[Federal Register Volume 62, Number 45 (Friday, March 7, 1997)]
[Rules and Regulations]
[Pages 10630-10633]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 97-5285]


      

[[Page 10629]]

_______________________________________________________________________

Part II





United States Information Agency





_______________________________________________________________________



22 CFR Part 505



Privacy Act; Implementation;



Republication of Notice of Systems of Records; Interim Rule and Notice

  Federal Register / Vol. 62, No. 45 / Friday, March 7, 1997 / Rules 
and Regulations  

[[Page 10630]]



UNITED STATES INFORMATION AGENCY

22 CFR Part 505


Privacy Act Policy and Procedures

AGENCY: United States Information Agency.

ACTION: Interim final rule.

-----------------------------------------------------------------------

SUMMARY: This document will update and replace the Agency's prior 
regulation implementing the Privacy Act of 1974, as amended. This 
update and replacement was made necessary by changes during USIA's 
reorganization and realignment of functions and responsibilities when 
the Agency changed names and again when the Agency began to reinvent 
itself in response to government downsizing.
    The Agency's regulation has not been updated since 1975 and changes 
in nomenclature and differences in processing Privacy Act requests have 
necessitated these changes. The changes primarily update the 
definitions; the processes for receiving and handling requests; and, to 
whom to send requests for Privacy Act records. It also better explains 
the exemptions that the United States Information Agency is allowed to 
use and its routine uses.

DATES: Effective: April 16, 1997. Persons wishing to comment on the 
newly published Privacy Act Regulation may do so by April 7, 1997.

ADDRESSES: Send comments to Les Jin, General Counsel, USIA, 301 4th 
Street, SW, Washington, DC 20547.

FOR FURTHER INFORMATION CONTACT:
Lola L. Secora, Chief, FOIA/Privacy Act Unit, Office of the General 
Counsel, USIA, 301 4th Street, SW, Washington, DC 20547.

SUPPLEMENTARY INFORMATION: The Privacy Act of 1974 (5 U.S.C. 552a) is a 
Federal law only. It requires Federal agencies to limit the manner in 
which they collect, use and disclose information about individuals, but 
only if they are American citizens or resident aliens. The key 
provision of the Privacy Act requires that no Federal agency may 
disclose any record about an individual to any person or agency without 
the written permission of that individual. The Privacy Act also 
provides that, upon request, an individual has the right to access any 
record maintained on herself/himself in an agency's files, and has the 
right to request correction of an amendment to that record.

List of Subjects in 22 CFR Part 505

    Privacy.

    For the reasons set forth above, Title 22, Part 505 is revised to 
read as follows:

PART 505--PRIVACY ACT POLICIES AND PROCEDURES

Sec.
505.1  Purpose and scope.
505.2  Definitions.
505.3  Procedures and requests.
505.4  Requirements and identification for making requests.
505.5  Disclosure of information.
505.6  Medical records.
505.7  Correction or amendment of record.
505.8  Agency review of requests for changes.
505.9  Review of adverse Agency determination.
505.10  Disclosure to third parties.
505.11  Fees.
505.12  Civil remedies and criminal penalties.
505.13  General exemptions (Subsection (j)).
505.14  Specific exemptions (Subsection (k)).
505.15  Exempt systems of records used.

    Authority: Pub. L. 93-579, 88 Stat. 1897; 5 U.S.C. 552a; 55 FR 
31940, Aug. 6, 1990, as amended.


Sec. 505.1  Purpose and scope.

    The United States Information Agency will protect individuals' 
privacy from misuse of their records, and grant individuals access to 
records concerning them which are maintained by the Agency's domestic 
and overseas offices, consistent with the provisions of Public Law 93-
579, 88 Stat. 1897; 5 U.S.C. 552a, the Privacy Act of 1974, as amended. 
The Agency has also established procedures to permit individuals to 
amend incorrect records, to limit the disclosure of personal 
information to third parties, and to limit the number of sources of 
personal information. The Agency has also established internal rules 
restricting requirements of individuals to provide social security 
account numbers.


Sec. 505.2  Definitions.

    (a) Access Appeal Committee (AAC)--the body established by and 
responsible to the Director of USIA for reviewing appeals made by 
individuals to amend records held by the Agency.
    (b) Agency or USIA or USIA--The United States Information Agency, 
its offices, divisions, branches and its Foreign Service 
establishments.
    (c) Amend--To make a correction to or expunge any portion of a 
record about an individual which that individual believes is not 
accurate, relevant, timely or complete.
    (d) Individual--A citizen of the United States or an alien lawfully 
admitted for permanent residence.
    (e) Maintain--Collect, use, store, disseminate or any combination 
of these record-keeping functions; exercise of control over and hence 
responsibility and accountability for systems of records.
    (f) Record--Any information maintained by the Agency about an 
individual that can be reproduced, including finger or voice prints and 
photographs, and which is retrieved by that particular individual's 
name or personal identifier, such as a social security number.
    (g) Routine use--With respect to the disclosure of a record, the 
use of such record for a purpose which is compatible with the purpose 
for which it was collected. The common and ordinary purposes for which 
records are used and all of the proper and necessary uses, even if any 
such uses occur infrequently.
    (h) Statistical record--A record in a system of records maintained 
for statistical research or reporting purposes only and not used in 
whole or in part in making any determination about an identifiable 
individual, except as provided in 13 U.S.C. 8.
    (i) System of records--A group of records under the maintenance and 
control of the Agency from which information is retrieved by the name 
or personal identifier of the individual.
    (j) Personnel record--Any information about an individual that is 
maintained in a system of records by the Agency that is needed for 
personnel management or processes such as staffing, employee 
development, retirement, grievances and appeals.
    (k) Post--Any of the foreign service branches of the Agency.


Sec. 505.3  Procedures for requests.

    (a) The agency will consider all written requests received from an 
individual for records pertaining to herself/himself as a request made 
under the Privacy Act of 1974, as amended (5 U.S.C. 552a) whether or 
not the individual specifically cites the Privacy Act when making the 
request.
    (b) All requests under the Privacy Act should be directed to the 
USIA, Office of the General Counsel, FOIA/Privacy Act Unit (GC/FOI), 
301 4th Street, SW, Washington, DC 20547, which will coordinate the 
search of all systems of records specified in the request. Requests 
should state name, date of birth, and social security number.
    (c) Requests directed to the Agency's overseas posts which involve 
routine unclassified, administrative and personnel records available 
only at those posts may be released to the individual by the post if 
the post

[[Page 10631]]

determines that such release is authorized by the Privacy Act. All 
other requests shall be submitted by the post to the Office of the 
General Counsel, FOIA/Privacy Act Unit (GC/FOI), 301 4th Street, SW, 
Washington, DC 20547, and the individual shall be so notified of this 
section in writing, when possible.
    (d) In those instances where an individual requests records 
pertaining to herself/himself, as well as records pertaining to another 
individual, group, or some other category of the Agency's records, only 
that portion of the request which pertains to records concerning the 
individual will be treated as a Privacy Act request. The remaining 
portions of such a request will be processed as a Freedom of 
Information Act request by the office noted in paragraph (b) of this 
section.


Sec. 505.4  Requirements and identification for making requests.

    (a) Individuals seeking access to Agency records may present their 
written request or may mail their request to the USIA, Office of 
General Counsel, FOI/Privacy Act (GC/FOI) Unit, 301 4th Street, SW, 
Washington, DC 20547. The GC/FOI Unit may be visited between the hours 
of 9 a.m. and 4 p.m., Monday through Friday, except for legal holidays.
    (b) Individuals, seeking access to Agency records, will be 
requested to present some form of identification. Individuals should 
state their full name, date of birth and a social security number. An 
individual must also include her/his present mailing address and zip 
code, and if possible a telephone number.
    (c) When signing a statement confirming one's identity, individuals 
should understand that knowingly and willfully seeking or obtaining 
access to records about another individual under false pretenses is 
punishable by a fine of up to $5,000.


Sec. 505.5  Disclosure of information.

    (a) In order to locate the system of records that an individual 
believes may contain information about herself/himself, an individual 
should first obtain a copy of the Agency's Notice of Systems of 
Records. By identifying a particular record system and by furnishing 
all the identifying information requested by that record system, it 
will enable the Agency to more easily locate those records which 
pertain to the individual. At a minimum, any request should include the 
information specified in Sec. 505.4(b) above.
    (b) In certain circumstances, it may be necessary for the Agency to 
request additional information from the individual to ensure that the 
retrieved record does, in fact, pertain to the individual.
    (c) All requests for information on whether or not the Agency's 
system(s) of records contain information about the individual will be 
acknowledged within ten working days of receipt of the request. The 
requested records will be provided as soon as possible thereafter.
    (d) If the Agency determines that the substance of the requested 
record is exceptionally sensitive, the Agency will require the 
individual to furnish a signed, notarized statement that she/he is in 
fact the person named in the file before granting access to the 
records.
    (e) Original records will not be released from the custody of the 
records system manager. Copies will be furnished subject to and in 
accordance with fees established in Sec. 505.11.
    (f) Denial of access to records:
    (1) The requirements of this section do not entitle an individual 
access to any information compiled in reasonable anticipation of a 
civil action or proceeding.
    (2) Under the Privacy Act, the Agency is not required to permit 
access to records if the information is not retrievable by the 
individual's name or other personal identifier; those requests will be 
processed as Freedom of Information Act requests.
    (3) The Agency may deny an individual access to a record, or 
portion thereof, if following a review it is determined that the record 
or portion falls within a system of records that is exempt from 
disclosure pursuant to 5 U.S.C. 552a(j) and 552a(k). See Secs. 505.13 
and 505.14 for a listing of general and specific exemptions.
    (4) The decision to deny access to a record or a portion of the 
record is made by the Agency's Privacy Act Officer, Office of the 
General Counsel. The denial letter will advise the individual of her/
his rights to appeal the denial (See Sec. 505.9 on Access Appeal 
Committee's review).


Sec. 505.6  Medical records.

    If, in the judgment of the Agency, the release of medical 
information directly to the requester could have an adverse effect on 
the requester, the Agency will arrange an acceptable alternative to 
granting access of such records to the requester. This normally 
involves the release of the information to a doctor named by the 
requester. However, this special procedure provision does not in any 
way limit the absolute right of the individual to receive a complete 
copy of her or his medical record.


Sec. 505.7  Correction or amendment of record.

    (a) An individual has the right to request that the Agency amend a 
record pertaining to her/him which the individual believes is not 
accurate, relevant, timely, or complete. At the time the Agency grants 
access to a record, it will furnish guidelines for requesting 
amendments to the record.
    (b) Requests for amendments to records must be in writing and 
mailed or delivered to the USIA Privacy Act Officer, Office of the 
General Counsel, 301 4th Street, SW, Washington, DC 20547, who will 
coordinate the review of the request to amend a record with the 
appropriate office(s). Such requests must contain, at a minimum, 
identifying information needed to locate the record, a brief 
description of the item or items of information to be amended, and the 
reason for the requested change. The requester should submit as much 
documentation, arguments or other data as seems warranted to support 
the request for amendment.
    (c) The Agency will review all requests for amendments to records 
within 10 working days of receipt of the request and either make the 
changes or inform the requester of its refusal to do so and the reasons 
therefore.


Sec. 505.8  Agency review of requests for changes.

    (a) In reviewing a record in response to a request to amend or 
correct a file, the Agency shall incorporate the criteria of accuracy, 
relevance, timeliness, and completeness of the record in the review.
    (b) If the Agency agrees with an individual's request to amend a 
record, it shall:
    (1) Advise the individual in writing;
    (2) Correct the record accordingly;
    (3) And, to the extent that an accounting of disclosure was 
maintained, advise all previous recipients of the record of the 
corrections.
    (c) If the Agency disagrees with all or any portion of an 
individual's request to amend a record, it shall:
    (1) Advise the individual of the reasons for the determination;
    (2) Inform the individual of her/his right to further review (see 
Sec. 505.9).


Sec. 505.9  Review of adverse agency determination.

    (a) When the Agency determines to deny a request to amend a record, 
or portion of the record, the individual may request further review by 
the Agency's Access Appeal Committee.

[[Page 10632]]

The written request for review should be mailed to the Chairperson, 
Access Appeal Committee, USIA, Office of Public Liaison, 301 4th 
Street, SW, Washington, DC 20547. The letter should include any 
documentation, information or statement which substantiates the request 
for review.
    (b) The Agency's Access Appeal Committee will review the Agency's 
initial denial to amend the record and the individual's documentation 
supporting amendment, within 30 working days. If additional time is 
required, the individual will be notified in writing of the reasons for 
the delay and the approximate date when the review is expected to be 
completed. Upon completion of the review, the Chairperson will notify 
the individual of the results.
    (c) If the Committee upholds the Agency's denial to amend the 
record, the Chairperson will advise the individual of:
    (1) The reasons for the Agency's refusal to amend the record;
    (2) Her/his right and the procedure to add to the file a concise 
statement supporting the individual's disagreement with the decision of 
the Agency;
    (3) Her/his right to seek judicial review of the Agency's refusal 
to amend the file.
    (d) When an individual files a statement disagreeing with the 
Agency's refusal to amend a record, the Agency will clearly annotate 
the record so that the fact that the record is disputed is apparent to 
anyone who may subsequently have access to, use of, or reason to 
disclose the file. If information is disclosed regarding the area of 
dispute, the Agency will provide a copy of the individual's statement 
in the disclosure. Any statement which may be included by the Agency 
regarding the dispute will be limited to the reasons given to the 
individual for not amending the record. Copies of the Agency's 
statement shall be treated as part of the individual's record, but will 
not be subject to amendment by the individual under these regulations.


Sec. 505.10  Disclosure to third parties.

    The Agency will not disclose any information about an individual to 
any person or another agency without the prior consent of the 
individual about whom the information is maintained, except as provided 
for in the following paragraphs.
    (a) Medical records. May be disclosed to a doctor or other medical 
practitioner, named by the individual, as prescribed in Sec. 505.6 
above.
    (b) Accompanying individual. When a requester is accompanied by any 
other person, the agency will require that the requester sign a 
statement granting consent to the disclosure of the contents of the 
record to that person.
    (c) Designees. If a person requests another person's file, she or 
he must present a signed statement from that person of record which 
authorizes and consents to the release of the file to the designated 
individual.
    (d) Guardians. Parent(s) or legal guardian(s) of dependent minors 
or of an individual who has been declared by a court to be incompetent 
due to physical, mental or age incapacity, may act for and on behalf of 
the individual on whom the Agency maintains records.
    (e) Other disclosures. A record may be disclosed without a request 
by or written consent of the individual to whom the record pertains if 
such disclosure conditions are authorized under the provisions of 5 
U.S.C. 552a(b). These conditions are:
    (1) Disclosure within the Agency. This condition is based upon a 
``need-to-know'' concept which recognizes that Agency personnel may 
require access to discharge their duties.
    (2) Disclosure to the public. No consent by an individual is 
necessary if the record is required to be released under the Freedom of 
Information Act (FOIA), 5 U.S.C. 552. The record may be exempt, 
however, under one of the nine exemptions of the FOIA.
    (3) Disclosure for a routine use. No. consent by an individual is 
necessary if the condition is necessary for a ``routine use'' as 
defined in S505.2(g). Information may also be released to other 
government agencies which have statutory or other lawful authority to 
maintain such information. (See Appendix I--Prefatory Statement of 
General Routine Uses).
    (4) Disclosure to the Bureau of the Census. For purposes of 
planning or carrying out a census or survey or related activity. Title 
13 U.S.C. Section 8 limits the uses which may made of these records and 
also makes them immune from compulsory disclosure.
    (5) Disclosure for statistical research and reporting. The Agency 
will provide the statistical information requested only after all names 
and personal identifiers have been deleted from the records.
    (6) Disclosure to the National Archives. For the preservation of 
records of historical value, pursuant to 44 U.S.C. 2103.
    (7) Disclosure for law enforcement purposes. Upon receipt of a 
written request by another Federal agency or a state or local 
government describing the law enforcement purpose for which a record is 
required, and specifying the particular record. Blanket requests for 
all records pertaining to an individual are not permitted under the 
Privacy Act.
    (8) Disclosure under emergency circumstances. For the safety or 
health of an individual (e.g., medical records on a patient undergoing 
emergency treatment).
    (9) Disclosure to the Congress. For matters within the jurisdiction 
of any House or Senate committee or subcommittee, and/or joint 
committee or subcommittee, pursuant to a written request from the 
Chairman of the committee or subcommittee.
    (10) Disclosure to the General Accounting Office (GAO). For matters 
within the jurisdiction of the duties of the GAO's Comptroller General.
    (11) Disclosure pursuant to court order. Pursuant to the order of a 
court of competent jurisdiction. This does not include a subpoena for 
records requested by counsel and issued by a clerk of court.


Sec. 505.11  Fees.

    (a) The first copy of any Agency record about an individual will be 
provided free of charge. A fee of $0.15 per page will be charged for 
any additional copies requested by the individual.
    (b) Checks or money orders should be made payable to the United 
States Treasurer and mailed to the Freedom of Information Act/Privacy 
Act Unit, Office of the General Counsel, 301 4th Street, SW, 
Washington, DC 20547. The Agency will not accept cash.


Sec. 505.12  Civil remedies and criminal penalties.

    (a) Grounds for court action. An individual will have a remedy in 
the Federal District Courts under the following circumstances:
    (1) Denial of access. Individuals may challenge an Agency decision 
to deny them access to records to which they consider themselves 
entitled.
    (2) Refusal to amend a record. Under conditions prescribed in 5 
U.S.C. 552a(g), an individual may seek judicial review of the Agency's 
refusal to amend a record.
    (3) Failure to maintain a record accurately. An individual may 
bring suit against the Agency for any alleged intentional and willful 
failure to maintain a record accurately, if it can be shown that the 
individual was subjected to an adverse action resulting in the denial 
of a right, benefit, entitlement or employment the individual could 
reasonably have expected to be granted if the record had not been 
deficient.

[[Page 10633]]

    (4) Other failures to comply with the Act. An individual may bring 
an action for any alleged failure by the Agency to comply with the 
requirements of the Act or failure to comply with any rule published by 
the Agency to implement the Act provided it can be shown that:
    (i) The action was intentional or willful;
    (ii) The Agency's action adversely affected the individual; and
    (iii) The adverse action was caused by the Agency's actions.
    (b) Jurisdiction and time limits. (1) Action may be brought in the 
district court for the jurisdiction in which the individual resides or 
has a place of residence or business, or in which the Agency records 
are situated, or in the District of Columbia.
    (2) The statute of limitations is two years from the date upon 
which the cause of action arises, except for cases in which the Agency 
has materially and willfully misrepresented any information requested 
to be disclosed and when such misrepresentation is material to the 
liability of Agency. In such cases the statute of limitations is two 
years from the date of discovery by the individual of the 
misrepresentation.
    (3) A suit may not be brought on the basis of injury which may have 
occurred as a result of the Agency's disclosure of a record prior to 
September 27, 1975.
    (c) Criminal penalties.--(1) Unauthorized disclosure. It is a 
criminal violation of the provisions of the Act for any officer or 
employee of the Agency knowingly and willfully to disclose a record in 
any manner to any person or agency not entitled to receive it, for 
failure to meet the conditions of disclosure enumerated in 5 U.S.C. 
552a(b), or without the written consent or at the request of the 
individual to whom the record pertains. Any officer or employee of the 
Agency found guilty of such misconduct shall be fined not more than 
$5,000.
    (2) Failure to publish a public notice. It is a criminal violation 
of the Act to willfully maintain a system of records and not to publish 
the prescribed public notice. Any officer or employee of the Agency 
found guilty of such misconduct shall be fined not more than $5,000.
    (3) Obtaining records under false pretenses. The Act makes it a 
criminal offense to knowingly and willfully request or gain access to a 
record about an individual under false pretenses. Any person found 
guilty of such an offense may be fined not more than $5,000.


Sec. 505.13  General exemptions (Subsection (j)).

    (a) General exemptions are available for systems of records which 
are maintained by the Central Intelligence Agency (Subsection (j)(1)), 
or maintained by an agency which performs as its principal function any 
activity pertaining to the enforcement of the criminal laws (Subsection 
(j)(2)).
    (b) The Act does not permit general exemption of records complied 
primarily for a noncriminal purpose, even though there are some quasi-
criminal aspects to the investigation and even though the records are 
in a system of records to which the general exemption applies.


Sec. 505.14  Specific exemptions (Subsection (k)).

    The specific exemptions focus more on the nature of the records in 
the systems of records than on the agency. The following categories of 
records may be exempt from disclosure:
    (a) Subsection (k)(1). Records which are specifically authorized 
under criteria established under an Executive Order to be kept secret 
in the interest of national defense or foreign policy, and which are in 
fact properly classified pursuant to such Executive Order;
    (b) Subsection (k)(2). Investigatory records compiled for law 
enforcement purposes (other than material within the scope of 
subsection (j)(2) as discussed in Sec. 505.13(a)). If any individual is 
denied any right, privilege, or benefit for which she/he would 
otherwise be eligible, as a result of the maintenance of such material, 
the material shall be provided to the individual, unless disclosure of 
the material would reveal the identify of a source who has been pledged 
confidentiality;
    (c) Subsection (k)(3). Records maintained in connection with 
protection of the President and other VIPs accorded special protection 
by statute;
    (d) Subsection (k)(4). Records required by statute to be maintained 
and used solely as statistical records;
    (e) Subsection (k)(5). Records complied solely for the purpose of 
determining suitability, eligibility, or qualifications for Federal 
civilian employment, military service, Federal contracts, or access to 
classified information, but only if disclosure of the material would 
reveal the identify of a confidential source that furnished information 
to the Government;
    (f) Subsection (k)(6). Testing or examination records used solely 
to determine individual qualifications for appointment or promotion in 
the Federal service when the disclosure of such would compromise the 
objectivity or fairness of the testing or examination process;
    (g) Subsection (k)(7). Evaluation records used to determine 
potential for promotion in the armed services, but only if disclosure 
would reveal the identify of a confidential source.


Sec. 505.15  Exempt systems of records used.

    USIA is authorized to use exemptions (k)(1), (k)(2), (k)(4), 
(k)(5), and (k)(6). The following Agency components currently maintain 
exempt systems of records under one or more of these specific 
exemptions: Executive Secretariat; Education and Cultural Exchange 
Program; Legal Files; Privacy Act and Freedom of Information Act Files; 
Employee Grievance Files; Recruitment Records; Employee Master 
Personnel Records; Foreign Service Selection Board Files; Employee 
Training Files; Personnel Security and Integrity Records; International 
Broadcasting Bureau Director's Executive Secretariat Files; and 
International Broadcasting Bureau Employee Personnel Files.

    Dated: February 26, 1997.
Les Jin,
General Counsel.
[FR Doc. 97-5285 Filed 3-6-97; 8:45 am]
BILLING CODE 8230-01-M