12
Banks and Banking
7
2017-01-01
2017-01-01
false

REQUESTS FOR INFORMATION UNDER THE FREEDOM OF INFORMATION ACT AND PRIVACY ACT, AND BY SUBPOENA; SECURITY PROCEDURES FOR CLASSIFIED INFORMATION
792

PART 792
Banks and Banking
NATIONAL CREDIT UNION ADMINISTRATION
REGULATIONS AFFECTING THE OPERATIONS OF THE NATIONAL CREDIT UNION ADMINISTRATION
Pt. 792

PART 792—REQUESTS FOR INFORMATION UNDER THE FREEDOM OF INFORMATION ACT AND PRIVACY ACT, AND BY SUBPOENA; SECURITY PROCEDURES FOR CLASSIFIED INFORMATION

Subpart A—The Freedom of Information Act

General Purpose
Sec.
792.01
What is the purpose of this subpart?

Records Publicly Available
792.02
What records does NCUA make available to the public for inspection and copying?
792.03
How will I know which records to request?
792.04
How can I obtain these records?
792.05
What is the significance of records made available and indexed?

Records Available Upon Request
792.06
Can I obtain other records?
792.07
Where do I send my request?
792.08
What must I include in my request?
792.09
What if my request does not meet the requirements of this subpart?
792.10
What will NCUA do with my request?
792.11
What kind of records are exempt from public disclosure?
792.12
How will I know what records NCUA has determined to be exempt?
792.13
Can I get the records in different forms or formats?
792.14
Who is responsible for responding to my request?
792.15
How long will it take to process my request?
792.16
What unusual circumstances can delay NCUA's response?
792.17
What can I do if the time limit passes and I still have not received a response?

Expedited Processing
792.18
What if my request is urgent and I cannot wait for the records?

Fees
792.19
How does NCUA calculate the fees for processing my request?
792.20
What are the charges for each fee category?
792.21
Will NCUA provide a fee estimate?
792.22
What will NCUA charge for other services?
792.23
Can I avoid charges by sending multiple, small requests?
792.24
Can NCUA charge me interest if I fail to pay my bill?
792.25
Will NCUA charge me if the records are not found or are determined to be exempt?
792.26
Will I be asked to pay fees in advance?

Fee Waiver or Reduction
792.27
Can fees be reduced or waived?

Appeals
792.28
What if I am not satisfied with the response I receive?

Submitter Notice
792.29
If I send NCUA confidential commercial information, can it be disclosed under FOIA?

Release of Exempt Records
792.30
Is there a prohibition against disclosure of exempt records?
792.31
Can exempt records be disclosed to credit unions, financial institutions and state or federal agencies?
792.32
Can exempt records be disclosed to investigatory agencies?
Subpart B [Reserved]

Subpart C—Production of Nonpublic Records and Testimony of NCUA Employees in Legal Proceedings
792.40
What does this subpart prohibit?
792.41
When does this subpart apply?
792.42
How do I request nonpublic records or testimony?
792.43
What must my written request contain?
792.44
When should I make a request?
792.45
Where do I send my request?
792.46
What will the NCUA do with my request?
792.47
If my request is granted, what fees apply?
792.48
If my request is granted, what restrictions apply?
792.49
Definitions.

Subpart D—Security Procedures for Classified Information
792.50
Program.
792.51
Procedures.

Subpart E—The Privacy Act
792.52
Scope.
792.53
Definitions.
792.54
Procedures for requests pertaining to individual records in a system of records.
792.55
Times, places, and requirements for identification of individuals making requests and identification of records requested.
792.56
Notice of existence of records, access decisions and disclosure of requested information; time limits.
792.57
Special procedures: Information furnished by other agencies; medical records.
792.58
Requests for correction or amendment to a record; administrative review of requests.
792.59
Appeal of initial determination.
792.60
Disclosure of record to person other than the individual to whom it pertains.
792.61
Accounting for disclosures.
792.62
Requests for accounting for disclosures.
792.63
Collection of information from individuals; information forms.
792.64
Contracting for the operation of a system of records.
792.65
Fees.
792.66
Exemptions.
792.67
Security of systems of records.
792.68
Use and collection of Social Security numbers.
792.69
Training and employee standards of conduct with regard to privacy.

Authority:
5 U.S.C. 301, 552, 552a, 552b; 12 U.S.C. 1752a(d), 1766, 1789, 1795f; E.O. 12600, 52 FR 23781, 3 CFR, 1987 Comp., p.235; E.O. 13526, 75 FR 707, 2009 Comp. p.298.

Source:
54 FR 18476, May 1, 1989, unless otherwise noted.

Subpart A—The Freedom of Information Act

Source:
63 FR 14338, Mar. 25, 1998, unless otherwise noted.

General Purpose
§ 792.01
What is the purpose of this subpart?
This subpart describes the procedures you must follow to obtain records from NCUA under the Freedom of Information Act (FOIA), (5 U.S.C. 552).

Records Publicly Available
§ 792.02
What records does NCUA make available to the public for inspection and copying?
Except for records that are exempt from public disclosure under FOIA as amended (5 U.S.C. 552) or are promptly published and copies are available for purchase, NCUA routinely makes the following five types of records available for you to inspect and copy and in an electronic format:
(a) Final opinions, including concurring and dissenting opinions, and orders made in the adjudication of cases;
(b) Statements of policy and interpretations which have been adopted by the agency but not published in the Federal Register;
(c) Administrative staff manuals and instructions to staff that affect a member of the public;
(d) Copies of all records, regardless of form or format, which have been released after March 31, 1997, in response to a FOIA request and which, because of the nature of their subject matter, NCUA determines have been or are likely to become the subject of subsequent requests; or records that have been requested three (3) or more times; and
(e) Indices of the documents referred to in this paragraph.
[63 FR 14338, Mar. 25, 1998, as amended at 81 FR 93794, Dec. 22, 2016]
§ 792.03
How will I know which records to request?
NCUA maintains current indices providing identifying information for the public for any matter referred to in § 792.02, issued, adopted, or promulgated after July 4, 1967. The listing of material in an index is for the convenience of possible users and does not constitute a determination that all of the items listed will be disclosed. NCUA has determined that publication of the indices is unnecessary and impractical. You may obtain copies of indices by making a request to the NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, VA 22314-2387, Attn: FOIA Officer or as indicated on the NCUA Web site at www.ncua.gov. The indices are available for public inspection and copying, provided at their duplication cost, and in an electronic format. The indices are:
(a) NCUA Publications List: Manuals relating to general and technical information, booklets published by NCUA, and the Credit Union Directory. The NCUA Publications list is available on the NCUA web site.
(b) Directives Control Index: A list of statements of policy, NCUA Instructions, Bulletins, Letters to Credit Unions, and certain internal manuals.
(c) Popular FOIA Index: Records released in response to a FOIA request, that NCUA determines are likely to be the subject of subsequent requests because of the nature of their subject matter, or records that have been requested three (3) or more times. The Popular FOIA Index is available on the NCUA Web site.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 56937, Oct. 1, 2008; 81 FR 93794, Dec. 22, 2016]
§ 792.04
How can I obtain these records?
You may obtain these types of records or information in the following ways:
(a) You may obtain copies of the records referenced in § 792.02 by obtaining the index referred to in § 792.03 and following the ordering instructions it contains, or by making a written request to NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, Virginia 22314-3428, Attn: FOIA Officer or as indicated on the NCUA Web site.
(b) If they were created by NCUA on or after November 1, 1996, records referenced in § 792.02 are available on the NCUA web site, found at http://www.ncua.gov.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 56937, Oct. 1, 2008]
§ 792.05
What is the significance of records made available and indexed?
The records referred to in § 792.02 may be relied on, used, or cited as precedent by NCUA against a party, provided:
(a) The materials have been indexed and either made available or published; or
(b) The party has actual and timely notice of the materials' contents.

Records Available Upon Request
§ 792.06
Can I obtain other records?
Except with respect to records routinely made available under § 792.02 or published in the Federal Register, or to the extent that records are exempt under the FOIA, if you make a request for records in accordance with this subpart, NCUA will make such records available to you, including records maintained in electronic format, as long as you agree to pay the actual, direct costs.
§ 792.07
Where do I send my request?
(a) You must send your written request to one of NCUA's Information Centers. The Central Office and Office of Inspector General are designated as Information Centers for the NCUA. The Freedom of Information Officer of the Office of General Counsel is responsible for the operation of the Information Center maintained at the Central Office. The Inspector General is responsible for the operation of the Inspector General Information Center.
(b) If you are seeking any NCUA record, other than those maintained by the Office of Inspector General, you should send your request to NCUA, Office of the General Counsel, 1775 Duke Street, Alexandria, Virginia 22314-3428, Attn: FOIA Officer or as indicated on the NCUA Web site at http://www.ncua.gov.
(c) If you are seeking a record you think may be maintained by the NCUA Office of Inspector General, then you should send your request to the Inspector General, NCUA, 1775 Duke Street, Alexandria, Virginia 22314-3428.
[68 FR 61737, Oct. 30, 2003; 73 FR 56937, Oct. 1, 2008]
§ 792.08
What must I include in my request?
Until an Information Center receives your FOIA request, it is not obligated to search for responsive records, meet time deadlines, or release any records. A request will not be considered received if it does not include all of the items in paragraphs (a) through (c) of this section.
(a) Your request must be in writing and include the words “FOIA REQUEST” on both the envelope and request letter. The request letter must also include your name, address and a telephone number where you can be reached during normal business hours. If you would like us to respond to your FOIA request by electronic mail (e-mail), you should include your e-mail address.
(b) A reasonable description of the records you seek. A reasonable description is one that enables an NCUA employee, who is familiar with the subject area of the request, to locate the record with a reasonable amount of effort.
(c) A statement agreeing to pay all applicable fees or to pay fees up to a certain maximum amount, or requesting a fee reduction or waiver in accordance with § 792.27. If the actual fees are expected to exceed the maximum amount you indicate in your request, NCUA will contact you to see if you are willing to pay the estimated fees. If you do not want to pay the estimated fees, your request will be closed and no bill will be sent.
(d) If other than paper copy, you must identify the form and format of responsive information you are requesting.
[63 FR 14338, Mar. 25, 1998, as amended at 68 FR 61737, Oct. 30, 2003; 73 FR 56937, Oct. 1, 2008]
§ 792.09
What if my request does not meet the requirements of this subpart?
NCUA need not accept or process your request if it does not comply with the requirements of this subpart. NCUA may return such a request to you with an explanation of the deficiency. You may then submit a corrected request, which will be treated as a new request.
§ 792.10
What will NCUA do with my request?
(a) On receipt of any request, the Information Center assigns it to the appropriate processing schedule, pursuant to paragraph (b) of this section. The date of receipt for any request, including one that is addressed incorrectly or is forwarded to NCUA by another agency, is the earlier of the date the appropriate Information Center actually receives the request or 10 working days after either of NCUA's Information Centers receives the request.
(b) NCUA has a multi-track processing system. Requests for records that are readily identifiable by the Information Center and have already been cleared for public release may qualify for fast track processing. Requests that meet the requirements of § 792.18 will be processed on the expedited track. All other requests will be handled under normal processing procedures in the order they were received.
(c) The Information Center will make the determination whether a request qualifies for fast track processing or expedited track processing. You may contact the Information Center to learn to which track your request has been assigned. If your request has not qualified for fast track processing, you will have an opportunity to limit the scope of material requested to qualify for fast track processing. Limitations of requests must be in writing. If your request for expedited processing is not granted, you will be advised of your right to appeal.
(d) The Information Center will normally process requests in the order they are received in the separate processing tracks. However, in NCUA's discretion, a particular request may be processed out of turn.
(e) Upon a determination by the appropriate Information Center to comply with your initial request for records, the records will be made promptly available to you. NCUA will also advise the requester of the right to seek assistance from the FOIA Public Liaison. If we notify you of a denial of your request, we will include the reason for the denial. NCUA will also advise the requester of the right to utilize dispute resolution services offered by the FOIA Public Liaison and the Office of Government Information Services.
(f) The Information Center will search for records responsive to your request and will generally include all records in existence at the time the search begins. If we use a different search cut-off date, we will inform you of that date.
[63 FR 14338, Mar. 25, 1998, as amended at 68 FR 61737, Oct. 30, 2003; 73 FR 30478, May 28, 2008; 73 FR 56937, Oct. 1, 2008; 81 FR 93794, Dec. 22, 2016]
§ 792.11
What kind of records are exempt from public disclosure?
(a) All records of NCUA or any officer, employee, or agent thereof, are confidential, privileged and exempt from disclosure, except as otherwise provided in this subpart, if they are:
(1) Records specifically authorized under criteria established by an Executive Order to be kept secret in the interest of national defense or foreign policy and are in fact properly classified pursuant to an Executive Order.
(2) Records related solely to NCUA internal personnel rules and practices. This exemption applies to internal rules or instructions which must be kept confidential in order to assure effective performance of the functions and activities for which NCUA is responsible and which do not materially affect members of the public. This exemption also applies to manuals and instructions to the extent that release of the information would permit circumvention of laws or regulations.
(3) Specifically exempted from disclosure by statute, where the statute either makes nondisclosure mandatory or establishes particular criteria for withholding information.
(4) Records which contain trade secrets and commercial or financial information which relate to the business, personal or financial affairs of any person or organization, are furnished to NCUA, and are confidential or privileged. This exemption includes, but is not limited to, various types of confidential sales and cost statistics, trade secrets, and names of key customers and personnel. Assurances of confidentiality given by staff are not binding on NCUA.
(5) Inter-agency or intra-agency memoranda or letters which would not be available by law to a private party in litigation with NCUA. This exemption preserves the existing freedom of NCUA officials and employees to engage in full and frank written or taped communications with each other and with officials and employees of other agencies. It includes, but is not limited to, inter-agency and intra-agency reports, memoranda, letters, correspondence, work papers, and minutes of meetings, as well as staff papers prepared for use within NCUA or in concert with other governmental agencies. In applying this exemption, the NCUA will not withhold records based on the deliberative process privilege if the records were created 25 years or more before the date on which the records were requested.
(6) Personnel, medical, and similar files (including financial files) pertaining to another person, the disclosure of which would constitute a clearly unwarranted invasion of personal privacy without the subject person's written consent or proof of death. Written consent consists of a written statement by the subject person, authorizing the release of the information to you, and including either the subject person's notarized signature or a declaration made under penalty of perjury that the statement is true and correct. Proof of death consists of evidence that the subject of your request is deceased—such as a death certificate, a newspaper obituary, or some comparable proof of death. Files exempt from disclosure include, but are not limited to:
(i) The personnel records of the NCUA;
(ii) The personnel records voluntarily submitted by private parties in response to NCUA's requests for proposals; and
(iii) Files containing reports, records or other material pertaining to individual cases in which disciplinary or other administrative action has been or may be taken.
(7) Records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement records or information:
(i) Could reasonably be expected to interfere with enforcement proceedings;
(ii) Would deprive a person of a right to a fair trial or an impartial adjudication;
(iii) Could reasonably be expected to constitute an unwarranted invasion of personal privacy;
(iv) Could reasonably be expected to disclose the identity of a confidential source, including a state, local, or foreign agency or authority or any private institution which furnished information on a confidential basis, and, in the case of a record or information compiled by a criminal law enforcement authority in the course of a criminal investigation on or by an agency conducting a lawful national security intelligence investigation, information furnished by the confidential source;
(v) Would disclose techniques and procedures for law enforcement investigation or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such disclosure could reasonably be expected to risk circumvention of the law; or
(vi) Could reasonably be expected to endanger the life or physical safety of any individual. This includes, but is not limited to, information relating to enforcement proceedings upon which NCUA has acted or will act in the future.
(8) Contained in or related to examination, operating or condition reports prepared by, or on behalf of, or for the use of NCUA or any agency responsible for the regulation or supervision of financial institutions. This includes all information, whether in formal or informal report form, the disclosure of which would harm the financial security of credit unions or would interfere with the relationship between NCUA and credit unions.
(b) We will provide any reasonably segregable portion of a requested record after deleting those portions that are exempt from disclosure under this section.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 56937, Oct. 1, 2008; 81 FR 93794, Dec. 22, 2016]
§ 792.12
How will I know what records NCUA has determined to be exempt?
As long as it is technically feasible and does not threaten an interest protected by the FOIA, we will:
(a) Mark the place where we redacted information from documents released to you and note the exemption that protects the information from public disclosure; or
(b) Make reasonable efforts to include with our response to you an estimate of the volume of information withheld.
§ 792.13
Can I get the records in different forms or formats?
NCUA will provide a copy of the record in any form or format requested, such as computer disk, if the record is readily reproducible by us in that form or format, but we will not provide more than one copy of any record.
§ 792.14
Who is responsible for responding to my request?
The Freedom of Information Officer or designee is responsible for making the initial determination whether to grant or deny a request for information submitted to the Central Office Information Center. The Inspector General or designee is responsible for making the initial determination whether to grant or deny a request for information submitted to the Inspector General Information Center. This official may refer a request to an NCUA employee who is familiar with the subject area of the request. Other NCUA staff members may aid the official by providing information, advice, recommending a decision, or implementing a decision, but no NCUA employee other than an authorized official may make the initial determination. Referral of a request by the official to an employee will not affect the time limitation imposed in § 792.15 unless the request involves an unusual circumstance as provided in § 792.16.
[63 FR 14338, Mar. 25, 1998, as amended at 68 FR 61737, Oct. 30, 2003]
§ 792.15
How long will it take to process my request?
NCUA will respond to requests within 20 working days, except:
(a)(1) Where the running of such time is suspended while:
(i) The Information Center awaits additional information from the requester. A suspension of time for this purpose may occur only once during the processing period; and
(ii) The Information Center clarifies with the requester issues regarding the payment of fees pursuant to § 792.26.
(2) The Information Center's receipt of the requester's response to the request for additional information or clarification ends the tolling period;
(b) In unusual circumstances, as defined in 5 U.S.C. 552(a)(6)(B) and § 792.16, the time limit may be extended for:
(1) An additional 10 working days as provided by written notice to you, stating the reasons for the extension and the date on which a determination will be sent; or
(2) Such alternative time period as mutually agreed by you and the Information Office, when NCUA notifies you that the request cannot be processed in the specified time limit. In such cases, NCUA will make available its FOIA Public Liaison and notify the requester of the right to seek dispute resolution services from the Office of Government Information Services.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 56938, Oct. 1, 2008; 81 FR 93794, Dec. 22, 2016]
§ 792.16
What unusual circumstances can delay NCUA's response?
(a) In unusual circumstances, the time limits for responding to your request (or your appeal) may be extended by NCUA. If NCUA extends the time, it will provide you with written notice setting forth the reasons for such extension and the date on which a determination is expected to be dispatched. Our notice will not specify a date that would result in an extension for more than 10 working days, except as set forth in paragraph (c) of this section. The unusual circumstances that can delay NCUA's response to your request are:
(1) The need to search for, and collect the requested records from field facilities or other establishments that are separate from the office processing the request;
(2) The need to search for, collect, and appropriately examine a voluminous amount of separate and distinct records which are demanded in a single request; or
(3) The need for consultation, which will be conducted with all practicable speed, with another agency having substantial interest in the determination of the request or among two or more components of NCUA having a substantial interest in the subject matter.
(b) If you, or you and a group of others acting in concert, submit multiple requests that NCUA believes actually constitute a single request, which would otherwise satisfy the unusual circumstances criteria specified in this section, and the requests involve related matters, then NCUA may aggregate those requests and the provisions of § 792.15(b) will apply.
(c) If NCUA sends you an extension notice, it will also advise you that you can either limit the scope of your request so that it can be processed within the statutory time limit or agree to an alternative time frame for processing your request. In such cases, NCUA will make available its FOIA Public Liaison and notify the requester of the right to seek dispute resolution services from the Office of Government Information Services.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 30478, May 28, 2008; 81 FR 93794, Dec. 22, 2016]
§ 792.17
What can I do if the time limit passes and I still have not received a response?
(a) If NCUA does not comply with the time limits under § 792.15, or as extended under § 792.16, you do not have to pay search fees; requesters qualifying for free search fees will not have to pay duplication fees. However, if NCUA has extended the time limits under § 792.16 and more than 5,000 pages are necessary to respond to the request, NCUA may charge you search fees (or for requesters qualifying for free search fees, duplication fees), if NCUA has discussed with you via written mail, electronic mail, or telephone (or made not less than 3 good-faith attempts to do so) how you could effectively limit the scope of the request.
(b) You can seek assistance from the FOIA Public Liaison or dispute resolution services from the Office of Government Information Services. You also can file suit against NCUA because you will be deemed to have exhausted your administrative remedies if NCUA fails to comply with the time limit provisions of this subpart. If NCUA can show that exceptional circumstances exist and that it is exercising due diligence in responding to your request, the court may retain jurisdiction and allow NCUA to complete its review of the records. You may have to pay search or duplication fees if a court has determined that exceptional circumstances exist and has extended the time limits for NCUA's response by a court order. In determining whether exceptional circumstances exist, the court may consider your refusal to modify the scope of your request or arrange an alternative time frame for processing after being given the opportunity to do so by NCUA, when it notifies you of the existence of unusual circumstances as set forth in § 792.16.
[81 FR 93795, Dec. 22, 2016]

Expedited Processing
§ 792.18
What if my request is urgent and I cannot wait for the records?
You may request expedited processing of your request if you can show a compelling need for the records. In cases where your request for expedited processing is granted or if NCUA has determined to expedite the response, it will be processed as soon as practicable.
(a) To demonstrate a compelling need for expedited processing, you must provide a certified statement. The statement, certified by you to be true and correct to the best of your knowledge and belief, must demonstrate that:
(1) The failure to obtain the records on an expedited basis could reasonably be expected to pose an imminent threat to the life or physical safety of an individual; or
(2) The requester is a representative of the news media, as defined in § 792.20, and there is urgency to inform the public concerning actual or alleged NCUA activity.
(b) In response to a request for expedited processing, the Information Center will notify you of the determination within ten working days of receipt of the request. If the Information Center denies your request for expedited processing, you may file an appeal pursuant to the procedures set forth in § 792.28, and NCUA will expeditiously respond to the appeal.
(c) The Information Center will normally process requests in the order they are received in the separate processing tracks. However, in NCUA's discretion, a particular request may be processed out of turn.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 56938, Oct. 1, 2008]

Fees
§ 792.19
How does NCUA calculate the fees for processing my request?
We will charge you our allowable direct costs, unless they are less than the cost of billing you. Direct costs means those expenditures that NCUA actually incurs in searching for, duplicating and reviewing documents to respond to a FOIA request. Search means all time spent looking for material that is responsive to a request, including page-by-page or line-by-line identification of material within documents. Searches may be done manually or by computer. Search does not include modification of an existing program or system that would significantly interfere with the operation of an automated information system. Review means examining documents to determine whether any portion should be withheld and preparing documents for disclosure. Fees are subject to change as costs increase. The current rate schedule is available on our web site at http://www.ncua.gov. We may contract with the private sector to locate, reproduce or disseminate records. NCUA will not contract out responsibilities that FOIA requires it to discharge, such as determining the applicability of an exemption, or determining whether to waive or reduce fees. The following labor and duplication rate calculations apply:
(a) NCUA will charge fees at the following rates for manual searches for and review of records:
(1) If search/review is done by clerical staff, the hourly rate for CU-5, plus 16% of that rate to cover benefits;
(2) If search/review is done by professional staff, the hourly rate for CU-13, plus 16% of that rate to cover benefits.
(b) NCUA will charge fees at the hourly rate for CU-13, plus 16% of that rate to cover benefits, plus the hourly cost of operating the computer for computer searches for records.
(c) NCUA will charge the following duplication fees:
(1) The per-page fee for paper copy reproduction of a document is $.10;
(2) The fee for documents generated by computer is the hourly fee for the computer operator, plus the cost of materials (computer paper, tapes, labels, etc.);
(3) If any other method of duplication is used, NCUA will charge the actual direct cost of duplication.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 56938, Oct. 1, 2008]
§ 792.20
What are the charges for each fee category?
The fee category definitions are:
(a) Commercial use request means a request from or on behalf of one who seeks information for a use or purpose that furthers the commercial, trade, or profit interests of the requester or the person on whose behalf the request is made.
(b) Educational institution means a preschool, an elementary or secondary school, an institution of undergraduate higher education, an institution of graduate higher education, an institution of professional education, and an institution of vocational education operating a program or programs of scholarly research.
(c) Noncommercial scientific institution means an institution that is not operated for a “commercial” purpose as that term is used in paragraph (a) of this section and is operated solely for the purpose of conducting scientific research, the results of which are not intended to promote any particular product or industry.
(d) Representative of the news media means any person actively gathering news for an entity that is organized and operated to publish or broadcast news to the public. Included within the meaning of public is the credit union community. The term news means information that is about current events or that would be of current interest to the public. You may consult the following chart to find the fees applicable to your request:
If your fee category is | You'll receive | And you'll be charged
Commercial use | 0 hours free search | search time
| 0 hours free review | review time
| 0 free pages | duplication
Educational institution, noncommercial scientific institution, newsmedia | Unlimited free search hours Unlimited free review hours 100 free pages | duplication
All others | 2 hours free search | search time
| Unlimited free review hours
| 100 free pages | duplication
§ 792.21
Will NCUA provide a fee estimate?
NCUA will notify you of the estimated amount if fees are likely to exceed $25, unless you have indicated in advance a willingness to pay fees as high as those anticipated. You will then have the opportunity to confer with NCUA personnel to reformulate the request to meet your needs at a lower cost.
§ 792.22
What will NCUA charge for other services?
Complying with requests for special services is entirely at the discretion of NCUA. NCUA will recover the full costs of providing such services to the extent it elects to provide them.
§ 792.23
Can I avoid charges by sending multiple, small requests?
You may not file multiple requests, each seeking portions of a document or similar documents, solely to avoid payment of fees. If this is done, NCUA may aggregate any such requests and charge you accordingly.
§ 792.24
Can NCUA charge me interest if I fail to pay my bill?
NCUA can assess interest charges on an unpaid bill starting on the 31st day following the date of the bill. If you fail to pay your bill within 30 days, interest will be at the rate prescribed in 31 U.S.C. 3717, and will accrue from the date of the billing.
§ 792.25
Will NCUA charge me if the records are not found or are determined to be exempt?
NCUA may assess fees for time spent searching and reviewing, even if it fails to locate the records or if records located are determined to be exempt from disclosure.
§ 792.26
Will I be asked to pay fees in advance?
NCUA will require you to give an assurance of payment or an advance payment only when:
(a) NCUA estimates or determines that allowable charges that you may be required to pay are likely to exceed $250. NCUA will notify you of the likely cost and obtain satisfactory assurance of full payment where you have a history of prompt payment of FOIA fees, or require an advance payment of an amount up to the full estimated charges in the case where you have no history of payment; or
(b) You have previously failed to pay a fee charged in a timely fashion. NCUA may require you to pay the full amount owed, plus any applicable interest, or demonstrate that you have, in fact, paid the fee, and to make an advance payment of the full amount of the estimated fee before we begin to process a new request or a pending request from you.
(c) If you are required to make an advance payment of fees, then the administrative time limits prescribed in § 792.16 will begin only after NCUA has received the fee payments described.

Fee Waiver or Reduction
§ 792.27
Can fees be reduced or waived?
You may request that NCUA waive or reduce fees if disclosure of the information you request is in the public interest because it is likely to contribute significantly to public understanding of the operations or activities of the government, and is not primarily in your commercial interest.
(a) NCUA will make a determination of whether the public interest requirement above is met based on the following factors:
(1) Whether the subject of the requested records concerns identifiable operations or activities of the government, with a connection that is direct and clear;
(2) Whether the disclosable portions of the requested records are meaningfully informative about government operations and activities in order to be likely to contribute to an understanding of government operations or activities. Information already in the public domain, either in a duplicate or substantially identical form where nothing new would be added to the public's understanding, would not be meaningfully informative;
(3) Whether disclosure of the requested information will contribute to public understanding, meaning a reasonably broad audience of persons interested in the subject, as opposed to the individual understanding of the requester. A requester's expertise in the subject area and ability and intention to effectively convey information to the public will be considered. Representatives of the news media are presumed to satisfy this consideration; and
(4) Whether the disclosure is likely to contribute significantly to public understanding of government operations or activities. The level of public understanding before disclosure must be enhanced by the disclosure to a significant extent.
(b) If the public interest requirement is met, NCUA will make a determination on the commercial interest requirement based upon the following factors:
(1) Whether you have a commercial interest that would be furthered by the requested disclosure; and if so
(2) Whether the magnitude of your commercial interest is sufficiently large in comparison with the public interest in disclosure, that disclosure is primarily in your commercial interest.
(c) If the required public interest exists and your commercial interest is not primary in comparison, NCUA will waive or reduce fees.
(d) If you are not satisfied with our determination on your fee waiver or reduction request, you may submit an appeal to the General Counsel in accordance with § 792.28.
[63 FR 14338, Mar. 25, 1998, as amended at 73 FR 56938, Oct. 1, 2008]

Appeals
§ 792.28
What if I am not satisfied with the response I receive?
If you are not satisfied with NCUA's response to your request, you can seek dispute resolution services from the FOIA Public Liaison and the Office of Government Information Services, and you can file an administrative appeal. Your appeal must be in writing and must be filed within 90 days from receipt of the initial determination (in cases of denials of the entire request or denials of a fee waiver or reduction), or from receipt of any records being made available pursuant to the initial determination (in cases of partial denials). In the response to your initial request, the Freedom of Information Act Officer or the Inspector General (or designee), will notify you that you may appeal any adverse determination to the Office of General Counsel. The General Counsel, or designee, as set forth in this paragraph, will:
(a) Make a determination with respect to any appeal within 20 working days after the receipt of such appeal. If, on appeal, the denial of the request for records is, in whole or in part, upheld, the Office of General Counsel will notify you of the provisions for judicial review of that determination under FOIA. Where you do not address your appeal to the General Counsel, the time limitations stated above will be computed from the date of receipt of the appeal by the General Counsel.
(b) The General Counsel is the official responsible for determining all appeals from initial determinations. In case of this person's absence, the appropriate officer acting in the General Counsel's stead will make the appellate determination, unless such officer was responsible for the initial determination, in which case the Vice-Chairman of the NCUA Board will make the appellate determination.
(c) All appeals should be addressed to the General Counsel in the Central Office and should be clearly identified as such on the envelope and in the letter of appeal by using the indicator “FOIA-APPEAL.” Failure to address an appeal properly may delay commencement of the time limitation stated in paragraph (a)(1) of this section, to take account of the time reasonably required to forward the appeal to the Office of General Counsel.
[63 FR 14338, Mar. 25, 1998, as amended at 68 FR 61737, Oct. 30, 2003; 73 FR 30478, May 28, 2008; 73 FR 56938, Oct. 1, 2008; 81 FR 93795, Dec. 22, 2016]

Submitter Notice
§ 792.29
If I send NCUA confidential commercial information, can it be disclosed under FOIA?
(a) If you submit confidential commercial information to NCUA, it may be disclosed in response to a FOIA request in accordance with this section.
(b) For purposes of this section:
(1) Confidential commercial information means commercial or financial information provided to NCUA by a submitter that arguably is protected from disclosure under § 792.11(a)(4) because disclosure could reasonably be expected to cause substantial competitive harm.
(2) Submitter means any person or entity who provides business information, directly or indirectly, to NCUA.
(c) Submitters of business information must use good faith efforts to designate, by appropriate markings, either at the time of submission or at a reasonable time thereafter, those portions of their submissions deemed to be protected from disclosure under § 792.11(a)(4). Such a designation shall expire ten years after the date of submission.
(d) We will provide a submitter with written notice of a FOIA request or administrative appeal encompassing designated business information when:
(1) The information has been designated in good faith by the submitter as confidential commercial information deemed protected from disclosure under § 792.11(a)(4); or
(2) NCUA has reason to believe that the information may be protected from disclosure under § 792.11(a)(4).
(e) A copy of the notice to the submitter will also be provided to the FOIA requester.
(f) Through the notice described in paragraph (d) of this section, NCUA will afford the submitter a reasonable period of time within which to provide a detailed written statement of any objection to disclosure. The statement must describe why the information is confidential commercial information and why it should not be disclosed.
(g) Whenever we decide that we must disclose confidential commercial information over the objection of the submitter, we will send both the submitter and the FOIA requester, within a reasonable number of days prior to the specified disclosure date, a written notice which will include:
(1) A statement of the reasons for which the submitter's disclosure objection was not sustained; and
(2) A description of the information to be disclosed; and
(3) A specified disclosure date.
(h) If a requester brings suit to compel disclosure of confidential commercial information, we will promptly notify the submitter.
(i) The notice requirements of paragraph (d) of this section do not apply if:
(1) We determine that the information should not be disclosed;
(2) The information has been lawfully published or has been officially made available to the public;
(3) Disclosure of the information is required by law; or
(4) The designation made by the submitter in accordance with paragraph (c) of this section appears obviously frivolous; except that in such case, NCUA will provide the submitter with written notice of any final administrative decision to disclose the information within a reasonable number of days prior to the specified disclosure date.

Release of Exempt Information
§ 792.30
Is there a prohibition against disclosure of exempt records?
Except those authorized officials listed in § 792.14, or as provided in §§ 792.31-792.32, and subpart C of this part, no officer, employee, or agent of NCUA or of any federally-insured credit union shall disclose or permit the disclosure of any exempt records of NCUA to any person other than those NCUA or credit union officers, employees, or agents properly entitled to such information for the performance of their official duties.
§ 792.31
Can exempt records be disclosed to credit unions, financial institutions and state or federal agencies?
The NCUA Board, in its sole discretion, or any person designated by it in writing, may make available to certain governmental agencies and insured financial institutions copies of reports of examination and other documents, papers or information for their use, when necessary, in the performance of their official duties or functions. All reports, documents and papers made available pursuant to this paragraph shall remain the property of NCUA. No person, agency or employee shall disclose the reports or exempt records without NCUA's express written authorization.
§ 792.32
Can exempt records be disclosed to investigatory agencies?
The NCUA Board, or any person designated by it in writing, in its discretion and in appropriate circumstances, may disclose to proper federal or state authorities copies of exempt records pertaining to irregularities discovered in credit unions which may constitute either unsafe or unsound practices or violations of federal or state, civil or criminal law.
Subpart B [Reserved]

Subpart C—Production of Nonpublic Records and Testimony of NCUA Employees in Legal Proceedings

Source:
62 FR 56054, Oct. 29, 1997, unless otherwise noted.
§ 792.40
What does this subpart prohibit?
This subpart prohibits the release of nonpublic records or the appearance of an NCUA employee to testify in legal proceedings except as provided in this subpart. Any person possessing nonpublic records may release them or permit their disclosure only as provided in this subpart.
(a) Duty of NCUA employees. (1) If an NCUA employee is served with a subpoena requiring him or her to appear as a witness or produce records, the employee must promptly notify the Office of General Counsel. The General Counsel has the authority to instruct NCUA employees to refuse appearing as a witness or to withhold nonpublic records. The General Counsel may let an NCUA employee provide testimony, including expert or opinion testimony, if the General Counsel determines that the need for the testimony clearly outweighs contrary considerations.
(2) If a court or other appropriate authority orders or demands expert or opinion testimony or testimony beyond authorized subjects contrary to the General Counsel's instructions, an NCUA employee must immediately notify the General Counsel of the order and respectfully decline to comply. An NCUA employee must decline to answer questions on the grounds that this subpart forbids such disclosure and should produce a copy of this subpart, request an opportunity to consult with the Office of General Counsel, and explain that providing such testimony without approval may expose him or her to disciplinary or other adverse action.
(b) Duty of persons who are not NCUA employees. (1) If you are not an NCUA employee but have custody of nonpublic records and are served with a subpoena requiring you to appear as a witness or produce records, you must promptly notify the NCUA about the subpoena. Also, you must notify the issuing court or authority and the person or entity for whom the subpoena was issued of the contents of this subpart. Notice to the NCUA is made by sending a copy of the subpoena to the General Counsel of the NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, Virginia 22314-3428. After receiving notice, the NCUA may advise the issuing court or authority and the person or entity for whom the subpoena was issued that this subpart applies and, in addition, may intervene, attempt to have the subpoena quashed or withdrawn, or register appropriate objections.
(2) After notifying the Office of General Counsel, you should respond to a subpoena by appearing at the time and place stated in the subpoena. Unless authorized by the General Counsel, you should decline to produce any records or give any testimony, basing your refusal on this subpart. If the issuing court or authority orders the disclosure of records or orders you to testify, you should continue to decline to produce records or testify and should advise the Office of General Counsel.
(c) Penalties. Anyone who discloses nonpublic records or gives testimony related to those records, except as expressly authorized by the NCUA or as ordered by a federal court after NCUA has had the opportunity to be heard, may face the penalties provided in 18 U.S.C. 641 and other applicable laws. Also, former NCUA employees, in addition to the prohibition contained in this subpart, are subject to the restrictions and penalties of 18 U.S.C. 207.
§ 792.41
When does this subpart apply?
This subpart applies if you want to obtain nonpublic records or testimony of an NCUA employee for legal proceedings. It doesn't apply to the release of records under the Freedom of Information Act (FOIA), 5 U.S.C. 552, or the Privacy Act, 5 U.S.C. 552a, or the release of records to federal or state investigatory agencies under § 792.32.
[62 FR 56054, Oct. 29, 1997, as amended at 65 FR 63789, Oct. 25, 2000]
§ 792.42
How do I request nonpublic records or testimony?
(a) To request nonpublic records or the testimony of an NCUA employee, you must submit a written request to the General Counsel of the NCUA. If you serve a subpoena on the NCUA or an NCUA employee before submitting a written request and receiving a final determination, the NCUA will oppose the subpoena on the grounds that you failed to follow the requirements of this subpart. You may serve a subpoena as long as it is accompanied by a written request that complies with this subpart.
(b) To request nonpublic records that are part of the records of the Office of the Inspector General or the testimony of an NCUA employee on matters within the knowledge of the NCUA employee as a result of his or her employment with the Office of the Inspector General, you must submit a written request to the Office of the Inspector General. Your request will be handled in accordance with the provisions of this subpart except that the Inspector General will be responsible for those determinations that would otherwise be made by the General Counsel.
§ 792.43
What must my written request contain?
Your written request for records or testimony must include:
(a) The caption of the legal proceeding, docket number, and name of the court or other authority involved.
(b) A copy of the complaint or equivalent document setting forth the assertions in the case and any other pleading or document necessary to show relevance.
(c) A list of categories of records sought, a detailed description of how the information sought is relevant to the issues in the legal proceeding, and a specific description of the substance of the testimony or records sought.
(d) A statement as to how the need for the information outweighs the need to maintain the confidentiality of the information and outweighs the burden on the NCUA to produce the records or provide testimony.
(e) A statement indicating that the information sought is not available from another source, such as a credit union's own books and records, other persons or entities, or the testimony of someone other than an NCUA employee, for example, retained experts.
(f) A description of all prior decisions, orders, or pending motions in the case that bear upon the relevance of the records or testimony you want.
(g) The name, address, and telephone number of counsel to each party in the case.
(h) An estimate of the amount of time you anticipate that you and other parties will need with each NCUA employee for interviews, depositions, or testifying.
§ 792.44
When should I make a request?
You should submit your request at least 45 days before the date that you need the records or testimony. If you want to have your request processed in less time, you must explain why you couldn't submit the request earlier and why you need expedited processing. If you are requesting the testimony of an NCUA employee, the NCUA expects you to anticipate your need for the testimony in sufficient time to obtain it by a deposition. The General Counsel may deny a request for testimony at a legal proceeding unless you explain why you could not use deposition testimony. The General Counsel will determine the location of a deposition taking into consideration the NCUA's interest in minimizing the disruption for an NCUA employee's work schedule and the costs and convenience of other persons attending the deposition.
§ 792.45
Where do I send my request?
You must send your request or subpoena for records or testimony to the attention of the General Counsel for the NCUA, Office of General Counsel, 1775 Duke Street, Alexandria, Virginia 22314-3428. You must send your request or subpoena for records or testimony from the Office of the Inspector General to the attention of the NCUA Inspector General, 1775 Duke Street, Alexandria, Virginia 22314-3428.
§ 792.46
What will the NCUA do with my request?
(a) Factors the NCUA will consider. The NCUA may consider various factors in reviewing a request for nonpublic records or testimony of NCUA employees, including:
(1) Whether disclosure would assist or hinder the NCUA in performing its statutory duties or use NCUA resources unreasonably, including whether responding to the request will interfere with NCUA employees' ability to do their work.
(2) Whether disclosure is necessary to prevent the perpetration of a fraud or other injustice in the matter or if you can get the records or testimony you want from sources other than the NCUA.
(3) Whether the request is unduly burdensome.
(4) Whether disclosure would violate a statute, executive order, or regulation, for example, the Privacy Act, 5 U.S.C. 552a.
(5) Whether disclosure would reveal confidential, sensitive or privileged information, trade secrets or similar, confidential commercial or financial information, or would otherwise be inappropriate for release and, if so, whether a confidentiality agreement or protective order as provided in § 792.48(a) can adequately limit the disclosure.
(6) Whether the disclosure would interfere with law enforcement proceedings, compromise constitutional rights, or hamper NCUA research or investigatory activities.
(7) Whether the disclosure could result in NCUA appearing to favor one litigant over another.
(8) Any other factors the NCUA determines to be relevant to the interests of the NCUA.
(b) Review of your request. The NCUA will process your request in the order it is received. The NCUA will try to respond to your request within 45 days, but this may vary depending on the scope of your request.
(c) Final determination. The General Counsel makes the final determination on requests for nonpublic records or NCUA employee testimony. All final determinations are in the sole discretion of the General Counsel. The General Counsel will notify you and the court or other authority of the final determination of your request. In considering your request, the General Counsel may contact you to inform you of the requirements of this subpart, ask that the request or subpoena be modified or withdrawn, or may try to resolve the request or subpoena informally without issuing a final determination. You may seek judicial review of the final determination under the Administrative Procedure Act. 5 U.S.C. 702.
§ 792.47
If my request is granted, what fees apply?
(a) Generally. You must pay any fees associated with complying with your request, including copying fees for records and witness fees for testimony. The General Counsel may condition the production of records or appearance for testimony upon advance payment of a reasonable estimate of the fees.
(b) Fees for records. You must pay all fees for searching, reviewing and duplicating records produced in response to your request. The fees will be the same as those charged by the NCUA under its Freedom of Information Act regulations, § 792.19.
(c) Witness fees. You must pay the fees, expenses, and allowances prescribed by the court's rules for attendance by a witness. If no such fees are prescribed, the local federal district court rule concerning witness fees, for the federal district court closest to where the witness appears, will apply. For testimony by current NCUA employees, you must pay witness fees, allowances, and expenses to the General Counsel by check made payable to the “National Credit Union Administration” within 30 days from receipt of NCUA's billing statement. For the testimony of a former NCUA employee, you must pay witness fees, allowances, and expenses directly to the former employee, in accordance with 28 U.S.C. 1821 or other applicable statutes.
(d) Certification of records. The NCUA may authenticate or certify records to facilitate their use as evidence. If you require authenticated records, you must request certified copies at least 45 days before the date they will be needed. The request should be sent to the General Counsel. You will be charged a certification fee of $5.00 per document.
(e) Waiver of fees. A waiver or reduction of any fees in connection with the testimony, production, or certification or authentication of records may be granted in the discretion of the General Counsel. Waivers will not be granted routinely. If you request a waiver, your request for records or testimony must state the reasons why a waiver should be granted.
[62 FR 56054, Oct. 29, 1997, as amended at 65 FR 63789, Oct. 25, 2000]
§ 792.48
If my request is granted, what restrictions apply?
(a) Records. The General Counsel may impose conditions or restrictions on the release of nonpublic records, including a requirement that you obtain a protective order or execute a confidentiality agreement with the other parties in the legal proceeding that limits access to and any further disclosure of the nonpublic records. The terms of a confidentiality agreement or protective order must be acceptable to the General Counsel. In cases where protective orders or confidentiality agreements have already been executed, the NCUA may condition the release of nonpublic records on an amendment to the existing protective order or confidentiality agreement.
(b) Testimony. The General Counsel may impose conditions or restrictions on the testimony of NCUA employees, including, for example, limiting the areas of testimony or requiring you and the other parties to the legal proceeding to agree that the transcript of the testimony will be kept under seal or will only be used or made available in the particular legal proceeding for which you requested the testimony. The General Counsel may also require you to provide a copy of the transcript of the testimony to the NCUA at your expense.
§ 792.49
Definitions.
Legal proceedings means any matter before any federal, state or foreign administrative or judicial authority, including courts, agencies, commissions, boards or other tribunals, involving such proceedings as lawsuits, licensing matters, hearings, trials, discovery, investigations, mediation or arbitration. When the NCUA is a party to a legal proceeding, it will be subject to the applicable rules of civil procedure governing production of documents and witnesses, however, this subpart will still apply to the testimony of former NCUA employees.
NCUA employee means current and former officials, members of the Board, officers, directors, employees and agents of the National Credit Union Administration, including contract employees and consultants and their employees. This definition does not include persons who are no longer employed by the NCUA and are retained or hired as expert witnesses or agree to testify about general matters, matters available to the public, or matters with which they had no specific involvement or responsibility during their employment.
Nonpublic records means any NCUA records that are exempt from disclosure under § 792.11, the NCUA regulations implementing the provisions of the Freedom of Information Act. For example, this means records created in connection with NCUA's examination and supervision of insured credit unions, including examination reports, internal memoranda, and correspondence, and, also, records created in connection with NCUA's enforcement and investigatory responsibilities.
Subpoena means any order, subpoena for records or other tangible things or for testimony, summons, notice or legal process issued in a legal proceeding.
Testimony means any written or oral statements made by an individual in connection with a legal proceeding including personal appearances in court or at depositions, interviews in person or by telephone, responses to written interrogatories or other written statements such as reports, declarations, affidavits, or certifications or any response involving more than the delivery of records.
[62 FR 56054, Oct. 29, 1997, as amended at 65 FR 63789, Oct. 25, 2000]

Subpart D—Security Procedures for Classified Information
§ 792.50
Program.
(a) The NCUA's Executive Director is designated as the person responsible for implementation and oversight of NCUA's program for maintaining the security of confidential information regarding national defense and foreign relations. The Executive Director receives questions, suggestions and complaints regarding all elements of this program. The Executive Director is solely responsible for changes to the program and assures that the program is consistent with legal requirements.
(b) The Executive Director is the Agency's official contact for declassification requests regardless of the point of origin of such requests.
[54 FR 18476, May 1, 1989, as amended at 59 FR 36042, July 15, 1994; 67 FR 30774, May 8, 2002; 73 FR 30478, May 28, 2008; 78 FR 32546, May 31, 2013]
§ 792.51
Procedures.
(a) Mandatory review. All declassification requests made by a member of the public, by a government employee or by an agency shall be handled by the Executive Director or the Executive Director's designee. Under no circumstances shall the Executive Director refuse to confirm the existence or nonexistence of a document under the Freedom of Information Act or the mandatory review provisions of other applicable law, unless the fact of its existence or nonexistence would itself be classifiable under applicable law. Although NCUA has no authority to classify or declassify information, it occasionally handles information classified by another agency. The Executive Director shall refer all declassification requests to the agency that originally classified the information. The Executive Director or the Executive Director's designee shall notify the requesting person or agency that the request has been referred to the originating agency and that all further inquiries and appeals must be made directly to the other agency.
(b) Handling and safeguarding national security information. All information classified “Top Secret,” “Secret,” and “Confidential” shall be delivered to the Executive Director or the Executive Director's designee immediately upon receipt. The Executive Director shall advise those who may come into possession of such information of the name of the current designee. If the Executive Director is unavailable, the designee shall lock the documents, unopened, in the combination safe located in the secure facility of the Office of the Executive Director. If the Executive Director or the Executive Director's designee is unavailable to receive such documents, the documents shall be delivered in accordance with NCUA's mail handling procedures for classified information. Under no circumstances shall classified materials that cannot be delivered to the Executive Director or the Executive Director's designee be stored in a location other than in the safe designated by the Executive Director for information classified “Top Secret,” “Secret,” and “Confidential.”
(c) Storage. All classified documents shall be stored in the safe designated by the Executive Director for information classified “Top Secret,” “Secret,” and “Confidential.” The combination shall be known only to the Executive Director and the Executive Director's designee holding the proper security clearance.
(d) Employee education. (1) The Executive Director shall send a memo to every NCUA employee who:
(i) Has a security clearance; and
(ii) May handle classified materials.
(2) This memo shall describe NCUA procedures for handling, reproducing and storing classified documents. The Executive Director shall require each such employee to review applicable Executive Orders on the classification of national security information.
(e) Agency terminology. The National Credit Union Administration's Central Office shall use the terms “Top Secret,” “Secret” or “Confidential” only in relation to materials classified for national security purposes.
[63 FR 14338, Mar. 25, 1998, as amended at 67 FR 30774, May 8, 2002; 73 FR 30478, May 28, 2008; 78 FR 32547, May 31, 2013]

Subpart E—The Privacy Act

Source:
54 FR 18476, May 1, 1989, unless otherwise noted. Redesignated at 63 FR 14338, Mar. 25, 1998. Nomenclature change at 73 FR 56938, Oct. 1, 2008.
§ 792.52
Scope.
This subpart governs requests made of NCUA under the Privacy Act (5 U.S.C. 552a). The regulation applies to all records maintained by NCUA which contain personal information about an individual and some means of identifying the individual, and which are contained in a system of records from which information may be retrieved by use of an identifying particular; sets forth procedures whereby individuals may seek and gain access to records concerning themselves and request amendments of those records; and sets forth requirements applicable to NCUA employees' maintaining, collecting, using, or disseminating such records.
§ 792.53
Definitions.
For purposes of this subpart:
(a) Individual means a citizen of the United States or an alien lawfully admitted for permanent residence.
(b) Maintain includes maintain, collect, use, or disseminate.
(c) Record means any item, collection, or grouping of information about an individual that is maintained by NCUA, and that contains the name, or an identifying number, symbol, or other identifying particular assigned to the individual.
(d) System of records means a group of any records under NCUA's control from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifying particular assigned to the individual.
(e) Routine use means, with respect to the disclosure of a record, the use of such record for a purpose which is compatible with the purpose for which it was collected.
(f) Statistical record means a record in a system of records maintained for statistical research or reporting purposes only and not used in whole or in part in making any determination about an identifiable individual, except as provided by section 8 of title 13 of the United States Code.
(g) Notice of Systems of Records means the annual notice published by NCUA in the Federal Register informing the public of the existence and character of the systems of records it maintains. The Notice of Systems of Records also is available on NCUA's Web site at http://www.ncua.gov.
(h) System manager means the NCUA official responsible for the maintenance, collection, use or distribution of information contained in a system of records. The system manager for each system of records is provided in the Federal Register publication of NCUA's annual systems of records notice.
(i) Working day means Monday through Friday excluding legal public holidays.
[54 FR 18476, May 1, 1989, as amended at 73 FR 56938, Oct. 1, 2008]
§ 792.54
Procedures for requests pertaining to individual records in a system of records.
(a) Individuals desiring to know if a system of records contains records pertaining to them, and individuals requesting access to records in a system of records pertaining to them should submit a written request to the appropriate system manager as identified in the Notice of Systems of Records. An individual who does not have access to the Federal Register and who is unable to determine the appropriate system manager to whom to submit a request may submit a request to the Privacy Officer, Office of General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, VA 22314-3428, in which case the request will be referred to the appropriate system manager.
(b) Individuals requesting notification of, or access to, records should include the words “PRIVACY ACT REQUEST” on both the letter and, as appropriate, the envelope, cover document or subject line; describe the record sought; the approximate dates covered by the record; and, the systems of record in which records are thought to be included. Individuals must also meet the identification requirements in § 792.55.
[73 FR 56938, Oct. 1, 2008]
§ 792.55
Times, places, and requirements for identification of individuals making requests and identification of records requested.
(a) The following standards are applicable to an individual submitting requests either in person or by mail under § 792.54:
(1) Individuals appearing in person, if not personally known to the system manager responding to the request, must present a single document bearing a photograph (such as a passport or identification badge) or two items of identification which do not bear a photograph but do bear both a name and address (such as a driver's license or voter registration card);
(2) Individuals submitting requests by mail or written electronic form, such as facsimile or e-mail, may establish identity by a signature, address, date of birth, employee identification number if any, and one other identifier such as a photocopy of driver's license or other document. If inadequate identifying information is provided, the system manager responding to the request may require further identifying information before any notification or responsive disclosure.
(3) Individuals appearing in person or submitting requests by mail or written electronic form, who cannot provide the required documentation or identification, may provide an unsworn declaration subscribed to as true under penalty of perjury.
(b) The parent or guardian of a minor or a person judicially determined to be incompetent shall, in addition to establishing identity of the minor or other person as required in paragraph (a) of this section, furnish a copy of a birth certificate showing parentage or a court order establishing guardianship.
(c) A record may be disclosed to a representative of an individual to whom the record pertains provided the system manager receives written authorization from the individual who is the subject of the record.
(d) An individual seeking to review records about that individual may be accompanied by another person of their own choosing. In such cases, the individual seeking access shall be required to furnish a written statement authorizing discussion of that individual's records in the accompanying person's presence.
(e) In addition to the requirements set forth in paragraphs (a), (b) and (c) of this section, the published “Notice of System of Records” for individual systems may include further requirements of identification where necessary to retrieve the individual records from the system.
[54 FR 18476, May 1, 1989. Redesignated at 63 FR 14338, Mar. 25, 1998, as amended at 64 FR 57365, Oct. 25, 1999; 65 FR 63790, Oct. 25, 2000; 73 FR 56939, Oct. 1, 2008]
§ 792.56
Notice of existence of records, access decisions and disclosure of requested information; time limits.
(a) The system manager identified in the record access procedure section of the “Notice of Systems of Records” and identified in accordance with § 792.54(a), by an individual seeking notification of, or access to, a record, shall be responsible:
(1) For determining whether access is available under the Privacy Act; (2) for notifying the requesting individual of that determination; and (3) for providing access to information determined to be available. In the case of an individual access request made in person, information determined to be available shall be provided by allowing a personal review of the record or portion of a record containing the information requested and determined to be available, and the individual shall be allowed to have a copy of all or any portion of available information made in a form comprehensible to him. In the case of an individual access request made by mail, information determined to be available shall be provided by mail, unless the individual has requested otherwise.
(b) The following time limits shall be applicable to the required determinations, notification and provisions of access set forth in paragraph (a) of this section:
(1) A request concerning a single system of records which does not require consultation with or requisition of records from another agency will be responded to within 20 working days after receipt of the request.
(2) A request requiring requisition of records from or consultation with another agency will be responded to within 30 working days of receipt of the request.
(3) If a request under paragraphs (b)(1) or (2) of this section presents unusual difficulties in determining whether the records involved are exempt from disclosure, the Privacy Act Officer, in the Office of General Counsel, may extend the time period established by the regulations by 10 working days.
(c) Nothing in this section shall be construed to allow an individual access to any information compiled in reasonable anticipation of a civil action or proceeding, or any information exempted from the access provisions of the Privacy Act.
[54 FR 18476, May 1, 1989, as amended at 59 FR 36042, July 15, 1994; 64 FR 57365, Oct. 25, 1999; 65 FR 63790, Oct. 25, 2000]
§ 792.57
Special procedures: Information furnished by other agencies; medical records.
(a) When a request for records or information from NCUA includes information furnished by other Federal agencies, the system manager responsible for action on the request shall consult with the appropriate agency prior to making a decision to disclose or refuse access to the record, but the decision whether to disclose the record shall be made in the first instance by the system manager.
(b) Medical records may be disclosed on request to the individuals to whom they pertain unless disclosing the medical information directly to the requesting individual could have an adverse effect on the individual. Where medical information is potentially adverse to the requesting individual, the system manager responsible may advise the requesting individual that the medical records will be transmitted only to a physician designated in writing by the individual.
[54 FR 18476, May 1, 1989. Redesignated at 63 FR 14338, Mar. 25, 1998, as amended at 65 FR 63790, Oct. 25, 2000; 73 FR 56939, Oct. 1, 2008]
§ 792.58
Requests for correction or amendment to a record; administrative review of requests.
(a) An individual may request amendment of a record concerning that individual by submitting a written request, either in person or by mail, to the system manager identified in the Notice of Systems of Records. The words “PRIVACY ACT—REQUEST TO AMEND RECORD” should be written on the letter and the envelope. The request must describe the system of records containing the record sought to be amended, indicate the particular record involved, the nature of the correction sought, and the justification for the correction or amendment. An individual who does not have access to NCUA's Notice of Systems of Records, and to whom the appropriate address is otherwise unavailable, may submit a request to the Privacy Act Officer, Office of General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, Virginia 22314-3428, in which case the request will then be referred to the appropriate system manager. The date of receipt of the request will be determined as of the date of receipt by the system manager.
(b) Within 10 working days of receipt of the request, the appropriate system manager shall advise the individual that the request has been received. The appropriate system manager will promptly (under normal circumstances, not later than 30 working days after receipt of the request) advise the individual that the record will be amended or corrected, or inform the individual of rejection of the request to amend the record, the reason for the rejection, and the procedures established by § 792.59 for the individual to request a review of that rejection.
[54 FR 18476, May 1, 1989, as amended at 59 FR 36041, 36042, July 15, 1994; 65 FR 63790, Oct. 25, 2000; 73 FR 56939, Oct. 1, 2008]
§ 792.59
Appeal of initial determination.
(a) A rejection, in whole or in part, of a request to amend or correct a record may be appealed to the General Counsel within 30 working days of receipt of notice of the rejection. Appeals shall be in writing, and shall set forth the specific item of information sought to be corrected and the documentation justifying the correction. Appeals must be addressed to the Office of General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, VA 22314-3428 with the words “PRIVACY ACT—APPEAL” written on the letter and the envelope. Appeals shall be decided within 30 working days of receipt unless the General Counsel, for good cause, extends such period for an additional 30 working days.
(b) Within the time limits set forth in paragraph (a) of this section, the General Counsel shall either advise the individual of a decision to amend or correct the record, or advise the individual of a determination that an amendment or correction is not warranted on the facts, in which case the individual shall be advised of the right to provide for the record a “Statement of Disagreement” and of the right to further appeal pursuant to the Privacy Act. For records under the jurisdiction of the Office of Personnel Management, appeals will be made pursuant to that agency's regulations.
(c) If an appeal under this section is denied in whole or in part, an individual may file a statement of disagreement concisely stating the reason(s) for disagreeing with the denial for amendment or correction, and clearly identifying each part of any record that is disputed. The statement must be sent within 30 working days of the date of receipt of the notice of General Counsel's refusal to authorize amendment or correction, to the General Counsel, National Credit Union Administration, 1775 Duke Street, Alexandria, VA 22314-3428. Upon receipt of a statement of disagreement in accordance with this section, the General Counsel shall take steps to ensure that the statement is included in the system of records containing the disputed item and that the original item is so marked to indicate that there is a statement of dispute and where, within the system of records, that statement may be found.
(d) When a record has been amended or corrected or a statement of disagreement has been furnished, the system manger for the system of records containing the record shall, within 30 days thereof, advise all prior recipients of information to which the amendment or statement of disagreement relates whose identity can be determined by an accounting made as required by the Privacy Act of 1974 or any other accounting previously made, of the amendment or statement of disagreement. When a statement of disagreement has been furnished, the system manager shall also provide any subsequent recipient of a disclosure containing information to which the statement relates with a copy of the statement and note the disputed portion of the information disclosed. A concise statement of the reasons for not making the requested amendment may also be provided if deemed appropriate.
(e) If access is denied because of an exemption, the individual will be notified of the right to appeal that determination to the General Counsel within 30 days after receipt. Appeals will be determined within 20 working days.
[54 FR 18476, May 1, 1989, as amended at 59 FR 36041, July 15, 1994; 65 FR 63790, Oct. 25, 2000; 73 FR 56939, Oct. 1, 2008]
§ 792.60
Disclosure of record to person other than the individual to whom it pertains.
No record or item of information concerning an individual which is contained in a system of records maintained by NCUA shall be disclosed by any means of communication to any person, or to another agency, without the prior written consent of the individual to whom the record or item of information pertains, unless the disclosure would be—
(a) To an employee of the NCUA who has need for the record in the performance of duty;
(b) Required by the Freedom of Information Act;
(c) For a routine use as described in the “Notice of Systems of Records,” published in the Federal Register, which describes the system of records in which the record or item of information is contained;
(d) To the Bureau of the Census for purposes of planning or carrying out a census or survey or related activity pursuant to the provisions of title 13 of the United States Code;
(e) To a recipient who has provided the NCUA with advance adequate written assurance that the record or item will be used soley as a statistical research or reporting record, and the record is to be transferred in a form that is not individually identifiable;
(f) To the National Archives and Records Administration as a record or item which has sufficient historical or other value to warrant its continued preservation by the United States Government, or for evaluation by the Archivist of the United States or the designee of the Archivist to determine whether the record has such value;
(g) To another agency or to an instrumentality of any governmental jurisdiction within or under the control of the United States for a civil or criminal law enforcement activity if the activity is authorized by law, and if the head of the agency or instrumentality has made a written request to NCUA specifying the particular portion desired and the law enforcement activity for which the record or item is sought;
(h) To a person pursuant to a showing of compelling circumstances affecting the health or safety of an individual if, upon such disclosure, notification is transmitted to the last known address of such individual;
(i) To either House of Congress, or, to the extent of matter within its jurisdiction, any committee or subcommittee thereof, any joint committee of Congress or subcommittee of any such joint committee;
(j) To the Comptroller General, or any of his authorized representatives, in the course of the performance of the duties of the Government Accountability Office;
(k) Pursuant to the order of a court of competent jurisdiction; or
(l) To a consumer reporting agency in accordance with section 3711(f) of title 31 of the United States Code (31 U.S.C. 3711(f)).
[54 FR 18476, May 1, 1989, as amended at 73 FR 56939, Oct. 1, 2008]
§ 792.61
Accounting for disclosures.
(a) Each system manager identified in the “Notice of Systems of Records” must establish a system of accounting for all disclosures of information or records under the Privacy Act made outside NCUA. Accounting procedures may be established in the least expensive and most convenient form that will permit the system manager to advise individuals, promptly upon request, of the persons or agencies to which records concerning them have been disclosed.
(b) Accounting records, at a minimum, shall include the information disclosed, the name and address of the person or agency to whom disclosure was made, and the date of disclosure. When records are transferred to the National Archives and Records Administration for storage in records centers, the accounting pertaining to those records shall be transferred with the records themselves.
(c) Any accounting made under this section shall be retained for at least five years or the life of the record, whichever is longer, after the disclosure for which the accounting is made.
[54 FR 18476, May 1, 1989, as amended at 73 FR 56939, Oct. 1, 2008]
§ 792.62
Requests for accounting for disclosures.
At the time of the request for access or correction or at any other time, an individual may request an accounting of disclosures made of the individual's record outside the NCUA. Request for accounting shall be directed to the system manager. Any available accounting, whether kept in accordance with the requirements of the Privacy Act or under procedures established prior to September 27, 1975, shall be made available to the individual, except that an accounting need not be made available if it relates to:
(a) A disclosure made pursuant to the Freedom of Information Act (5 U.S.C. 552);
(b) A disclosure made within the NCUA;
(c) A disclosure made to a law enforcement agency pursuant to 5 U.S.C. 552a(b)(7);
(d) A disclosure which has been exempted from the provisions of 5 U.S.C. 552a(c)(3) pursuant to 5 U.S.C. 552a (j) or (k).
§ 792.63
Collection of information from individuals; information forms.
(a) The system manager for each system of records is responsible for reviewing all forms developed and used to collect information from or about individuals for incorporation into the system of records.
(b) The purpose of the review shall be to eliminate any requirement for information that is not relevant and necessary to carry out an NCUA function and to accomplish the following objectives:
(1) To ensure that no information concerning religion, political beliefs or activities, association memberships (other than those required for a professional license), or the exercise of other First Amendment rights is required to be disclosed unless such requirement of disclosure is expressly authorized by statute or by the individual about whom the record is maintained, or unless pertinent to and within the scope of any authorized law enforcement activity;
(2) To ensure that the form or accompanying statement makes clear to the individual which information by law must be disclosed and the authority for that requirement, and which information is voluntary;
(3) To ensure that the form or accompanying statement makes clear the principal purpose or purposes for which the information is being collected, and states concisely the routine uses that will be made of the information;
(4) To ensure that the form or accompanying statement clearly indicates to the individual the effects on him or her, if any, of refusing to provide some or all of the requested information; and
(5) To ensure that any form requesting disclosure of a social security number, or an accompanying statement, clearly advises the individual of the statute or regulation requiring disclosure of the number, or clearly advises the individual that disclosure is voluntary and that no consequence will flow from a refusal to disclose it, and the uses that will be made of the number whether disclosed mandatorily or voluntarily.
(c) Any form which does not meet the objectives specified in the Privacy Act and this section shall be revised to conform thereto.
[54 FR 18476, May 1, 1989, as amended at 73 FR 56939, Oct. 1, 2008]
§ 792.64
Contracting for the operation of a system of records.
(a) No NCUA component shall contract for the operation of a system of records by or on behalf of the Agency without the express approval of the NCUA Board.
(b) Any contract which is approved shall continue to ensure compliance with the requirements of the Privacy Act. The contracting component shall have the responsibility for ensuring that the contractor complies with the contract requirements relating to the Privacy Act.
§ 792.65
Fees.
(a) Fees pursuant to 5 U.S.C. 552a(f)(5) shall be assessed for actual copies of records provided to individuals on the following basis, unless the system manager determining access waives the fee because of the inability of the individual to pay or the cost of collecting the fee exceeds the fee:
(1) For copies of documents provided, copy fees as stated in NCUA's current FOIA fee schedule; and
(2) For copying information, if any, maintained in nondocument form, the direct cost to NCUA may be assessed.
(b) If it is determined that access fees chargeable under this section will amount to more than $25, and the individual has not indicated in advance willingness to pay fees as high as are anticipated, the individual shall be notified of the amount of the anticipated fees before copies are made, and the individual's access request shall not be considered to have been received until receipt by NCUA of written agreement to pay.
[54 FR 18476, May 1, 1989. Redesignated at 63 FR 14338, Mar. 25, 1998, as amended at 65 FR 63790, Oct. 25, 2000]
§ 792.66
Exemptions.
(a) NCUA maintains several systems of records that are exempted from some provisions of the Privacy Act. The system number and name, description of records contained in the system, exempted provisions and reasons for exemption are as follows:
(b)(1) System NCUA-1, entitled “Employee Suitability Security Investigations Containing Adverse Information,” consists of adverse information about NCUA employees that had been obtained as a result of routine U.S. Office of Personnel Management (OPM) security investigations. To the extent that NCUA maintains records in this system pursuant to OPM guidelines that may require retrieval of information by use of individual identifiers, those records are encompassed by and included in the OPM Central system of records number Central-9 entitled, “Personnel Investigations Records,” and thus are subject to the exemptions promulgated by OPM. Additionally, in order to ensure the protection of properly confidential sources, particularly as to those records which are not maintained pursuant to such Office of Personnel Management requirements, the records in these systems of records are exempted, pursuant to section k(5) of the Privacy Act (5 U.S.C. 552a(k)(5)), from section (d) of the Act (5 U.S.C. 552a(d)). To the extent that disclosure of a record would reveal the identity of a confidential source, NCUA need not grant access to that record by its subject. Information which would reveal a confidential source shall, however, whenever possible, be extracted or summarized in a manner which protects the source and the summary or extract shall be provided to the requesting individual.
(2) System NCUA-8, entitled, “Investigative Reports Involving Any Crime or Suspicious Activity Against a Credit Union, NCUA,” consists of investigatory or enforcement records about individuals suspected of involvement in violations of laws or regulations, whether criminal or administrative. These records are maintained in an overall context of general investigative information concerning crimes against credit unions. To the extent that individually identifiable information is maintained for purposes of protecting the security of any investigations by appropriate law enforcement authorities and promoting the successful prosecution of all actual criminal activity, the records in this system are exempted, pursuant to section k(2) of the Privacy Act (5 U.S.C. 552a (k)(2)), from sections (c)(3), (d), (e)(1), (e)(2), (e)(4)(G), (e)(4)(H), (f), and (g). The records in this system are also exempted pursuant to section (j)(2) of the Privacy Act, 5 U.S.C. 552a(j)(2), from sections (c)(3), (d), (e)(1), (e)(2), (e)(4)(G), (e)(4)(H), (f), and (g). Where possible, information that would identify a confidential source will be extracted or summarized in a manner that protects the source and the summary or extract will be provided to the requesting individual.
(3) System NCUA-20, entitled, “Office of Inspector General (OIG) Investigative Records,” consists of OIG records of closed and pending investigations of individuals alleged to have been involved in criminal violations. The records in this system are exempted pursuant to sections (k)(2) of the Privacy Act, 5 U.S.C. 552a(k)(2), from sections (c)(3), (d), (e)(1), (e)(4)(G), (e)(4)(H), (e)(4)(I), and (f). The records in this system are also exempted pursuant to section (j)(2) of the Privacy Act, 5 U.S.C. 552a(j)(2), from sections (c)(3), (c)(4), (d), (e)(1), (e)(2), (e)(3), and (g). NCUA need not make an accounting of previous disclosures of a record in this system of records available to its subject, and NCUA need not grant access to any records in this system of records by their subject. Further, whenever individuals request records about themselves and maintained in this system of records, the NCUA will advise the individuals only that no records available to them pursuant to the Privacy Act of 1974 have been identified. However, if review of the record reveals that the information contained therein has been used or is being used to deny the individuals any right, privilege or benefit for which they are eligible or to which they would otherwise be entitled under federal law, the individuals will be advised of the existence of the information and will be provided the information, except to the extent disclosure would identify a confidential source. Where possible, information which would identify a confidential source will be extracted or summarized in a manner which protects the source and the summary or extract will be provided to the requesting individual.
(4) System NCUA-13, entitled, “Litigation Case Files,” consists of investigatory materials compiled for law enforcement purposes. Records in the Litigation Case Files system are used in connection with the execution of NCUA's legal and enforcement responsibilities. Because the system covers investigatory materials compiled for law enforcement purposes, it is eligible for exemption under subsection (k)(2) of the Privacy Act. 5 U.S.C. 552a(k)(2). The Litigation Case Files system is exempt from subsections (c)(3), (d), (e)(1), (e)(4)(G), (H), (I) and (f) of the Privacy Act. 5 U.S.C. 552a (c)(3), (d), (e)(1), (e)(4)(G), (H), (I) and (f). However, if an individual is denied any right, privilege, or benefit to which he would otherwise be entitled by federal law, or for which he otherwise would be eligible, as a result of the maintenance of such records, the records or information will be made available to him, provided the identity of a confidential source is not disclosed. NCUA need not make an accounting of previous disclosures of a record in this system of records available to its subject, and NCUA need not grant access to any records in this system of records by their subject. Further, whenever individuals request records about themselves and maintained in this system of records, the NCUA will advise the individuals only that no records available to them pursuant to the Privacy Act of 1974 have been identified. However, if review of the record reveals that the information contained therein has been used or is being used to deny the individuals any right, privilege or benefit for which they are eligible or to which they would otherwise be entitled under federal law, the individuals will be advised of the existence of the information and will be provided the information, except to the extent disclosure would identify a confidential source. Where possible, information that would identify a confidential source will be extracted or summarized in a manner which protects the source and the summary or extract will be provided to the requesting individual.
(c) For purposes of this section, a “confidential source” means a source who furnished information to the Government under an express promise that the identity of the source would remain confidential, or, prior to September 27, 1976, under an implied promise that the identity of the source would be held in confidence.
[54 FR 18476, May 1, 1989, as amended at 60 FR 31912, June 19, 1995; 64 FR 57365, Oct. 25, 1999; 65 FR 63790, Oct. 25, 2000; 73 FR 56940, Oct. 1, 2008; 75 FR 34623, June 18, 2010]
§ 792.67
Security of systems of records.
(a) Each system manager, with the approval of the head of that Office, shall establish administrative and physical controls to insure the protection of a system of records from unauthorized access or disclosure and from physical damage or destruction. The controls instituted shall be proportional to the degree of sensitivity of the records, but at a minimum must insure: that records are enclosed in a manner to protect them from public view; that the area in which the records are stored is supervised during all business hours to prevent unauthorized personnel from entering the area or obtaining access to the records; and that the records are inaccessible during nonbusiness hours.
(b) Each system manager, with the approval of the head of that Office, shall adopt access restriction to insure that only those individuals within the agency who have a need to have access to the records for the performance of duty have access. Procedures shall also be adopted to prevent accidental access to or dissemination of records.
§ 792.68
Use and collection of Social Security numbers.
The head of each NCUA Office shall take such measures as are necessary to ensure that employees authorized to collect information from individuals are advised that individuals may not be required without statutory or regulatory authorization to furnish Social Security numbers, and that individuals who are requested to provide Social Security numbers voluntarily must be advised that furnishing the number is not required and that no penalty or denial of benefits will flow from the refusal to provide it.
§ 792.69
Training and employee standards of conduct with regard to privacy.
(a) The Director of the Office of Human Resources, with advice from the Senior Privacy Act Officer, is responsible for training NCUA employees in the obligations imposed by the Privacy Act and this subpart.
(b) The head of each NCUA Office shall be responsible for assuring that employees subject to that person's supervision are advised of the provisions of the Privacy Act, including the criminal penalties and civil liabilities provided therein, and that such employees are made aware of their responsibilities to protect the security of personal information, to assure its accuracy, relevance, timeliness, and completeness, to avoid unauthorized disclosure either orally or in writing, and to insure that no information system concerning individuals, no matter how small or specialized, is maintained without public notice.
(c) With respect to each system of records maintained by NCUA, Agency employees shall:
(1) Collect no information of a personal nature from individuals unless authorized to collect it to achieve a function or carry out an NCUA responsibility;
(2) Collect from individuals only that information which is necessary to NCUA functions or responsibilities;
(3) Collect information, wherever possible, directly from the individual to whom it relates;
(4) Inform individuals from whom information is collected of the authority for collection, the purposes thereof, the routine uses that will be made of the information, and the effects, both legal and practical of not furnishing the information;
(5) Not collect, maintain, use, or disseminate information concerning an individual's religious or political beliefs or activities or his membership in associations or organizations, unless:
(i) The individual has volunteered such information for his own benefit;
(ii) The information is expressly authorized by statute to be collected, maintained, used, or disseminated; or
(iii) Activities involved are pertinent to and within the scope of an authorized investigation or adjudication.
(6) Advise their supervisors of the existence or contemplated development of any record system which retrieves information about individuals by individual identifier.
(7) Maintain an accounting, in the prescribed form, of all dissemination of personal information outside NCUA, whether made orally or in writing;
(8) Disseminate no information concerning individuals outside NCUA except when authorized by 5 U.S.C. 552a or pursuant to a routine use as set forth in the “routine use” section of the “Notice of Systems of Records” published in the Federal Register.
(9) Maintain and process information concerning individuals with care in order to ensure that no inadvertent disclosure of the information is made either within or outside NCUA; and
(10) Call to the attention of the proper NCUA authorities any information in a system maintained by NCUA which is not authorized to be maintained under the provisions of the Privacy Act, including information on First Amendment activities, information that is inaccurate, irrelevant or so incomplete as to risk unfairness to the individuals concerned.
(c) Heads of offices within NCUA shall, at least annually, review the record systems subject to their supervision to ensure compliance with the provisions of the Privacy Act.
[54 FR 18476, May 1, 1989, as amended at 59 FR 36042, July 15, 1994; 65 FR 63790, Oct. 25, 2000; 67 FR 30774, May 8, 2002; 73 FR 56940, Oct. 1, 2008]