affect the Treasury or any of its components;

(7) A grand jury pursuant either to a Federal or state grand jury subpoena, or to a prosecution request that such record be released for the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;

(9) Appropriate agencies, entities, and persons, to the extent necessary to respond to or refer correspondence;

Storage:

Records maintained in this system are stored electronically and in file folders. Paper copies of individual records are made by the authorized CFPB staff.

Records are retrievable by the name of the individual covered by the system, date of correspondence, or correspondence control number or by some combination thereof.

Computer and paper records will be maintained indefinitely until a records disposition schedule is approved by the National Archives and Records Administration.

Consumer Financial Protection Bureau, Executive Secretary 1700 G Street NW., Washington, DC 20006.

Individuals seeking notification and access to any record contained in this database, or seeking to contest its content, may inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information." Address such requests to: Chief Privacy Officer, Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20006.

See "Notification Procedures," above.

Information in this system is maintained about individuals who submit correspondence to CFPB and employees assigned to help process, review, or respond to correspondence.

None.

Systems of Records Published Between January 4, 2010 and December 30, 2011 Banks and Banking DISCLOSURE OF RECORDS AND INFORMATION

Subpart E--Privacy Act

Sec.

§ 1070.50 Purpose and scope; definitions.

(a) This subpart implements the provisions of the Privacy Act of 1974, 5 U.S.C. 552a (the Privacy Act). The regulations apply to all records maintained by the CFPB and which are retrieved by an individual"s name or personal identifier. The regulations set forth the procedures for requests for access to, or amendment of, records concerning individuals that are contained in systems of records maintained by the CFPB. These regulations should be read in conjunction with the Privacy Act, which provides additional information about this topic.

(b) For purposes of this subpart, the following definitions apply:

(1) The term Chief Privacy Officer means the Chief Information Officer of the CFPB or any CFPB employee to whom the Chief Information Officer has delegated authority to act under this part;

(2) The term guardian means the parent of a minor, or the legal guardian of any individual who has been declared to be incompetent due to physical or mental incapacity or age by a court of competent jurisdiction;

(3) Individual means a citizen of the United States or an alien lawfully admitted for permanent residence;

(4) Maintain includes maintain, collect, use, or disseminate;

(5) Record means any item, collection, or grouping of information about an individual that is maintained by an agency, including, but not limited to, his education, financial transactions, medical history, and criminal or employment history and that contains his name or the identifying number, symbol, or other identifying particular assigned to the individual, such as a finger or voiceprint or a photograph;

(6) Routine use means the disclosure of a record that is compatible with the purpose for which it was collected;

(7) System of records means a group of any records under the control of an agency from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifying particular assigned to the individual; and

(8) Statistical record means a record in a system of records maintained for statistical research or reporting purposes only and not used in whole or in part in making any determination about an identifiable individual, except as provided by 13 U.S.C. 8.

§ 1070.51 Authority and responsibilities of the Chief Privacy Officer.

The Chief Privacy Officer is authorized to:

(a) Respond to requests for access to, accounting of, or amendment of records contained in a system of records maintained by the CFPB;

(b) Approve the publication of new systems of records and amend existing systems of record; and

§ 1070.52 Fees.

(a) Copies of records. The CFPB shall provide the requester with copies of records requested pursuant to § 1070.53 of this subpart at the same cost charged for duplication of records under § 1070.22 of this part.

(b) No fee. The CFPB will not charge a fee if:

(1) Total charges associated with a request are less than $5, or

(2) The requester is a CFPB employee or former employee, or an applicant for employment with the CFPB, and the request pertains to that employee, former employee, or applicant.

§ 1070.53 Request for access to records.

(a) Procedures for making a request for access to records. An individual"s requests for access to records that pertain to that individual (or to the individual for whom the requester serves as guardian) may be submitted to the CFPB in writing or by electronic means.

(1) If submitted in writing, the request shall be labeled "Privacy Act Request" and shall be addressed to the Chief Privacy Officer, Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.

(2) If submitted by electronic means, the request shall be labeled "Privacy Act Request" and the request shall be submitted as set forth at the CFPB"s Web site, http://www.consumerfinance.gov.

(b) Content of a request for access to records. A request for access to records shall include:

(1) A statement that the request is made pursuant to the Privacy Act;

(2) The name of the system of records that the requester believes contains the record requested, or a description of the nature of the record sought in detail sufficient to enable CFPB personnel to locate the system of records containing the record with a reasonable amount of effort;

(3) Whenever possible, a description of the nature of the record sought, the date of the record or the period in which the requester believes that the record was created, and any other information that might assist the CFPB in identifying the record sought (e.g., maiden name, dates of employment, account information, etc.).

(4) Information necessary to verify the requester"s identity pursuant to paragraph (c) of this section;

(5) The mailing or email address where the CFPB"s response or further correspondence should be sent.

(c) Verification of identity. To obtain access to the CFPB"s records pertaining to a requester, the requester shall provide proof to the CFPB of the requester"s identity as provided below.

(1) In general, the following will be considered adequate proof of a requester"s identity:

(i) A photocopy of two forms of identification, including one form of identification that bears the requester"s photograph, and one form of identification that bears the requester"s signature;

(ii) A photocopy of a single form of identification that bears both the requester"s photograph and signature; or

(iii) A statement swearing or affirming the requester"s identity and to the fact that the requester understands the penalties provided in 5 U.S.C. 552a(i)(3).

(2) Notwithstanding paragraph (c)(1) of this section, a designated official may require additional proof of the requester"s identity before action will be taken on any request, if such official determines that it is necessary to protect against unauthorized disclosure of information in a particular case. In addition, if a requester seeks records pertaining to an individual in the requester"s capacity as that individual"s guardian, the requester shall be required to provide adequate proof of the requester"s legal relationship before action will be taken on any request.

(d) Request for accounting of previous disclosures. An individual may request an accounting of previous disclosures of records pertaining to that individual in a system of records as provided in 5 U.S.C. 552a(c). Such requests should conform to the procedures and form for requests for access to records set forth in paragraphs (a) and (b) of this section.

§ 1070.54 CFPB procedures for responding to a request for access.

(a) Acknowledgment and response. The CFPB will provide written acknowledgement of the receipt of a request within twenty (20) business days from the receipt of the request and will, where practicable, respond to each request within that twenty (20) day period. When a full response is not practicable within the twenty (20) day period, the CFPB will respond as promptly as possible.

(b) Disclosure. (1) When the CFPB discloses information in response to a request, the CFPB will make the information available for inspection and copying during regular business hours as provided in § 1070.13 of this part, or the CFPB will mail it or email it the requester, if feasible, upon request.

(2) The requester may bring with him or her anyone whom the requester chooses to see the requested material. All visitors to the CFPB"s buildings must comply with the applicable security procedures.

(c) Denial of a request. If the CFPB denies a request made pursuant to § 1070.53 of this subpart, it will inform the requester in writing of the reason(s) for denial and the procedures for appealing the denial.

§ 1070.55 Special procedures for medical records.

If an individual requests medical or psychological records pursuant to § 1070.53 of this subpart, the CFPB will disclose them directly to the requester unless the CFPB determines that such disclosure could have an adverse effect on the requester. If the CFPB makes that determination, the CFPB shall provide the information to a licensed physician or other appropriate representative that the requester designates, who shall disclose those records to the requester in a manner he or she deems appropriate.

§ 1070.56 Request for amendment of records.

(a) Procedures for making request. (1) If an individual wishes to amend a record that pertains to that individual in a system of records, that individual may submit a request in writing or by electronic means to the Chief Privacy Officer, as set forth in § 1070.53(a). The request shall be labeled "Privacy Act Amendment Request."

(2) A request for amendment of a record must:

(i) Identify the system of records containing the record for which amendment is requested;

(ii) Specify the portion of that record requested to be amended; and

(iii) Describe the nature and reasons for each requested amendment.

(3) When making a request for amendment of a record, the CFPB will require a requester to verify his or her identity under the procedures set forth in § 1070.53(c) of this subpart, unless the requester has already done so in a related request for access or amendment.

(b) Burden of proof. In a request for amendment of a record, the requester bears the burden of proving by a preponderance of the evidence that the record is not accurate, relevant, timely, or complete.

§ 1070.57 CFPB review of a request for amendment of records.

(a) Time limits. The CFPB will acknowledge a request for amendment of records within ten (10) business days after it receives the request. In the acknowledgment, the CFPB may request additional information necessary for a determination on the request for amendment. The CFPB will make a determination on a request to amend a record promptly.

(b) Contents of response to a request for amendment. When the CFPB responds to a request for amendment, the CFPB will inform the requester in writing whether the request is granted or denied, in whole or in part. If the CFPB grants the request, it will take the necessary steps to amend the record and, when appropriate and possible, notify prior recipients of the record of its action. If the CFPB denies the request, in whole or in part, it will inform the requester in writing:

(1) Why the request (or portion of the request) was denied;

(2) That the requester has a right to appeal; and

(3) How to file an appeal.

§ 1070.58 Appeal of adverse determination of request for access or amendment.

(a) Appeal. A requester may appeal a denial of a request made pursuant to §§ 1070.53 or 1070.56 of this subpart within ten (10) business days after the CFPB notifies the requester that it has denied the request.

(b) Content of Appeal. A requester may submit an appeal in writing or by electronic means as set forth in § 1070.53(a). The appeal shall be addressed to the General Counsel and labeled "Privacy Act Appeal." The appeal must also:

(1) Specify the background of the request; and

(2) Provide reasons why the requester believes the denial is in error.

(c) Determination. The General Counsel will make a determination as to whether to grant or deny an appeal within thirty (30) business days from the date it is received, unless the General Counsel extends the time for good cause.

(1) If the General Counsel grants an appeal regarding a request for amendment, he or she will take the necessary steps to amend the record and, when appropriate and possible, notify prior recipients of the record of its action.

(2) If the General Counsel denies an appeal, he or she will inform the requester of such determination in writing, including the reasons for the denial, and the requester"s right to file a statement of disagreement and to have a court review its decision.

(d) Statement of disagreement. (1) If the General Counsel denies an appeal regarding a request for amendment, a requester may file a concise statement of disagreement with the denial. The CFPB will maintain the requester"s statement with the record that the requester sought to amend and any disclosure of the record will include a copy of the requester"s statement of disagreement.

(2) When practicable and appropriate, the CFPB will provide a copy of the statement of disagreement to any prior recipients of the record.

§ 1070.59 Restrictions on disclosure.

The CFPB will not disclose any record about an individual contained in a system of records to any person or agency without the prior written consent of that individual unless the disclosure is authorized by 5 U.S.C. 552a(b). Disclosures authorized by 5 U.S.C. 552a(b) include disclosures that are compatible with one or more routine uses that are contained within the CFPB"s Systems of Records Notices, which are available on the CFPB"s Web site, at http://www.consumerfinance.gov.

§ 1070.60 Exempt records.

(a) Exempt systems of records. Pursuant to 5 U.S.C. 552a(k)(2), the CFPB exempts the systems of records listed below from 5 U.S.C. 552a(c)(3), (d), (e)(1), (e)(4)(G)-(H), and (f), and §§ 1070.53 through 1070.59 of this subpart, to the extent that such systems of records contain investigatory materials compiled for law enforcement purposes, provided, however, that if any individual is denied any right, privilege, or benefit to which he or she would otherwise be entitled under Federal law, or for which he or she would otherwise be eligible as a result of the maintenance of such material, such material shall be disclosed to such individual, except to the extent that the disclosure of such material would reveal the identity of a source who furnished information to the CFPB under an express promise that the identity of the source would be held in confidence:

(1) CFPB.002 Depository Institution Supervision Database

(2) CFPB.003 Non-Depository Institution Supervision Database

(3) CFPB.004 Enforcement Database

(4) CFPB.005 Consumer Response System

(b) Information compiled for civil actions or proceedings. This subpart does not permit an individual to have access to any information compiled in reasonable anticipation of a civil action or proceeding.

§ 1070.61 Training; rules of conduct; penalties for non-compliance.

(a) Training. The Chief Privacy Officer shall institute a training program to instruct CFPB employees and employees of Government contractors covered by 5 U.S.C. 552a(m), who are involved in the design, development, operation, or maintenance of any CFPB system of records, on a continuing basis with respect to the duties and responsibilities imposed on them and the rights conferred on individuals by the Privacy Act, the regulations in this subpart, and any other related regulations. Such training shall provide suitable emphasis on the civil and criminal penalties imposed on the CFPB and the individual employees by the Privacy Act for non-compliance with specified requirements of the Act as implemented by the regulations in this subpart.

(b) Rules of conduct. The following rules of conduct are applicable to employees of the CFPB (including, to the extent required by the contract or 5 U.S.C. 552a(m), Government contractors and employees of such contractors), who are involved in the design, development, operation or maintenance of any system of records, or in maintain any records, for or on behalf of the CFPB.

(1) The head of each office of the CFPB shall be responsible for assuring that employees subject to such official"s supervision are advised of the provisions of the Privacy Act, including the criminal penalties and civil liabilities provided therein, and the regulations in this subpart, and that such employees are made aware of their individual and collective responsibilities to protect the security of personal information, to assure its accuracy, relevance, timeliness and completeness, to avoid unauthorized disclosure either orally or in writing, and to insure that no system of records is maintained without public notice.

(2) Employees of the CFPB involved in the design, development, operation, or maintenance of any system of records, or in maintaining any record shall:

(i) Collect no information of a personal nature from individuals unless authorized to collect it to achieve a function or carry out a responsibility of the CFPB;

(ii) Collect information, to the extent practicable, directly from the individual to whom it relates;

(iii) Inform each individual asked to supply information, on the form used to collect the information or on a separate form that can be retained by the individual of--

(A) The authority (whether granted by statute, or by executive order of the President) which authorizes the solicitation of the information and whether disclosure of such information is mandatory or voluntary;

(B) The principal purpose or purposes for which the information is intended to be used;

(D) The effects on the individual, if any, of not providing all or any part of the requested information.

(iv) Not collect, maintain, use or disseminate information concerning an individual"s religious or political beliefs or activities or membership in associations or organizations, unless expressly authorized by statute or by the individual about whom the record is maintained or unless pertinent to and within the scope of an authorized law enforcement activity;

(v) Advise their supervisors of the existence or contemplated development of any record system which is capable of retrieving information about individuals by individual identifier;

(vi) Assure that no records maintained in a CFPB system of records are disseminated without the permission of the individual about whom the record pertains, except when authorized by 5 U.S.C. 552a(b);

(vii) Maintain and process information concerning individuals with care in order to insure that no inadvertent disclosure of the information is made either within or without the CFPB;

(viii) Prior to disseminating any record about an individual to any person other than an agency, unless the dissemination is made pursuant to 5 U.S.C. 552a(b)(2) of this section, make reasonable efforts to assure that such records are accurate, complete, timely, and relevant for agency purposes; and

(ix) Assure that an accounting is kept in the prescribed form, of all dissemination of personal information outside the CFPB, whether made orally or in writing, unless disclosed under 5 U.S.C. 552 or subpart B of this part.

(3) The head of each office of the CFPB shall, at least annually, review the record systems subject to their supervision to insure compliance with the provisions of the Privacy Act of 1974 and the regulations in this subpart.

§ 1070.62 Preservation of records.

The CFPB will preserve all correspondence pertaining to the requests that it receives under this part, as well as copies of all requested records, until disposition or destruction is authorized by title 44 of the United States Code or the National Archives and Records Administration"s General Records Schedule 14. Records will not be disposed of or destroyed while they are the subject of a pending request, appeal, proceeding, or lawsuit.

§ 1070.63 Use and collection of social security numbers.

The CFPB will ensure that employees authorized to collect information are aware:

(a) That individuals may not be denied any right, benefit, or privilege as a result of refusing to provide their social security numbers, unless the collection is authorized either by a statute or by a regulation issued prior to 1975; and

(b) That individuals requested to provide their social security numbers must be informed of:

(1) Whether providing social security numbers is mandatory or voluntary;

(2) Any statutory or regulatory authority that authorizes the collection of social security numbers; and

(3) The uses that will be made of the numbers.