<?xml version="1.0" encoding="UTF-8"?>
<pai>
<agency toc="yes">
<name>Consumer Financial Protection Bureau</name>
<abbrev>CFPB
</abbrev>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-01-09/pdf/2012-103.pdf </url>
<title> CFPB.015, CFPB Ethics Program Records </title>
<date year="2012" month="1" day="9"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-01-19/pdf/2012-989.pdf </url>
<title> CFPB.013, CFPB External Contact Database </title>
<date year="2012" month="01" day="19"/>
</previouslyPublished>


<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-02-28/pdf/2012-4697.pdf </url>
<title> CFPB.016, CFPB Advisory Boards and Committees </title>
<date year="2012" month="2" day="28"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-04-23/pdf/2012-9667.pdf </url>
<title> CFPB.017, CFPB Small Business Review Panels and Cost
of Credit Consultations </title>
<date year="2012" month="4" day="23"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-04-23/pdf/2012-9668.pdf </url>
<title> CFPB.014, Direct Registration and User Management System </title>
<date year="2012" month="4" day="23"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-05-10/pdf/2012-11233.pdf </url>
<title> CFPB.018, Litigation Files</title>
<date year="2012" month="5" day="10"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-06-13/pdf/2012-14383.pdf </url>
<title> CFPB.019, Nationwide Mortgage Licensing System and
Registry</title>
<date year="2012" month="6" day="13"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-09-13/pdf/2012-22500.pdf </url>
<title> CFPB.020, CFPB Site Badge and Visitor Management
Systems </title>
<date year="2012" month="9" day="13"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-09-27/pdf/2012-23756.pdf </url>
<title> CFPB.013, CFPB External Contact Database </title>
<date year="2012" month="9" day="27"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-10-03/pdf/2012-24311.pdf </url>
<title>">CFPB.021, CFPB Consumer Education and Engagement
Records </title>
<date year="2012" month="10" day="3"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-10-19/pdf/2012-25487.pdf </url>
<title> CFPB.005, CFPB CFPB Consumer Response System:</title>
<date year="2012" month="10" day="19"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-10-24/pdf/2012-26141.pdf </url>
<title> CFPB.023, CFPB CFPB Consumer Response System </title>
<date year="2012" month="10" day="24"/>
</previouslyPublished>

<previouslyPublished>
<url>http://www.gpo.gov/fdsys/pkg/FR-2012-11-14/pdf/2012-27582.pdf </url>
<title> CFPB.022, CFPB CFPB Consumer Response System </title>
<date year="2012" month="11" day="14"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-05-01/pdf/2013-10206.pdf</url>
<title> CFPB.024, Judicial and Administrative Filings Collection </title>
<date year="2013" month="5" day="1"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2013-05-01/pdf/2013-10204.pdf</url>
<title> CFPB.016, CFPB Advisory Boards and Committees </title>
<date year="2013" month="5" day="1"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2012-08-05/pdf/2013-18848.pdf</url>
<title> CFPB Freedom of Information Act/Privacy Act System </title>
<date year="2012" month="8" day="5"/>
</previouslyPublished>
<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2013-08-16/pdf/2013-19971.pdf</url>
<title> CFPB.006, Social Networks and Citizen Engagement System </title>
<date year="2013" month="8" day="16"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2013-11-12/pdf/2013-21488.pdf</url>
<title> CFPB.007, CFPB Directory Database </title>
<date year="2012" month="11" day="12"/>

</previouslyPublished>


<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2013-11-12/pdf/2013-27011.pdf</url>
<title>CFPB.009, Employee Administrative Records System</title>
<date year="2013" month="11" day="09"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2013-11-21/pdf/2013-27977.pdf</url>
<title>XX</title>
<date year="2013" month="11" day="21"/>
</previouslyPublished>

<previouslyPublished>
<url> http://www.gpo.gov/fdsys/pkg/FR-2013-12-17/pdf/2012-29969.pdf</url>
<title> CFPB.011, Correspondence Tracking Database </title>
<date year="2013" month="12" day="17"/>
</previouslyPublished>
<section id="cfpb1" toc="yes">
<systemNumber>.001</systemNumber>

<subsection type="systemName">CFPB Freedom of Information Act/Privacy Act System
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system are persons who cite the Freedom of Information Act or Privacy Act to
request access to records or whose information requests are treated as FOIA requests. Other individuals covered
include CFPB staff assigned to process such requests, and employees who may have responsive records or are
mentioned in such records. FOIA requests are subject to the PA only to the extent that they concern
individuals; information pertaining to corporations and other business entities and organizations are not
subject to the PA.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system may contain: (1) Correspondence with the requester including initial requests and
appeals; (2) documents generated or compiled during the search and processing of the request; (3) fee
schedules, cost calculations, and accessed cost for disclosed FOIA records; (4) documents and memoranda
supporting the decision made in response to the request, referrals, and copies of records provided or withheld;
(5) CFPB staff assigned to process, consider, and respond to requests and, where a request has been referred to
another agency with equities in a responsive document, information about the individual handling the request on
behalf of that agency; (6) information identifying the entity that is subject to the requests or appeals; (7)
requester information, including name, address, phone number, email address; FOIA tracking number, phone
number, fax number, or some combination thereof; and (8) for access requests under the Privacy Act, identifying
information regarding both the party who is making the written request or appeal, and the individual on whose
behalf such written requests or appeals are made, including name, Social Security number (SSNs may be submitted
with documentation or as proof of identification), address, phone number, email address, FOIA number, phone
number, fax number, or some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C.
&#167;&#167;&#167; 5491, 5492, 5511; The Freedom of Information Act of 1996, as amended 5 U.S.C. 552;
Privacy Act of 1974, as amended 5 U.S.C. 552a.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to enable the CFPB to carry out its responsibilities under
the FOIA and the PA, including enabling staff to receive, track, and respond to requests. This requires
maintaining documentation gathered during the consideration and disposition process, administering annual
reporting requirements, managing FOIA-related fees and calculations, and delivering responsive records.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB’s Disclosure of Records and Information Rules,
promulgated at 12 CFR 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the
security or confidentiality of information in the system of records has been compromised; (b) the CFPB has
determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or
property interests, identity theft or fraud, or harm to the security or integrity of this system or other
systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised
information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to
assist in connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent,
minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of
records to be made in consultation with or by that agency, or (b) verify the identity of an individual or the
accuracy of information submitted by an individual who has requested access to or amendment or correction of
records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the
subject of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record
pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative
agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the
information in the performance of their duties or activities;
</p><p>(6) The DOJ for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding
before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ
is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and such proceeding names as a
party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the
employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its
components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or
judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the
course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations,
where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings;
</p><p>(8) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or
witnesses in the course of investigations, to the extent necessary to secure information relevant to the
investigation; and
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies
responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule,
regulation, order, policy, or license if the information may be relevant to a potential violation of civil or
criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent>
<p>Storage:</p><p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, but not limited to, the requester’s name, the
subject matter of request, requestor’s organization, FOIA tracking number, and staff member assigned to process
the request. Records may also be searched by the address, phone number, fax number, email address of the
requesting party, and subject matter of the request, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable
access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited
to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>Computer and paper records will be maintained in accordance with published National Archives and Records
Administration Disposition Schedule, Transmittal No. 22, General Records Schedule 14, Information Service
Records.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Chief FOIA Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to
contest its content, may inquire in writing in accordance with instructions appearing in the CFPB’s Disclosure
of Records and Information Rules, promulgated at 12 CFR 1070 <i>et seq.</i> Address such requests to:
Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system covers individuals about whom records are maintained; agency staff assigned to
help process, consider, and respond to the request, including any appeals; entities filing requests or appeals
on behalf of the requestor; other governmental authorities; and entities that are the subjects of the request
or appeals.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>

<section id="cfpb2" toc="yes">
<systemNumber>.002</systemNumber>

<subsection type="systemName">CFPB Depository Institution Supervision Database.
</subsection><subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system are: (1) Individuals who themselves are, and current and former directors, officers, employees,
agents, shareholders, and independent contractors of banks, savings associations, or credit unions; (2) Current and former consumers who are
or have been in the past serviced by banks, savings associations, or credit unions subject to the supervision of the CFPB; and (3) CFPB
employees assigned to supervise banks, savings associations, or credit unions. Information collected regarding consumer products and services
is subject to the Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other business
entities is not subject to the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system may contain information provided by a supervised institution, by individuals who are or have been serviced by a
supervised institution, or other government authorities, to the CFPB in the exercise of CFPB’s responsibilities and used to assess an
institution’s compliance with various statutory and regulatory obligations. This may include: (1) Personally identifiable information from
customers of banks, savings associations, or credit unions, including without limitation, name, account numbers, address, phone number, e-mail
address, and date of birth; (2) contact information of officials of institutions such as members of the Board of Directors, Audit Committee
Chair, Chief Executive Officer, Chief Compliance Officer, Internal Auditor, and Independent Auditor including, without limitation, name,
address, phone number and e-mail address; (3) information about CFPB employees assigned to depository institution supervision tasks,
including, without limitation, name, phone number, e-mail address, address, and other employment information; and (4) Confidential Supervision
Information or Personal Information, including information relating to individuals that is derived from Confidential Supervisory Information
or from consumer complaints. This information may include, without limitation, reports of examinations and associated documentation regarding
compliance with consumer financial protection laws; documents assessing the current and past safety and soundness/risk management of a covered
person or service provider; reports of consumer complaints; and correspondence relating to any category of information discussed above and
actions taken to remedy deficiencies in these areas.
</p><p>Information contained in the Depository Institution Supervision Database is collected from a variety of sources, including, without
limitation: (1) The individuals who own, control, or work for covered persons or service providers; (2) existing databases maintained by other
Federal and state regulatory associations, law enforcement agencies, and related entities; (3) third parties with relevant information about
covered persons or services providers; and (4) information generated by CFPB employees or about CFPB employees assigned supervisory tasks.
Whenever practicable, the CFPB will collect information about an individual directly from that individual.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Section 1011, 1012, 1021, 1025, codified at 12 U.S.C. 5491, 5492, 5511, 5515.[1]</p>
<p>[1] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB.
Pursuant to that authority, Treasury published rules on the Disclosure of Records and Information within 12 CFR Chapter X. This SORN is
published pursuant to those rules and the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to enable the CFPB to carry out its responsibilities with respect to banks, savings
associations, credit unions, and their affiliates and service providers, including the coordination and conduct of examinations, supervisory
evaluations and analyses, enforcement actions, actions in Federal court, and coordination with other financial regulatory agencies. The
information collected in this system will also support the conduct of investigations or be used as evidence by the CFPB or other supervisory
or law enforcement agencies. This may result in criminal referrals, referral to the Federal Reserve Office of Inspector General, or the
initiation of administrative or Federal court actions. This system will track and store examination and inspection documents created during
the performance of the CFPB’s statutory duties. This system also will enable the CFPB to monitor and coordinate regular examinations and
required reports, supervisory evaluations and analyses, and enforcement actions internally and with other Federal and state regulators.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the
CFR to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another Federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to, or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) Any authorized agency or component of the Department of Treasury, the Department of Justice, the Federal Reserve System, the Federal
Deposit Insurance Corporation or other law enforcement authorities including disclosure by such authorities:
</p><p>(a) To the extent relevant and necessary in connection with litigation in proceedings before a court or other adjudicative body, where (i)
The United States is a party to or has an interest in the litigation, including where the agency, or an agency component, or an agency
official or employee in his or her official capacity, or an individual agency official or employee whom the Department of Justice or the
Bureau has agreed to represent, is or may likely become a party, and (ii) the litigation is likely to affect the agency or any component
thereof; or
</p><p>(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;
</p><p>(7) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(8) A grand jury pursuant either to a Federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(9) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(10) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or witnesses in the course of
investigations, to the extent necessary to secure information relevant to the investigation;
</p><p>(11) Appropriate Federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and
</p><p>(12) An entity or person that is the subject of supervision or enforcement activities including examinations, investigations,
administrative proceedings, and litigation, and the attorney or non-attorney representative for that entity or person.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including without limitation the individual’s name, complaint/inquiry case number,
address, account number, transaction number, phone number, date of birth, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Assistant Director of Large Bank Supervision, 1801 L Street, NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1801 L St., NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from banks, savings associations, credit unions, and their affiliates and service providers,
persons subject to the CFPB’s authority, and current, former, and prospective consumers who are or have been customers or prospective
customers of covered persons, and others with information relevant to the enforcement of Federal consumer financial laws.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>Portions of the records in this system are complied for law enforcement purposes and are exempt from disclosure under CFPB’s Privacy
Act regulations and 5 U.S.C. 552a(k)(2). Federal criminal law enforcement investigatory reports maintained as part of this system may be the
subject of exemptions imposed by the originating agency pursuant to 5 U.S.C. 552a(j)(2).
</p></xhtmlContent></subsection></section>

<section id="cfpb3" toc="yes">
<systemNumber>.003</systemNumber>

<subsection type="systemName">CFPB Non-depository Supervision Database.</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system are: (1) Individuals who themselves are current and former directors, officers, employees, agents,
shareholders, and independent contractors of non-depository covered persons subject to the supervision of the CFPB; (2) Current and former
consumers who are or have been in the past serviced by non-depository covered persons subject to the supervision of the CFPB; and (3) CFPB
employees assigned to supervise non-depository covered persons. Information collected regarding consumer products and services is subject to
the Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other organizations is not subject
to the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system may contain information provided by a covered person, by individuals who are or have been serviced by a covered
person, or other governmental authorities, to the CFPB in the exercise of the CFPB’s responsibilities and used to assess a covered person’s
compliance with various statutory and regulatory obligations. This may include: (1) Personally identifiable information from customers of non-
depository covered persons, including without limitation, name, social security number, account numbers, address, phone number, email address,
and date of birth; (2) contact information for officials of non-depository covered persons such as members of the Board of Directors, Audit
Committee Chair, Chief Executive Officer, Chief Compliance Officer, Internal Auditor, and Independent Auditor including, without limitation,
name, address, phone number and email address; (3) information about CFPB employees assigned supervision tasks for non-depository covered
persons; and (4) confidential supervision information or personal information, including information relating to individuals that is derived
from such information or from consumer complaints. This information may include, without limitation, reports of examinations and associated
documentation regarding compliance with consumer financial law; documents assessing the current and past safety and soundness/risk management
of a covered person or service provider; reports of consumer complaints; and correspondence relating to any category of information discussed
above and actions taken to remedy deficiencies in these areas.
</p><p>Information contained in the Non-depository Supervision Database is collected from a variety of sources, including, without limitation: (1)
The individuals who own, control, or work for covered persons or service providers; (2) existing databases maintained by other federal and
state regulatory associations, law enforcement agencies, and related entities; (3) third-parties with relevant information about covered
persons or service providers; and (4) information generated by CFPB employees. Whenever practicable, the CFPB will collect information about
an individual directly from that individual.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Section 1011, 1012, 1021, 1024, codified at 12 U.S.C. 5491, 5492, 5511, 5514.[1]</p>
<p>[1] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB.
Pursuant to that authority, Treasury published rules on the Disclosure of Records and Information within 12 CFR Chapter X. This SORN is
published pursuant to those rules and the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to enable the CFPB to carry out its responsibilities with respect to non-depository
covered persons and service providers, including the coordination and conduct of examinations, supervisory evaluations and analyses,
enforcement actions, actions in federal court, and coordination with other financial regulatory agencies. The information collected in this
system will also support the conduct of investigations or could be used as evidence by the CFPB or other supervisory or law enforcement
agencies. This may result in criminal referrals, referral to the Federal Reserve Office of the Inspector General, or the initiation of
administrative or federal court actions. This system will track and store examination and inspection documents created during the performance
of the CFPB’s statutory duties. This system also will enable the CFPB to monitor and coordinate regular examinations and required reports,
supervisory evaluations and analyses, and enforcement actions internally and with other federal and state regulators.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the
CFR to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) the CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) Any authorized agency or component of the Department of Treasury, the Department of Justice, the Federal Reserve System, the Federal
Deposit Insurance Corporation or other law enforcement authorities including disclosure by such authorities:
</p><p>(a) To the extent relevant and necessary in connection with litigation in proceedings before a court or other adjudicative body, where (i)
the United States is a party to or has an interest in the litigation, including where the agency, or an agency component, or an agency
official or employee in his or her official capacity, or an individual agency official or employee whom the Department of Justice or the
Bureau has agreed to represent, is or may likely become a party, and (ii) the litigation is likely to affect the agency or any component
thereof; or
</p><p>(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;
</p><p>(7) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(8) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(9) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(10) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or witnesses in the course of
investigations, to the extent necessary to secure information relevant to the investigation;
</p><p>(11) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and
</p><p>(12) An entity or person that is the subject of supervision or enforcement activities including examinations, investigations,
administrative proceedings, and litigation, and the attorney or non-attorney representative for that entity or person.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, but not limited to, the individual’s name, complaint/inquiry case number,
address, account number, transaction number, phone number, date of birth, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Assistant Director of Nonbank Supervision,1801 L Street, NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1801 L St., NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from covered persons subject to the CFPB’s authority, and current, former, and prospective
consumers who are or have been customers or prospective customers of covered persons, and others with information relevant to the enforcement
of federal consumer financial laws.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>Portions of the records in this system are complied for law enforcement purposes and are exempt from disclosure under the CFPB’s
Privacy Act regulations and 5 U.S.C. 552a(k)(2). Federal criminal law enforcement investigatory reports maintained as part of this system may
be the subject of exemptions imposed by the originating agency pursuant to 5 U.S.C. 552a(j)(2).
</p></xhtmlContent></subsection></section>

<section id="cfpb4" toc="yes">
<systemNumber>.004</systemNumber>
<subsection type="systemName">CFPB Enforcement Database.</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1801 L Street, NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Covered individuals include:
</p><p>(1) Individuals who are current or former directors, officers, employees, shareholders, agents, and independent contractors of covered
persons or service providers, who are or have been the subjects of or otherwise associated with an investigation or enforcement action by the
CFPB, or have been named in connection with suspicious activity reports or administrative enforcement orders or agreement. Covered persons and
service providers include banks, savings associations, credit unions, thrifts, non-depository institutions, or other persons, offering,
providing, or assisting with the provision of consumer financial products or services.
</p><p>(2) Current, former, and prospective consumers who are or have been customers or prospective customers of, solicited by, or serviced by
covered persons or service providers if such individuals have provided information, including complaints about covered persons or service
providers, or are or have been witnesses in or otherwise associated with an enforcement action by the CFPB.
</p><p>(3) Applicants, current and former directors, officers, employees, shareholders, agents, and independent contractors of persons and
entities that have business relationships with covered persons or service providers who are or have been the subject of an enforcement action
by the CFPB.
</p><p>(4) Current, former, and prospective customers of persons and entities that have business relationships with covered persons or service
providers that are or have been the subject of an enforcement action by the CFPB, and the customers are complainants against covered persons
or service providers, or witnesses in or otherwise associated with an enforcement action.
</p><p>(5) Other individuals who have inquired about or may have information relevant to an investigation or proceeding concerning a possible
violation of federal consumer financial law. Information collected regarding consumer financial products and services is subject to the
Privacy Act only to the extent that it concerns individuals; information pertaining to corporations and other business entities and aggregate,
non-identifiable information is not subject to the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records maintained in the system may contain: Identifiable information about individuals such as name, address, e-mail address, phone
number, social security number, employment status, age, date of birth, financial information, credit information, and personal history.
Records in this system are collected and generated during the investigation of potential violations and enforcement of laws and regulations
under the jurisdiction of the CFPB and may include (1) Records provided to the CFPB about potential or pending investigations, administrative
proceedings, and civil litigation; (2) evidentiary materials gathered or prepared by the CFPB or obtained for use in investigations,
proceedings, or litigation, and work product derived from or related thereto; (3) staff working papers, memoranda, analyses, databases, and
other records and work product relating to possible or actual investigations, proceedings, or litigation; (4) databases, correspondence, and
reports tracking the initiation, status, and closing of investigations, proceedings, and litigation; (5) correspondence and materials used by
the CFPB to refer criminal and other matters to the appropriate agency or authority, and records reflecting the status of any outstanding
referrals; (6) correspondence and materials shared between the CFPB and other federal and state agencies; (7) consumer complaints made or
referred to the CFPB.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511.[1]</p>
<p>[1] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB.
Pursuant to that authority, Treasury published rules on the Disclosure of Records and Information within 12 CFR Chapter X. This SORN is
published pursuant to those rules and the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to enable the CFPB to carry out its responsibilities with respect to enforcement of
Title X of the Dodd-Frank Wall Street Reform and Consumer Protection Act and other federal consumer financial law, including: (1) The
investigation of potential violations of federal consumer financial law; (2) the pursuit of administrative or civil enforcement actions; and
(3) the referral of matters, as appropriate, to the Department of Justice or other federal or state agencies.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated in the title of the
CFR to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that as a result of the suspected or confirmed
compromise there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to, or amendment or correction of records;
</p><p>(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third
party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job or other
activity on behalf of the CFPB or Federal Government and who have a need to access information in the performance of their duties or
activities;
</p><p>(6) Any authorized agency or component of the Department of Treasury, the Department of Justice, the Federal Reserve System, the Federal
Deposit Insurance Corporation or other law enforcement authorities including disclosure by such authorities:
</p><p>(a) To the extent relevant and necessary in connection with litigation in proceedings before a court or other adjudicative body, where (i)
the United States is a party to or has an interest in the litigation, including where the agency, or an agency component, or an agency
official or employee in his or her official capacity, or an individual agency official or employee whom the Department of Justice or the
Bureau has agreed to represent, is or may likely become a party, and (ii) the litigation is likely to affect the agency or any component
thereof; or
</p><p>(b) To outside experts or consultants when considered appropriate by CFPB staff to assist in the conduct of agency matters;
</p><p>(7) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(8) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(9) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(10) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or witnesses in the course of
investigations, to the extent necessary to secure information relevant to the investigation;
</p><p>(11) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and
</p><p>(12) An entity or person that is the subject of supervision or enforcement activities including examinations, investigations,
administrative proceedings, and litigation, and the attorney or non-attorney representative for that entity or person.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including without limitation the individual’s name, address, account number, social
security number, transaction number, phone number, date of birth, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Record Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>The Consumer Financial Protection Bureau, Assistant Director for Enforcement, 1801 L Street, NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1801 L St., NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from banks, savings associations, credit unions, or non-depository institutions or other
persons offering or providing consumer financial products or services, current, former, and prospective consumers who are or have been
customers or prospective employees and agents of such persons, and current, former, and prospective customers of such entities and persons,
and others with information relevant to the enforcement of federal consumer financial laws.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>Portions of the records in this system are complied for law enforcement purposes and are exempt from disclosure under CFPB’s Privacy
Act regulations and 5 U.S.C. 552a(k)(2). Federal criminal law enforcement investigatory reports maintained as part of this system may be the
subject of exemptions imposed by the originating agency pursuant to 5 U.S.C. 552a(j)(2).
</p></xhtmlContent></subsection></section>
<section id="cfpb5" toc="yes">
<systemNumber>.005</systemNumber>
<subsection type="systemName">CFPB Consumer Response System.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system are individuals who submit complaints or inquiries to the CFPB (on their own or others’ behalf);
individuals on whose behalf complaints or inquiries are submitted by others (such as attorneys, members of Congress, third party advocates,
and/or other governmental organizations); and individuals or employees of entities about whom complaints or inquiries have been received by
prudential regulators, the Federal Trade Commission, other federal agencies, state agencies or the CFPB. The term "prudential regulators
" refers to any federal banking agency, as that term is defined in section 3 of the Federal Deposit Insurance Act, and the National
Credit Union Administration. Information collected regarding consumer products and services is subject to the Privacy Act only to the extent
that it concerns individuals; information pertaining to corporations and other business entities and organizations is not subject to the
Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system may contain: (1) Correspondence or other information received; (2) information from the entity or individual
referring the inquiry or complaint; (3) records created of verbal communications by or with complainants or other individuals; (4) information
regarding third party advocates or others who submit complaints or inquiries on another’s behalf; (5) information identifying the entity that
is subject to the complaint or inquiry or its employees; (6) communication with or by the entity that is subject to the complaint or inquiry
or its employees; (7) unique identifiers, codes, and descriptors categorizing each complaint or inquiry file; (8) information about how
complaints or inquiries were responded to or referred, including any resolution; (9) records used to respond to or refer complaints or
inquiries, including information in the CFPB’s other systems of records; and (10) identifiable information regarding both the individual who
is making the inquiry or complaint, and the individual on whose behalf such inquiry or complaint is made, and employees of the entity about
which the complaint or inquiry was made, including name, social security number, account numbers, address, phone number, email address, date
of birth.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1011, 1012, 1013(b)(3), 1021, 1034, codified at 12 U.S.C. 5491, 5492, 5493(b)(3), 5511,
5534.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to enable the CFPB to receive, respond to, and refer complaints or inquiries
regarding consumer financial products or services. The system serves as a record of the complaint or inquiry, and is used for collecting
complaint or inquiry data; responding to or referring the complaint or inquiry; aggregating data that will be used to inform other functions
of the CFPB and, as appropriate, other agencies and/or the public; and preparing reports as required by law. This system consists of
complaints or inquiries received by the CFPB or other entities and information concerning responses to or referrals of these complaints or
inquiries, as appropriate.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated at 12 CFR part 1070
<i>et seq.</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(8) Appropriate agencies, entities, and persons, to the extent necessary to obtain information needed to investigate, resolve, respond, or
refer a complaint or inquiry;
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license;
</p><p>(10) An entity or person that is the subject of the complaint or inquiry and the counsel or non-attorney representative for that entity or
person; and
</p><p>(11) Federal and state agencies for the purpose of facilitating the data sharing requirements described in 12 U.S.C. 5493(b)(3)(D)
concerning consumer complaint information.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including without limitation the individual’s name, social security number,
complaint/inquiry case number, address, account number, transaction number, phone number, date of birth, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>The Consumer Financial Protection Bureau, Assistant Director of Response Center, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from individuals and entities filing complaints and inquiries, other governmental authorities,
and entities that are the subjects of complaints and inquiries.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>Pursuant to 5 U.S.C. 552a(k)(2), to the extent that the Consumer Response System contains investigatory materials compiled for law
enforcement purposes those materials are exempt from disclosure under 5 U.S.C. 522a.
</p></xhtmlContent></subsection></section>

<section id="cfpb6" toc="yes">
<systemNumber>.006</systemNumber>
<subsection type="systemName">Social Networks and Citizen Engagement System
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Users of social media who interact with the CFPB through the Bureau’s Web site, or through various social
media outlets, including but not limited to third-party sites and services such as Facebook, Twitter, YouTube,
LinkedIn, and Flickr. Other covered individuals may include those who sign on to various parts of the CFPB Web
site with a user identity provided by a third-party, including but not limited to sites and services such as
Disqus, Facebook, and Twitter. These may be members of the public, employees, or contractors.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records maintained in the system may contain information that an individual shares voluntarily with the CFPB
through various social media sites and services. They may also contain information that is stored to ensure
that an individual can access Web sites where a login is required. This may include without limitation: name,
username, email address, birth date, security questions, IP addresses, location, passwords, authentication,
business affiliation, demographic information, videos, photos, and other general information.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511.
Executive Order 13571, Streamlining Service Delivery and Improving Customer Service, April 27, 2011.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to facilitate internal and external interactions concerning
the CFPB and CFPB programs. The use of social media platforms will increase collaboration and transparency with
the public, as well as employees and contractors. The use of social media will enable the CFPB to interact with
the public in effective and meaningful ways, encourage the wide sharing of information regarding consumer
financial issues and the strengthening of an online community of consumers, and ensure that critical
information about the agency and key consumer finance issues is distributed.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB’s Disclosure of Records and Information Rules,
promulgated at 12 CFR 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the
security or confidentiality of information in the system of records has been compromised; (b) the CFPB has
determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or
property interests, identity theft or fraud, or harm to the security or integrity of this system or other
systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised
information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to
assist in connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent,
minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of
records to be made in consultation with or by that agency, or (b) verify the identity of an individual or the
accuracy of information submitted by an individual who has requested access to or amendment or correction of
records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the
subject of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record
pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative
agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the
information in the performance of their duties or activities;
</p><p>(6) The DOJ for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding
before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ
is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and such proceeding names as a
party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the
employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its
components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or
judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the
course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations,
where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings; and
</p><p>(8) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies
responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule,
regulation, order, policy, or license if the information may be relevant to a potential violation of civil or
criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by full-text search. Records may also be retrieved by personal identifiers, which
may include without limitation: name, username, email address, IP addresses, geographic information, and
demographic information.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records that are not otherwise available to the general public by virtue of their
presence on social media sites is restricted to authorized personnel who have been issued non-transferrable
access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited
to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will manage all computer and paper files in the system as permanent records until the disposition
schedule for these records is approved by the National Archives and Records Administration, at which time, the
CFPB will dispose of such files in accordance with the schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Assistant Director, Consumer Engagement, 1700 G Street NW.,
Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to
contest its content, may inquire in writing in accordance with instructions appearing the CFPB’s Disclosure of
Records and Information Rules, promulgated at 12 CFR 1070 <i>et seq.</i> Address such requests to: Chief
Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from individuals who voluntarily interact with the CFPB through
various social media sites and services, or as a result of public outreach.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.

</p></xhtmlContent></subsection></section>

<section id="cfpb7" toc="yes">
<systemNumber>.007</systemNumber>
<subsection type="systemName">CFPB Directory Database.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system are: (1) Individuals who directly, indirectly, or acting through or in
concert with one or more other individuals, own or control an entity offering or providing, or materially
assisting in the offering or provision of, consumer financial products or services (collectively,
"covered persons" and "service providers"); (2) current and former directors, officers,
employees, shareholders, agents, and independent contractors of such entities; (3) other related persons, as
necessary, including without limitation, persons who have personal financial arrangements with covered persons,
representatives or counsel of covered persons or related persons; and (4) individuals who provide information
on covered persons or entities such as employees of state attorneys general offices. Information contained in
the CFPB Directory Database is subject to the Privacy Act only to the extent that it concerns individuals;
information pertaining to corporations and other business entities and aggregate, non-identifiable information
is not subject to the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records maintained in this system may contain, without limitation, the following types of PII: Name,
address, email address, phone number, and employment status. Additionally, records may contain information
relating to the business activities and transactions of covered persons and entities and their associated
persons. Other information may include without limitation: Name, location, charter number, charter type, and
date of last examination of each entity and the types of financial products offered by each organization.
</p><p>Information contained in the CFPB Directory Database will be collected from a variety of sources, including,
without limitation: (1) The individuals who own, control, or work for covered persons or service providers; (2)
existing databases maintained by other Federal and state regulatory associations, agencies, and related
entities; (3) third-parties with relevant information about covered persons or services providers; and (4)
information generated by CFPB employees. Whenever practicable, the CFPB will collect information about an
individual directly from that individual.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Pub. L. 111-203, Title X, Sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to create an agency-wide repository of identifying and
registration information concerning entities and their affiliates offering or providing, or materially
assisting in the offering or provision of, consumer financial products or services. By ensuring the use of
consistent information across the agency, the CFPB Directory Database will enable the CFPB to carry out its
supervisory, enforcement, and regulatory authorities in an efficient and effective manner.
</p></xhtmlContent></subsection>
	<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB’s Disclosure of Records and Information Rules,
promulgated at 12 CFR part 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the
security or confidentiality of information in the system of records has been compromised; (b) the CFPB has
determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or
property interests, identity theft or fraud, or harm to the security or integrity of this system or other
systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised
information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to
assist in connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent,
minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of
records to be made in consultation with or by that agency, or (b) verify the identity of an individual or the
accuracy of information submitted by an individual who has requested access to or amendment or correction of
records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the
subject of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record
pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative
agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the
information in the performance of their duties or activities;
</p><p>(6) The DOJ for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding
before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ
is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and such proceeding names as a
party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the
employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its
components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or
judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the
course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations,
where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings;
</p><p>(8) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or
witnesses in the course of investigations, to the extent necessary to secure information relevant to the
investigation; and
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies
responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule,
regulation, order, policy, or license if the information may be relevant to a potential violation of civil or
criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
	<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, without limitation, the individual’s name,
address, email address, phone number, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable
access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited
to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will manage all computer and paper files in the system as permanent records until the disposition
schedule for these records is approved by the National Archives and Records Administration, at which time, the
CFPB will dispose of such files in accordance with the schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Chief Information Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to
contest its content, may inquire in writing in accordance with instructions appearing in the CFPB’s Disclosure
of Records and Information Rules, promulgated at 12 CFR part 1070 <i>et seq.</i> Address such requests
to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information contained in the CFPB Directory Database will be collected from a variety of sources, including,
without limitation: (1) The individuals who own, control, or work for covered persons or service providers; (2)
existing databases maintained by other Federal and state regulatory associations, agencies, and related
entities; (3) third-parties with relevant information about covered persons or services providers; and (4)
information generated by CFPB employees. Whenever practicable, the CFPB will collect information about an
individual directly from that individual.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb8" toc="yes">
<systemNumber>.08</systemNumber>
<subsection type="systemName">CFPB Transit Subsidy Program.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20006.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>CFPB employees applying for or who participate in the public transportation transit subsidy program and vanpool transit subsidies to
and from the workplace, and applicants for or holders of parking permits.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records maintained in this system will contain the Transit Subsidy Program application containing the participant or applicant’s name,
home address, office address, office telephone number, grade, duty hours, unique numeric identifier chosen by the individual, or the last four
of the Social Security number, previous method of transportation to and from the workplace, costs of transportation, and the type of fare
subsidy requested including records of parking permit holders. It will include subsidies authorized under the Federal Workforce Transportation
Program. Reports will be submitted to the Department of Transportation and to the Bureau of Public Debt in accordance with the CFPB Transit
Subsidy Program.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203; Title X, sections 1012 and 1013, codified at 12 U.S.C. 5492, 5493;[1] Public Law 103-
172; Title V, section 1(a), codified at 5 U.S.C. 7902.</p>
	<p>[1] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB.
Pursuant to that authority, Treasury published rules on the Disclosure of Records and Information within 12 CFR Chapter X. This SORN is
published pursuant to those rules and the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The purpose of the information collection is to establish and maintain systems for providing transportation subsidies to employees.
This includes mass transportation, vanpools, and parking permits. Information is used to determine the eligibility of applicants for
transportation subsidies and to disburse subsidies to eligible employees through the Department of Transportation, and for parking management.
The system also enables the CFPB to compare these records with other federal agencies to ensure that employee transportation programs
subsidies are not abused.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070
<i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third
party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(8) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, but not limited to, the individual’s name, home address, work organization,
location, unique numeric identifier chosen by the individual, or the last four of the Social Security number, mode of transportation, or by
some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records in accordance with published National Archives and Records Administration
Disposition Schedule, General Records Schedule 9, Federal Employee Transportation Subsidy Program. Temporary. Destroy when 3 years old.
(General Records Schedule (GRS) 9, item 7)
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>The Consumer Financial Protection Bureau, Chief Operating Officer, 1700 G Street NW., Washington, DC 20006.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20006.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is maintained about employees who have applied for or hold parking permits, or applied for or participate
in the transportation subsidy program, the subsidy program managers and other appropriate agency officials, or other federal agencies.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb9" toc="yes">
<systemNumber>.009</systemNumber>
<subsection type="systemName">Employee Administrative Records System
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Current and former CFPB employees, interns, fellows, volunteers, and persons who work at the CFPB (collectively "employees"), and their named dependents and/or beneficiaries, their named emergency contacts, and individuals who have been extended offers of employment.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in this system may contain identifiable information about individuals including, without limitation: (1) Identification and contact information, including name, address, email address, phone number and other contact information; (2) employee emergency contact information, including name, phone number, relationship to employee or emergency contact; (2) Social Security number (SSN), employee ID number, organization code, pay rate, salary, grade, length of service, and other related pay and leave records including payroll data; (3) biographic and demographic data, including date of birth and marital or domestic partnership status; (4) employment related information such as performance reports, training, professional licenses, certification, and memberships information, fitness center membership information, union dues, employee claims for loss or damage to personal property, and other information related to employment by the CFPB; (5) benefits data, such as health, life, travel, and disability insurance information; and (6) retirement benefits information and flexible spending account information.
</p><p>General personnel and administrative records contained in this system are covered under the government-wide systems of records notice published by the Office of Personnel Management (OPM/GOVT-1). This system complements OPM/GOVT-1 and this notice incorporates by reference but does not repeat all of the information contained in OPM/GOVT-1.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>12 U.S.C. 5492-93, 5511; 31 U.S.C. 3721.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to enable the CFPB to manage and administer human capital functions, including payroll, time and attendance, leave, insurance, tax, retirement and other benefits, and employee claims for loss or damage to personal property; and to prepare related reports to other Federal agencies.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB’s Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or activities;
</p><p>(6) The DOJ for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(8) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings;
</p><p>(9) Appropriate agencies, entities, and persons to the extent necessary to obtain information relevant to current and former CFPB employees’ benefits, compensation, and employment;
</p><p>(10) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license;
</p><p>(11) National, state or local income security and retirement agencies or entities involved in administration of employee retirement and benefits programs (e.g., state unemployment compensation agencies and state pension plans) and any of such agencies’ contractors or plan administrators, when necessary to determine employee eligibility to participate in retirement or employee benefits programs, process employee participation in those programs, process claims with respect to individual employee participation in those programs, audit benefits paid under those programs, or perform any other administrative function in connection with those programs;
</p><p>(12) An executor of the estate of a current or former employee, a government entity probating the will of a current or former employee, a designated beneficiary of a current or former employee, or any person who is responsible for the care of a current or former employee, where the employee has died, has been declared mentally incompetent, or is under other legal disability, to the extent necessary to assist in obtaining any employment benefit or working condition for the current or former employee;
</p><p>(13) The Internal Revenue Service (IRS) and other governmental entities that are authorized to tax employees’ compensation with wage and tax information in accordance with a withholding agreement with the CFPB pursuant to 5 U.S.C. 5516, 5517, and 5520, for the purpose of furnishing employees with IRS Forms W-2 that report such tax distributions;
</p><p>(14) Unions recognized as exclusive bargaining representatives under the Civil Service Reform Act of 1978, 5 U.S.C. 7111, 7114; and
</p><p>(15) Carriers, providers and other federal agencies involved in administration of employee retirement and benefits programs and such agencies’ contractors or plan administrators, when necessary to determine employee eligibility to participate in retirement and benefits programs, process employee participation in those programs, process claims with respect to individual employee participation in those programs, audit benefits paid under those programs, or perform any other administrative function in connection with those programs and federal agencies that perform payroll and personnel processing and employee retirement and benefits plan services under interagency agreements or contracts, including the issuance of paychecks to employees, the distribution of wages, the administration of deductions from paychecks for retirement and benefits programs, and the distribution and receipt of those deductions. These agencies include, without limitation, the Department of Labor, the Department of Veterans Affairs, the Social Security Administration, the Federal Retirement Thrift Investment Board, the Department of Defense, OPM, the Board of Governors of the Federal Reserve System, the Department of the Treasury, and the National Finance Center at the U.S. Department of Agriculture.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, without limitation, the individual’s name, SSN, address, account number, transaction number, phone number, date of birth, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records under the National Archives and Records Administration (NARA) schedules General Records Schedule (GRS) GRS 01, GRS 02, and GRS 18-15b.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Chief Operating Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may inquire in writing in accordance with instructions appearing the CFPB’s Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070 <i>et seq.</i> Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from current and former CFPB employees, their named dependents and/or beneficiaries, their named emergency contacts, individuals who have been extended offers of employment by the CFPB, and from individuals and entities associated with Federal employee benefits, retirement, human resource, accounting, and payroll systems administration.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb11" toc="yes">
<systemNumber>.011</systemNumber>
<subsection type="systemName">Correspondence Tracking Database.</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals who submit correspondence, or who have correspondence submitted on their behalf to the CFPB, or who request to receive correspondence from the Bureau, and CFPB employees responsible for processing, reviewing, and/or responding to such correspondence.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in this system may contain (1) correspondence (including, without limitation, official letters, memoranda, faxes, telegrams, and emails) received and sent by the Bureau; (2) mailing lists of individuals who submit correspondence, or who have correspondence submitted on their behalf to the Bureau or request to receive correspondence from the Bureau; (3) identifying information regarding individuals who submit the correspondence, individuals or entities on whose behalf such correspondence is submitted, or individuals who request to receive correspondence from the Bureau, such as name, phone number, address, email address, and any other disclosed identifiable information; (4) information about the correspondence, including disposition, tracking dates, and where applicable, the type of correspondence; and (5) information concerning the CFPB employee responsible for processing the correspondence, including contact information, position or title, and information about internal assignments. Supporting records may include correspondence between the CFPB and the individual. This system does not contain all correspondence received or sent by the Bureau--for example, records related to consumer complaints will not be contained in this system--and some correspondence is maintained in other Bureau systems of records.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1011, 1012, 1013, codified at 12 U.S.C. 5491, 5492, 5493.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The purpose of the Correspondence Tracking Database is to enable the CFPB to track correspondence, including responsibilities for processing, tracking, responding to, or referring sensitive and/or time-critical correspondence for appropriate processing and responsive action, and to manage mailing lists of individuals who submit correspondence to the Bureau, have correspondence submitted on their behalf, or have requested to receive correspondence from the Bureau.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB’s Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) the CFPB suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or activities;
</p><p>(6) The DOJ for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(8) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal law proceedings;
</p><p>(9) Appropriate agencies, entities, and persons, to the extent necessary to respond to or refer correspondence; and
</p><p>(10) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, but not limited to, an individual’s name, email address or other contact information, by date of correspondence, topic of correspondence, correspondence control number or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>Per N1-587-12-06, records in this system are deleted or destroyed three (3) years after the calendar year in which it was created.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Chief Operating Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may inquire in writing in accordance with instructions appearing the CFPB’s Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070 <i>et seq.</i> Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information contained in the system will be collected from a variety of sources, including, without limitation, individuals who submit correspondence, or who have correspondence submitted on their behalf to the CFPB, or who have requested to receive correspondence from the Bureau, and CFPB employees responsible for processing, reviewing, and/or responding to such correspondence.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb13" toc="yes">
<systemNumber>.013</systemNumber>
<subsection type="systemName">CFPB External Contact Database.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington DC, 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include all individuals involved in CFPB communications with external affairs related activities
including: (1) Media representatives (including, without limitations, newspaper, magazine, radio or television station, wire service, internet
or any other form of media) who request interviews or meetings with the CFPB staff; (2) individuals who accompany the CFPB staff on official
travel; (3) CFPB employees or members of the public attending a CFPB sponsored event, work activity, or an event in which the CFPB
participated; (4) individuals who request building passes for access to the CFPB facility (including, without limitations, media
representatives, correspondents, technicians, and/or producers); (5) individuals who request information from the CFPB Communications Office
concerning specific issues and/or topics; (6) individuals who have been contacted for media events, interviews or meetings, occasions,
invitations, travel opportunities or the placement of articles; (7) individuals on the mailing list for the CFPB speeches or updates; (8)
individuals who request the CFPB accept a speaking engagement, accept an honor, attend a function, or request information about the CFPB, and
its mission and/or policies, etc.; (9) individuals who have participated in a survey or focus group sponsored by the CFPB; (10) CFPB contacts
of nongovernmental organizations throughout the United States (media, external affairs, educational, etc.); (11) officials of federal, state,
and local governments; (12) assignment information of current and former CFPB staff; (13) CFPB staff authorized to perform domestic
speaking/media engagements; and (14) CFPB staff involved in external affairs related communications.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system will include information related to communications with external affairs contacts. Such records include without
limitation: (1) Contact information (name, business phone number, email address) for individuals who are involved in the operation of the
CFPB’s external affairs activities; (2) domestic travel records, including dates, places visited and purpose of trip, biographies, speaking
engagements, and interviews; (3) communications between CFPB staff and individuals representing the media, non-profits, academia, and the
private sector; (4) photographs of CFPB employees and members of the public attending a CFPB sponsored event or an event in which the CFPB
participated; (5) information necessary to obtain entry into CFPB facility, such as name, address, telephone number, date of birth, Social
Security numbers, state of citizenship; (6) press releases; (7) names of local media organizations, non-profit, academia, and private sector
organizations; (8) information on CFPB staff who ask the CFPB for permission to publish information about themselves or articles they have
authored; (9) information on individuals who have participated in either a survey or focus group sponsored by the CFPB; (10) invitations sent
to the CFPB to participate in or attend a speaking engagement, including the names of requesters and/or the organizations they represent,
phone numbers, email addresses, assigned action officials and status; (11) automated and hard copy travel records, usually containing names,
titles, addresses, organizations, telephone/fax/internet numbers, when necessary for travel documents.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, sections 1011, 1012, 1021, codified at 12 U.S.C. 5491, 5492, 5511.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The purpose of the system is to enable the CFPB to communicate with the American public about its mission and activities. The
information will be used to facilitate the CFPB’s activities, including external contacts with the media, non-profits, academia, and the
private sector. The information collected will also facilitate CFPB events and press conferences.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules promulgated at 12 CFR part 1070
<i>et seq.</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third
party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body before which the CFPB is authorized to appear, where the use of
such information by the DOJ is deemed by the CFPB to be relevant and necessary to the litigation, and such proceeding names as a party or
interests:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(8) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(9) Appropriate agencies, entities, and persons, to the extent necessary to secure information relevant to the CFPB’s external affairs
activities, including external contacts with the media, non-profits, academia, and the private sector;
</p><p>(10) Members of the media, federal, state, and local government officials or other recipients of the CFPB’s external affairs communications
to inform them about attendees and invited guests of the CFPB media events and press briefings; and
</p><p>(11) To the public, members of the media, federal, state, and local government officials, or other recipients of CFPB reports, viewers of
the CFPB’s Web site, blog postings, and other social media, and recipients of other public relations materials issued by the CFPB about the
activities of the CFPB.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by the name of the individual or organization, date of event or date of received inquiry or request, or
assigned file number, email address or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records indefinitely until the National Archives and Records Administration (NARA)
approves the CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Media Relations Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information."  Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained directly from the individual who is the subject of these records, and/or the agency or
organization that the individual represents; and the CFPB staff involved in the external affairs operations.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb14" toc="yes">
<systemNumber>.014</systemNumber>
<subsection type="systemName">Direct Registration and User Management System.</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G St NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Categories of individuals covered by this system include all persons who are authorized to access CFPB information technology
resources, including without limitation: (1) Employees, contractors, and any lawfully designated representative of the above, including
representatives of Federal, State, territorial, tribal, or local government agencies or entities, in furtherance of the CFPB’s mission; (2)
individuals who have business with the CFPB and who have provided personal information in order to facilitate access to CFPB information
technology resources; and (3) individuals who are points of contact provided for government business, operations, or programs, and the
individuals they list as emergency or other contacts.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system may contain data relating to individuals, including but not limited to: name; business and affiliations,
including verification of affiliation; facility; positions held; telephone numbers, including business and cellular, home numbers, and numbers
where individuals can be reached while on travel or otherwise away from the office; level of access; home or other provided address for the
receipt of issued IT equipment or resources; email addresses of senders and recipients; records of access to CFPB or Treasury computers and
networks including equipment issued, user ID and passwords, date(s) and time(s) of access, IP address of access, logs of internet activity and
records on the authentication of the access request; records of identity management related to individual user’s request including universal
resource locator of individual’s chosen identity assurance certificate provider and response from certificate provider of positive or negative
authentication; and positions or titles of contacts, their business or organizational affiliations, and other contact information provided to
the Bureau that is derived from other sources to facilitate authorized access to CFPB Information Technology resources.
</p><p>The information in this system includes information relating to system access and does not include the data held within the systems or
information technology resources to which access or interaction is sought.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Section 1012, codified at 12 U.S.C. 5492.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to enable the CFPB to provide authorized individuals access to CFPB information
technology resources.
</p><p>The system enables the CFPB to maintain: account information required for approved access to information technology; lists of individuals
seeking or receiving access to CFPB information technology or equipment; lists of individuals who are appropriate organizational points of
contact; and lists of individuals who are emergency points of contact. The system will also enable the CFPB to provide individuals access to
certain programs and meeting attendance and where appropriate allow for sharing of information between individuals in the same operational
program to facilitate collaboration.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB’s Rules for the Disclosure of Records and Information, promulgated at 12 CFR
part 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to, or amendment or correction of record;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(8) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings; and
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organization or agency responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, without limitation, the individual’s name, address, account number, phone
number or email address, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Chief Information Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from individuals and entities associated with or granted access to CFPB information technology
resources.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.

</p></xhtmlContent></subsection></section>
<section id="cfpb15" toc="yes">
<systemNumber>.015</systemNumber>
<subsection type="systemName">CFPB Ethics Program Records.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20006.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include prospective, current and former CFPB employees.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records maintained in this system may contain, without limitation, the following information about an individual: Name; address;
telephone number; ethics advice; outside activity approvals (<i>i.e.</i> activities outside of, or not related to, a CFPB employee’s current
official work); ethics agreements; information in support of Public Financial Disclosure Reports and Confidential Financial Disclosure Reports
which are not already covered by the government-wide SORNs Executive Branch Public Financial Disclosure Reports and Other Ethics Program
Records (OGE/GOVT-1) and Confidential Statements of Employment and Financial Interests (OGE/GOVT-2); and any other name-retrieved
Ethics Program Records. Information contained in the Ethics Program Records will be generated by CFPB employees who: Provide ethics advice;
review and approve outside activities requests; create ethics agreements; and track completion of employee orientation and annual training
sessions. Whenever practicable, the CFPB will collect information about an individual directly from that individual.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Ethics in Government Act of 1978, 5 U.S.C. app.; Ethics Reform Act of 1989, Pub. L. 101-194; 5 CFR parts 735 &amp; 2634, and
other applicable ethics-related laws, rules, and Executive Orders; Pub. L. 111-203, Title X, Section 1012 codified at 12 U.S.C. 5492.[1]
</p>
<p>[1] Section 1066 of the Act grants the Secretary of the Treasury interim authority to perform certain functions of the CFPB.</p>
<p>Pursuant to that authority, Treasury published rules on the Disclosure of Records and Information within 12 CFR Chapter X. This SORN is
published pursuant to those rules and the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in the system is being collected to manage and appropriately document the CFPB’s compliance with government ethics
program requirements.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070
<i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another Federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to, or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A grand jury pursuant either to a Federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court; and
</p><p>(8) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings; and
</p><p>(9) Appropriate Federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, but not limited to, the individual’s name, address, phone number, or by some
combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer electronic and paper records indefinitely until the National Archives and Records Administration
approves the CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Ethics Officer, 1700 G Street NW., Washington, DC 20006.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20006.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from individuals seeking and responding to requests about ethics issues.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb16" toc="yes">
<systemNumber>.016</systemNumber>
<subsection type="systemName">CFPB Advisory Boards and Committees
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include any individual who has nominated an individual to be on an advisory
board or committee to the CFPB (CFPB board or committee), has served as a reference for a CFPB board or committee
nominee, or has been nominated to be on a CFPB board or committee, is currently serving on a CFPB board or
committee, and/or has served on a CFPB board or committee and is no longer serving. CFPB board and committee
alternatives are also included in this system. Individuals covered by this system also include any individual,
including the public, who, upon invitation from a CFPB board or committee, provides advice or comments or
otherwise interacts with a CFPB board or committee.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Information maintained on individuals who are past, present or nominated members of CFPB boards or committees
will include: (1) Contact information (e.g., name, business phone number, email address); (2) information
relevant to the CFPB’s determination of an individual’s eligibility for serving on a CFPB board or committee,
including but not limited to (a) that individual’s date of birth, place of birth, and any prior or pending civil
or criminal actions against that individual for the purpose of conducting a background investigation; (b)
education, registration in professional societies, work experience, record of performance, publications authored,
membership on other boards and committees, professional awards, for purposes of assessing an individual’s
qualifications for service; (3) financial disclosure information, declaration of desire and eligibility to serve,
and lobbyist registrations, for purposes of identifying any potential conflicts of interest that may arise from
an individual’s service on a CFPB board or committee; (4) names of professional references and notes and records
of conversations with those references; and (5) miscellaneous correspondence relating to the above.
</p><p>Information maintained on experts, consultants, and other members of the public invited to provide advice or
comments to a CFPB board or committee or otherwise interact with a CFPB board or committee will include: (1)
contact information (e.g., name, business phone number, email address).
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Pub. L. No. 111-203, Title X, sections 1011, 1012, 1014, codified at 12 U.S.C. &#167;&#167; 5491,
5492, 5494.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The system collects and maintains information on CFPB board or committee nominees and members, and those that
may interact with the CFPB regarding the board or committee. The records are used for administration of the
committees or boards, including the evaluation of potential board or committee members for eligibility to serve
on CFPB board or committee and the preparation of minutes and reports of CFPB board or committee meetings,
events, or programs.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB’s Disclosure of Records and Information Rules,
promulgated at 12 CFR part 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security
or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined
that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or property
interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or
programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in
connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or
remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records
to be made in consultation with or by that agency, or (b) verify the identity of an individual or the accuracy of
information submitted by an individual who has requested access to or amendment or correction of records;
</p><p>(3) To the Office of the President in response to an inquiry from that office made at the request of the
subject of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record
pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative
agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the
information in the performance of their duties or activities;
</p><p>(6) The DOJ for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding
before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is
deemed by the CFPB to be relevant and necessary to the advice or proceeding, and such proceeding names as a party
in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee;
or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its
components;
</p><p>(7) To the public in the form of names, affiliations, and other pertinent biographical information of board or
committee members; and
</p><p>(8) Appropriate agencies, entities, and persons to the extent necessary to obtain information relevant to
making a determination of whether an individual is eligible to serve on a CFPB board or committee.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records in this system are retrievable by a variety of fields including, without limitation, the individual’s
name, address, employer, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable
access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to
those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records indefinitely until the National Archives and Records
Administration (NARA) approves the CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Consumer Advisory Board Manager, 1700 G Street NW., Washington, DC
20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to
contest its content, may inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of
the CFR, Part 1070, "Disclosure of Records and Information." Address such requests to: Chief Privacy
Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained directly from the individual who is the subject of these records,
including any individual who has nominated an individual to be on a CFPB board or committee, has served as a
reference for a CFPB board or committee nominee, or was has been nominated to be on a CFPB board or committee, is
currently serving on a CFPB board or committee, and/or has served on a CFPB board or committee and is no longer
serving, as well as board and committee alternatives and any individual who upon invitation from a CFPB board or
committee, provides advice or comments on issues or has otherwise interacted with the a CFPB board or committee.
Information is also collected, as necessary, from third parties who provide information used by the CPFB to
determine an individual’s eligibility for serving on a CFPB board or committee.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb17" toc="yes">
<systemNumber>.017</systemNumber>
<subsection type="systemName">CFPB Small Business Review Panels and Cost of Credit Consultations.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include: (1) Individual representatives of small entities who, in their business capacity, may
participate in or attend meetings held in connection with the review panel and cost of credit consultation processes or other CFPB related
outreach events; and (2) other attendees or individual guests of small entity representatives who may attend meetings held in connection with
the review panel and cost of credit consultation processes or other related outreach events; and (3) CFPB employees or other federal agency
employees who participate in the events.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system will include information related to small businesses, small organizations, and small governmental jurisdictions,
as defined pursuant to the RFA, and individual representatives and guests of these small entities who are invited to or are attending meetings
or consultations held in connection with the review panel and/or cost of credit consultation processes or other events, or who are otherwise
participating in or requesting to participate in such meetings, consultations, or other related events. Such information may include: (1)
Contact information (name, title, telephone number, email address); (2) name of employer and memberships or affiliation with trade
associations or other organizations; (3) applicable business size standard and North American Industry Classification System (NAICS) code; (4)
annual revenues, asset size, and number of employees; (5) scope and nature of business activities; (6) affiliated entities; (7) invitations to
and participation in the review panel or cost of credit consultation processes, or other CFPB related outreach event; (8) written comments,
correspondence, or other materials submitted in connection with the review panel and/or cost of credit consultation processes; and (9)
information necessary to obtain entry into a CFPB or other government facility (address, telephone number, date of birth, Social Security
number, country of citizenship). Information maintained on individual guests of small entity representatives who may attend meetings held in
connection with the review panel and/or cost of credit consultation processes or other CFPB related outreach events will include: (1) Contact
information (name, title, telephone number, email address); (2) employer or sponsor name; (3) information on membership in or affiliation with
trade associations or other organizations; (4) invitations to and participation or requested participation in the review panel and/or cost of
credit consultation processes, or other CFPB related outreach event; and (5) information necessary to obtain entry into a CFPB or other
government facility (address, telephone number, date of birth, Social Security number, country of citizenship).
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, sections 1011 and 1012, codified at 12 U.S.C. 5491 and 5492. Public Law 96-354, as amended by
Public Law 104-121 and Public Law 111-203, codified at 5 U.S.C. 601 <i>et seq.</i>
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The purpose of the system is to collect and maintain information relating to potential small entity representatives who may or will:
(1) consult with the CFPB and other Small Business Review Panel members and provide advice and recommendations about the potential economic
impacts of regulatory proposals under consideration on small entities subject to the proposals; and/or (2) consult with the CFPB about any
projected impact on the cost of credit to small entities related to the proposals under consideration and significant alternatives to minimize
any such impact while achieving statutory objectives. The system will also collect and maintain information relating to guests of small entity
representatives who may or will attend such meetings or consultations with the CFPB and other Small Business Review Panel members. The records
are used in connection with and for administration of the review panel and cost of credit consultation processes, including meetings or
consultations with small entity representatives.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070
<i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body before which the CFPB is authorized to appear, where the use of
such information by the DOJ is deemed by the CFPB to be relevant and necessary to the litigation, and such proceeding names as a party or
interests:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(8) The public in the form of a list of the individual and business names of the invited or selected participants;
</p><p>(9) Other representatives of small entities who have been invited or selected to participate in the review panel and/or cost of credit
consultation processes and related meetings or other events, and persons attending such meetings, consultations, or other related events;
</p><p>(10) The Office of Advocacy of the Small Business Administration, the Office of Information and Regulatory Affairs within the Office of
Management and Budget, and any of their employees in their official capacity; and
</p><p>(11) Appropriate federal organizations or agencies in connection with a joint or interagency rulemaking process or consultation.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by one or more of the following: the name of the individual, business or employer name; membership or
affiliation with trade associations or other organizations; applicable business size standard and NAICS code; affiliated entities; scope or
nature of business activities.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Small Business Regulatory Enforcement Fairness Act Manager, 1500 Pennsylvania Ave NW. (Attn:
1801 L Street NW.), Washington, DC 20220.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained directly from the individual who is the subject of these records, and/or the association or
organization providing the information on behalf of one of its members, or individual guests of small entity representatives, and the CFPB
staff involved in the Small Business and Cost of Consultation Panel meetings.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb18" toc="yes">
<systemNumber>.018</systemNumber>
<subsection type="systemName">Litigation Files.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington DC, 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include, but are not limited to: (1) Individuals who are involved in litigation with the Bureau or
the United States (regarding matters within the jurisdiction of the Bureau) either as plaintiffs or as defendants in both civil and criminal
matters; (2) individuals who are involved in litigation regarding matters within the jurisdiction of the Bureau, either as plaintiffs or as
defendants, in which the Bureau becomes involved as an amicus curiae or intervener; (3) individuals who either file administrative complaints
against the Bureau or are the subjects of administrative complaints initiated by the Bureau; (4) CFPB or other federal employees whose duties
are related to litigation activities; (5) participants in CFPB referrals, investigations, rulemaking, advisory, and law enforcement
proceedings; (6) parties requesting formal advisory opinions; (7) parties involved in a contract claim or bid protest; and (8) parties who
request review by the Bureau or other federal agencies of potential settlements under the Class Action Fairness Act ("CAFA").
Information collected regarding consumer products and services is subject to the Privacy Act only to the extent that it concerns individuals;
information pertaining to corporations and other business entities and aggregate, non-identifiable information is not subject to the Privacy
Act.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in this system contain information pertaining to the subject matter of the litigation, administrative complaint, or adverse
personnel action as well as records generated during the process of creating the litigation function of the Bureau. Such records may include
complaints, litigation reports, administrative transcripts, various litigation documents, investigative materials, correspondence, briefs,
court orders and judgments, affidavits and other statements from witnesses, internal staff memoranda, interview notes, investigative notes,
staff working papers, draft materials, and other related documents and records, correspondence and internal status reports including matter
initiation reports and closing reports.
</p><p>Records maintained in the system may contain: Identifiable information about individuals such as name, address, email address, phone
number, social security number, employment status, age, date of birth, financial information, credit information, and personal history.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Section 1012, codified at 12 U.S.C. &#167; 5492, and Section 1054, codified at 12 U.S.C.
&#167; 5564.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>This system will track and store electronic information, including imaged and paper documents, to allow the Bureau to represent itself
and its components in court cases and administrative proceedings.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070
et seq., to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB, or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) The Federal Trade Commission ("FTC") or other federal banking agencies, for their use in providing legal advice to the
CFPB, where the use of such information by these agencies is deemed by the CFPB to be relevant and necessary to the Bureau’s involvement in a
proceeding as a party, amicus curiae or intervener;
</p><p>(8) DOJ, the FTC, or other federal banking agencies, in connection with the CFPB’s or these agencies’ review of CAFA notices that the CFPB
has received;
</p><p>(9) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(10) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(11) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or witnesses in the course of
investigations, to the extent necessary to secure information relevant to the investigation;
</p><p>(12) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and
</p><p>(13) Officials of a labor organization when relevant and necessary to their duties of exclusive representation concerning personnel
policies, practices, and matters affecting working conditions.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Records maintained in this system are stored electronically and in file folders. Paper copies of individual records are made by the
authorized CFPB staff.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, without limitation, name of the individual involved in a case, address,
account number, social security number, phone number, date of birth, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Assistant General Counsel for Litigation, Office of General Counsel, 1700 G Street NW.,
Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from individuals who are involved in litigation, including CFPB or other federal employees,
participants in CFPB investigations, rulemaking, advisory, and law enforcement proceedings and those requesting formal advisory opinions.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb19" toc="yes">
<systemNumber>.019</systemNumber>
<subsection type="systemName">Nationwide Mortgage Licensing System and Registry.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p><p>State Regulatory Registry LLC, 1129 20th Street NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include MLOs that are required to be registered under Section 1507 of the S.A.F.E. Act, 12 U.S.C.
5106, or its implementing regulation, 12 CFR 1007.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in this system contain identifying information about MLOs including: Names and former or other names used; Social Security
numbers; genders; dates and places of birth; home and business contact information; employment dates; criminal histories, including the
results of criminal background checks; financial services-related employment histories; civil, criminal, regulatory, and enforcement actions
taken against MLOs in connection with their employment in the financial services industry; state license(s) held, status and license numbers,
including license revocations and suspensions; fingerprint data; and unique identifiers assigned to NMLSR registrants.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Secure and Fair Enforcement for Mortgage Licensing Act (S.A.F.E. Act), Public Law 110-289, Division A, Title V, Sections 1501
-1517, 122 Stat. 2654, 2810-2824 (July 30, 2008), codified at 12 U.S.C. 5106; The Dodd-Frank Wall Street Reform and Consumer
Protection Act, Public Law 111-203, Title X, Section 1100 (5), codified at 12 U.S.C. 5106.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The system allows for the registration of MLOs employed by federal agency regulated institutions in a national registry, as required
by the S.A.F.E. Act. The information is maintained to support federal regulatory oversight while providing the public with access to certain
information concerning MLOs employed by institutions regulated by the Federal banking agencies or the FCA, including names and employment
histories of those MLOs.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070
<i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) the CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(8) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(9) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or witnesses in the course of
investigations, to the extent necessary to secure information relevant to the investigation;
</p><p>(10) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license;
</p><p>(11) To institutions employing MLOs that are required to be federally registered under Section 1507 of the S.A.F.E. Act, 12 U.S.C. 5106,
for use in registering employees as mortgage loan originators or renewing employee registrations;
</p><p>(12) To the public when the information relates to the employment history of, and publicly adjudicated disciplinary and enforcement actions
against, MLOs that is included in the NMLSR for access by the public in accordance with Section 1507 of the S.A.F.E. Act, 12 U.S.C. 5106; and
</p><p>(13) To the Federal Banking Agencies, as defined in section 1503 of the S.A.F.E. Act, 12 U.S.C. 5102(2), and the FCA, to carry out their
oversight responsibilities for MLOs employed by entities subject to their respective authorities.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Records maintained in this system are stored electronically and in file folders. Paper copies of individual records are made by
authorized CFPB staff.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, but not limited to: an individual MLO’s name or unique identification
number; by the financial institution’s name or unique NMLS identification number; or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Assistant Director, Supervision, 1700 G Street NW., Washington, DC 20552.
</p><p>State Regulatory Registry LLC 1129 20th Street NW., Washington, DC 20036.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Records created by a MLO or by a MLO’s bank or bank subsidiary employer, or FCA institution or institution subsidiary employer, in the
NMLSR may be accessed or amended directly by the MLO about whom the record pertains. If assistance is required to access, contest or amend
such a record, individuals may contact the NMLS Call Center at (240) 386-4444, or may inquire in writing in accordance with instructions
appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information." Address such requests to: Chief Privacy
Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information maintained in this system is obtained from MLOs who submit information to the registry and the results of Federal Bureau
of Investigation (FBI) background checks.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.

</p></xhtmlContent></subsection></section>
<section id="cfpb20" toc="yes">
<systemNumber>.020</systemNumber>
<subsection type="systemName">CFPB Site Badge and Visitor Management Systems.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by these systems include, but are not limited to: (1) Current and former CFPB employees or individuals who have
accepted an offer of employment from the CFPB; (2) individuals authorized to perform or use services provided in CFPB facilities including
contractors, consultants, detailees, and interns; (3) volunteers or other affiliates of the CFPB and (4) visitors to CFPB facilities.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records maintained in these systems may contain identifiable information including, but not limited to: Name, email address, phone
number, employment status, organization/office of assignment.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Pub. L. 111-203, Title X, Section 1012, codified at 12 U.S.C. 5492.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The information in these systems is being collected to enable the registration of employees, contractors, consultants, detailees,
interns, volunteers, affiliates, and visitors to CFPB facilities and issue badges for such access.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070
<i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency; or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB, or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and in the case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(8) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.
</p><p>(10) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>The records are maintained in paper and electronic media. Access to electronic records is restricted to authorized personnel who have
been issued non-transferrable access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to
those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records may be retrievable by a variety of fields including, but not limited to: Name, email address, phone number, employment status,
organization/office of assignment, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records Administration approves the
CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Physical Security Program Manager, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from employees, contractors, consultants, detailees, interns, volunteers, affiliates and/or
their employer or sponsor, and visitors to CFPB facilities.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb21" toc="yes">
<systemNumber>.021</systemNumber>
<subsection type="systemName">CFPB Consumer Education and Engagement Records
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system are those who: participate in CFPB-sponsored or CFPB-funded financial education or financial
capability programs, including financial education campaigns; utilize financial education web-tools or other financial education resources; or
participate in surveys or other research conducted by the CFPB or by a third party, or by a third party on behalf of the CFPB.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system regarding the individuals described above may include: (1) Contact information (name, phone numbers, email
address); (2) unique identifiers provided to government employees (3) information related to the participant’s financial status including bank
account information and records of consumer financial transactions; (4) information on consumer characteristics collected in connection with
financial education programs or the consumer’s business relationship with a third party; (5) bank account information (for payment to survey
participants); (6) other information collected from or about consumers in response to surveys or other research methods; and (7) information
relating to the effectiveness of financial education programs or resources or access to financial products or services.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1013 and 1022, codified at 12 U.S.C. 5493 and 5512.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>The Act established functions within the CFPB (1) To develop and implement initiatives to educate and empower consumers to make better
informed financial decisions; (2) to develop and implement a strategy to improve the financial literacy of consumers, including access to
financial information, products and services; and (3) to do research regarding, among other things, (a) consumer awareness and understanding
of costs, risks, and benefits of consumer financial products or services, (b) consumer behavior with respect to consumer financial products
and services, (c) experiences of traditionally underserved consumers, including un-banked and under-banked consumers, and (d) best practices
and effective methods, tools, technology and strategies to educate and counsel seniors about personal finance management. Consistent with
these functions, the purpose of the system is to enable the CFPB to identify and conduct effective financial education programs and also to
collect, research, and publish certain information (other than personally-identifiable information) relevant to improving consumer financial
decision-making skills and outcomes.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070
<i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(8) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and
</p><p>(10) Appropriate federal, state, local, foreign, tribal or self-regulatory organizations or agencies or private entities that partner with
the CFPB for research purposes.
</p></xhtmlContent></subsection>
	<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by unique identifiers assigned to the records for purposes of longitudinal updating or for connecting data
points across data sources, or by a variety of fields including, without limitation, the individual’s name and contact information,
identifying file number, or other information collected in response to surveys or other research.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records indefinitely until the National Archives and Records Administration (NARA)
approves the CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Associate Director, Consumer Education and Engagement, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained directly from the individual who is the subject of these records, and/or from third parties,
including depository or non-depository institutions, credit reporting agencies, counseling agencies or other businesses or organizations or
governmental entities involved in the markets for consumer financial products or services or that provide financial education services.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb22" toc="yes">
<systemNumber>.22</systemNumber>
<subsection type="systemName">Market and Consumer Research Records.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Information in the system will contain records that have been collected from: providers of consumer financial products and services,
consumer reporting agencies, and debt counselors; service providers to the above; consumers; government entities; and commercial and non-
profit entities that compile or otherwise possess data sets obtained from one or more of the above sources.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in the system may include without limitation: (1) contact information for the categories of individuals mentioned above (e.g.,
names, phone numbers, email addresses, physical addresses, and governmental-issued identification numbers); (2) information collected from
consumers as part of surveys, randomized controlled trials, or through other mechanisms; (3) consumer financial transaction data and other
information related to consumers’ financial statuses; (4) information about the legal relationships between consumers and market participants,
such as contracts and dispute records; (5) information about commercial relationships between consumers and other market participants; and (6)
information on consumer characteristics collected by market participants or other entities.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1013 and 1022 codified at 12 U.S.C. 5493 and 5512.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>Records in this system are collected to enable the CFPB to monitor, research, analyze, and report information relevant to the
functioning of markets for consumer financial products and services. This system will also enable CFPB to research, analyze, and report on
consumer financial products or services, consumer awareness and understanding of the costs, risks, and benefits of such products or services,
and consumer behavior with respect to such products or services.
</p><p>In most cases, records will not contain personal identifiers. Records with personal identifiers will be used solely for purposes of
matching the records with other datasets, which will better enable the CFPB to perform the statutory functions identified above. After the
matching is complete, a de-identified copy of the matched dataset will be used for conducting research and analysis. The CFPB will use the
personal identifiers after the matching only for the purpose of performing similar matches on future data acquisitions.
</p></xhtmlContent></subsection>
	<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR 1070 <i>et
seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) the CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third
party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and such proceeding names as a party in interest:
 (a) The CFPB;
 (b) Any employee of the CFPB in his or her official capacity;
 (c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
 (d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial proceeding, including
disclosures to opposing counsel or witnesses (including expert witnesses) in the course of discovery or other pre-hearing exchanges of
information, litigation, or settlement negotiations, where relevant or potentially relevant to a proceeding, or in connection with criminal
law proceedings;
</p><p>(8) A grand jury pursuant either to a federal or state grand jury subpoena, or to a prosecution request that such record be released for
the purpose of its introduction to a grand jury, where the subpoena or request has been specifically approved by a court. In those cases where
the Federal Government is not a party to the proceeding, records may be disclosed if a subpoena has been signed by a judge;
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies responsible for investigating,
prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule, regulation, order, policy, or license if the information may
be relevant to a potential violation of civil or criminal law, rule, regulation, order, policy or license; and
</p><p>(10) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies that partner with the CFPB for
research purposes.
</p></xhtmlContent></subsection>
	<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>The records may contain personal identifiers for purposes of matching the records with other datasets. After the matching is complete,
a de-identified copy of the matched dataset will be used for conducting research and analysis. The CFPB may retain the personal identifiers
after the matching, but only for the purpose of performing similar matches on future data acquisitions.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
During matching, identifiable data is solely under the control of a limited number of employees or contractors who are required to uphold
confidentiality restrictions of the CFPB. In addition, any contract personnel who have access to the records are required to sign
nondisclosure agreements prior to working with the data.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records indefinitely until the National Archives and Records Administration ("NARA
") approves the CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Associate Director, Research Markets and Regulations, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system will be obtained from: providers of consumer financial products and services, consumer reporting agencies,
and debt counselors; service providers to the above; consumers; government entities; and commercial and non-profit entities that compile or
otherwise possess data sets obtained from one or more of the above sources. In addition, information may be added by CFPB employees and
contractors involved in research tasks.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<section id="cfpb23" toc="yes">
<systemNumber>.023</systemNumber>
<subsection type="systemName">CFPB Prize Competitions Program Records.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include: (1) Any individual who participates in a CFPB sponsored prize competition, or is a CFPB
sponsored prize competition awardee, including representatives of companies who, in their business capacity, may participate in or otherwise
represent their companies in CFPB sponsored prize competitions; (2) Any individual who nominates an individual to serve as a judge for a CFPB
sponsored prize competition, or is nominated to serve as a judge, is currently serving as a judge, has been selected as an alternative judge,
and/or has served as a judge and is no longer serving; and (3) Any individual who notarizes, witnesses, or otherwise verifies a declaration of
participation associated with a CFPB sponsored prize competition.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Information maintained on CFPB sponsored prize competition participants will include: contact information (including name, address,
email address, and telephone number). Information maintained on CFPB sponsored prize competition awardees will include: (1) Contact
information (including name, address, email address, and telephone number); (2) employment information, including title; (3) information
necessary for payment, including Social Security number ("SSN"), Tax Identification Number ("TIN"), Employee
Identification Number ("EIN"), Data Universal Numbering System ("DUNS") Number, Commercial and Government Entity (
"CAGE") number, Electronic Funds Transfer ("EFT") data, and/or financial institution name, routing, and account
numbers; and (4) information relevant to determination of eligibility for selection as a prize competition awardee, such as employment
information, citizenship status, and declaration of desire and eligibility to participate. Information maintained on individuals who nominate
an individual to serve as a judge for a CFPB sponsored prize competition will include name and contact information (including name, address,
email address, and telephone number). Information maintained on individuals serving as, or being nominated to serve as a judge for a CFPB
sponsored prize competition will include place of birth, date of birth, gender, citizenship status, declaration of desire and eligibility to
participate, SSN, financial disclosure information, and other information that can be used to determine if the individual is fit to
participate. Information collected about individuals who notarize, witness, or otherwise verify declarations of participation associated with
a CFPB sponsored prize competition includes name and notary seal (including name, state of issue, and commission expiration date) only.
</p><p>Records are subject to the Privacy Act only to the extent that they concern individuals; information pertaining to corporations and other
business entities and organizations are not subject to the Privacy Act.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>America COMPETES Reauthorization Act of 2010, Public Law 111-358, Section 105, codified at 15 U.S.C. 3719; Dodd-Frank Wall
Street Reform and Consumer Financial Protection Act of 2010, Public Law 111-203, Section 1012, codified at 12 U.S.C. 5492.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>Records in this system are collected to enable the CFPB to manage its prize competition program authorized by the America COMPETES
Reauthorization Act of 2010, select judges for CFPB sponsored prize competitions, maintain accounting and financial information associated
with making authorized payments to companies or individuals who are CFPB sponsored prize competition awardees, develop reports to applicable
federal, state, and local taxing officials of taxable income, and to meet other reporting requirements.
</p></xhtmlContent></subsection>
	<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR 1070 <i>et
seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security or confidentiality of
information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed
compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this
system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to
respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation
with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has
requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party
on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other
activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or
activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a
proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB
to be relevant and necessary to the advice or proceeding, and such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) Members of the media, federal, state, and local government officials or other recipients of the CFPB’s external affairs communications
to inform them about CFPB sponsored prize competitions, awardees, related selection processes, and other program activities;
</p><p>(8) To the public, members of the media, federal, state, and local government officials, or other recipients of CFPB reports, viewers of
the CFPB’s Web site, blog postings, and other social media, and recipients of other public relations materials issued by the CFPB about CFPB
sponsored prize competitions, awardees, related selection processes, and other program activities; and
</p><p>(9) To the Treasury Department, Internal Revenue Service, and other governmental entities, including state and local taxing officials, to
facilitate taxation of payments made to CFPB sponsored prize competition awardees.
</p></xhtmlContent></subsection>
	<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p><p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, without limitation, the individual’s name, SSN, address, account number,
phone number, date of birth, employer, prize competition name, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords.
Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain electronic and paper records indefinitely until the National Archives and Records Administration ("NARA
") approves the CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Chief Financial Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may
inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information.
" Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is provided by individuals who participate in CFPB sponsored prize competition activities, by individuals
who nominate an individual to serve as a judge for a CFPB sponsored prize competition, or individuals who are nominated or serve as judges for
a CFPB sponsored prize competition, and by individuals who notarize, witness, or otherwise verify declarations of participation associated
with a CFPB sponsored prize competition.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.</p></xhtmlContent></subsection></section>
<section id="cfpb24" toc="yes">
	<systemNumber>.024</systemNumber>
<subsection type="systemName">Judicial and Administrative Filings Collection.
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington DC, 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include, without limitation: (1) Individuals who are or have been the
subjects of or are otherwise named in formal judicial and administrative actions, or other formal actions that
have reached final judgment involving financial frauds against consumers; (2) current, former, and prospective
consumers who are or have been customers or prospective customers of, solicited by, or serviced by individuals or
businesses named in final actions involving consumer financial fraud if such individuals have provided
information relative to, have been witnesses in or are otherwise associated with the formal actions included in
this system; (3) other individuals who may have information relevant to, or have been named in formal actions
included in this system; and (4) individuals who are users of this collection of records.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Records in this system contain information pertaining to the subject matter of formal judicial and
administrative actions, or other formal actions that have reached final judgment involving financial frauds
against consumers. Such records may include electronic copies of publicly available documents associated with
formal actions including, but not limited to: reports, transcripts, correspondence, briefs, court orders and
judgments, affidavits and other statements from witnesses, pleadings, exhibits, evidentiary materials, sentencing
memoranda, and other related documents and records.
</p><p>Identifiable information may include, among other things names and known aliases, business and home addresses,
email addresses, phone numbers, employment information including titles, and personal history as it relates to
the subject matter of the case. The Bureau does not verify any facts or findings contained in these documents.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Pub. L. 111-203, Title X, Sections 1011, 1012, 1013, 1015, and 1021, codified at 12 U.S.C. 5491, 5492,
5493, 5495, and 5511.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>This system will collect and store the information to assist the Bureau and other agencies to identify and
track persons and entities that are repeat violators of the consumer financial laws and to use such information
to prosecute such persons and entities.
</p></xhtmlContent></subsection>
<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules,
promulgated at 12 CFR part 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) The CFPB suspects or has confirmed that the security
or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined
that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or property
interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or
programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information;
and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in
connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or
remedy such harm;
</p><p>(2) Another federal or state agency to: (a) Permit a decision as to access, amendment or correction of records
to be made in consultation with or by that agency; or (b) verify the identity of an individual or the accuracy of
information submitted by an individual who has requested access to or amendment or correction of records;
</p><p>(3) The Office of the President in response to an inquiry from that office made at the request of the subject
of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record
pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative
agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the
information in the performance of their duties or activities;
</p><p>(6) The U.S. Department of Justice (DOJ) for its use in providing legal advice to the CFPB or in representing
the CFPB in a proceeding before a court, adjudicative body, or other administrative body, where the use of such
information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and in the
case of a proceeding, such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ or the CFPB has agreed to represent
the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its
components;
</p><p>(7) A court, magistrate, or administrative tribunal in the course of an administrative proceeding or judicial
proceeding, including disclosures to opposing counsel or witnesses (including expert witnesses) in the course of
discovery or other pre-hearing exchanges of information, litigation, or settlement negotiations, where relevant
or potentially relevant to a proceeding, or in connection with criminal law proceedings;
</p><p>(8) Appropriate agencies, entities, and persons, including but not limited to potential expert witnesses or
witnesses in the course of investigations, to the extent necessary to secure information relevant to the
investigation; and
</p><p>(9) Appropriate federal, state, local, foreign, tribal, or self-regulatory organizations or agencies
responsible for investigating, prosecuting, enforcing, implementing, issuing, or carrying out a statute, rule,
regulation, order, policy, or license if the information may be relevant to a potential violation of civil or
criminal law, rule, regulation, order, policy or license.
</p></xhtmlContent></subsection>
	<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Records maintained in this system are stored electronically and in hard copy file folders.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, without limitation, name of the individual(s)
involved in a case, including attorney, defendant, plaintiff, case number, company name, contact information such
as address and phone number, alleged activity or violation of law, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable
access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to
those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will maintain computer and paper records indefinitely until the National Archives and Records
Administration (NARA) approves the CFPB’s records disposition schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to
contest its content, may inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of
the CFR, Part 1070, "Disclosure of Records and Information." Address such requests to: Chief Privacy
Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from local, state, tribal, and federal law enforcement agencies,
publicly available records such as media reports, state and federal law enforcement agency Web sites, and court
and administrative agency dockets, and any other person with information relating to financial frauds perpetrated
against consumers.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
	<section id="cfpb26" toc="yes">
		<systemNumber>.26</systemNumber>
<subsection type="systemName">Biographies
</subsection>
<subsection type="systemLocation"><xhtmlContent><p>Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfIndividuals"><xhtmlContent><p>Individuals covered by this system include: Any CFPB personnel, including federal employees, detailees, and contractors, whose biographical information is collected and distributed by CFPB. The system may also contain information about individuals who have collaborated with, or have joint authorship of publications or presentations with CFPB personnel.
</p></xhtmlContent></subsection>
<subsection type="categoriesOfRecords"><xhtmlContent><p>Information contained in this system includes: Individuals’ (1) name; (2) photograph; (3) professional contact information; (4) work history and experience; (5) education background; (6) fields of interest; (7) military experience, if applicable; (8) civic duties; (9) honors or awards; (10) membership in professional societies; (11) publications authored and speeches or presentations given; and (12) other biographical information upon agreement by the individual that may be collected and distributed to Bureau staff, appropriate agencies and entities, the media, and the public in order for the Bureau to carry out its responsibilities.
</p></xhtmlContent></subsection>
<subsection type="authorityForMaintenance"><xhtmlContent><p>Public Law 111-203, Title X, Sections 1011, 1012, 1013, codified at 12 U.S.C. &#167;&#167; 5491, 5492, 5493.
</p></xhtmlContent></subsection>
<subsection type="purpose"><xhtmlContent><p>Records in this system are collected to enable the CFPB to collect and distribute biographical information of CFPB personnel, including employees, detailees, and contractors, in order to distribute information to Bureau staff, appropriate agencies and entities, the media, and the public.
</p></xhtmlContent></subsection>
		<subsection type="routineUsesOfRecords"><xhtmlContent><p>These records may be disclosed, consistent with the CFPB Disclosure of Records and Information Rules, promulgated at 12 CFR part 1070 <i>et seq.,</i> to:
</p><p>(1) Appropriate agencies, entities, and persons when: (a) the CFPB suspects or has confirmed that the security or confidentiality of information in the system of records has been compromised; (b) the CFPB has determined that, as a result of the suspected or confirmed compromise, there is a risk of harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the CFPB or another agency or entity) that rely upon the compromised information; and (c) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the CFPB’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm;
</p><p>(2) Another federal or state agency to (a) permit a decision as to access, amendment or correction of records to be made in consultation with or by that agency, or (b) verify the identity of an individual or the accuracy of information submitted by an individual who has requested access to or amendment or correction of records;
</p><p>(3) To the Office of the President in response to an inquiry from that office made at the request of the subject of a record or a third party on that person’s behalf;
</p><p>(4) Congressional offices in response to an inquiry made at the request of the individual to whom the record pertains;
</p><p>(5) Contractors, agents, or other authorized individuals performing work on a contract, service, cooperative agreement, job, or other activity on behalf of the CFPB or Federal Government and who have a need to access the information in the performance of their duties or activities;
</p><p>(6) The U.S. Department of Justice ("DOJ") for its use in providing legal advice to the CFPB or in representing the CFPB in a proceeding before a court, adjudicative body, or other administrative body, where the use of such information by the DOJ is deemed by the CFPB to be relevant and necessary to the advice or proceeding, and such proceeding names as a party in interest:
</p><p>(a) The CFPB;
</p><p>(b) Any employee of the CFPB in his or her official capacity;
</p><p>(c) Any employee of the CFPB in his or her individual capacity where DOJ has agreed to represent the employee; or
</p><p>(d) The United States, where the CFPB determines that litigation is likely to affect the CFPB or any of its components;
</p><p>(7) To audiences attending a particular event or meeting when the biographies of speakers are used as background in introductions or other informational material; and
</p><p>(8) To the news media and the public, with the approval of the Chief Privacy Officer in consultation with counsel, when necessary for recruiting, or providing information relevant to products authored by CFPB personnel.
</p></xhtmlContent></subsection>
		<subsection type="policiesAndPractices"><xhtmlContent><p>Storage:</p>
<p>Paper and electronic records.
</p></xhtmlContent></subsection>
<subsection type="retrievability"><xhtmlContent><p>Records are retrievable by a variety of fields including, without limitation, name, work experience, educational background, publications and presentations, or by some combination thereof.
</p></xhtmlContent></subsection>
<subsection type="safeguards"><xhtmlContent><p>Access to electronic records is restricted to authorized personnel who have been issued non-transferrable access codes and passwords. Other records are maintained in locked file cabinets or rooms with access limited to those personnel whose official duties require access.
</p></xhtmlContent></subsection>
<subsection type="retentionAndDisposal"><xhtmlContent><p>The CFPB will manage all computer and paper files in the system as permanent records until the disposition schedule for these records is approved by the National Archives and Records Administration, at which time, the CFPB will dispose of such files in accordance with the schedule.
</p></xhtmlContent></subsection>
<subsection type="systemManager"><xhtmlContent><p>Consumer Financial Protection Bureau, Chief Operating Officer, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="notificationProcedure"><xhtmlContent><p>Individuals seeking notification and access to any record contained in this system of records, or seeking to contest its content, may inquire in writing in accordance with instructions appearing in Title 12, Chapter 10 of the CFR, "Disclosure of Records and Information." Address such requests to: Chief Privacy Officer, Bureau of Consumer Financial Protection, 1700 G Street NW., Washington, DC 20552.
</p></xhtmlContent></subsection>
<subsection type="recordAccessProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="contestingRecordProcedures"><xhtmlContent><p>See "Notification Procedures" above.
</p></xhtmlContent></subsection>
<subsection type="recordSourceCategories"><xhtmlContent><p>Information in this system is obtained from the individual personnel and co-workers.
</p></xhtmlContent></subsection>
<subsection type="exemptionsClaimed"><xhtmlContent><p>None.
</p></xhtmlContent></subsection></section>
<previousPubs id="systems" toc="yes">
<title>Systems of Records Published Between January 3, 2012 and December 31, 2013</title>
</previousPubs>

	<regulations id="reg" toc="yes">
<regulationsTitle number="12">
<heading> Banks and Banking </heading>
<regulationsPart number="1070">
<heading> DISCLOSURE OF RECORDS AND INFORMATION </heading>
<xhtmlContent>
<p><b>Subpart E--Privacy Act</b></p>
<p>Sec.
</p>
<p><b>&#167; 1070.50
 Purpose and scope; definitions.
</b></p>
<p>(a) This subpart implements the provisions of the Privacy Act of 1974, 5 U.S.C. 552a (the Privacy Act). The regulations apply to all records maintained by the CFPB and which are retrieved by an individual’s name or personal identifier. The regulations set forth the procedures for requests for access to, or amendment of, records concerning individuals that are contained in systems of records maintained by the CFPB. These regulations should be read in conjunction with the Privacy Act, which provides additional information about this topic.
</p>
<p>(b) For purposes of this subpart, the following definitions apply:
</p>
<p>(1) The term <i>Chief Privacy Officer</i> means the Chief Information Officer of the CFPB or any CFPB employee to whom the Chief Information Officer has delegated authority to act under this part;
</p>
<p>(2) The term <i>guardian</i> means the parent of a minor, or the legal guardian of any individual who has been declared to be incompetent due to physical or mental incapacity or age by a court of competent jurisdiction;
</p>
<p>(3) <i>Individual</i> means a citizen of the United States or an alien lawfully admitted for permanent residence;
</p>
<p>(4) <i>Maintain</i> includes maintain, collect, use, or disseminate;
</p>
<p>(5) <i>Record</i> means any item, collection, or grouping of information about an individual that is maintained by an agency, including, but not limited to, his education, financial transactions, medical history, and criminal or employment history and that contains his name or the identifying number, symbol, or other identifying particular assigned to the individual, such as a finger or voiceprint or a photograph;
</p>
<p>(6) <i>Routine use</i> means the disclosure of a record that is compatible with the purpose for which it was collected;
</p>
<p>(7) <i>System of records</i> means a group of any records under the control of an agency from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifying particular assigned to the individual; and
</p>
<p>(8) <i>Statistical record</i> means a record in a system of records maintained for statistical research or reporting purposes only and not used in whole or in part in making any determination about an identifiable individual, except as provided by 13 U.S.C. 8.

</p>
<p><b>&#167; 1070.51
 Authority and responsibilities of the Chief Privacy Officer.
</b></p>
<p>The Chief Privacy Officer is authorized to:
</p>
<p>(a) Respond to requests for access to, accounting of, or amendment of records contained in a system of records maintained by the CFPB;
</p>
<p>(b) Approve the publication of new systems of records and amend existing systems of record; and
</p>
<p>(c) File any necessary reports related to the Privacy Act.

</p>
<p><b>&#167; 1070.52
 Fees.
</b></p>
<p>(a) <i>Copies of records.</i> The CFPB shall provide the requester with copies of records requested pursuant to &#167; 1070.53 of this subpart at the same cost charged for duplication of records under &#167; 1070.22 of this part.
</p>
<p>(b) <i>No fee.</i> The CFPB will not charge a fee if:
</p>
<p>(1) Total charges associated with a request are less than $5, or
</p>
<p>(2) The requester is a CFPB employee or former employee, or an applicant for employment with the CFPB, and the request pertains to that employee, former employee, or applicant.

</p>
<p><b>&#167; 1070.53
 Request for access to records.
</b></p>
<p>(a) <i>Procedures for making a request for access to records.</i> An individual’s requests for access to records that pertain to that individual (or to the individual for whom the requester serves as guardian) may be submitted to the CFPB in writing or by electronic means.
</p>
<p>(1) If submitted in writing, the request shall be labeled “Privacy Act Request” and shall be addressed to the Chief Privacy Officer, Consumer Financial Protection Bureau, 1700 G Street NW., Washington, DC 20552.
</p>
<p>(2) If submitted by electronic means, the request shall be labeled “Privacy Act Request” and the request shall be submitted as set forth at the CFPB’s Web site, <i>http://www.consumerfinance.gov.</i>
</p>
<p>(b) <i>Content of a request for access to records.</i> A request for access to records shall include:
</p>
<p>(1) A statement that the request is made pursuant to the Privacy Act;
</p>
<p>(2) The name of the system of records that the requester believes contains the record requested, or a description of the nature of the record sought in detail sufficient to enable CFPB personnel to locate the system of records containing the record with a reasonable amount of effort;
</p>
<p>(3) Whenever possible, a description of the nature of the record sought, the date of the record or the period in which the requester believes that the record was created, and any other information that might assist the CFPB in identifying the record sought (e.g., maiden name, dates of employment, account information, etc.).
</p>
<p>(4) Information necessary to verify the requester’s identity pursuant to paragraph (c) of this section;
</p>
<p>(5) The mailing or email address where the CFPB’s response or further correspondence should be sent.
</p>
<p>(c) <i>Verification of identity.</i> To obtain access to the CFPB’s records pertaining to a requester, the requester shall provide proof to the CFPB of the requester’s identity as provided below.
</p>
<p>(1) In general, the following will be considered adequate proof of a requester’s identity:
</p>
<p>(i) A photocopy of two forms of identification, including one form of identification that bears the requester’s photograph, and one form of identification that bears the requester’s signature;
</p>
<p>(ii) A photocopy of a single form of identification that bears both the requester’s photograph and signature; or
</p>
<p>(iii) A statement swearing or affirming the requester’s identity and to the fact that the requester understands the penalties provided in 5 U.S.C. 552a(i)(3).
</p>
<p>(2) Notwithstanding paragraph (c)(1) of this section, a designated official may require additional proof of the requester’s identity before action will be taken on any request, if such official determines that it is necessary to protect against unauthorized disclosure of information in a particular case. In addition, if a requester seeks records pertaining to an individual in the requester’s capacity as that individual’s guardian, the requester shall be required to provide adequate proof of the requester’s legal relationship before action will be taken on any request.
</p>
<p>(d) <i>Request for accounting of previous disclosures.</i> An individual may request an accounting of previous disclosures of records pertaining to that individual in a system of records as provided in 5 U.S.C. 552a(c). Such requests should conform to the procedures and form for requests for access to records set forth in paragraphs (a) and (b) of this section.

</p>
<p><b>&#167; 1070.54
 CFPB procedures for responding to a request for access.
</b></p>
<p>(a) <i>Acknowledgment and response.</i> The CFPB will provide written acknowledgement of the receipt of a request within twenty (20) business days from the receipt of the request and will, where practicable, respond to each request within that twenty (20) day period. When a full response is not practicable within the twenty (20) day period, the CFPB will respond as promptly as possible.
</p>
<p>(b) <i>Disclosure.</i> (1) When the CFPB discloses information in response to a request, the CFPB will make the information available for inspection and copying during regular business hours as provided in &#167; 1070.13 of this part, or the CFPB will mail it or email it the requester, if feasible, upon request.
</p>
<p>(2) The requester may bring with him or her anyone whom the requester chooses to see the requested material. All visitors to the CFPB’s buildings must comply with the applicable security procedures.
</p>
<p>(c) <i>Denial of a request.</i> If the CFPB denies a request made pursuant to &#167; 1070.53 of this subpart, it will inform the requester in writing of the reason(s) for denial and the procedures for appealing the denial.

</p>
<p><b>&#167; 1070.55
 Special procedures for medical records.
</b></p>
<p>If an individual requests medical or psychological records pursuant to &#167; 1070.53 of this subpart, the CFPB will disclose them directly to the requester unless the CFPB determines that such disclosure could have an adverse effect on the requester. If the CFPB makes that determination, the CFPB shall provide the information to a licensed physician or other appropriate representative that the requester designates, who shall disclose those records to the requester in a manner he or she deems appropriate.

</p>
<p><b>&#167; 1070.56
 Request for amendment of records.
</b></p>
<p>(a) <i>Procedures for making request.</i> (1) If an individual wishes to amend a record that pertains to that individual in a system of records, that individual may submit a request in writing or by electronic means to the Chief Privacy Officer, as set forth in &#167; 1070.53(a). The request shall be labeled “Privacy Act Amendment Request.”
</p>
<p>(2) A request for amendment of a record must:
</p>
<p>(i) Identify the system of records containing the record for which amendment is requested;
</p>
<p>(ii) Specify the portion of that record requested to be amended; and
</p>
<p>(iii) Describe the nature and reasons for each requested amendment.
</p>
<p>(3) When making a request for amendment of a record, the CFPB will require a requester to verify his or her identity under the procedures set forth in &#167; 1070.53(c) of this subpart, unless the requester has already done so in a related request for access or amendment.
</p>
<p>(b) <i>Burden of proof.</i> In a request for amendment of a record, the requester bears the burden of proving by a preponderance of the evidence that the record is not accurate, relevant, timely, or complete.

</p>
<p><b>&#167; 1070.57
 CFPB review of a request for amendment of records.
</b></p>
<p>(a) <i>Time limits.</i> The CFPB will acknowledge a request for amendment of records within ten (10) business days after it receives the request. In the acknowledgment, the CFPB may request additional information necessary for a determination on the request for amendment. The CFPB will make a determination on a request to amend a record promptly.
</p>
<p>(b) <i>Contents of response to a request for amendment.</i> When the CFPB responds to a request for amendment, the CFPB will inform the requester in writing whether the request is granted or denied, in whole or in part. If the CFPB grants the request, it will take the necessary steps to amend the record and, when appropriate and possible, notify prior recipients of the record of its action. If the CFPB denies the request, in whole or in part, it will inform the requester in writing:
</p>
<p>(1) Why the request (or portion of the request) was denied;
</p>
<p>(2) That the requester has a right to appeal; and
</p>
<p>(3) How to file an appeal.

</p>
<p><b>&#167; 1070.58
 Appeal of adverse determination of request for access or amendment.
</b></p>
<p>(a) <i>Appeal.</i> A requester may appeal a denial of a request made pursuant to &#167;&#167; 1070.53 or 1070.56 of this subpart within ten (10) business days after the CFPB notifies the requester that it has denied the request.
</p>
<p>(b) <i>Content of Appeal.</i> A requester may submit an appeal in writing or by electronic means as set forth in &#167; 1070.53(a). The appeal shall be addressed to the General Counsel and labeled “Privacy Act Appeal.” The appeal must also:
</p>
<p>(1) Specify the background of the request; and
</p>
<p>(2) Provide reasons why the requester believes the denial is in error.
</p>
<p>(c) <i>Determination.</i> The General Counsel will make a determination as to whether to grant or deny an appeal within thirty (30) business days from the date it is received, unless the General Counsel extends the time for good cause.
</p>
<p>(1) If the General Counsel grants an appeal regarding a request for amendment, he or she will take the necessary steps to amend the record and, when appropriate and possible, notify prior recipients of the record of its action.
</p>
<p>(2) If the General Counsel denies an appeal, he or she will inform the requester of such determination in writing, including the reasons for the denial, and the requester’s right to file a statement of disagreement and to have a court review its decision.
</p>
<p>(d) <i>Statement of disagreement.</i> (1) If the General Counsel denies an appeal regarding a request for amendment, a requester may file a concise statement of disagreement with the denial. The CFPB will maintain the requester’s statement with the record that the requester sought to amend and any disclosure of the record will include a copy of the requester’s statement of disagreement.
</p>
<p>(2) When practicable and appropriate, the CFPB will provide a copy of the statement of disagreement to any prior recipients of the record.

</p>
<p><b>&#167; 1070.59
 Restrictions on disclosure.
</b></p>
<p>The CFPB will not disclose any record about an individual contained in a system of records to any person or agency without the prior written consent of that individual unless the disclosure is authorized by 5 U.S.C. 552a(b). Disclosures authorized by 5 U.S.C. 552a(b) include disclosures that are compatible with one or more routine uses that are contained within the CFPB’s Systems of Records Notices, which are available on the CFPB’s Web site, at <i>http://www.consumerfinance.gov.</i>

</p>
<p><b>&#167; 1070.60
 Exempt records.
</b></p>
<p>(a) <i>Exempt systems of records.</i> Pursuant to 5 U.S.C. 552a(k)(2), the CFPB exempts the systems of records listed below from 5 U.S.C. 552a(c)(3), (d), (e)(1), (e)(4)(G)-(H), and (f), and &#167;&#167; 1070.53 through 1070.59 of this subpart, to the extent that such systems of records contain investigatory materials compiled for law enforcement purposes, provided, however, that if any individual is denied any right, privilege, or benefit to which he or she would otherwise be entitled under Federal law, or for which he or she would otherwise be eligible as a result of the maintenance of such material, such material shall be disclosed to such individual, except to the extent that the disclosure of such material would reveal the identity of a source who furnished information to the CFPB under an express promise that the identity of the source would be held in confidence:
</p>
<p>(1) CFPB.002 Depository Institution Supervision Database
</p>
<p>(2) CFPB.003 Non-Depository Institution Supervision Database
</p>
<p>(3) CFPB.004 Enforcement Database
</p>
<p>(4) CFPB.005 Consumer Response System
</p>
<p>(b) <i>Information compiled for civil actions or proceedings.</i> This subpart does not permit an individual to have access to any information compiled in reasonable anticipation of a civil action or proceeding.

</p>
<p><b>&#167; 1070.61
 Training; rules of conduct; penalties for non-compliance.
</b></p>
<p>(a) <i>Training.</i> The Chief Privacy Officer shall institute a training program to instruct CFPB employees and employees of Government contractors covered by 5 U.S.C. 552a(m), who are involved in the design, development, operation, or maintenance of any CFPB system of records, on a continuing basis with respect to the duties and responsibilities imposed on them and the rights conferred on individuals by the Privacy Act, the regulations in this subpart, and any other related regulations. Such training shall provide suitable emphasis on the civil and criminal penalties imposed on the CFPB and the individual employees by the Privacy Act for non-compliance with specified requirements of the Act as implemented by the regulations in this subpart.
</p>
<p>(b) <i>Rules of conduct.</i> The following rules of conduct are applicable to employees of the CFPB (including, to the extent required by the contract or 5 U.S.C. 552a(m), Government contractors and employees of such contractors), who are involved in the design, development, operation or maintenance of any system of records, or in maintain any records, for or on behalf of the CFPB.
</p>
<p>(1) The head of each office of the CFPB shall be responsible for assuring that employees subject to such official’s supervision are advised of the provisions of the Privacy Act, including the criminal penalties and civil liabilities provided therein, and the regulations in this subpart, and that such employees are made aware of their individual and collective responsibilities to protect the security of personal information, to assure its accuracy, relevance, timeliness and completeness, to avoid unauthorized disclosure either orally or in writing, and to insure that no system of records is maintained without public notice.
</p>
<p>(2) Employees of the CFPB involved in the design, development, operation, or maintenance of any system of records, or in maintaining any record shall:
</p>
<p>(i) Collect no information of a personal nature from individuals unless authorized to collect it to achieve a function or carry out a responsibility of the CFPB;
</p>
<p>(ii) Collect information, to the extent practicable, directly from the individual to whom it relates;
</p>
<p>(iii) Inform each individual asked to supply information, on the form used to collect the information or on a separate form that can be retained by the individual of--
</p>
<p>(A) The authority (whether granted by statute, or by executive order of the President) which authorizes the solicitation of the information and whether disclosure of such information is mandatory or voluntary;
</p>
<p>(B) The principal purpose or purposes for which the information is intended to be used;
</p>
<p>(C) The routine uses which may be made of the information, as published pursuant to 5 U.S.C. 552a(e)(4)(D); and
</p>
<p>(D) The effects on the individual, if any, of not providing all or any part of the requested information.
</p>
<p>(iv) Not collect, maintain, use or disseminate information concerning an individual’s religious or political beliefs or activities or membership in associations or organizations, unless expressly authorized by statute or by the individual about whom the record is maintained or unless pertinent to and within the scope of an authorized law enforcement activity;
</p>
<p>(v) Advise their supervisors of the existence or contemplated development of any record system which is capable of retrieving information about individuals by individual identifier;
</p>
<p>(vi) Assure that no records maintained in a CFPB system of records are disseminated without the permission of the individual about whom the record pertains, except when authorized by 5 U.S.C. 552a(b);
</p>
<p>(vii) Maintain and process information concerning individuals with care in order to insure that no inadvertent disclosure of the information is made either within or without the CFPB;
</p>
<p>(viii) Prior to disseminating any record about an individual to any person other than an agency, unless the dissemination is made pursuant to 5 U.S.C. 552a(b)(2) of this section, make reasonable efforts to assure that such records are accurate, complete, timely, and relevant for agency purposes; and
</p>
<p>(ix) Assure that an accounting is kept in the prescribed form, of all dissemination of personal information outside the CFPB, whether made orally or in writing, unless disclosed under 5 U.S.C. 552 or subpart B of this part.
</p>
<p>(3) The head of each office of the CFPB shall, at least annually, review the record systems subject to their supervision to insure compliance with the provisions of the Privacy Act of 1974 and the regulations in this subpart.

</p>
<p><b>&#167; 1070.62
 Preservation of records.
</b></p>
<p>The CFPB will preserve all correspondence pertaining to the requests that it receives under this part, as well as copies of all requested records, until disposition or destruction is authorized by title 44 of the United States Code or the National Archives and Records Administration’s General Records Schedule 14. Records will not be disposed of or destroyed while they are the subject of a pending request, appeal, proceeding, or lawsuit.

</p>
<p><b>&#167; 1070.63
 Use and collection of social security numbers.
</b></p>
<p>The CFPB will ensure that employees authorized to collect information are aware:
</p>
<p>(a) That individuals may not be denied any right, benefit, or privilege as a result of refusing to provide their social security numbers, unless the collection is authorized either by a statute or by a regulation issued prior to 1975; and
</p>
<p>(b) That individuals requested to provide their social security numbers must be informed of:
</p>
<p>(1) Whether providing social security numbers is mandatory or voluntary;
</p>
<p>(2) Any statutory or regulatory authority that authorizes the collection of social security numbers; and
</p>
<p>(3) The uses that will be made of the numbers.
</p>
</xhtmlContent>
</regulationsPart>
</regulationsTitle>
</regulations>
</agency>
</pai>
