[Federal Register Volume 72, Number 153 (Thursday, August 9, 2007)]
[Notices]
[Pages 44878-44880]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: E7-15602]


=======================================================================
-----------------------------------------------------------------------

 PEACE CORPS


Proposed Routine Use; Request for Public Comment

SUMMARY: The Peace Corps proposes to adopt a new routine use that would 
permit disclosure of Peace Corps records governed by the Privacy Act 
when reasonably necessary to respond to, prevent, minimize, or remedy, 
harm that may result from an agency data breach or compromise.

[[Page 44879]]


DATES: The deadline for public comments is September 24, 2007. Comments 
received after that date will be considered at the Peace Corps' 
discretion.

ADDRESSES: You may submit comments by e-mail to [email protected]. 
Include Privacy Act System of Records Routine Use in the subject line 
of the message. You may also submit comments by mail to Suzanne Glasow, 
Office of the General Counsel, Peace Corps, Suite 8200, 1111 20th 
Street, NW., Washington, DC 20526. Contact Suzanne Glasow for copies of 
comments.

FOR FURTHER INFORMATION CONTACT: Suzanne Glasow, Associate General 
Counsel, 202-692-2150, [email protected].

SUPPLEMENTARY INFORMATION: In accordance with the Privacy Act of 1974, 
5 U.S.C. 552a, this document provides public notice that the Peace 
Corps is proposing to adopt a new ``routine use'' that will apply to 
all Peace Corps records systems covered by the Privacy Act of 1974. The 
Act applies to agency systems of records identified in the list below 
(including number of system, system name, volume number in the Federal 
Register, and the date(s) of publication). The new routine use would be 
added to the list of General Routine Uses, which describes routine uses 
that apply to all Peace Corps Privacy Act records systems listed below.

----------------------------------------------------------------------------------------------------------------
    PC system number                       System name                    Date published     FR volume number
----------------------------------------------------------------------------------------------------------------
PC-1...................  Accounts Receivable (Collection of Debts Claims        09-05-00  65 FR 53772
                          Records).
PC-2...................  Congressional Files............................        09-05-00  65 FR 53772
PC-3...................  Contractors and Consultants Files..............        09-05-00  65 FR 53772
PC-4...................  Discrimination Complaint Files.................        09-05-00  65 FR 53772
PC-5...................  Employee Occupational Injury and Illness               09-05-00  65 FR 53772
                          Reports.
PC-6...................  Employee Pay and Leave Records.................        09-05-00  65 FR 53772
PC-7...................  Peace Corps Volunteers: Reasons for Resignation        09-05-00  65 FR 53772
PC-8...................  Legal Files--Staff, Volunteers and Applicants..        09-05-00  65 FR 53772
PC-9...................  Payment Records: Transportation, Travel                09-05-00  65 FR 53772
                          Authorizations, and Household Storage.
PC-10..................  Office of Private Sector Cooperation and               09-05-00  65 FR 53772
                          International Volunteerism Database.
PC-11..................  Personal Services Contracts....................        09-05-00  65 FR 53772
PC-12..................  Property Records...............................        09-05-00  65 FR 53772
PC-13..................  Personnel Security Records.....................        09-05-00  65 FR 53772
PC-14..................  Administrative Grievance Records...............        09-05-00  65 FR 53772
PC-15..................  Overseas Executive Selection and Support.......        09-05-00  65 FR 53772
PC-16..................  Travel Files...................................        09-05-00  65 FR 53772
PC-17..................  Peace Corps Volunteer Database Management              01-14-85  50 FR 1950
                          System.
PC-18..................  Former Peace Corps Volunteers and Staff                09-05-00  65 FR 53772
                          Database.
PC-19..................  Office of Inspector General Investigative              09-05-00  65 FR 53772
                          Records.
PC-20..................  Building Management, Parking, and Metro Pool...        09-05-00  65 FR 53772
PC-21..................  Crisis Corps Database..........................        09-05-00  65 FR 53772
PC-22..................  Financial Management System....................        05-04-07  72 FR 25343
PC-23..................  Health Benefits Program for Peace Corps                09-05-00  65 FR 53772
                          Volunteers.
PC-24..................  Privacy and Freedom of Information Act Requests        09-05-00  65 FR 53772
PC-25..................  Early Termination and Special Action...........        09-05-00  65 FR 53772
PC-26..................  Peace Corps Computer Systems Activity and              07-29-02  67 FR 49048
                          Access Records.
PC-27..................  Antimalaria Tolerance Survey...................        07-16-04  69 FR 42784
                                                                                 updated  70 FR 57630
                                                                                10-03-05
PC-28..................  Applications for Employment....................        09-23-05  70 FR 55929
PC-29..................  World Wise Schools.............................        05-25-07  72 FR 29357
----------------------------------------------------------------------------------------------------------------

    This new routine use is needed in order to allow for disclosure of 
records to appropriate persons and entities for purposes of response 
and remedial efforts in the event of a breach of data contained in the 
protected systems. This routine use will facilitate an effective 
response to a confirmed or suspected breach by allowing for disclosure 
to individuals affected by the breach, in cases, if any, where such 
disclosure is not otherwise authorized under the Act. This routine use 
will also authorize disclosures to others who are in a position to 
assist in response efforts, either by assisting in notification to 
affected individuals or otherwise playing a role in preventing, 
minimizing, or remedying harms from the breach.
    The Privacy Act authorizes the agency to adopt routine uses that 
are consistent with the purpose for which information is collected and 
subject to that Act. 5 U.S.C. 552a(b)(3); see also 5 U.S.C. 552a(a)(7). 
The Peace Corps believes that it is consistent with the collection of 
information pertaining to such individuals to disclose Privacy Act 
records when, in doing so, it will help prevent, minimize or remedy a 
data breach or compromise that may affect such individuals. The Peace 
Corps believes that failure to take reasonable steps to help prevent or 
minimize the harm that may result from such a breach or compromise 
would jeopardize, rather than promote, the privacy of such individuals. 
Accordingly, the Peace Corps concludes that it is authorized under the 
Privacy Act to adopt a routine use permitting disclosure of Privacy Act 
records for such purposes.
    In accordance with the Privacy Act, see 5 U.S.C. 552a(e)(4) and 
(11), the Peace Corps is publishing notice of this routine use and 
giving the public a 30-day period to comment before adopting it as 
final. The Peace Corps is also providing at least 40 days advance 
notice of this proposed system notice amendment to OMB and the 
Congress, as required by the Act, 5 U.S.C. 552a(r), and OMB Circular A-
130, Revised, Appendix I. We note that the text of this routine use is 
taken from the routine use that has already been published in final 
form by the Department of Justice and the Federal Trade Commission 
after public comment. See 72 FR 3410 (Jan. 25, 2007); 72 FR 31835 (June 
8, 2007). Similarly, after taking into account

[[Page 44880]]

comments, if any, received by the Peace Corps, the Peace Corps intends 
to publish its proposed routine use as final after the period for OMB 
and Congressional review is complete.
    Accordingly, the Peace Corps hereby proposes to amend General 
Routine Uses of its Privacy Act system notices, as published at 65 FR 
53,772 (September 5, 2000), by adding the following new routine use:

* * * * *
    General Routine Use M: To all appropriate agencies, entities, and 
persons when (1) The Peace Corps suspects or has confirmed that the 
security or confidentiality of information in the system of records has 
been compromised; (2) the Peace Corps has determined that as a result 
of the suspected or confirmed compromise there is a risk of harm to 
economic or property interests, identity theft or fraud, or harm to the 
security or integrity of this system or other systems or programs 
(whether maintained by the Peace Corps or another agency or entity) 
that rely upon the compromised information; and (3) the disclosure made 
to such agencies, entities, and persons is reasonably necessary to 
assist in connection with the Peace Corps' efforts to respond to the 
suspected or confirmed compromise and prevent, minimize, or remedy such 
harm.

    Dated: August 3, 2007.
Wilbert Bryant,
Associate Director--Management.
 [FR Doc. E7-15602 Filed 8-8-07; 8:45 am]
BILLING CODE 6015-01-P