[Federal Register Volume 73, Number 188 (Friday, September 26, 2008)]
[Rules and Regulations]
[Pages 56422-56446]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: E8-22054]



[[Page 56421]]

-----------------------------------------------------------------------

Part V





Department of Health and Human Services





-----------------------------------------------------------------------



Administration for Children and Families



-----------------------------------------------------------------------



Office of Child Support Enforcement



-----------------------------------------------------------------------



45 CFR Parts 302, 303, and 307



State Parent Locator Service; Safeguarding Child Support Information; 
Final Rule

  Federal Register / Vol. 73, No. 188 / Friday, September 26, 2008 / 
Rules and Regulations  

[[Page 56422]]


-----------------------------------------------------------------------

DEPARTMENT OF HEALTH AND HUMAN SERVICES

Administration for Children and Families

Office of Child Support Enforcement

45 CFR Parts 302, 303, and 307

RIN 0970-AC01


State Parent Locator Service; Safeguarding Child Support 
Information

AGENCY: Office of Child Support Enforcement (OCSE), Administration for 
Children and Families (ACF), Department of Health and Human Services 
(HHS).

ACTION: Final rule.

-----------------------------------------------------------------------

SUMMARY: The Personal Responsibility and Work Opportunity 
Reconciliation Act of 1996 (PRWORA) created and expanded State and 
Federal title IV-D child support enforcement databases and 
significantly enhanced access to information for title IV-D child 
support purposes. States are moving toward integrated service delivery 
and developing enterprise architecture initiatives to link their 
program databases. This final rule prescribes requirements for: State 
Parent Locator Service responses to authorized location requests; and 
State IV-D program safeguarding of confidential information and 
authorized disclosures of this information. This rule restricts the use 
of confidential data and information to child support purposes, with 
exceptions for certain disclosures permitted by statute.

DATES: This rule is effective March 23, 2009.

FOR FURTHER INFORMATION CONTACT: Yvette Hilderson Riddick, Policy and 
Automation Liaison, OCSE, 202-401-4885, e-mail: 
[email protected]. Deaf and hearing-impaired individuals may 
call the Federal Dual Party Relay Service at 1-800-877-8339 between 8 
a.m. and 7 p.m. eastern time.

SUPPLEMENTARY INFORMATION:

I. Statutory Authority
II. Summary Description of Regulatory Provisions
    A. State Parent Locator Service
    B. Safeguarding and Disclosure of Confidential Information
III. Section-by-Section Discussion of Comments
IV. Regulatory Review
    A. Paperwork Reduction Act
    B. Regulatory Flexibility Analysis
    C. Regulatory Impact Analysis
    D. Unfunded Mandates Reform Act of 1995
    E. Congressional Review
    F. Assessment of Federal Regulations and Policies on Families
    G. Executive Order 13132

I. Statutory Authority

    This final regulation is published under the authority granted to 
the Secretary of HHS (Secretary) by section 1102 of the Social Security 
Act (the Act), 42 U.S.C. 1302. Section 1102 authorizes the Secretary to 
publish regulations that may be necessary for the efficient 
administration of the functions for which he is responsible under the 
Act.
    The provisions of this final rule pertaining to the Federal Parent 
Locator Service (PLS) implement section 453 of the Act, 42 U.S.C. 653. 
Section 453 requires the Secretary to establish and conduct a Federal 
PLS to obtain and transmit specified information to authorized persons 
for purposes of establishing parentage; establishing, modifying, or 
enforcing child support obligations; and enforcing any Federal or State 
law with respect to a parental kidnapping; or making or enforcing a 
child custody or visitation determination, as described in section 463 
of the Act. It authorizes the Secretary to use the services of State 
entities to carry out these functions.
    The provisions relating to the State PLS implement section 454(8) 
of the Act, 42 U.S.C. 654(8), which requires each State plan for child 
support enforcement to provide that the State will: (1) Establish a 
service to locate parents utilizing all sources of information and 
available records; and the Federal PLS established under section 453; 
and (2) shall subject to the privacy safeguards in section 454(26) of 
the Act, 42 U.S.C. 654(26), disclose only the information described in 
sections 453 and 463 of the Act to the authorized persons specified in 
those sections.
    The provisions relating to the States' computerized support 
enforcement systems implement section 454A of the Act, 42 U.S.C. 654a, 
which requires States' systems to perform such functions as the 
Secretary may specify relating to management of the State title IV-D 
program. Additionally, as stated in section 454A(f) of the Act, the 
State shall use the statewide automated system to extract information 
from, to share and compare information with, and to receive information 
from, other data bases and information necessary to enable the State 
agency (or the Secretary or other State or Federal agencies) to carry 
out the Child Support Enforcement program under title IV-D of the Act, 
and other programs designated by the Secretary.
    In addition, the provisions pertaining to safeguarding of 
information implement section 454(26) of the Act, which requires the 
State IV-D program to have in effect safeguards, applicable to all 
confidential information handled by the State agency, that are designed 
to protect the privacy rights of the parties. Nothing in this rule is 
meant to prevent the appropriate use of administrative data for program 
oversight, management, and research.

II. Summary Description of Regulatory Provisions

    The following is a summary of the regulatory provisions included in 
this final rule. The Notice of Proposed Rulemaking (NPRM) was published 
in the Federal Register on October 14, 2005 (70 FR 60038). The NPRM was 
organized into two major sections. Section 1: State Parent Locator 
Service discussed amendments to the proposed regulations on locating 
individuals and their assets in response to authorized location 
requests. Affected regulations include Sec. Sec.  302.35, 303.3, 
303.20, and 303.70. Section 2: Safeguarding and Disclosure of 
Confidential Information discussed new regulations on safeguarding and 
disclosure of confidential information, Sec.  303.21 and amendments to 
the regulation on security and confidentiality of information in 
computerized support enforcement systems, Sec.  307.13.
    The Section-by-Section Discussion of Comments (Section III) 
provides a detailed listing of the comments and responses. Many 
commenters asked for points of clarification rather than for change of 
language in the regulation. There were some comments, however, that 
brought about regulatory language changes in the final rule. 
Specifically, major changes include:
    In Sec.  303.21(a) we deleted the last sentence ``The amount of 
support ordered and the amount of a support collection are not 
considered confidential information for purposes of this section.'' 
Commenters were concerned that this language may be interpreted as IV-D 
payment records could be made available to requestors not associated 
with the case who may want the information for purposes not related to 
child support.
    In response to comments, we deleted paragraph (1) of Sec.  
303.21(d), which in the NPRM authorized disclosure of confidential 
information to the individual to whom the information pertains. To the 
extent that an individual is requesting information about himself/
herself in the IV-D agency's files for a IV-D program purpose, the 
information may be

[[Page 56423]]

disclosed under paragraph (c), General rule. We also deleted under 
paragraph (e) Safeguards, that ``safeguards shall prohibit disclosure 
to any committee or legislative body (Federal, State, or local) of any 
confidential information, unless authorized by the individual as 
specified in paragraph (d) of this section.'' To the extent that an 
individual in a IV-D case submits a request to a legislator or 
legislative body concerning his or her IV-D case, the IV-D agency may 
disclose the information necessary for the response because the inquiry 
relates to the administration of the IV-D program and is authorized 
under paragraph (c).
    We revised Sec.  303.21(d)(2)(ii) and (iii) and relocated it to 
Sec.  303.21(d)(1). Section 454A of the Act only permits the disclosure 
of information for non-IV-D purposes to State agencies of designated 
programs where the information is necessary to carry out a State agency 
function under that program. Therefore, we have relocated these 
disclosures to clarify that they are encompassed within this authority 
specified in Sec.  303.21(d)(1). In paragraph (2), we restricted 
disclosure of information for income and eligibility verification 
purposes under sections 453A and 1137 of the Act to SDNH information.
    We added language to Sec.  303.21(e) that refers to family violence 
indicator requirements under Sec.  307.11(f)(1)(x). Commenters thought 
we should add language regarding the family violence indicator which is 
an additional privacy safeguard for family violence victims.
    We also changed Sec.  307.13(a) of the NPRM by deleting paragraph 
(4). It referred to welfare-to-work, a grant program that no longer 
exists. We redesignated paragraph (a)(5) as paragraph (a)(4) and 
revised the language for clarity. As revised, it requires written 
policies that limit disclosure outside the IV-D program of National 
Directory of New Hire, Federal Case Registry and Internal Revenue 
Service (IRS) information from the computerized support enforcement 
system. The regulation sets forth the circumstances when information 
may be disclosed to IV-A, IV-B, and IV-E agencies and when IRS 
information may be disclosed. As revised, financial institution 
information cannot be shared outside the IV-D program. We made this 
change because of the language in section 469A(a) and (b) of the Act. 
These sections provide for non-liability for financial institutions 
when they disclose financial record information only for child support 
related purposes. Throughout the preamble and regulation we use 
``financial institution information'' to refer to information covered 
by section 469A(a) and (b) of the Act. This information includes 
Multistate Financial Data Matches (MSFIDM) and State Financial 
Institute Data Matches (State FIDM).
    Some commenters found the charts confusing, especially Appendix A 
in Section I and Appendix A in Section 2. We reorganized the two 
previous charts into three charts: Appendix A, B, and C. In Appendix A 
we reordered the chart by displaying locate efforts first by person 
rather than by purpose. Appendix A illustrates authority for locating 
individuals through the State PLS. Appendix B illustrates authority for 
locating an individual sought in a child custody/visitation or parental 
kidnapping case. Appendix C illustrates authority for State IV-D 
agencies to release information to non-IV-D Federal, State, and Tribal 
Programs. These charts are included at the end of the preamble for 
illustrative purposes only.

Section II. A. State Parent Locator Service (Sections 302.35, 303.3, 
303.20, and 303.70)

Section 302.35, State Parent Locator Service

    The previous regulation at Sec.  302.35(a) contained a State plan 
requirement that the IV-D program shall establish a State Parent 
Locator Service (PLS) using: (1) All relevant sources of information 
and records available in the State, and in other States as appropriate; 
and (2) the Federal PLS of the Department of Health and Human Services.
    Paragraph (a) modifies the requirement for each State to 
``establish'' a State PLS, and instead requires each State to 
``maintain'' a State PLS ``to provide locate information to authorized 
persons for authorized purposes.''
    Section Sec.  302.35(a)(1), covering IV-D agencies, cases and 
purposes, requires that the State PLS access ``the Federal PLS and all 
relevant sources of information and records available in the State, and 
in other States as appropriate, for locating custodial parents, 
noncustodial parents, and children for IV-D purposes.'' Paragraph 
(a)(2) addresses locate requests for authorized non-IV-D individuals 
and purposes. For purposes of this regulation, all requests under 
section 453(c)(3) of the Act are considered to be requests by non-IV-D 
individuals and purposes. This provision requires a IV-D program to 
access and release information authorized to be disclosed under section 
453(a)(2) of the Act from ``the Federal PLS and, in accordance with 
State law, information from relevant in-state sources of information 
and records, as appropriate'' to respond to locate requests from a non-
IV-D entity or authorized individual specified in paragraph (c) and for 
authorized purposes specified in paragraph (d).
    For non-IV-D requests, under paragraph (a)(2), the State PLS will 
not access IRS information or financial institution information, which 
is available only to IV-D agencies and to a limited extent to their 
agents, under Federal statute.
    The previous regulation at paragraph (b) required that the IV-D 
agency must ``establish a central State PLS office and also may 
designate additional IV-D offices within the State to submit requests 
to the Federal PLS.'' The amendment to Sec.  302.35(b) removes mention 
of a State PLS ``office.'' It also requires the IV-D program to 
``maintain'' rather than ``establish'' a central State PLS.
    The previous Sec.  302.35(c)(1) through (5) language specified the 
authorized persons and entities from whom the State PLS shall accept 
requests for locate information. The amendments to paragraph (c) 
strengthen the process by which authorized requestors obtain locate 
information through the State PLS, specifically with respect to 
requests from a resident parent, legal guardian, attorney, or agent of 
a non-IV-A child.
    Previously, Sec.  302.35(c)(3) simply referred to the ``resident 
parent, legal guardian, attorney, or agent of a child'' in non-IV-A 
cases as authorized persons. The revised Sec.  302.35(c)(3) makes it 
clear that the State PLS will accept locate requests from the resident 
parent, legal guardian, attorney or agent of a child who is not 
receiving assistance under title IV-A of the Act only if key 
requirements are met. The regulation requires the individual to: (i) 
Attest that the request is being made to obtain information on, or to 
facilitate the discovery of, any individual in accordance with section 
453(a)(2) of the Act for the purpose of establishing parentage, 
establishing, setting the amount of, modifying, or enforcing child 
support obligations; (ii) attest that any information obtained through 
the Federal or State PLS will be used solely for these purposes and 
otherwise treated as confidential; (iii) provide evidence that the 
requestor is the parent, legal guardian, attorney, or agent of a child 
not receiving assistance under title IV-A of the Act, and if an agent 
of such a child, evidence of a valid contract that meets any 
requirements in State law or written policy for acting as an agent, and 
if a parent, attestation that he or she

[[Page 56424]]

is the resident parent; and (iv) pay the Federal PLS fee required under 
section 453(e)(2) of the Act and Sec.  303.70(f)(2)(i), if the State 
does not pay the fee itself. The regulation also specifies that the 
State may charge a fee to cover its costs of processing these requests. 
A State's fee must be as close to actual costs as possible, so as not 
to discourage requests to use the Federal PLS. See Sec. Sec.  304.23(e) 
and 304.50(a). Paragraph (c)(4) simplifies the language regarding the 
use of the Federal PLS for parental kidnapping, child custody, or 
visitation cases. Paragraph (c)(5) rewords the previous language 
allowing locate requests from State title IV-B and title IV-E agencies.
    Previous paragraph (d) is redesignated as paragraph (e), as 
discussed below. A new paragraph (d) is added to specify the authorized 
purposes for which the State PLS and the Federal PLS may be used and 
the locate information that may be released for these purposes. 
Paragraph (d)(1) covers the purposes of establishing parentage and 
establishing, modifying, or enforcing child support. It also covers 
related authorized releases of information to locate an individual who 
has or may have parental rights with respect to the child. It pertains 
to IV-D and non-IV-D authorized persons and programs, including title 
IV-B and IV-E agencies. For IV-B/IV-E cases that are non-IV-D and other 
cases under (d)(1), wage information is authorized and the State PLS 
may provide asset and/or debt information from the Federal PLS. 
Paragraph (d)(2) covers the purposes of enforcing a State law with 
respect to the unlawful taking or restraint of a child or for making or 
enforcing child custody or visitation determination and the related 
authorized releases of information.
    Paragraph (e), requires privacy safeguards for Federal PLS 
information only. The amendment specifies at paragraphs (e)(1) and (2) 
that, subject to the requirements of this section and the privacy 
safeguards required under section 454(26) of the Act and the family 
violence indicators under section 307.11(f)(1)(x), the State PLS shall 
disclose ``Federal PLS information'' described in sections 453 and 463 
of the Act and ``information from in-state locate.'' An Appendix A has 
been added at the end of the preamble to show the linkages between 
authorizing statute, authorized purpose, authorized person or program, 
and authorized information.

Section 303.3, Location of Noncustodial Parents in IV-D Cases

    Under the final rule, Sec.  303.3 is re-titled ``Location of 
noncustodial parents in IV-D cases.'' Under paragraph (a), location is 
defined to mean ``information concerning the physical whereabouts of 
the noncustodial parent, or the noncustodial parent's employer(s), 
other sources of income or assets, as appropriate, which is sufficient 
and necessary to take the next appropriate action in a IV-D case.''
    The amendments to paragraph (b) clarify which location requirements 
apply to IV-D cases. Paragraph 303.3(b) requires the IV-D program to 
attempt to locate a noncustodial parent in a IV-D case or his or her 
sources of income and/or assets when location is needed to take 
necessary action. Paragraphs (b)(1) through (5) provide an extensive 
list of location sources that as discussed below are unchanged for the 
most part from the previous regulation.
    Paragraph (b)(3) no longer includes the words ``including 
transmitting appropriate cases to the Federal PLS'' because States now 
submit cases to the Federal Case Registry for automatic matching with 
the National Directory of New Hires for locate purposes.
    The previous regulation at paragraph (b)(4) required the IV-D 
program to ``Refer appropriate cases to the IV-D program of any other 
State, in accordance with the requirements of Sec.  303.7 of this 
part.'' The amendment inserts the word ``IV-D'' before the word 
``cases'' to clarify that the IV-D program of State 1 may refer only 
IV-D cases to the IV-D program of State 2.
    New paragraph (b)(6) draws a direct link between the IV-D program's 
duty to locate noncustodial parents and the duty to safeguard 
information. The language incorporates by reference both the existing 
statutory requirement at sections 454(26) and 454A(d) and (f) of the 
Act and the regulatory requirements at Sec. Sec.  303.21 and 307.13.
    Current paragraph (c) regarding diligent efforts to serve process 
is unchanged, but is republished to aid the reader in reviewing this 
section.

Section 303.20, Minimum Organizational and Staffing Requirements

    The regulation at Sec.  303.20 describes the minimum organizational 
and staffing requirements for the IV-D program. Paragraph (b) of this 
section requires an organizational structure and staff sufficient to 
fulfill specified State level functions, including, in paragraph 
(b)(7), ``operation of the State Parent Locator Service as required 
under Sec. Sec.  302.35, 303.3, and 303.70 of this chapter.''

Section 303.21, Safeguarding and Disclosure of Confidential Information

    This new regulation is discussed in Section II.B.

Section 303.70, Procedures for Submissions to the State Parent Locator 
Service (State PLS) or the Federal Parent Locator Service (Federal PLS)

    With passage of legislation that established the National Directory 
of New Hires (NDNH) in 1996 and established the Federal Case Registry 
(FCR) in 1998, the Federal PLS became highly automated. The language in 
this section has been revised to indicate that the Federal PLS reflects 
the automated matching and return of information to IV-D programs in 
IV-D cases from the Federal PLS's Federal Case Registry and National 
Directory of New Hires. For example, while requests for Federal PLS 
information are accepted, State IV-D programs no longer ``request'' 
Federal PLS information and we replaced the word ``requests'' with 
``submittals'' wherever it appears. We eliminated the word ``office'' 
as in State PLS ``office'' to demonstrate that this work is automated.
    A new paragraph (a) has been inserted: The State agency will have 
procedures for submitting to the State PLS or the Federal PLS for the 
purpose of locating parents, putative fathers, or children for the 
purpose of establishing parentage or establishing, setting the amount 
of, modifying, or enforcing child support obligations; or for the 
purpose of enforcing any Federal or State law with respect to the 
unlawful taking or restraint of a child; or making or enforcing a child 
custody or visitation determination as defined in section 463(d)(1) of 
the Act. The previous paragraph (a) has been redesignated as paragraph 
(b) and the previous paragraph (b) has been redesignated as paragraph 
(c).
    In addition, in newly designated paragraph (d) all submittals shall 
contain the following information: (1) The parent's or putative 
father's name; (2) the parent's or putative father's Social Security 
Number (SSN). If the SSN is unknown the IV-D program must make 
reasonable efforts to ascertain the individual's SSN before making a 
submittal to the Federal PLS; and (3) any other information prescribed 
by the Office.
    The previous regulation at Sec.  303.70(d) has been redesignated as 
paragraph (e). It requires that annually the IV-D director attest to 
compliance with the listed requirements. Paragraph (e)(1)(i) specifies 
that the IV-D program will ``obtain'' rather than ``request''

[[Page 56425]]

information. A new paragraph (e)(1)(ii) clarifies that the IV-D program 
will only provide information to authorized persons as specified in 
sections 453(c) and 463(d) of the Act and Sec.  302.35.
    Paragraph (e)(2) is new and requires that, in the case of a 
submittal made on behalf of a resident parent, legal guardian, attorney 
or agent of a child not receiving assistance under title IV-A, the IV-D 
program must verify that the requestor has complied with the provisions 
of Sec.  302.35.
    Paragraph (e)(3), formerly paragraph (d)(2), has been changed to 
specify that the IV-D program shall treat information obtained through 
the Federal PLS as confidential and shall safeguard the information in 
accordance with statutory requirements at Sec.  303.21.
    Paragraph (f) has minor changes. In (f)(1) the statutory references 
have been accompanied by explanatory phrases for better understanding 
and in (f)(4)(ii) the word ``paid'' has been changed to ``transmitted'' 
to reflect the change in payment methodology due to technology 
advances.

II.B. Safeguarding and Disclosure of Confidential Information (Sections 
303.21 and 307.13)

Section 303.21, Safeguarding and Disclosure of Confidential Information

    The regulation consists of six paragraphs: (a) Definitions; (b) 
Scope; (c) General rule; (d) Authorized disclosures; (e) Safeguards; 
and (f) Penalties for unauthorized disclosure.

Section 303.21(a) Definitions

    The regulation begins with a definition of the term ``confidential 
information.'' Paragraph (a)(1) provides that ``confidential 
information'' means any information relating to a specified individual 
or an individual who can be identified by reference to one or more 
factors specific to him or her, including, but not limited, to the 
individual's Social Security Number, residential and mailing addresses, 
employment information, and financial information. Paragraph (a)(2) 
defines independent verification to mean the process of acquiring and 
confirming confidential information through the use of a second source. 
The information from the second source, which verifies the information 
about NDNH or FCR data, may be released to those authorized to inspect 
and use the information as authorized under the regulations or the Act.

Section 303.21(b) Scope

    Paragraph (b) reads: ``The requirements of this section apply to 
the IV-D agency, any other State or local agency or official to whom 
the IV-D agency delegates any of the functions of the IV-D program, any 
official with whom a cooperative agreement as described in Sec.  302.34 
has been entered into, and any person or private agency from whom the 
IV-D agency has purchased services pursuant to Sec.  304.22.''

Section 303.21(c) General Rule

    Paragraph (c) presents a general rule which states that ``[e]xcept 
as authorized by the Act and implementing regulations, an entity 
described in paragraph (b) of this section may not disclose any 
confidential information, obtained in connection with the performance 
of IV-D functions, outside of the administration of the IV-D program.''

Section 303.21(d) Authorized Disclosures

    Paragraph (d) sets forth the authorized disclosures that are 
exceptions to the general rule prohibiting disclosure of confidential 
information. Under paragraph (d)(1), upon request, the IV-D agency may, 
to the extent that it does not interfere with the IV-D agency meeting 
its own obligations, disclose information for certain limited purposes. 
Under paragraph (d)(1) information may be shared for administration of 
programs under titles IV (TANF, child and family services, and foster 
care and adoption programs), XIX (Medicaid program), and XXI (State 
Children's Health Insurance [SCHIP] program) of the Act. The regulation 
also includes disclosure to Tribal programs authorized under title IV-A 
and IV-D of the Act.
    Paragraph (d)(2) (previously paragraph (d)(2)(iv)) permits the 
release of SDNH information to programs designated pursuant to sections 
453A and 1137 of the Act for income and eligibility verification 
purposes.
    Paragraph (d)(3) requires that authorized disclosures under Sec.  
303.21(d)(1) and (2) shall not include confidential information from 
the National Directory of New Hires, the Federal Case Registry, or 
Internal Revenue Service (IRS), unless authorized under Sec.  307.13 or 
unless the information has been independently verified. A State may 
independently verify the NDNH or the FCR information through another 
source, in which case the information from the second source may be 
used. Independent verification is the process of acquiring and 
confirming confidential information through the use of a second source. 
The information from the second source may be released to those 
authorized to inspect and use the information. For example, if a State 
determines that an address is correct through a postal verification the 
State can share the information it acquired from the second source (the 
Post Office). No IRS information can be disclosed outside of the 
administration of the IV-D program, unless specifically authorized in 
Federal statute or independently verified. IRS information is 
restricted as specified in the Internal Revenue Code (IRC). No 
financial institution information may be disclosed outside the IV-D 
program. The restriction on release of financial institution 
information outside the IV-D program is due to the liability protection 
given to financial institutions for release of information to the 
Federal PLS or to the State IV-D programs for child support purposes as 
indicated in section 466(a)(17)(C) of the Act and limitations in 
section 469A of the Act, regarding the use of such information.

Section 303.21(e) Safeguards

    Paragraph (e) provides that ``In addition to, and not in lieu of, 
the safeguards described in Sec.  307.13 of this chapter, which governs 
computerized support enforcement systems, the IV-D agency shall 
establish appropriate safeguards to comply with the provisions of this 
section.'' These safeguards shall also include prohibitions against the 
release of information when the State has reasonable evidence of 
domestic violence or child abuse against a party or a child and that 
the disclosure of such information could be harmful to the party or the 
child, as required by Sec.  454(26) of the Act, and shall include use 
of the family violence indicator required under Sec.  307.11(f)(1)(x) 
of this chapter.

Section 303.21(f) Penalties for Unauthorized Disclosure

    Paragraph (f) provides that ``[a]ny disclosure or use of 
confidential information in violation of the Act and implementing 
regulations remains subject to any State and Federal statutes that 
impose legal sanctions for such disclosure.''

Section 307.13 Security and Confidentiality for Computerized Support 
Enforcement Systems in Operation After October 1, 1997

    Section 307.13 addresses security and confidentiality of 
computerized systems. Paragraph (a), (a)(1), and (a)(2) are unchanged. 
Paragraph (a) addresses information integrity and security. Automated 
systems must have safeguards protecting the integrity,

[[Page 56426]]

accuracy, completeness of, access to, and use of data in the 
computerized support enforcement system. These safeguards shall include 
written policies concerning access to data by IV-D program personnel, 
and the sharing of data with other persons to: (a)(1) Permit access to 
and use of data to the extent necessary to carry out the State IV-D 
program under this chapter and (a)(2) specify the data which may be 
used for particular IV-D program purposes, and the personnel permitted 
access to such data.
    Paragraph (a)(3) permits the IV-D agency to exchange data from its 
computerized support enforcement system with agencies administering 
other programs under titles IV, XIX, and XXI of the Act to the extent 
necessary to carry out State and Tribal agency responsibilities under 
such programs in accordance with section 454A(f)(3) of the Act; and to 
the extent that it does not interfere with the IV-D agency meeting its 
own obligations.
    Paragraph (a)(4) as written in the NPRM has been deleted. It 
referred to welfare-to-work, a grant program that no longer exists. The 
present paragraph (a)(4) which previously was paragraph (a)(5) has been 
rewritten for clarity and requires written policies that generally 
prohibit disclosure outside the IV-D program of National Directory of 
New Hire or Federal Case Registry information, or IRS information from 
the computerized support enforcement system, to information that has 
been independently verified. IV-A, IV-B, and IV-E agencies are 
authorized under various subsections of section 453 of the Act to 
receive NDNH and FCR information from the Federal PLS for certain 
specified purposes. Since these agencies are authorized to have this 
information, we are permitting the IV-D agency to disclose the NDNH or 
FCR information from the IV-D computerized support enforcement system 
directly to the IV-A, IV-B, or IV-E agency if it is being requested for 
the purpose authorized under section 453 of the Act. For IV-B and IV-E 
programs this includes establishing paternity or parental rights with 
respect to a child.

III. Section-by-Section Discussion of Comments

    This section provides a detailed discussion of comments received on 
the proposed rule, and describes changes made to the proposed rule. We 
refer generally to actions of the ``Department'' pursuant to the rule. 
The rule itself refers to actions of the ``Secretary'' but the day-to-
day activities of the Secretary's functions have been delegated and are 
exercised by other Department officials, primarily in the 
Administration for Children and Families. ``Office'' refers to the 
Federal Office of Child Support Enforcement (OCSE). We received 
approximately 200 comments from 20 IV-D programs (including 1 tribe), 3 
organizations, and 1 private citizen. Many comments were for points of 
clarification rather than stating support or opposition to the proposed 
regulation. For example, many comments indicated a lack of awareness on 
existing longtime requirements such as the statutory restrictions of 
access to Federal PLS data on IV-D systems for certain unauthorized 
persons and programs.

General Comments

    There were various comments that are not attributable to specific 
sections of the regulation and are discussed below.
    1. Comment: Two commenters ask that once the final rule is imposed, 
OCSE provide States with reasonable time to implement these 
regulations, which may include changes to State legislation and 
automated systems. Another commenter believes the Office should make 
clear what the effective date is of this regulation as was done with 
some regulations while implementing PRWORA.
    Response: This rule is effective 6 months from the date of 
publication.
    2. Comment: One commenter requested that the Secretary insert 
language from sections of the Social Security Act so the reader does 
not have to look up sections of the Act.
    Response: To do so would significantly increase the length of 
regulatory language. We have attempted to ensure there are no cross-
references without a brief summary of the content of those statutory 
sections.
    3. Comment: This regulation possibly sets up competing public 
interests. For example: Pitting the confidentiality regulation versus 
the openness of the judicial system and court files; the regulation 
versus the State's public policy of open government (Sunshine laws); 
the regulation versus the State Constitution's provision for access to 
public records and meetings.
    Response: These regulations govern disclosure of IV-D data under 
sections 454(26), 453, and 454A of the Act. A wide array of personal 
information is available to IV-D agencies and it is imperative that the 
Federal and State governments protect these data to the greatest extent 
possible and use them only where necessary for authorized purposes. 
Child support records, including Federal PLS information, contain 
information that poses a high risk of identity theft, and thus should 
be treated with special care.
    4. Comment: One commenter asks why this rule includes proposed 
additional restrictions on sharing certain Federal data with other 
public agencies in one part of the rule while proposing granting broad 
access to State data to private entities in another part. According to 
the commenter, use of data disclosed to other State agencies can be 
easily monitored while private entities are less accountable, harder to 
monitor, and more likely to use data for unauthorized purposes.
    Response: This regulation is determined in large part by explicit 
Federal statute. Section 454(8) of the Act says that ``the agency 
administering the (State) plan will establish a service to locate 
parents * * * and shall, subject to the privacy safeguards required 
under paragraph (26), disclose only the information described in 
sections 453 (Federal PLS) and 463 (Use of the Federal PLS in 
connection with enforcement of determination of child custody and in 
cases of parental kidnapping) to the authorized persons specified in 
such sections for the purposes specified in such sections.'' With 
respect to private entities the regulation at Sec.  302.35(c)(3) 
requires an attestation process that must be used by the resident 
parent, legal guardian, attorney, or agent of a child who is not 
receiving assistance under title IV-A of the Act when obtaining 
information on or to facilitate the discovery of any individual in 
accordance with section 453(a)(2) of the Act.
    5. Comment: In 42 U.S.C. 654(26), Congress allowed States to have 
flexibility in crafting confidentiality requirements. States may find 
it difficult to follow a regulatory ``one size fits all'' approach and 
make changes to the law in matters over which child support agencies 
have no authority.
    Response: The regulation reflects statutory requirements as stated 
in section 454(26) of the Act that a child support State Plan must 
provide that States have in effect safeguards, applicable to all 
confidential information handled by the State agency, that are designed 
to protect the privacy rights of the parties involved. It also reflects 
other statutory restrictions on disclosure in sections 453 and 454A of 
the Act.
    6. Comment: If the Federal Bureau of Investigations (FBI) was 
called to investigate possible sources of threats to a IV-D caseworker 
and the FBI demanded the names and contact information for every person 
on the IV-D employee's caseload, would the IV-D agency be justified in 
sharing this

[[Page 56427]]

information with the FBI? Does protecting a IV-D worker from potential 
harm fall under the provisions of a IV-D purpose?
    Response: The IV-D agency could share the information because the 
investigation relates to the administration of the IV-D program.
    7. Comment: Two commenters say that OCSE should reaffirm its 
commitment to additional privacy safeguards for family violence victims 
by incorporating references to the family violence indicator in the 
rule.
    Response: We agree and have added language to Sec.  303.21(e) that 
provides explicit reference to required family violence indicators for 
potential domestic violence or child abuse.
    8. Comment: Two commenters are concerned that when enforcing a 
referral from a Tribal IV-D agency located in that State or in another 
State, a State would be unable to provide information about whether a 
Federal tax refund offset occurred and the amount collected. This would 
make it impossible for the Tribal IV-D agency to correctly adjust the 
arrearage to give the noncustodial parent credit for the tax refund 
offset. Another commenter believes the Internal Revenue Services (IRS) 
statute at 26 U.S.C. 6103 sufficiently provides for confidentiality 
limitations for States to disclose information to Tribes and States. 
Tribal IV-D agencies do not need another regulation to further burden 
negotiations with State IV-D agencies.
    Response: Policy Interpretation Question (PIQ) 07-02 addresses 
this. See http://www.acf.dhhs.gov/programs/cse/pol/PIQ/2007/piq-07-02.htm. A State may submit arrearages owed in Tribal IV-D cases for 
Federal tax refund offset if the following conditions are met:
    1. The approved Tribal IV-D plan or plan amendment indicates that 
the Tribe has entered into a cooperative agreement with the State under 
Sec.  309.60(b) and (c) for the State to submit arrearages owed in 
Tribal IV-D cases for Federal tax refund offset. The Tribe must submit 
as part of its Tribal IV-D plan or plan amendment copies of any such 
agreement. The regulations governing Tribal IV-D programs at Sec.  
309.35(d) require that after approval of the original Tribal IV-D 
program application, all relevant changes required by new Federal 
statutes, rules, regulations, and Department interpretations are 
required to be submitted so that the Secretary may determine whether 
the plan continues to meet Federal requirements and policies.
    2. The cooperative agreement between the Tribe and State includes a 
statement that the Tribal IV-D program will comply with all 
safeguarding requirements with respect to Federal tax refund offset in 
accordance with Sec.  309.80, section 454(26) of the Act and the 
Internal Revenue Code 26 U.S.C. 6103, which prohibits the release of 
IRS information outside of the IV-D program.
    3. The Tribal IV-D plan provides evidence that the Tribe's 
application for IV-D services under Sec.  309.65(a)(2) includes a 
statement that the applicant is applying for State IV-D services for 
purposes of submitting arrearages for Federal tax refund offset.
    9. Comment: One commenter says there must be an easy-to-use 
procedure for individuals misidentified by child support database 
programs to correct agency records and also requests that this rule 
provide for a system to flag errors where files are ``mixed.''
    Response: If an individual believes he or she has been 
misidentified by the IV-D system, he or she should contact the 
appropriate IV-D office. The IV-D program should fix the error as soon 
as possible. These regulations do not go into the details of step-by-
step State case processing that would make such a proposal appropriate.
    10. Comment: One commenter requests that language in the preamble 
to the proposed rule be incorporated into the actual regulation. Page 
60044, column 3 says ``programs receiving confidential information may 
use the information only for the purpose for which it was disclosed and 
may not redisclose the information.'' However, this restriction on 
redisclosure is not in the text of the proposed rule.
    Response: This regulation is for title IV-D programs and we cannot 
regulate other programs once information is disclosed. However, State 
IV-D programs must make clear to those authorized to receive child 
support data, the limited purpose for which information may be used. 
Improper use or disclosure would be governed by State and Federal 
statutes that impose penalties for such disclosure.
    11. Comment: One commenter says there is no legislative history 
that Congress contemplated expanding access to State databases and 
records beyond the IV-D program or beyond what is otherwise permitted 
by State law.
    Response: The provisions relating to the State PLS implement 
section 454(8) of the Act, 42 U.S.C. 654(8), which requires each State 
plan for child support enforcement to provide that the State will: (1) 
Establish a service to locate parents utilizing all sources of 
information and available records including the Federal PLS; and (2) be 
subject to the privacy safeguards in section 454(26) of the Act, 42 
U.S.C. 654(26) and disclose only the information described in sections 
453 and 463 of the Act to the authorized persons specified in those 
sections. This language authorizes a system of disclosure of State data 
based on the system in place for the Federal PLS. We have revised the 
regulation to recognize the possibility of more restricted access to 
State data by incorporating the language ``in accordance with State 
law.''
    12. Comment: One commenter is concerned that States are not 
informing individuals when disclosure of their Social Security Number 
(SSN) to another source will occur and by collecting noncustodial 
parents' SSNs from a third party source.
    Response: States are required to comply with section 7(b) of the 
Privacy Act and its disclosure requirements (5 U.S.C. 552a). In all IV-
D cases, the Privacy Act requires a Federal, State, or local government 
agency to provide certain information to the individual from whom a SSN 
is requested by the agency.
    13. Comment: One commenter says that notice and due process are 
required when States use, release, or enter data into State PLS and 
Federal PLS computer interface records on individuals who do not need 
to be located for purposes of child support.
    Response: Access to personal data covered by the regulation is 
authorized as explicitly provided for in Federal title IV-D statute.

Section 302.35, State Parent Locator Service

    1. Comment: Two commenters have major concerns with this section. 
One would like to know the reason for these amendments, opposes the 
requirement that the State PLS provide information to requestors with 
regard to in-state sources, and strongly recommends that references to 
access and release of in-state State PLS information be deleted from 
the proposed regulation. The other commenter is concerned with this 
section and believes the regulation erodes the capability of the child 
support program to safeguard confidential information. The regulation 
creates a presumption, not supported by law, that non-IV-D entities may 
access in-state resources.
    Response: A State/Federal workgroup, established after the passage 
of the Personal Responsibility and Work Opportunity Reconciliation Act,

[[Page 56428]]

recommended that these regulations be promulgated in order to clarify 
the statutory limitations of sharing data. In response to comments we 
have revised the regulation to provide State searches only to the 
extent authorized by State law. With regard to in-state sources, 
section 454(8) of the Act says a State shall be subject to the privacy 
safeguards in section 454(26) of the Act, 42 U.S.C. 654(26).
    2. Comment: One commenter asks why the regulation does not clearly 
tie authorized persons to the authorized purposes for which they may 
receive locate information, addressing persons and in separate 
subsections.
    Response: We disagree. The authorized persons and purposes are 
clearly stated in the regulation and are identical to those of the 
Federal PLS. Appendix A displays this set of authorities.
    3. Comment: One commenter would like to eliminate the reference in 
Appendix A that says ``No automated system'' for Authorized Purpose B, 
C, and D.
    Response: This Appendix and others have been revised and/or added. 
Any limitation of disclosure of automated systems data is required by 
section 454A of the Act.
    4. Comment: One commenter proposes adding a section to this 
provision that requires maintenance of an audit log to deter employee 
misuse of databases. Audit logs hold individuals responsible for their 
use of personal information databases and would record who accesses 
personal information, and the purpose for which it was accessed.
    Response: Federal requirements do not prescribe this level of 
mandate on State responsibilities. It is up to the State to implement 
necessary and appropriate methods to ensure that access and disclosure 
is for proper purposes and only to authorized persons. States have 
discretion, however, to implement similar audit procedures.
    5. Comment: One commenter recommends moving Sec.  302.35(b) closer 
to Sec.  302.35(a) to clarify that the Federal PLS is considered part 
of the State PLS for IV-D cases and for authorized non-IV-D purposes 
under this section.
    Response: The Federal PLS is not part of the State PLS. 
Subparagraph (b) is based on the requirement that requests for Federal 
PLS data must flow through the State PLS.
    6. Comment: One commenter asks for confirmation that together 
Sec. Sec.  302.35(a)(1) and (2) and 302.35(c) limit the use of the 
State PLS for IV-D cases to only IV-D purposes but permits the use of 
the State PLS for non-IV-D individuals or non-IV-D cases for the 
authorized non-IV-D purposes.
    Response: Section 302.35(a)(1) and (2) limit the use of the State 
PLS for IV-D cases to only IV-D purposes but permits the use of SPLS 
for non-IV-D individuals or non-IV-D cases for the authorized non-IV-D 
purposes.
    7. Comment: One commenter suggests that the title of paragraph (1) 
be changed to ``For IV-D cases and IV-D purposes'' for clarity.
    Response: For clarity, we have revised the title of paragraphs (1) 
and (2) to distinguish between IV-D requests and non-IV-D requests.
    8. Comment: One commenter asks that the Office clarify why locate 
information, restricted for custody and visitation purposes to the most 
recent address and place of employment, requires such strict 
confidentiality where there is not a family violence indicator or other 
information giving rise to safety concerns for the parties. The address 
of a litigant to a court proceeding is considered public information 
and necessary for the case to proceed.
    Response: The restriction is statutory. Section 463(c) of the Act 
[Use of Federal PLS in connection with the enforcement or determination 
of child custody and in cases of parental kidnapping of a child] 
contains the restriction ``Only information as to the most recent 
address and place of employment of any parent or child shall be 
provided under this section.''
    9. Comment: In addition to using the State PLS for locating either 
parent for IV-D purposes, one commenter asks that the agency also be 
able to use the State PLS for locating the child for IV-D purposes.
    Response: IV-D agencies already have that authority with the 
Federal PLS. Section 453(a)(2)(iii), which states ``to whom such an 
obligation is owed'' includes the child. However, in response to this 
comment, we have added ``children'' to Sec.  302.35(a)(1).
    10. Comment: One commenter points out what he or she believes to be 
a mistake: ``Child'' is included in Appendix A to Sec.  302.35 under 
``Authorized Purpose'' but is not included in the preamble or in the 
regulation. Another commenter suggests that this section of the 
regulation be revised by deleting the words ``noncustodial parents'' 
and inserting ``a parent or child.''
    Response: We agree and have included reference to custodial 
parents, noncustodial parents and children in both the preamble and the 
regulation at Sec.  302.35.
    11. Comment: One commenter suggests substituting the word 
``parties'' for ``parents'' since the IV-D or a cooperating agency may 
be enforcing a support order in a IV-D case for a custodial party other 
than a parent.
    Response: The statute uses the term parent, although we recognize 
there may be instances where children are in the custodial care of 
individuals other than their parents.
    12. Comment: One commenter points out that the reference to Sec.  
303.3 in the second sentence of Sec.  302.35(a)(1) creates confusion 
because Sec.  303.3 only addresses locate requirements for noncustodial 
parents in IV-D cases. The commenter assumes this is not the intent of 
the proposed regulation and, to avoid confusion, recommends removing 
the second sentence of Sec.  302.35(a)(1) because the first sentence 
clearly conveys the intent of the subsection.
    Response: We agree and have removed the reference to Sec.  303.3, 
which only applies to location of noncustodial parents in IV-D cases.
    13. Comment: Several commenters had comments relating to the use of 
the State Disbursement Unit in non-IV-D case situations. Since it is a 
IV-D function to disburse support to custodial parents in non-IV-D 
cases subject to income withholding, can a IV-D program use the State 
PLS or Federal PLS to locate a non-IV-D custodial parent for purposes 
of disbursing child support?
    Response: Yes, this would be a legitimate use of locate sources for 
IV-D agencies seeking to locate such custodial parents in non-IV-D 
cases subject to income withholding.
    14. Comment: One commenter points out a contradiction in the 
regulation regarding the use of in-state locate sources. On the one 
hand, Sec.  302.35(a)(2) provides a mechanism for States to ``opt out'' 
of using in-state locate sources in response to a non-IV-D request if 
such use is ``prohibited by State law or written policy.'' Yet Sec.  
302.35(e) states ``the State PLS shall disclose * * * information from 
in-state locate sources as required by this section and described in 
Sec.  303.3(b)(1).'' This latter language suggests that expanded access 
is required regardless of State law or written policy, which is 
contrary to the intent expressed in the preamble to the proposed rule, 
as well as the intent of the statute.
    Response: We agree. We have revised the language to provide in-
state searches in accordance with State law.
    15. Comment: One commenter requests that the following terms be 
eliminated in the final rule: Non-IV-D individual(s); non-IV-D case(s); 
non-IV-

[[Page 56429]]

D request(s) and be replaced with ``non-IV-D purpose'' and another 
commenter asked that the Office provide a definition of non-IV-D 
purpose.
    Response: Reference to all four terms is appropriate each time a 
specific term is used in the regulation. Non-IV-D purpose is addressed 
in paragraph (d): the State PLS shall obtain location information under 
this section only for the purposes specified in paragraphs (d)(1) and 
(d)(2) of Sec.  302.35. Section 453 of the Act provides statutory 
authority for using the Federal PLS for the purpose of locating any 
individual who has or may have parental rights with respect to a child, 
enforcing any State or Federal law with respect to the unlawful taking 
or restraint of a child; or making or enforcing a child custody or 
visitation determination.
    16. Comment: One commenter seeks confirmation that taken together, 
these sections mean that once a State establishes policy to define 
State PLS sources of information, any other data contained in the 
State's computerized support enforcement system may not be released 
under this section, regardless of the source of that information.
    Response: The State's computerized support enforcement system is 
not a source of information for the State PLS. Access to any data on 
the statewide automated system is limited in sections 454A(d) and (f) 
of the Act and 45 CFR part 307. Independently verified information may 
be released to those authorized to access and use the information. For 
example, if a State determines that an address is correct through a 
postal verification the State can share the information it acquired 
from the second source (the Post Office).
    17. Comment: One commenter strongly suggests that this proposed 
regulation be modified to make it clear that it is the Federal OCSE's 
responsibility to exclude IRS information, or MSFIDM information when 
in receipt of a non-IV-D request for FPLS information.
    Response: If the State codes its requests correctly, (e.g., pk, ad, 
etc.), OCSE only returns appropriate information for that request. 
Please see the FCR Interface Guidance Document (Chart 6-14) http://www.acf.hhs.gov/programs/cse/newhire/library/fcr/fcr.htm. However, the 
State may have such information in its files and the State bears the 
responsibility to assure that only authorized information is released 
in response to a request.
    18. Comment: One commenter strongly suggests that there be a simple 
system set up for OCSE to receive formal requests from States 
(preferably online with a predefined outgoing and incoming data format) 
that would ensure that all requests to the Federal PLS are properly 
documented and the authorized information would be returned in a pre-
defined format suitable to direct redisclosure to authorized 
requestors. The States' only duty would be to submit and return 
requests for information on behalf of non-IV-D authorized requestors. 
This would greatly enhance the security and confidentiality of this 
Federal requirement.
    Response: The FCR Interface Guidance Document, mentioned above, 
provides this service. For example, a Foster Care case locate-only code 
provides only authorized information but a request with a IV-D code 
provides much more data because the request is on a IV-D case.
    19. Comment: One commenter believes a better approach for this 
section would be for those individuals who desire child support 
services under the title IV-D program, including location services, to 
apply for services.
    Response: The Federal statute at sections 453 and 454(8) of the Act 
require States to disclose certain information to authorized non-IV-D 
persons for authorized purposes. Such purposes includes access for 
locate purposes. There is no requirement that individuals apply for IV-
D services to receive requested information.
    20. Comment: One State does not support requiring the State PLS to 
release information gathered from in-state sources to non-IV-D 
individuals unless there is a State law or policy prohibiting such a 
release as provided in Sec.  302.35(a)(2)(i) and believes this 
requirement exceeds the authority granted in 42 U.S.C. 653(a)(2) which 
pertains only to Federal PLS information. Instead, the State favors a 
provision that authorizes the State PLS to release in-state source 
information only if permitted under State law or regulation.
    Response: We accept the commenter's position and have revised the 
regulation accordingly.
    21. Comment: Two commenters would like recognized that the preamble 
claims States have interpreted current law ``to permit use of State 
resources for non-IV-D location purposes, including location for 
custody and visitation purposes'' and notes that while a handful of 
States may permit broad access to State databases by private entities, 
these practices are not widespread and are not based on a common or 
settled interpretation of Federal law. Because some States have chosen 
to disclose State PLS and Federal PLS information to non-IV-D 
requestors should not be the basis of requiring all States to do so.
    Response: See response to comment 20.
    22. Comment: A commenter says that if a State wishes to disclose 
State PLS data, it should have to have a written law or policy 
describing what it will disclose, to whom it will disclose it, and 
under what circumstances. In the absence of such a policy, State PLS 
data should not be disclosed to non-IV-D entities.
    Response: It is up to the State to set standards for disclosure.
    23. Comment: One commenter believes the final regulation should 
acknowledge that there may be other State laws governing the disclosure 
of personal data to nongovernmental entities if any mention of State 
duty to provide State PLS data is retained.
    Response: We believe the revised language ``in accordance with 
State law'' takes this into account.
    24. Comment: One commenter would like clarification on the reason 
for the restriction that prevents the State PLS from searching the 
statewide computer system or providing a non-IV-D requestor with any 
information contained in the system. The commenter asks for the 
rationale behind this restriction and an explanation on how OCSE 
envisions compliance by States whose non-IV-D cases are part of their 
statewide computer system.
    Response: Access to information in the IV-D automated system is 
strictly limited by Federal statute. Section 454A of the Act restricts 
disclosure of information in a State IV-D automated system to purposes 
related to the administration of the IV-D program so non-IV-D 
requestors cannot get such information.
    25. Comment: One commenter says that the language referring to the 
support enforcement computer system (along with Appendix A) can be read 
to prohibit the release of information contained in the system even 
where that information was derived from non-IRS or non-MSFIDM sources 
and asks whether this was the intent.
    Response: Yes, this is the intent. The Federal statute at sections 
454A(d) and (f) clearly restricts access to and disclosure of State 
automated child support system data.
    26. Comment: One commenter requests further explanation or 
clarification regarding the prohibition against releasing information 
from automated support enforcement systems to fulfill non-IV-D 
requests. Clarification is needed because any information received in 
the course of IV-D program business is typically

[[Page 56430]]

registered in such system; therefore, exactly what may be legally 
disclosed under Sec.  302.35(a)(2)(ii) is unclear.
    Response: Section 454A of the Act does not authorize access to 
State systems for non-IV-D purposes. Therefore, a State may only seek 
or locate information in a non-IV-D case directly from the State PLS or 
from the Federal PLS and disclose that data to a non-IV-D requestor. 
(Also see  27. below.)
    27. Comment: One commenter seeks clarification that the idea of 
Sec.  302.35(a)(2)(ii) is that if a State receives a non-IV-D request, 
it may not look to any information ``existing'' on its system but 
rather must conduct State PLS and Federal PLS searches for information 
and only the information resulting from those searches could be 
released, as authorized.
    Response: Yes, if a State receives a non-IV-D request, it may not 
look to any information ``existing'' in its system but rather must 
conduct State PLS and Federal PLS searches for information and only the 
information resulting from those searches can be released.
    28. Comment: One commenter notes that Sec.  302.35(c)(3) indicates 
that the State PLS may use some sources of data for non-IV-D location 
requests. However, it is noted in other parts that the State PLS shall 
not release information from the computerized support enforcement 
system. Many of the location sources the State agency uses feed into, 
and become part of, the computerized support enforcement system. Is the 
regulation forbidding the use of the CSE system to access otherwise 
permissible State sources of information?
    Response: The regulation prohibits release of information residing 
on the State's computerized support enforcement system, unless 
explicitly authorized. States may only share information on their 
automated system with authorized entities under 45 CFR Part 307. The 
State PLS may use the automated system to seek information from other 
sources as part of its location efforts in IV-D cases.
    29. Comment: One commenter proposes new language for Sec.  
302.35(a)(2)(ii) ``* * * IRS information or financial institution data 
match information relating to a financial account * * *'' Incorporating 
this language would allow other information (such as address 
information) from MSFIDM to be released pursuant to a non-IV-D request.
    Response: We are not incorporating the proposed change because of 
the need to safeguard all data received from a financial institution 
data match.
    30. Comment: One commenter wants IV-B/IV-E agencies to be able to 
view limited, address-related data from other States' IRS and financial 
institutions if such information could assist in locating the parent or 
person who could be a child's parent and is otherwise not available in 
any other system.
    Response: There is no authority under title IV-D of the Act or the 
Internal Revenue Service Code to allow this.
    31. Comment: One commenter disagrees with prohibiting the State PLS 
in non-IV-D requests from disclosing information from the computerized 
support system because 42 U.S.C. 654(8) mandates that States use ``all 
sources of information and available records'' to locate parents 
regardless of whether they are involved in a IV-D case. The State could 
not defend such a policy to its judges and asks why such a prohibition 
in this rule is necessary.
    Response: A State's defense would be that Federal law prohibits 
such disclosure. Section 454A(f) of the Act specially governs data in 
IV-D automated systems and strictly limits disclosure.
    32. Comment: One commenter asks what is the statutory basis for 
prohibiting disclosure of MSFIDM information for all non-IV-D requests. 
Because Federal statute limits use of financial record information from 
a financial institution ``only for the purpose of * * * establishing, 
modifying or enforcing a child support obligation'', it appears FIDM 
information could be used for both IV-D and non-IV-D child support 
purposes.
    Response: IV-D programs have statutory responsibility to safeguard 
confidential information not specifically authorized for release under 
section 453 of the Act. The IV-D program has broad access to certain 
data of all sorts from myriad sources. We believe it is essential to 
strictly limit access to data. Section 469A of the Act only provides 
for nonliability for financial institutions for disclosures to a State 
Child Support Enforcement agency or to the Federal PLS for purposes of 
section 466(a)(17) of the Act. The statute provides that the 
information be used only for IV-D purposes.
    33. Comment: One commenter supports while another seeks 
clarification that Sec.  302.35(a)(2)(ii) prohibits release of 
information from the State's computerized support enforcement system 
even if that information is obtained from non-IRS or non-MSFIDM 
sources.
    Response: States may not release any information in a State's IV-D 
automated system except to specifically authorized requestors and for 
purposes related to the administration of the IV-D program. Non-IV-D 
access is not authorized under section 454A of the Act. See Sec.  
307.13.
    34. Comment: One commenter says that because States can not 
transmit non-IV-D requests to another State, an authorized requestor 
would be required to make multiple requests.
    Response: This is correct. However, an authorized requestor can 
obtain certain information from the Federal PLS which may contain some 
of the State data, namely the employment data.
    35. Comment: One commenter notes that while Sec.  302.35(a)(2)(iii) 
specifies that for non-IV-D location requests, the IV-D program need 
not make subsequent location attempts if a location attempt fails, the 
preamble discussion says that a relocation attempt would be required if 
a requestor demonstrates that there is reason to believe new 
information exists. The proposed rule should clearly state that a 
relocation attempt is a requirement in this circumstance, if that is 
the intent.
    Response: We have changed the language to clarify that no 
subsequent attempt to locate is necessary unless a new request is 
submitted.
    36. Comment: One commenter asks under what circumstance the State 
PLS can provide Federal PLS with information.
    Response: The State IV-D program is required to provide State 
Directory of New Hires and Federal Case Registry information. In 
addition, under section 453(e), the Federal PLS may seek information 
from any of the ``departments, agencies, or instrumentalities of the 
United States or of any State.''
    37. Comment: Child welfare staff in one State request a broader 
interpretation of Sec.  302.35(a)(2)(iii), whereas, in order to 
facilitate the administration of programs under titles IV-B or IV-E, 
State PLS and Federal PLS locate attempts should occur at the same 
frequency as for IV-D programs (quarterly, at a minimum, or when new 
information leads are received).
    Response: State IV-D agencies are not required to repeat locate 
results for non-IV-D entities unless a new request is submitted. 
However, States are free to establish the extent and frequency of 
authorized IV-B or IV-E locate requests.
    38. Comment: One commenter believes that because Sec.  
302.35(a)(2)(iv) prohibits making State PLS requests separate from 
Federal PLS requests in non-IV-D cases, there is no need to develop a 
separate standard for the State PLS. Another commenter requests 
clarification that even if it can get the

[[Page 56431]]

requested information from State sources, the State must use the 
Federal PLS. If so, why would that be necessary?
    Response: Based on comments received and the desire to allow States 
to retain the flexibility to conduct either State PLS or Federal PLS 
searches (or both) we have removed Sec.  302.35(a)(2)(iv) in the final 
rule. If a State successfully uses State PLS sources and locates the 
individual sought, there may be no need to submit a request to the 
Federal PLS. However, if the IV-B or IV-E agency wants a Federal PLS 
request, the State must honor that request.
    39. Comment: If a IV-D caseworker is aware of a new address for a 
noncustodial parent when the IV-E agency requests the address for an 
authorized purpose, can the IV-D program provide the address directly 
or must the agency conduct an independent State PLS search?
    Response: If the information is already known, the IV-D agency is 
authorized to release the information under Sec.  307.13(a)(3) and 
section 454A(f)(3) of the Act. This permits exchanging information with 
State Medicaid agencies and other programs designated by the Secretary 
or other State or Federal agencies to carry out this part, subject to 
section 6103 of the Internal Revenue Code of 1986.
    40. Comment: One State recommends that States retain the ability to 
designate other IV-D offices within the State to submit requests to the 
Federal PLS when location services are needed instead of requiring a 
``central'' State PLS.
    Response: We tried to accommodate multiple State PLS locate 
interfaces in the past; however, from a cost-effectiveness and quality 
control standpoint, States now are limited to a central State PLS 
interface with Federal PLS.
    41. Comment: One commenter wants acknowledgment that although on 
the surface this seems to provide flexibility, Sec.  302.35(c) sets up 
the strong possibility of inconsistency among States and will allow 
forum shopping for the best deal by ``attorneys or agents of the 
child.''
    Response: Section 302.35(a)(2)(i) allows access to the State PLS in 
accordance with State law. As such, State practices may vary. We 
support State flexibility in this regard.
    42. Comment: One commenter asks whether there is any authority that 
supersedes Federal law on releasing information only to persons 
authorized under sections 453 and 463 that would require IV-D agencies 
to comply with a request from the Department of Homeland Security (DHS) 
since DHS is not an ``authorized person'' under sections 453 or 463 of 
the Act.
    Response: There is no authority to override sections 453 and 463 of 
the Act.
    43. Comment: In the final regulations one commenter requests that 
States have the ability to deny requests from non-IV-D entities which 
have a track record of obtaining information for purposes beyond those 
contemplated by the statute as well as those who have not properly 
safeguarded the information they have obtained.
    Response: A fine for misuse of the NDNH in section 453(l) of the 
Act can be applied. Also, Sec.  303.21(f) gives ability for State to 
impose fines or other criminal or civil sanctions. Finally, attestation 
is designed to protect/alleviate this issue. A IV-D agency should 
document instances of abuse and if a non-IV-D entity is known to abuse 
access to data, access should be denied and the reason noted. States 
should have written policy which may provide guidance in this area.
    44. Comment: One commenter would like confirmation regarding the 
extent to which staff determining food stamp eligibility have access to 
confidential data or location data maintained or obtained by the IV-D 
program.
    Response: Food Stamp agencies have access to the State Directory 
for New Hires for purposes of verifying eligibility for the program. 
See 42 U.S.C. 653A(h)(2).
    45. Comment: Two commenters suggest that Tribal IV-D agencies be 
specifically included as an ``authorized person'' in Sec.  
302.35(c)(1).
    Response: Tribal IV-D agencies have access to the State PLS if they 
request assistance from a State IV-D agency and submit a referral for 
case information. The State agency will submit the case to the State 
PLS as part of its responsibilities with respect to the case.
    46. Comment: One commenter understands the proposed change to 
permit a court to obtain location information for the purposes of 
establishing a support order, even in a non-IV-D case. Yet, the court 
need not attest to its intent; whereas an attestation is required from 
a resident parent, legal guardian, attorney, or agent. Is this an 
oversight or an intentional distinction?
    Response: It is intentional because courts are governmental 
entities. The attestation is required of private citizens or 
nongovernmental entities.
    47. Comment: One commenter recommends changing the term ``aid'' to 
``assistance as defined at 45 CFR 260.31'' in Sec.  302.35(c)(3). This 
way, there will be a clear national policy in this area.
    Response: We have changed the term ``aid'' to ``assistance'' in 
Sec.  302.35(c)(3) because that is the terminology used in the statute. 
We have not cited IV-A regulation, however, since it could change in 
the future.
    48. Comment: One commenter asks how long must the locate 
application, attestation, and evidence of authorization be maintained 
by the State PLS? Does the standard three-year record retention policy 
apply to these documents?
    Response: The three-year record retention rule, as stated in 45 CFR 
92.42(b), applies to these documents.
    49. Comment: One commenter would like to eliminate the reference to 
a child not receiving aid under title IV-A of the Act in Sec.  
302.35(c)(3) and wants corresponding changes to be made to Appendix A 
to Sec.  302.35(c)(3).
    Response: Section 453 of the Act requires the inclusion of this 
exception.
    50. Comment: Three commenters ask if a requestor attests to the 
purpose and use of information that is later discovered to be 
fraudulent in nature; will the IV-D program be found liable by OCSE? 
One commenter asks what the penalties are if a requestor violates the 
attestation or submits a fake ``authorization''?
    Response: The IV-D agency would not be responsible if it had the 
attestation on file. Any requestor who violates requirements for 
receiving Federal PLS information would be subject to any Federal or 
State penalties.
    51. Comment: One commenter asks whether a State is required to pass 
special laws imposing penalties for failure to comply with the 
provisions of the attestation.
    Response: States have discretion to pass such laws.
    52. Comment: One commenter agrees with the proposed rule requiring 
the requestor to provide evidence of being the legal guardian, attorney 
of the child or agent of the child. However, he or she suggests if the 
requestor is a resident parent, the requestor only attest to being so 
rather than providing evidence. It would be difficult for the State PLS 
to identify proof of resident parent status otherwise.
    Response: We agree with the commenter and have changed the language 
in Sec.  302.35(c)(3)(iii) to require the resident parent to attest to 
being the resident parent.
    53. Comment: One commenter asks whether private child support 
enforcement agencies have to provide ``evidence of a valid contract'' 
with each request for locate or may the IV-D

[[Page 56432]]

program permit a private child support enforcement agency to provide an 
annual, blanket attestation that a valid contract exists for each 
request made during the year?
    Response: The private child support enforcement agency may not 
provide an annual blanket attestation that a valid contract exists for 
all requests made during that year.
    54. Comment: One commenter recommends a change to Sec.  
302.35(c)(3)(iii) so that both attorneys and agents who allege that 
they are representing a child are required to provide a valid contract 
that meets any requirements under State law or policy for acting as an 
agent of the child. Otherwise, the regulation will violate the 
statutory authority on which it is based.
    Response: The statute does not specify any proof or evidence that 
must be provided. Section 302.35(c)(3)(iii) indicates that an 
authorized person provide evidence that the requestor is the legal 
guardian, attorney, or agent of a child not receiving assistance under 
title IV-A, and if an agent of such a child, evidence of a valid 
contract that meets any requirements in State law or written policy for 
acting as an agent.
    55. Comment: One commenter believes that because of the potential 
for disclosure to unauthorized entities, Sec.  302.35(c)(3)(iii) should 
require the requestor to furnish a copy of the actual contract, not 
just ``evidence of a valid contract.'' Another commenter wants 
clarification on what evidence is other than a copy.
    Response: Evidence of a valid contract may be defined by the State. 
Therefore, a State may require the requestor to furnish a copy of the 
actual contract.
    56. One commenter suggests adding the words ``of the child'' after 
the word ``agent'' in Sec.  302.35(c)(3)(iii) in order to track the 
statute and make clear that the only agents who are authorized persons 
are agents of the child, not of a parent.
    Response: We agree with the commenter and have revised the 
regulation to reflect the statutory language.
    57. One commenter believes that Sec.  302.35(c)(3)(iii) will be 
hard to meet for a requestor who claims to be ``an agent of such a 
child.'' Existing State laws ``for acting as an agent'' may not be 
clear or complete to support this process.
    Response: This is an issue for a State to address.
    58. Comment: Two commenters question whether private collection 
agencies (PCAs) and attorneys meet the statutory definition of 
``authorized persons'' and are concerned about giving private 
collection agencies access to information. There is no clear definition 
of ``attorney or agent of the child'' in the regulations or in statute 
and in one State, PCAs do not fall within this definition. Most private 
attorneys in child support matters represent a parent, not a child. PCA 
contracts are entered into by a custodial parent in her (sic) own 
right, not as the child's legal agent. An agency relationship is 
created by expressed or implied contract or by operation of law, and 
generally is governed by State law, not Federal law. In addition, it is 
a settled matter of black letter law that a contract must be between 
competent parties and that a minor is under the age of legal 
competence. Therefore, a custodial parent's contract with a PCA does 
not make the PCA an ``agent of the child'' for purposes of locate 
request under section 453 of the Act.
    Response: AT-02-04 clarifies policy and procedures for providing 
Federal PLS locate services to persons who qualify as an ``an agent of 
the child'' for child support purposes. The Action Transmittal lists 
the definitions of ``authorized persons'' set forth in section 
453(c)(1) through (3) of the Act, including the resident parent, legal 
guardian, attorney, or agent of the child. We do not read section 453 
of the Act to prohibit a State from sending appropriate Federal PLS 
information to the resident parent in care of a PCA if, under State 
law, the PCA ``stands in the shoes'' of the resident parent and the 
State has evidence in the form of an attestation by the requestor, 
under Sec.  302.35(c)(3)(iii) that the parent, in fact, has authorized 
the PCA to act on his or her behalf.
    59. Comment: One commenter wants changes made to reflect that 
States should be required to develop standards and protocols for 
refusing to provide information to non-IV-D entities when such entities 
fail to safeguard the information they obtain. These standards should 
include provisions for notifying such entities of what restrictions 
apply, what protections they must have in place, and what the 
consequences of failure to safeguard the information are.
    Response: We agree that such standards are reasonable but leave 
such action to State discretion.
    60. Comment: One commenter believes that the administrative cost 
associated with developing and implementing a fee for non-IV-D entities 
would far outweigh any benefit.
    Response: The fee for Federal PLS services is a statutory 
requirement under section 453(e)(2) of the Act.
    61. Comment: One commenter asks whether any fee collected for the 
State's PLS services needs to be claimed as program income.
    Response: Any fee collected for the State's State PLS services is 
considered program income under 45 CFR 304.50 and must be reported.
    62. Comment: One commenter seeks clarification that the title: ``To 
locate an individual who may be the parent of a child in a IV-D or non-
IV-D case'' refers to locating the custodial as well as noncustodial 
parent.
    Response: The final rule changes the title of Sec.  302.35(d)(1) 
to: ``To locate an individual with respect to a child in a IV-D, non-
IV-D, IV-B, or IV-E case'' in order to better reflect the statutory 
language in section 453(a)(2)(A) of the Act. This section covers 
locating both the custodial as well as the noncustodial parent.
    63. Comment: One commenter asks that the following ``purpose'' be 
added to Sec.  302.35(d)(1): The State PLS shall locate individuals for 
the purpose of: facilitating informed and timely decisions about child 
welfare and permanency. The rationale is that locating parents for IV-
B/IV-E purposes goes beyond just ``establishing parentage'' or 
``determining who has or may have parental rights to a child'' as the 
language in the proposed rule currently reads. Another commenter asks 
if ``for determining who has or may have parental rights with respect 
to a child'' allow child welfare staff in the IV-B/IV-E agencies to 
request the IV-D program to locate and release address information for 
the purpose of placement of a child?
    Response: We have inserted reference to title IV-B and IV-E to 
Sec.  302.35(d)(1) to make clear that those agencies have access to 
State PLS locate functions for the purposes stated. The purpose of 
``determining who has or may have parental rights to a child'' could be 
related to permanency planning. The language used is that which is 
stated in section 453 of the Act. To the second question, only persons 
as authorized under section 453(a)(2)(A) of the Act may request the IV-
D program to locate and release address information for the purpose of 
placement of a child.
    64. Comment: Section 302.35(d)(1) states: the State PLS shall 
locate individuals for the purpose of establishing parentage, or 
establishing, setting the amount of, modifying, or enforcing child 
support obligations or for determining who has or may have parental 
rights with respect to a child. For these purposes, only information 
available through the Federal PLS or the State PLS may be provided. 
This

[[Page 56433]]

information is limited to Social Security Number(s), most recent 
address, employer name and address, employer identification number, 
wages or other income from, and benefits of, employment, including 
rights to, or enrollment in, health care coverage, or asset and debt 
information. One commenter questions why there is a restriction that 
``for these purposes, only information available through the Federal 
PLS or the State PLS may be provided* * *''?
    Response: This restriction exists because Sec.  302.35(d)(1) does 
not cover or authorize access to child support information on States' 
automated systems (which is addressed in 45 CFR Part 307). This section 
addresses Federal and State PLS use for IV-D and non-IV-D purposes.
    65. Comment: Under Sec.  302.35(d)(1), Federal PLS or State PLS 
information may be provided--but one commenter wants clarification as 
to whom this information can be provided--his/her own program or 
another State IV-D program?
    Response: Authorized persons include any State or local agency 
providing IV-D services as well as an authorized person identified in 
Sec.  302.35(c).
    66. Comment: One commenter asks: does the phrase ``for determining 
who has or may have parental rights with respect to a child'' include 
grandparents or other persons who may have ``parental rights''?
    Response: No, section 453(c)(3) of the Act prevents this 
interpretation and means the parent of a child who would have a legal 
obligation to provide child support.
    67. Comment: One commenter asks that the section regarding the 
State Parent Locator Service be amended to incorporate a family 
violence provision as follows ``Subject to the requirements of this 
section, the privacy safeguards required under section 454(26) of the 
Act, and the family violence indicator requirements under Sec.  
307.11(f)(1)(x) of this chapter, the State PLS shall disclose the 
following information to authorized persons for authorized purposes.''
    Response: There is reference to section 454(26) of the Act in Sec.  
302.35(e): Subject to the requirements of this section and the privacy 
safeguards required under section 454(26) of the Act, the State PLS 
shall disclose the following information to authorized persons for 
authorized purposes. We have included reference to the domestic 
violence indicator in Sec. Sec.  302.35(e) and 303.21.

Section 303.3, Location of Noncustodial Parents in IV-D cases

    1. Comment: One commenter recommends changing the title of this 
section to include custodial parents as well as noncustodial parents 
(since the intent of Sec. Sec.  302.35(a)(1) and 303.3 is to include 
custodial parents). Another commenter says that if the heading of this 
section is intended to only apply to noncustodial parents, the 
commenter has no concern with this as long as he or she can use the 
State PLS and other locate sources to locate custodial parents and 
children under Sec.  302.35. If custodial parents and children are 
brought under Sec.  303.3, the commenter asks that the applicability of 
the requirements, as they relate to custodial parents and children, be 
at the State's discretion. Yet another commenter seeks confirmation of 
whether there are specific location requirements for custodial parents. 
The commenter believes that the specific location requirements of 
proposed rule Sec.  303.3 are more appropriately limited to 
noncustodial parents.
    Response: Section 303.3 only applies to locating the noncustodial 
parent. There are many instances in which States will have to locate 
custodial parents and children, e.g., when requested and authorized, or 
to enable disbursement of collections. A State may choose to use the 
same approach as set in Sec.  303.3 to do so but it is not mandated.
    2. Comment: One commenter seeks confirmation that Federal Financial 
Participation (FFP) will be made available to modify computer system 
functionality and provide on-going services to comply with the mandate 
to provide locate services for non-IV-D cases and believes FFP is 
appropriate and necessary.
    Response: FFP is available to modify computer system functionality 
and provide ongoing services to comply with the mandate to provide 
locate services for non-IV-D cases.
    3. Comment: One commenter notes that when the title was changed 
from ``location of absent parents'' to ``location of noncustodial 
parents'' the meaning of the section was changed and as a result, tens 
of thousands of law-abiding parents' information is in State PLS, 
Federal PLS and National Directory of Child Support Orders databases.
    Response: The use of the term noncustodial parent in lieu of absent 
parent was made via regulatory changes in 1999 to reflect the same 
change made in the statute. The change was made to reflect that 
noncustodial parents are not (or should not be) absent from their 
children's lives.
    4. Comment: One commenter asks for clarification regarding what the 
differences are between searching State databases for information 
(which is encouraged) and releasing information from the system (which 
is prohibited). The commenter believes the sentence in Sec.  
303.3(b)(1) ``Use appropriate location sources such as the Federal PLS; 
interstate location networks; local officials and employees 
administering public assistance * * *'' conflicts with proposed Sec.  
302.35(a)(2)(ii) which states that the State PLS would not be able to, 
in response to a non-IV-D request, release information from the 
statewide system.
    Response: There is no conflict because Sec.  303.3 applies only to 
IV-D cases and to locate efforts by the State IV-D agency in those 
cases. The restrictions on release of IV-D systems data does not apply 
to the IV-D agency or its use of program data for IV-D program 
purposes. The release of information in the statewide systems is 
restricted by section 454A of the Act.
    5. Comment: One commenter asks whether the Federal response changes 
(see comment 4 above) based on a State's opinion that 
recipients of food stamp benefits must cooperate with the IV-D program.
    Response: If there is a IV-D case involving a food stamp recipient 
who is required to cooperate with the IV-D agency, access to data on 
the statewide automated system is authorized for authorized persons and 
IV-D purposes.
    6. Comment: One commenter urges the agency to disclose to the 
public what tools and data sources are going to be employed to locate 
individuals. It is suggested that these tools and data sources be 
disclosed in the Federal Register, giving individuals time to comment 
on the accuracy and reliability of the tools used.
    Response: States may disclose information regarding State tools and 
data sources. The Systems of Record used by the Federal PLS, the 
National Directory of New Hires and the Federal Case Registry, are 
published in the Federal Register and updated as necessary in 
accordance with Federal law.

Section 303.20, Minimum Organizational and Staffing Requirements

    1. Comment: One commenter is troubled about the lack of actual 
standards regarding proper staffing of the State PLS. In particular, 
the investigative process behind non-IV-D requests will not be 
adequately staffed

[[Page 56434]]

without some guidance, especially considering budget cuts.
    Response: The State determines how the State PLS is operated and 
there are various degrees of automation for access of data. We do not 
think it is appropriate to regulate this because of the different State 
PLS operations that take place among the States.

Section 303.21, Safeguarding and Disclosure of Confidential Information

    1. Comment: One commenter asks why the Office has chosen to issue 
safeguarding rules for IV-D data now if it did not do so before. In 
most States there is an established body of privacy law that governs 
access to personal data maintained by State agencies and limits its use 
and disclosure; and at the time PRWORA was enacted, there were no 
discussions about preempting such bodies of State law by Federal 
statute.
    Response: States requested guidance regarding access to data 
because of the myriad of access requirements and prohibitions enacted 
as part of PRWORA. The requirements of section 454(8) of the Act state 
that States ``shall * * * disclose only information described in 
sections 453 and 463 to the authorized persons specified in such 
sections for the purpose specified in such sections.''
    2. Comment: One commenter raises concern regarding use of the word 
``confidential'' and recommends that ``personal identifying'' 
information be substituted for ``confidential'' as it better captures 
the meaning of the information discussed in these proposed regulations.
    Response: We believe the term ``confidential'' which is used in the 
statute is more consistent and appropriate for implementing the 
regulation.
    3. Comment: One commenter requests that, within the definition of 
``confidential information'', ``employment information'' be changed to 
``employer name and address'' in order to be less broad and more 
consistent with Sec.  302.35.
    Response: Access to data through the Federal PLS and the State PLS 
in Sec.  302.35 is not restricted to employer name and address.
    4. Comment: One commenter requests a specific list of factors by 
which an individual can be identified because the phrase ``not limited 
to'' in Sec.  303.21(a) is vague. As currently written, a State could 
violate the regulation or get differing interpretations by different 
workers. Suggested change: ``Confidential information means any 
information relating to a specified individual or an individual who can 
be identified by reference through any other nonconfidential source by 
reference to one or more factors specific to him or her, including, but 
not limited to, the individuals SSN, residential or mailing addresses, 
employment information, and financial information. Excluded as factors 
specific to him or her are numbers unique to the computerized child 
support enforcement system for individuals, as such a number cannot be 
used as an identifying factor outside of access to the confidential 
computerized child support enforcement system.''
    Response: We have not included this clarification in the 
regulation. Since the State establishes the IV-D case numbers and 
determines when and how they are used, we are unable to conclude that 
such numbers could not be identifying information. We question why 
there would be a need to release IV-D case numbers to an entity outside 
the administration of the IV-D program.
    5. Comment: One commenter questions the intent of Sec.  303.21(a) 
and recommends allowing States to release payment-related information 
in accordance with State law. The commenter believes the last sentence 
``the amount of support ordered and the amount of support collection 
are not considered confidential information for purposes of this 
section'' opens up the IV-D agency to having to provide payment records 
to anyone who makes a request whether or not the requestor is 
associated with the case or intends to use the information for child 
support related purposes. One commenter says the definition of 
``confidential information'' does not include the support-ordered 
amount or the amount of a support collection. Does this mean that if 
the IV-D agency/SDU is approached by an outside entity or ``interested 
third party'' who wants the names and collections of persons, that the 
IV-D agency/SDU is not prohibited from providing such information? 
(Assume the third party is not able to help IV-D program establish and 
enforce.) What if the interested third party has a name and wants to 
know the corresponding charges and payments against the obligation? One 
commenter is concerned with the last sentence in Sec.  303.21(a) that 
appears to make payment histories and arrearage records, which contain 
amounts of support ordered and collection amounts, a part of the public 
record, and would like clarification as to the difference between that 
and ``financial information'' which is confidential. The commenter does 
not understand the meaning of this apparent contradiction.
    Response: We agree that the language in the proposed rule is 
confusing. We deleted the language ``The amount of support ordered and 
the amount of a support collection are not considered confidential 
information for purposes of this section.'' Interested third party may 
not receive payment histories and arrearage records.
    6. Comment: One commenter asks: in order to balance the need for 
accurate payment records and meet IV-D and IRS requirements, is it 
acceptable to show an IRS payment amount in these payment records, but 
not to identify the payment as an IRS receipt?
    Response: We believe it is acceptable for child support purposes 
but this is ultimately governed by Internal Revenue Service Code.
    7. Comment: One commenter believes that if the source of the 
information on the document to be released cannot, on the face of the 
document, be linked to the Federal PLS, Internal Revenue Service (IRS), 
the National Directory of New Hires (NDNH), or other protected source, 
there is no need to restrict release of a copy of a document that is a 
matter of public record.
    Response: We disagree. The statutory provisions restrict disclosure 
of specific information whether or not the source is identified.
    8. Comment: One commenter asks that the following sentence be added 
to the end of Sec.  303.21(a): ``Information required by state law to 
be released to designated persons or entities is not considered 
`confidential' if the information has been independently verified or 
furnished from a source that is not protected by Title IV-D of the 
Social Security Act.''
    Response: The statement as proposed is too broad because it could 
be interpreted to include personal identifying information on the 
statewide automated system.
    9. Comment: One commenter would like confirmation that an 
individual's name would be considered ``confidential information'' as 
it would be information relating to a specific individual who could be 
identified. If the individual's name is confidential and the State is 
not able to release the name, under what circumstances could we release 
the amount of support ordered/collected without the name?
    Response: Confidential information about individuals may not be 
disclosed outside the administration of the IV-D program. The State 
could release aggregate amounts of support collected in the State--
e.g., $X for FY 2006.
    10. Comment: One commenter would like noted that if a IV-D program 
remains unable, under IRS rules, to release the amount of the Federal 
Tax Refund Offset payment to non-IV-D

[[Page 56435]]

entities, the program is severely hampered in our ability to report 
collection obligation compliance information to courts, custodial 
parties, etc.
    Response: We continue to work with the Department of the Treasury 
regarding the release of offset collection information. The Department 
of Treasury has offered to the Congress suggested legislation that 
would amend the Internal Revenue Code regarding this concern and the 
Department of Health and Human Services supports the proposal.
    11. Comment: One commenter is concerned that the requirement that 
``any official with whom a cooperative agreement * * * has been entered 
into * * *'' may not disclose confidential information received from 
the IV-D agency applies to agreements with the Clerks of Courts. 
Documents filed with the court, which have not been sealed, are open to 
inspection by such parties as the parties' creditors, commercial 
information brokers, and newspaper reporters. OCSE needs to recognize 
that this ``open records'' type of disclosure is permissible for Clerks 
of Courts despite this regulation.
    Response: Section 454(26) of the Act requires IV-D agencies to have 
in effect safeguards, applicable to all confidential information 
relating to proceedings or actions to establish paternity or to 
establish, modify or enforce support, that are designed to protect the 
privacy rights of the parties; and 45 CFR 302.12(a)(3) requires that 
those who receive information (such as through cooperative agreements) 
shall abide by those safeguards, because they are carrying out 
functions for the State IV-D agency. However, this regulation does not 
prohibit the disclosure of documents filed with the court, which have 
not been sealed and are open to inspection by such parties as the 
parties' creditors, commercial information brokers, and newspaper 
reporters.
    12. Comment: One commenter notes the general rule prohibiting 
disclosure of confidential information has an exception ``as authorized 
by the Act and implementing regulations * * *.'' Which implementing 
regulations does this refer to?
    Response: Title IV-D regulations at 45 CFR Parts 301-309 are the 
``implementing regulations'' referenced.
    13. Comment: Several commenters would like clarification regarding 
the provision to not disclose confidential information obtained ``in 
connection with the performance of IV-D functions outside the 
administration of the IV-D program.'' What do these ``IV-D functions 
outside of the administration of the IV-D program'' refer to? 
Clarification is needed in order to reflect reality that information 
about the noncustodial parent may be used in any way necessary to 
establish paternity or establish, modify or enforce a child support 
order.
    Response: We have clarified the intent of the language by restating 
it to read ``may not disclose any confidential information, obtained in 
connection with the performance of IV-D functions, outside the 
administration of the IV-D program.''
    14. Comment: One commenter is concerned that the Supplementary 
Information section of this proposed rule adds a limitation not stated 
in the actual rule by saying ``the IV-D program may only disclose the 
minimum amount of confidential information needed for the purpose 
provided.''
    Response: We have deleted the sentence ``In making a disclosure 
under this provision, the IV-D program only disclose the minimum amount 
of confidential information needed for the purpose provided'' as stated 
in the preamble describing Section 2: Safeguarding and Disclosure of 
Confidential Information.
    15. Comment: Two commenters believe Sec.  303.21(d) is very 
restrictive, adds undue complexity to IV-D disclosure policies, and 
places an undue burden on States. For example, unless released within 
the purpose of the IV-D program, the State would need to figure out how 
to withhold IV-D information from courts without compromising the 
court's ability to administer the court case.
    Response: Disclosure of necessary information to the courts needed 
for purposes of the IV-D program is authorized except as limited by 
Section 6103 of the Internal Revenue Code. (Also see Q and A 
10).
    16. Comment: One commenter asks that Sec.  303.21(d) focus on 
specifying when disclosure of information to other government programs 
is permitted and for what purposes.
    Response: Section 303.21(d)(2) and (3) address circumstances under 
which information may be disclosed and for what purposes.
    17. Comment: One commenter is concerned that the section on 
authorized disclosures is made in such a general manner that most 
administrators responsible for safeguarding data privacy would have a 
great deal of difficulty making all the inferences required to actually 
share data.
    Response: We have redesigned Appendix A for clarity. We reorganized 
it so it is laid out by authorized person followed by authorized 
purpose. We have developed a new Appendix B which addresses locate 
services in connection with enforcement or determination of child 
custody and in cases of parental kidnapping of a child.
    18. Comment: One commenter asks about the process of releasing 
confidential information in accordance with Sec.  303.21(d)(1) under 
which information may be released ``to such person or persons 
designated by the individual to whom the information relates or who is 
the custodial parent or legal guardian of a child * * *.'' Should the 
designation be written or verbal? Are there time restrictions to the 
designation? Another commenter is concerned that Sec.  303.21(d)(1) 
would require release of confidential information to anyone the 
individual designates, even though State statute allows only for 
minimal information to be released. The commenter recommends that the 
proposed rule be changed to not require release of the information and 
instead say ``information may be released unless prohibited under State 
statute.''
    Response: As indicated earlier in the preamble, this paragraph was 
removed as a separate authorized disclosure because under paragraph 
(c), disclosure to an individual would be allowed for IV-D purposes and 
would be governed by any safeguarding provision in State law as well.
    19. Comment: One commenter requests that the term ``shall'' be 
replaced with ``may'' because it is appropriate for States to have the 
flexibility to address, at the State level, how they respond to 
requests from an individual to release confidential information. For 
example, they would want to be able to determine, in certain 
situations, that it would be appropriate for them to deal directly with 
the customer, rather than a designee.
    Response: See answer to 18.
    20. Comment: One commenter thinks the rule should make clear that a 
custodial parent or legal guardian may obtain information about the 
child in a case and may authorize release of information about the 
child.
    Response: This language has been removed. See answer to 
18.
    21. Comment: One commenter would like to strike the prohibition 
against providing confidential information about an individual to any 
other individual involved in the case.
    Response: The Federal and State IV-D programs are responsible for 
protecting sensitive personal information and broad authority as 
suggested by the commenter is inappropriate.

[[Page 56436]]

    22. Comment: One commenter believes the ability to provide locate 
information to a non-IV-D requestor conflicts with the broad 
prohibition against disclosing ``confidential'' information about one 
individual to another person involved in the case (as proposed in Sec.  
303.21(d)(1)). Several commenters are concerned that Sec.  303.21(d)(2) 
creates a potential danger for overuse of this broad discretion. The 
proposed rule would essentially grant wide-open access to all the 
records and databases available to State child support programs, 
without any realistic ability for States to monitor use of this 
confidential data.
    Response: Proposed Sec.  303.21(d)(1) has been removed from the 
final rule. Section 303.21(d)(2) (now Sec.  303.21(d)(1)) has been 
limited to the specific programs which have been designated by the 
Secretary. These programs also have safeguarding rules.
    23. Comment: There were several commenters who questioned the 
mandatory rather than permissive disclosures in Sec.  303.21(d)(2). One 
commenter wants to know why it is written as a mandate for the State 
IV-D program to disclose confidential information to all entities 
listed and believes the ``permissive disclosure'' allowed prior to 
February 1999 was more appropriate than a mandated disclosure. Another 
commenter would like the phrase ``must'' changed to ``may'' in Sec.  
303.21(d)(2) because the commenter believes a State should be 
authorized to disclose information and that it should not be a 
requirement to disclose the information. Such a change would also 
eliminate the need for the ``to the extent that it does not interfere 
with the IV-D program meeting its own obligation'' language in the same 
sentence. Three commenters point out that Sec.  303.21(d)(2)(ii) would 
require IV-D agencies to report child abuse (or at least give the 
appearance of such), rather than making this reporting discretionary.
    Response: Former Sec.  303.21 Safeguarding information, was removed 
with passage of Public Law 104-93. PRWORA was more permissive. 
Therefore, we have changed the language in Sec.  303.21(d) from 
``must'' to ``may'' and have added ``upon request'' for clarity at the 
beginning of paragraph (1).
    24. Comment: One commenter appreciates the fact this regulation 
does not mandate the manner or the timeframes by which the IV-D program 
must respond to authorized requestors. States must have this 
flexibility.
    Response: We are committed to State flexibility to the extent 
allowable and to our Federal/State/Tribal partnership.
    25. Comment: Is it appropriate that Tribal agencies be authorized 
to have access to data under Sec.  303.21 as discussed in the 
applicable preamble part?
    Response: Tribal IV-D agencies are included in Sec.  303.21(d)(1) 
because they are agencies administering programs under title IV-A and 
IV-D of the Act. However, for clarity we have included specific 
reference to Tribal programs under title IV-A of the Act in Sec.  
303.21(d)(1).
    26. Comment: One commenter seeks confirmation that this section 
permits Federal or State auditors, or other agencies with oversight 
responsibilities, to access confidential information or IV-D case-
specific information.
    Response: Authority for access to information for purposes of the 
administration of the plan or program approved under title IV-D of the 
Act includes audits conducted by Federal or State auditors, or other 
agencies with oversight responsibility.
    27. Comment: Do ``under circumstances which indicate that the 
child's health or welfare is threatened'' include a release to law 
enforcement agencies? Does the language of this proposed regulation 
allow us to release information from our child support files in 
response to an AMBER Alert?
    Response: Based on received comments, we have deleted the language 
in Sec.  303.21(d) as stated in the NPRM that would have allowed the 
State IV-D program to release information to law enforcement agencies 
upon request. However, the information can be released to the IV-B or 
IV-E agency where it is necessary to carry out a State IV-B or IV-E 
function.
    28. Comment: One commenter requests that the phrase ``best interest 
of the child'' be inserted because this language is more appropriate 
than ``under circumstances which indicate that the child's health or 
welfare is threatened.''
    Response: See response to Question 28 immediately above.
    29. Comment: One commenter seeks clarification as to whether the 
proposed rule would limit the use of SDNH information outside of the 
IV-D program, subject to the exceptions specified in Sec.  
303.21(d)(2). The commenter does not want restrictions on the use of 
SDNH data. This data is used to collect taxes and to detect and prevent 
fraud in a wide range of programs. We are unaware of any Federal 
authority for limiting use of this State data. In fact, section 
453A(h)(3) of the Act explicitly requires States to share State new 
hire data with ``State agencies operating employment security and 
worker's compensation programs.'' If OCSE intends to impose these 
strict limitations on the use of SDNH data, further discussion of this 
proposal with States is warranted.
    Response: Safeguarding of SDNH data is determined by whether or not 
the database is part of the statewide child support enforcement 
automated system. Any information in the statewide system is protected 
and its access limited as set forth in Sec.  307.13. If the SDNH is 
housed in a separate agency, these restrictions do not apply to non-IV-
D use.
    30. Comment: One commenter believes the intent of this rule, as 
expressed in the preamble, does not fit with requiring independent 
verification of Federal Case Registry and National Directory of New 
Hires information.
    Response: Restricted access to Federal Case Registry (FCR) and 
National Directory of New Hires (NDNH) information is statutory. 
Independent verification is a means to enable a State to disclose this 
information for non-IV-D purposes by changing the source of the data 
through verification.
    31. Comment: One commenter would like an exception made under Sec.  
303.21(d)(3) for title XIX (Medicaid programs). The prohibition on 
disclosing unverified FCR and NDNH information contradicts the mandate 
in 42 U.S.C. 654A(f)(3) to share IV-D system information with Title XIX 
programs.
    Response: Section 454A(f)(3) authorized limited sharing of 
information on the title IV-D automated system to title XIX agencies. 
There is a separate statute at section 453(h) and (i) that explicitly 
restricts access to NDNH and FCR data and does not authorize access to 
such data by title XIX agencies. Section 303.21(d)(3) addresses 
disclosure of information obtained from the IRS or Federal PLS and not 
State systems data.
    32. Comment: Two commenters are confused by the requirement to 
independently verify information the IV-D program receives from NDNH or 
FCR. How would such information be independently verified? Is this rule 
proposing that the State IV-D agency would have to contact the other 
State to verify the FCR information and NDNH information?
    Response: This rule is not requiring or advocating the IV-D agency 
to independently verify information received from the NDNH or the FCR. 
It merely describes the circumstances

[[Page 56437]]

under which such data may be disclosed to persons not specified in 
section 453 of the Act (non-IV-D purposes). For example, assume a State 
IV-D agency submits an address received from the NDNH for postal 
verification. Once the postal verification is complete, that 
information has been independently verified and can be released. The 
source of the address is the postal service, not the NDNH.
    33. Comment: One commenter strongly recommends deleting the 
provision in Sec.  303.21(d)(3) from the proposed regulation 
restricting access to NDNH, FCR, and IRS data.
    Response: Because these restrictions are statutory, they cannot be 
deleted.
    34. Comment: While one commenter recognizes that Federal law 
requires restriction on redisclosure of IRS data and has no objection 
to this aspect, the commenter is unaware of any basis in Federal 
statute for requiring independent verification of information from 
NDNH, FCR, or MSFIDM.
    Response: Federal statute is explicit regarding authorized 
disclosure of NDNH and FCR data. Section 453 of the Act specifies that 
information from the Federal PLS (of which the NDNH and FCR are a part) 
may only be released to authorized persons and for certain purposes. 
This rule is not requiring the IV-D program to independently verify 
information received from the NDNH or the FCR. It merely describes the 
circumstances under which such data may be disclosed to persons not 
specified in section 453 of the Act (non-IV-D purposes).
    35. Comment: One commenter notes that a State currently accepts 
information from the FCR and NDNH as ``independently verified'' and 
takes action based upon that information. This provision (requiring 
that the State in itself independently verify such data) will require 
reprogramming systems and will cause operational burden on States.
    Response: This rule is not requiring the IV-D agency to 
independently verify information received from the NDNH or the FCR. It 
merely describes the circumstances under which such data may be 
disclosed to persons not specified in section 453 of the Act (non-IV-D 
purposes). In fact, we encourage IV-D agencies to take automated action 
based on the NDNH or the FCR.
    36. Comment: One commenter asks for clarification on whether the 
State would be able to share locate and paternity establishment 
information on a State's IV-D system through an automated interface 
with Child Welfare, Foster Care, and Medicaid agencies.
    Response: Yes, under certain circumstances and with certain 
limitations. See Sec. Sec.  303.21 and 307.13
    37. Comment: Three commenters are concerned that the independent 
verification requirement will impede a State's ability to share 
information in a timely, efficient and automated manner. In particular, 
the requirement will impede State's ability to assist State IV-E and 
Medicaid agencies in recovering public health insurance costs and 
locating parents. At a minimum, States will need to segregate NDNH, 
FCR, and MSFIDM data so that they do not transmit this information to 
State IV-E and Medicaid agencies pending independent verification. This 
will require additional automated system development, at a cost to both 
States and the Federal government, and will impede the functioning of 
automated interfaces with other State agencies. Funds and resources 
devoted to programming these requirements could better be used on 
system development that supports the core mission of the child support 
program.
    Response: This rule is not requiring the IV-D agency to 
independently verify information received from the NDNH or the FCR. It 
merely describes the circumstances under which such data may be 
disclosed to persons not specified in section 453 of the Act (for non-
IV-D purposes).
    38. Comment: One commenter believes the regulation fails to provide 
guidance to IV-D agencies regarding the use of Federal tax offset 
amounts and asks: how can a IV-D agency ``independently verify'' the 
amount of a Federal tax refund intercept?
    Response: There is no way to independently verify Federal tax 
refund offset information. We continue to work with the Department of 
the Treasury and the Congress to resolve this issue.
    39. Comment: One commenter notes the regulation requires that 
authorized disclosures, except to IV-A agencies, cannot include 
information obtained from the FCR, unless independently verified. Does 
this mean that information about the noncustodial parent's access to 
military medical benefits obtained from the Defense Data Management 
Center (DMDC) and transmitted to the FCR is confidential?
    Response: States acquire DMDC through a FCR transaction but the 
data is not part of the FCR database. Information about the 
noncustodial parent's access to military medical benefits is thus not 
subject to the ``independent verification'' requirement.
    40. Comment: One commenter would like confirmation that Sec.  
303.21(d)(3) means that information may not be shared with a custodial 
parent seeking information about medical support benefits available to 
a child but that it may be released to the IV-A agency.
    Response: There is no restriction on sharing information from the 
Federal PLS about medical support benefits with custodial parents in 
IV-D cases. Such information is not received from the NDNH or the FCR.
    41. Comment: Four commenters note that the requirement for 
independent verification of NDNH and FCR information prior to 
disclosure could have the following consequences: delay in sending out 
income withholding notices (will not meet 2-day Federal timeframe); 
delay to families and children in getting payments; burden on employers 
who may be required to furnish additional employment verification to 
the SDNH; require automated system programming changes since the 
proposed rule would require segregation of NDNH and FCR and change to 
systems automatic processing of New Hire information; is an 
unacceptable burden on IV-D agencies (unfunded mandate); will impair an 
agency's ability to assist other State entities authorized to receive 
such information; and will complicate the process because depending on 
purposes for which information is to be used, sometimes it must be 
verified and sometimes not.
    Response: This rule is not requiring the IV-D agency to 
independently verify information received from the NDNH or the FCR 
before it is used in the administration of the IV-D program. It merely 
describes the circumstances under which such data may be disclosed to 
persons not specified in section 453 of the Act (for non-IV-D 
purposes). We encourage IV-D agencies to take automated action based on 
the NDNH or the FCR information.
    42. Comment: One commenter believes that to now require independent 
verification of this data seems to be contradictory to previously 
stated policy by the Federal OCSE (i.e., DCL-02-22 that offers the use 
of the NDNH, and MSFIDM as better sources than 1099 information).
    Response: Independent verification is not being required. It is 
merely a condition that must be met if the State wishes to use or 
disclose information for non-IV-D purposes to nonauthorized persons. 
This applies only to non-IV-D purposes. There is no such restriction in 
IV-D cases.
    43. Comment: One commenter said the State does not routinely track 
the ``source'' of most information and thinks the administrative burden 
involved with sharing information under the proposed

[[Page 56438]]

restrictions may be too great for the program to overcome. Another 
commenter indicated that the State's IV-D automated system is required 
to identify the source of address and employment information the IV-D 
agency receives from automated sources. If IV-D staff independently 
verified NDNH information, the staff would have to change the source of 
confidential information and then neither State nor Federal Child 
Support Enforcement agencies would be able to calculate how many 
successful ``hits'' the State is receiving from NDNH or FCR.
    Response: The source of information is a recommended but not 
required data element in State child support systems. However, most 
States do identify the source of information on their systems to meet 
other tracking requirements such as tracking responses from each 
automated location source.
    44. Comment: One commenter requests that if the Office insists on 
including the restriction that prohibits disclosure of NDNH and FCR 
information to title IV, XIX and XXI agencies, the Office insert 
language to clarify ``Except for SPLS disclosure authorized under Sec.  
302.35(c)(5), the IV-D program may not disclose FCR and NDNH data to 
IV-B and IV-E agencies.''
    Response: Because of authority in section 453(c) of the Act, in 
Sec.  307.13(a)(4)(iii) we have indicated that NDNH and FCR information 
is available to IV-B and IV-E agencies for the purposes set forth in 
section 453 of the Act.
    45. Comment: One commenter would like the Office to recognize that 
the mandate to disclose to Title IV-B and IV-E agencies under Sec.  
303.21(d)(2) and the prohibition on that mandated disclosure of NDNH 
and FCR information to IV-B and IV-E agencies without first 
independently verifying under (d)(3) will create confusion because 
under 42 U.S.C. 653(c)(4), IV-B, and IV-E agencies are authorized 
persons for receiving NDNH and FCR information for authorized purposes 
without independent verification for the limited purposes of 
establishing parentage and support.
    Response: Section 453(c) of the Act provides authority for IV-B and 
IV-E agencies to receive NDNH and FCR information without independent 
verification.
    46. Comment: One commenter notes that Sec.  303.21(e) makes it 
clear that a legislative body or governmental committee cannot obtain 
the release of information pertaining to an individual without consent 
of the individual. Please verify that it is up to the State to 
determine the nature of the consent of the individual (e.g., written, 
verbal, or notarized permission or a State could deny permission 
entirely?).
    Response: To the extent that an individual in a IV-D case submits a 
request to a legislator or legislative body concerning his or her IV-D 
case, the IV-D agency may disclose the information necessary for the 
response because the inquiry relates to the administration of the IV-D 
program and is authorized under paragraph (c). As mentioned earlier in 
the preamble, we deleted the language under paragraph (e) Safeguards, 
that ``safeguards shall also prohibit disclosure to any committee or 
legislative body (Federal, State, or local) of any confidential 
information, unless authorized by the individual as specified in 
paragraph (d) of this section.''
    47. Comment: One commenter, to emphasize the requirement that 
States establish the safeguards for victims of family violence required 
by the statute and by the automated system regulation, requested the 
following sentence be added to the end of Sec.  303.21(e): ``These 
safeguards shall also include prohibitions against the release of 
information when the State has reasonable evidence of domestic violence 
or child abuse against a party or a child and that the disclosure of 
such information could be harmful to the party or the child, as 
required by section 454(26) of the Act, and shall include use of the 
family violence indicator required under Sec.  307.11(f)(1)(x) of this 
chapter.''
    Response: We agree with the commenter and have revised Sec.  
303.21(e) accordingly.
    48. Comment: One commenter recommends adding a qualification to 
Sec.  303.21(e) that the information may be released where members of 
the legislature want information with respect to a IV-D case because of 
a constituent request on a particular case.
    Response: Addition of a qualification is not necessary. Under Sec.  
303.21(c) such disclosure is allowable because it is for IV-D purposes.

Appendix A to Sec.  303.21, Safeguarding Confidential Information

    1. Comment: One commenter is concerned that Appendix A does not 
recognize that among the duties of the IV-D program is the duty to 
avoid fraud in publicly-funded programs.
    Response: States are responsible for avoiding fraud in any 
publicly-funded program. However we have no authority to allow access 
to specific data when prohibited or limited by Federal statute.
    2. Comment: One commenter notes that the preamble to the proposed 
rule and the proposed language of Sec.  303.21 impose an independent 
verification requirement for NDNH but not for SDNH data. Yet the chart 
in Appendix A following proposed Sec.  303.21 applies this independent 
verification requirement to disclosure of SDNH data. This appears to be 
an error. If not, this requirement would be a major limitation on State 
use of State new hire data that has no basis in Federal law.
    Response: The chart indicates that independent verification is 
needed if the source of information is NDNH, FCR, or IRS, except that 
NDNH or FCR information may be shared with the IV-A, IV-B, and IV-E 
programs without verification. As mentioned earlier, we have redesigned 
Appendix A and added a new Appendix B and C. There is no requirement to 
independently verify SDNH information.

Section 303.70, Procedures for Submissions to the State Parent Locator 
Service (State PLS) or the Federal Parent Locator Service (FPLS)

    1. Comment: One commenter recommends that the Office specify that 
the word ``individuals'' as used in paragraph (a) includes parents, 
putative fathers, children and caretaker relatives.
    Response: Section 453 of the Act governs whom the Federal PLS may 
attempt to locate and by cross-reference in section 454(8) of the Act, 
whom the State PLS may attempt to locate. Section 453(a)(2)(A) refers 
to attempting to locate any individual ``(i) who is under an obligation 
to pay child support; (ii) against whom such an obligation is sought; 
(iii) to whom such an obligation is owed, or (iv) who has or may have 
parental rights with respect to a child.'' Caretaker relatives do not 
fit any of those conditions. However, we have substituted ``parents, 
putative fathers, and children'' for ``individuals'' in Sec.  
303.20(a).
    2. Comment: One commenter would like the following ``purpose'' to 
be added: The State PLS shall locate individuals for the purpose of 
facilitating informed and timely decisions about child welfare and 
permanency, since locating parents for IV-B/IV-E purposes goes beyond 
just ``establishing parentage'' or ``determining who has or may have 
parental rights to a child'' as the language in the proposed rule 
currently reads.
    Response: The language in Sec.  303.70(e)(1)(i) is the authorized 
purpose as stated in section 453(a)(2) of the Act for the release of 
information to IV-B and IV-E State agencies and is

[[Page 56439]]

consistent with timely decisions regarding child welfare.
    3. Comment: One commenter would like the word ``aid'' changed to 
``assistance as defined at 45 CFR 260.31'' in the proposed rule. This 
way, there will be a clear national policy in this area.
    Response: We have changed the word ``aid'' to ``assistance'' as 
suggested by the commenter but did not cite the regulation because it 
may change.

Section 307.13, Security and Confidentiality for Computerized Support 
Enforcement Systems in Operation After October 1, 1997

    1. Comment: Will more guidance be given to IV-D agencies regarding 
the type of information that will be needed by the State and Tribal 
agencies administrating programs under titles IV, XIX, and XXI of the 
Act?
    Response: We encourage IV-D agencies to work with other agencies to 
make such determinations.
    2. Comment: Could IV-A, XIX, and XXI workers have login IDs and 
passwords to the IV-D system if their access to the IV-D system were 
sufficiently limited to view only the information that those workers 
had the right to access?
    Response: It is possible but would require additional programming 
to ensure that the non-IV-D worker has access to only the authorized 
data including, as applicable, independently-verified data. Non-IV-D 
workers cannot have direct access to the IV-D screens, because usually 
the data on a typical IV-D system screen may contain IRS and financial 
institution information
    3. Comment: One commenter asks for clarification of the phrase 
``outside the IV-D program'' in Sec.  307.13(a)(5). Does this phrase 
mean that the State IV-D agency may not disclose NDNH or FCR 
information without independent verification even if it is a disclosure 
that is necessary to establish, modify or enforce child support? Would 
this phrase prohibit the IV-D agency from using MSFIDM information as 
evidence in a contempt of court proceeding to show the delinquent 
obligor had assets but still failed to pay child support as ordered 
unless the IV-D agency first obtained independent verification?
    Response: Establishing, modifying or enforcing a child support 
order, or a court proceeding where proof is brought regarding the fact 
that a delinquent obligor had assets but still failed to pay child 
support, are all IV-D purposes for a IV-D case. Because they are IV-D 
purposes, the IV-D agency may disclose NDNH or FCR information and 
independent verification does not apply.
    4. Comment: One commenter seeks clarification that Sec.  
307.13(a)(5) [now Sec.  307.13(a)(4)] does not require independent 
verification of FCR and NDNH information. If so, the commenter 
recommends deleting this provision as it is administratively 
burdensome. One commenter would like the Office to eliminate the 
restriction that requires independent verification of NDNH and FCR 
information to title IV, XIX and XXI agencies.
    Response: Independent verification of NDNH and FCR information is 
only necessary for disclosure for non-IV-D purposes. The regulation has 
been rewritten for clarity and Sec.  307.13(a)(4) requires written 
policies that limit disclosure outside the IV-D program, of National 
Directory of New Hire information, Federal Case Registry information, 
and IRS information that is restricted as specified in the Internal 
Revenue Code. Financial institution information cannot be shared 
outside the IV-D program. IV-A, IV-B, and IV-E agencies are authorized 
under various subsections of section 453 of the Act to receive NDNH and 
FCR information from the Federal PLS for certain specified purposes. 
Since these agencies are authorized to have this information, we are 
permitting the IV-D agency to disclose the NDNH or FCR information from 
the IV-D computerized support enforcement system directly to the IV-A, 
IV-B, or IV-E agency if it is being requested for the purpose 
authorized under section 453 of the Act. For IV-B and IV-E programs 
this includes establishing paternity or parental rights with respect to 
a child.
    5. Comment: One commenter seeks clarification as to who is 
responsible to conduct any verification.
    Response: The State IV-D agency must independently verify the data.

                                          Appendix A: Locating Individuals Through the State PLSs Sec.   302.35
--------------------------------------------------------------------------------------------------------------------------------------------------------
                                                               Persons about whom
     Authorized person/program        Authorized purpose of    information may be       Sources searched          Authorized          Limitations \1\
                                           the request                asked                                 information  returned
--------------------------------------------------------------------------------------------------------------------------------------------------------
Agent/attorney of a State who has    Establish paternity.    Noncustodial Parent...  Federal Parent         Six Elements:          See footnote.
 the duty or authority to collect     Establish, set the     Putative Father.......   Locator Service.      Person's Name........
 child and spousal support under      amount, modify, or     Custodial Parent......  In-state sources in    Person's SSN.........
 the IV-D plan. Section 453(c)(1).    enforce child support  Children. Section        accordance with       Person's address.....
                                      obligations and or to   453(a)(2)(A).           State law.            Employer's name......
                                      facilitate the                                                        Employer's address...
                                      location of any                                                       Employer
                                      individual who is                                                      Identification
                                      under an obligation                                                    Number. Section
                                      to pay child support,                                                  453(a)(2)(A)(iii).
                                      against whom such an                                                  Wages, income, and
                                      obligation is sought,                                                  benefits of
                                      or to whom such an                                                     employment,
                                      obligation is owed.                                                    including health
                                                                                                             care coverage.
                                                                                                             Section 453(a)(2)(B).
                                     Locate a parent or                                                     Type, status,
                                      child involved in a                                                    location, and amount
                                      non-IV-D child                                                         of assets or debts
                                      support case to                                                        owed by or to the
                                      disburse an income                                                     individual. Section
                                      withholding                                                            453(a)(2)(C).
                                      collection. Section
                                      453(a)(2).

[[Page 56440]]

 
Court that has the authority to      To facilitate the       Noncustodial Parent...  Federal Parent         Six Elements as above  No Internal Revenue
 issue an order against an NCP for    location of any        Custodial Parent......   Locator Service.      Wages, income, and      Service (IRS)
 the support and maintenance of       individual who is      Putative Father.......  In-state sources in     benefits of            information provided
 child, or to serve as the            under an obligation    Child.................   accordance with        employment,            for non-IV-D cases
 initiating court in an action to     to pay child support,                           State law.             including health       unless independently
 seek a child support order.          against whom such an                                                   care coverage.         verified.
 Section 453(c)(2).                   obligation is sought,                                                  Section 453(a)(2)(B). No Multistate
                                      or to whom such an                                                    Type, status,           Financial
                                      obligation is owed.                                                    location, and amount   Institution Data
                                                                                                             of assets or debts     Match (MSFIDM) and
                                                                                                             owed by or to the      no State Financial
                                                                                                             individual. Section    Institution Data
                                                                                                             453(a)(2)(C).          Match (FIDM)
                                                                                                                                    information provided
                                                                                                                                    for non-IV-D cases.
                                     Locate a parent or                                                                            No required
                                      child involved in a                                                                           subsequent attempts
                                      non-IV-D child                                                                                to locate unless
                                      support case..                                                                                there is a new
                                                                                                                                    request.
Resident parent, legal guardian,     To facilitate the       Noncustodial Parent...  Federal Parent         Six Elements as above  Child not receiving
 attorney, or agent of a child not    location of any        Putative Father.......   Locator Service.      Wages, income, and      IV-A benefits.
 receiving IV-A benefits (a non-IV-   individual who is                              In-state sources in     benefits of           No IRS Information.
 D request). Section 453(c)(3).\2\    under an obligation                             accordance with        employment,           No MSFIDM and no
                                      to pay child support,                           State law.             including health       State FIDM
                                      against whom such an                                                   care coverage.         information provided
                                      obligation is sought,                                                  Section 453(a)(2)(B).  for non-IV-D cases.
                                      or to whom such an                                                    Type, status,          In a non-IV-D
                                      obligation is owed.                                                    location, and amount   request, attestation
                                                                                                             of assets or debts     is required as
                                                                                                             owed by or to the      specified in Sec.
                                                                                                             individual. Section    302.35(c)(3)(i)-(iii
                                                                                                             453(a)(2)(C).          ).
                                     Locate a parent or
                                      child involved in a
                                      non-IV-D child
                                      support case.
                                                                                                                                   No required
                                                                                                                                    subsequent attempts
                                                                                                                                    to locate unless
                                                                                                                                    there is a new
                                                                                                                                    request.
State agency that is administering   To facilitate the       Noncustodial Parent...  Federal Parent         Six Elements as above  No IRS information
 a Child and Family Services          location of any        Putative Father.......   Locator Service.      Wages, income, and      unless independently
 program (IV-B) or a Foster Care      individual who has or  Custodial Parent......  In-state sources in     benefits of            verified.
 and Adoption IV-E program. Section   may have parental      Child. Section           accordance with        employment,           No MSFIDM information
 453(c)(4).                           rights with respect     453(a)(2)(A).           State law.             including health       and no State FIDM
                                      to the child. Section                                                  care coverage.         information
                                      453(a)(2)(iv).                                                                                provided.
                                                                                                            Type, status,
                                                                                                             location, and amount
                                                                                                             of assets or debts
                                                                                                             owed by or to the
                                                                                                             individual. Section
                                                                                                             453(a)(2)(C) .
--------------------------------------------------------------------------------------------------------------------------------------------------------
\1\ No information shall be disclosed if the disclosure of such information would contravene the national policy or security interests of the United
  States or the confidentiality of census data. No information shall be disclosed if the State has reasonable evidence of domestic violence or child
  abuse and the disclosure of such information could be harmful to the CP or child. See Section 453(b)(2) for release process to court or agent of the
  court.
\2\ A Tribal IV-D program may request access to the Federal PLS under this authority. See PIQ-07-02/TPIQ-07-02, Q&R 7.


[[Page 56441]]


                           Appendix B: Locating an Individual Sought in a Child Custody/Visitation or Parental Kidnapping Case
--------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                              About whom                              Authorized
         Type of request          Authorized person/  Authorized purpose  information may be   Sources searched       information       Limitations \1\
                                        program         of the request         requested                               returned
--------------------------------------------------------------------------------------------------------------------------------------------------------
LOCATING AN INDIVIDUAL SOUGHT IN  Any agent or        Determining the     A parent or child.  Federal Parent      Only the three      See footnote.
 A CHILD CUSTODY OR VISITATION     attorney of any     whereabouts of a    Sec.   463(a).      Locator Service.    following          No IRS information
 CASE.                             State who has the   parent or child                        In-state sources     elements:           provided.
                                   authority/duty to   to make or                              in accordance       Person's address   No MSFIDM or State
                                   enforce a child     enforce a custody                       with State law.     Employer's name     FIDM information
                                   custody or          or visitation                                               Employer's          provided.
                                   visitation          determination.                                              address Sec.
                                   determination.      Sec.   463(a)(2).                                           463(c).
                                   Sec.
                                   463(d(2)(A).
                                  A court, or agent                                                                                   No subsequent
                                   of the court,                                                                                       attempts to
                                   having                                                                                              locate unless
                                   jurisdiction to                                                                                     there is a new
                                   make or enforce a                                                                                   request.
                                   child custody or
                                   visitation
                                   determination.
                                   Sec.
                                   463(d)(2)(B).
LOCATING AN INDIVIDUAL SOUGHT IN  Agent or attorney   Determining the     A parent or child.  Federal Parent      Only the three      See footnote.
 A PARENTAL KIDNAPPING CASE.       of the U.S. or a    whereabouts of a    Sec.   463(a).      Locator Service.    following          No IRS information
                                   State who has       parent or child                        In-state sources     elements:           provided
                                   authority/duty to   to enforce any                          in accordance       Person's address   No MSFIDM or State
                                   investigate,        State or Federal                        with State law.     Employer's name     FIDM information
                                   enforce, or         law with respect                                            Employer's          provided.
                                   prosecute the       to the unlawful                                             address Sec.       No subsequent
                                   unlawful taking     taking or                                                   463(c).             attempts to
                                   or restraint of a   restraint of a                                                                  locate unless
                                   child. Sec.         child. Sec.                                                                     there is a new
                                   463(d)(2)(C).       463(a)(1).                                                                      request.
--------------------------------------------------------------------------------------------------------------------------------------------------------
\1\ No information shall be disclosed if the disclosure of such information would contravene the national policy or security interests of the United
  States or the confidentiality of census data. No information shall be disclosed if the State has reasonable evidence of domestic violence or child
  abuse and the disclosure of such information could be harmful to the CP or child. See Section 453(b)(2) for release process to court or agent of the
  court.


   Appendix C: Authority for State IV-D Agencies to Release Information to Non-IV-D Federal, State, and Tribal
                                                    Programs
----------------------------------------------------------------------------------------------------------------
                                                                              Authorized
            Authority             Authorized purpose  Authorized person/      information         Limitations
                                      of  request           program            returned
----------------------------------------------------------------------------------------------------------------
Sections 453 and 454A(f)(3) of    To perform State    State or Tribal     Confidential        No Internal
 the Act, Section 1102 of the      or Tribal agency    agencies            information found   Revenue Service
 Act; and 45 CFR 307.13.           responsibilities    administering       in automated        information
                                   of designated       title IV, XIX,      system.             unless
                                   programs.           and XXI programs.                       independently
                                                                                               verified.
                                                                                              No MSFIDM or State
                                                                                               FIDM information
                                                                                               provided.
                                                                                              No NDNH and FCR
                                                                                               information for
                                                                                               title XIX and XXI
                                                                                               unless
                                                                                               independently
                                                                                               verified.
                                                                                              For IV-B/IV-E, for
                                                                                               purpose of
                                                                                               section 453(a)(2)
                                                                                               of the Act can
                                                                                               have NDNH and FCR
                                                                                               information
                                                                                               without
                                                                                               independent
                                                                                               verification.
                                                                                              --Any other
                                                                                               purpose requires
                                                                                               independent
                                                                                               verification.
                                                                                              For IV-A NDNH/FRC
                                                                                               information for
                                                                                               purposes of
                                                                                               section 453(j) of
                                                                                               the Act without
                                                                                               independent
                                                                                               verification.
                                                                                              --Need
                                                                                               verification for
                                                                                               other purposes.

[[Page 56442]]

 
Sections 453A(h)(2) and 1137 of   Income and          State agencies      SDNH information:
 the Act--State Directory of New   eligibility         administering       Individual's
 Hires.                            verification        title IV-A,         name, address and
                                   purposes of         Medicaid,           SSN; employer's
                                   designated          unemployment        name, address,
                                   programs.           compensation,       and Federal
                                                       food stamps, or     employer
                                                       other State         identification
                                                       programs under a    number.
                                                       plan approved
                                                       under title I, X,
                                                       XIV, or XVI of
                                                       the Act.
----------------------------------------------------------------------------------------------------------------

IV. Regulatory Review

A. Paperwork Reduction Act

    Section 302.35(c) contains an information collection requirement. 
As required by the Paperwork Reduction Act of 1995 (44 U.S.C. 3507(d)), 
the Administration for Children and Families submitted a copy of this 
section to the Office of Management and Budget (OMB) for its review. We 
received only one comment regarding the attestation; therefore in the 
final rule have not revised any language in Sec.  307.13 relating to 
attestation.
    1. Comment: One commenter noted that the Paper Reduction Act 
estimate of 702 hours grossly underestimates the time needed to 
complete the requirements of these proposed regulations. Requiring 
State IV-D agencies to independently verify NDNH and FCR hits requires 
a tremendous amount of paperwork, time, and effort.
    Response: The regulation does not require independent verification. 
It sets forth the conditions for the release of information that the 
State would not be able to release for non-IV-D purposes otherwise. If 
the information has not been independently verified, it may not be 
released for non-IV-D purposes or to persons not specified in section 
453 of the Act.

B. Regulatory Flexibility Analysis

    The Secretary certifies that, under 5 U.S.C. 605(b), as enacted by 
the Regulatory Flexibility Act (Pub. L. 96-354), this rule will not 
result in a significant impact on a substantial number of small 
entities. The primary impact is on State governments. State governments 
are not considered small entities under the Act.

C. Executive Order 12866

    Executive Order 12866 requires that regulations be reviewed to 
ensure that they are consistent with the priorities and principles set 
forth in the Executive Order. The Department has determined that this 
rule is consistent with these priorities and principles. This 
regulation responds to State requests for guidance on data privacy 
issues.
    The primary purpose of this regulation is to clarify requirements 
for safeguarding child support enforcement information by consolidating 
various statutory requirements on disclosure and safeguarding of 
information into a regulatory framework. There are no appreciable costs 
related to this regulation as the relevant statutory requirements have 
been in place for many years and the regulation substantially reflects 
current operating practices.

D. Unfunded Mandates Reform Act of 1995

    Section 202 of the Unfunded Mandates Reform Act of 1995 requires 
that a covered agency prepare a budgetary impact statement before 
promulgating a rule that includes any Federal mandate that may result 
in the expenditure by State, local, and Tribal governments, in the 
aggregate, or by the private sector, of $100 million or more in any one 
year.
    If a covered agency must prepare a budgetary impact statement, 
section 205 further requires that it select the most cost-effective and 
least burdensome alternative that achieves the objectives of the rule 
and is consistent with the statutory requirements. In addition, section 
203 requires a plan for informing and advising any small governments 
that may be significantly or uniquely impacted by the rule.
    We have determined that this rule will not result in the 
expenditure by State, local, and Tribal governments, in the aggregate, 
or by the private sector, of more than $100 million in any one year. 
Accordingly, we have not prepared a budgetary impact statement, 
specifically addressed the regulatory alternatives considered, or 
prepared a plan for informing and advising any significantly or 
uniquely impacted small governments.

E. Congressional Review

    This rule is not a major rule as defined in 5 U.S.C. chapter 8.

F. Assessment of Federal Regulations and Policies on Families

    Section 654 of the Treasury and General Government Appropriations 
Act of 1999 requires Federal agencies to determine whether a policy or 
regulation may affect family well-being. If the agency's determination 
is affirmative, then the agency must prepare an impact assessment 
addressing seven criteria specified in the law. This Office has 
reviewed and determined that these regulations protect the 
confidentiality of information contained in the records of State child 
support enforcement agencies and will not have an impact on family well 
being as defined in the legislation.

G. Executive Order 13132

    Executive Order 13132 prohibits an agency from publishing any rule 
that has federalism implications if the rule either imposes substantial 
direct compliance costs on State and local governments and is not 
required by statute, or the rule preempts State law, unless the agency 
meets the consultation and funding requirements of section 6 of the 
Executive Order. This rule does not have federalism implication as 
defined in the Executive order.

List of Subjects

45 CFR Part 302

    Child support, Grants programs/social programs, Reporting and 
recordkeeping requirements.

45 CFR part 303

    Child support, Grant programs/social programs, Reporting and 
recordkeeping requirements.

45 CFR Part 307

    Child support, Grant programs/social programs, computer technology,

[[Page 56443]]

Reporting and recordkeeping requirements.

(Catalog of Federal Domestic Assistance Programs No. 93.563, Child 
Support Enforcement Program.)

    Dated: April 23, 2008.
Daniel C. Schneider,
Acting Assistant Secretary for Children and Families.
    Approved: June 23, 2008.
Michael O. Leavitt,
Secretary of Health and Human Services.

0
Accordingly, the Department of Health and Human Services amends title 
45 chapter III of the Code of Federal Regulations as follows:

PART 302--STATE PLAN REQUIREMENTS

0
1. The authority citation for part 302 is revised to read as follows:

    Authority: 42 U.S.C. 651 through 658, 660, 663, 664, 666, 667, 
1302, 1396a(a)(25), 1396b(d)(2), 1396b(o), 1396b(p), 1396(k).


0
2. Section 302.35 is revised to read as follows:


Sec.  302.35  State parent locator service.

    The State plan shall provide as follows:
    (a) State PLS. The IV-D agency shall maintain a State PLS to 
provide locate information to authorized persons for authorized 
purposes.
    (1) For IV-D cases and IV-D purposes by the IV-D agency. The State 
PLS shall access the Federal PLS and all relevant sources of 
information and records available in the State, and in other States as 
appropriate, for locating custodial parents, noncustodial parents, and 
children for IV-D purposes.
    (2) For authorized non-IV-D individuals and purposes--
    (i) The State PLS shall access and release information authorized 
to be disclosed under Section 453(a)(2) of the Act from the Federal PLS 
and, in accordance with State law, information from relevant in-state 
sources of information and records, as appropriate, for locating 
custodial parents, noncustodial parents, and children upon request of 
authorized individuals specified in paragraph (c) of this section, for 
authorized purposes specified in paragraph (d) of this section.
    (ii) The State PLS shall not release information from the 
computerized support enforcement system required under part 307 of this 
chapter, IRS information, or financial institution data match 
information, nor shall the State PLS forward a non-IV-D request to 
another State IV-D agency.
    (iii) The State PLS need not make subsequent location attempts if 
locate efforts fail to find the individual sought unless a new request 
is submitted.
    (b) Central State PLS requirement. The IV-D program shall maintain 
a central State PLS to submit requests to the Federal PLS.
    (c) Authorized persons. The State PLS shall accept requests for 
locate information only from the following authorized persons:
    (1) Any State or local agency or official providing child and 
spousal support services under the State plan;
    (2) A court that has authority to issue an order or to serve as the 
initiating court in an action to seek an order against a noncustodial 
parent for the support and maintenance of a child, or any agent of such 
court;
    (3) The resident parent, legal guardian, attorney, or agent of a 
child who is not receiving assistance under title IV-A of the Act only 
if the individual:
    (i) Attests that the request is being made to obtain information 
on, or to facilitate the discovery of, any individual in accordance 
with section 453(a)(2) of the Act for the purpose of establishing 
parentage, establishing, setting the amount of, modifying, or enforcing 
child support obligations;
    (ii) Attests that any information obtained through the Federal or 
State PLS shall be used solely for these purposes and shall be 
otherwise treated as confidential;
    (iii) Provides evidence that the requestor is the parent, legal 
guardian, attorney, or agent of a child not receiving assistance under 
title IV-A, and if an agent of such a child, evidence of a valid 
contract that meets any requirements in State law or written policy for 
acting as an agent and, if a parent, attestation that he or she is the 
resident parent.
    (iv) Pays the fee required for Federal PLS services under section 
453(e)(2) of the Act and Sec.  303.70(f)(2)(i) of this chapter, if the 
State does not pay the fee itself. The State may also charge a fee to 
cover its costs of processing the request, which must be as close to 
actual costs as possible, so as not to discourage requests to use the 
Federal PLS. If the State itself pays the fee for use of the Federal 
PLS or the State PLS in a non-IV-D case, Federal financial 
participation is not available in those expenditures.
    (4) Authorized persons as defined in Sec.  303.15 of this chapter 
in connection with parental kidnapping, child custody or visitation 
cases; or
    (5) A State agency that is administering a program operated under a 
State plan under titles IV-B or IV-E of the Act.
    (d) Authorized purposes for requests and scope of information 
provided. The State PLS shall obtain location information under this 
section only for the purposes specified in paragraphs (d)(1) and (d)(2) 
of this section.
    (1) To locate an individual with respect to a child in a IV-D, non-
IV-D, IV-B, or IV-E case. The State PLS shall locate individuals for 
the purpose of establishing parentage, or establishing, setting the 
amount of, modifying, or enforcing child support obligations or for 
determining who has or may have parental rights with respect to a 
child. For these purposes, only information available through the 
Federal PLS or the State PLS may be provided. This information is 
limited to Social Security Number(s), most recent address, employer 
name and address, employer identification number, wages or other income 
from, and benefits of, employment, including rights to, or enrollment 
in, health care coverage, and asset or debt information.
    (2) To locate an individual sought for the unlawful taking or 
restraint of a child or for child custody or visitation purposes. The 
State PLS shall locate individuals for the purpose of enforcing a State 
law with respect to the unlawful taking or restraint of a child or for 
making or enforcing a child custody or visitation determination as 
defined in section 463(d)(1) of the Act. For this purpose, only the 
information available through the Federal PLS or the State PLS may be 
provided. This information is limited to most recent address and place 
of employment of a parent or child.
    (e) Locate information subject to disclosure. Subject to the 
requirements of this section and the privacy safeguards required under 
section 454(26) of the Act and the family violence indicators under 
section 307.11(f)(1)(x) of this part, the State PLS shall disclose the 
following information to authorized persons for authorized purposes,
    (1) Federal PLS information described in sections 453 and 463 of 
the Act; and
    (2) Information from in-state locate sources.

PART 303--STANDARDS FOR PROGRAM OPERATIONS

0
1. The authority citation for part 303 is revised to read as follows:

    Authority: 42 U.S.C. 651 through 658, 660, 663, 664, 666, 667, 
1302, 1396a(a)(25), 1396b(d)(2), 1396b(o), 1396b(p) and 1396(k).


0
2. Revise Sec.  303.3 to read as follows:

[[Page 56444]]

Sec.  303.3  Location of noncustodial parents in IV-D cases.

    (a) Definition. For purposes of this section, location means 
obtaining information concerning the physical whereabouts of the 
noncustodial parent, or the noncustodial parent's employer(s), other 
sources of income or assets, as appropriate, which is sufficient and 
necessary to take the next appropriate action in a IV-D case.
    (b) For all cases referred to the IV-D program for IV-D services 
because of an assignment of support rights or cases opened upon 
application for IV-D services under Sec.  302.33 of this chapter, the 
IV-D program must attempt to locate all noncustodial parents or their 
sources of income and/or assets when location is needed to take a 
necessary action. Under this standard, the IV-D program must:
    (1) Use appropriate location sources such as the Federal PLS; 
interstate location networks; local officials and employees 
administering public assistance, general assistance, medical 
assistance, food stamps, and social services (whether such individuals 
are employed by the State or a political subdivision); relatives and 
friends of the noncustodial parent, current or past employers; the 
local telephone company; the U.S. Postal Service; financial references; 
unions; fraternal organizations; and police, parole, and probation 
records, if appropriate; and State agencies and departments, as 
authorized by State law, including those departments which maintain 
records of public assistance, wages and employment, unemployment 
insurance, income taxation, driver's licenses, vehicle registration, 
and criminal records and other sources;
    (2) Establish working relationships with all appropriate agencies 
in order to use locate resources effectively;
    (3) Within no more than 75 calendar days of determining that 
location is necessary, access all appropriate location sources and 
ensure that location information is sufficient to take the next 
appropriate action in a case;
    (4) Refer appropriate IV-D cases to the IV-D program of any other 
State, in accordance with the requirements of Sec.  303.7 of this part. 
The IV-D program of such other State shall follow the procedures in 
paragraphs (b)(1) through (b)(3) of this section for such cases, as 
necessary, except that the responding State is not required to access 
the Federal PLS;
    (5) Repeat location attempts in cases in which previous attempts to 
locate noncustodial parents or sources of income and/or assets have 
failed, but adequate identifying and other information exists to meet 
requirements for submittal for location, either quarterly or 
immediately upon receipt of new information which may aid in location, 
whichever occurs sooner. Quarterly attempts may be limited to automated 
sources, but must include accessing State employment security files. 
Repeated attempts because of new information which may aid in location 
must meet the requirements of paragraph (b)(3) of this section; and
    (6) Have in effect safeguards, applicable to all confidential 
information handled by the IV-D program, that are designed to protect 
the privacy rights of the parties and that comply with the requirements 
of sections 454(26) and 454A(d) and (f) of the Act and Sec. Sec.  
303.21 and 307.13.
    (c) The State must establish guidelines defining diligent efforts 
to serve process. These guidelines must include periodically repeating 
service of process attempts in cases in which previous attempts to 
serve process have failed, but adequate identifying and other 
information exists to attempt service of process.

0
4. Section 303.20 is amended by revising paragraph (b)(7) as follows:


Sec.  303.20  Minimum organizational and staffing requirements.

    (b) * * *
    (7) Operation of the State PLS as required under Sec. Sec.  302.35, 
303.3, and 303.70 of this chapter.
* * * * *

0
5. Section 303.21 is added to read as follows:


Sec.  303.21  Safeguarding and disclosure of confidential information.

    (a) Definitions--(1) Confidential information means any information 
relating to a specified individual or an individual who can be 
identified by reference to one or more factors specific to him or her, 
including but not limited to the individual's Social Security number, 
residential and mailing addresses, employment information, and 
financial information.
    (2) Independent verification is the process of acquiring and 
confirming confidential information through the use of a second source. 
The information from the second source, which verifies the information 
about NDNH or FCR data, may be released to those authorized to inspect 
and use the information as authorized under the regulations or the Act.
    (b) Scope. The requirements of this section apply to the IV-D 
agency, any other State or local agency or official to whom the IV-D 
agency delegates any of the functions of the IV-D program, any official 
with whom a cooperative agreement as described in Sec.  302.34 of this 
part has been entered into, and any person or private agency from whom 
the IV-D agency has purchased services pursuant to Sec.  304.22 of this 
chapter.
    (c) General rule. Except as authorized by the Act and implementing 
regulations, an entity described in paragraph (b) of this section may 
not disclose any confidential information, obtained in connection with 
the performance of IV-D functions, outside the administration of the 
IV-D program.
    (d) Authorized disclosures. (1) Upon request, the IV-D agency may, 
to the extent that it does not interfere with the IV-D agency meeting 
its own obligations and subject to such requirements as the Office may 
prescribe, disclose confidential information to State agencies as 
necessary to carry out State agency functions under plans or programs 
under title IV (including tribal programs under title IV) and titles 
XIX, or XXI of the Act, including:
    (i) Any investigation, prosecution or criminal or civil proceeding 
conducted in connection with the administration of any such plan or 
program; and
    (ii) Information on known or suspected instances of physical or 
mental injury, sexual abuse or exploitation, or negligent treatment or 
maltreatment of a child under circumstances which indicate that the 
child's health or welfare is threatened.
    (2) Upon request, the IV-D agency may disclose information in the 
SDNH, pursuant to sections 453A and 1137 of the Act for purposes of 
income and eligibility verification.
    (3) Authorized disclosures under paragraph (d)(1) and (2) of this 
section shall not include confidential information from the National 
Directory of New Hires or the Federal Case Registry, unless authorized 
under Sec.  307.13 of this Chapter or unless it is independently 
verified information. No financial institution data match information 
may be disclosed outside the administration of the IV-D program and no 
IRS information may be disclosed, unless independently verified or 
otherwise authorized in Federal statute. States must have safeguards in 
place as specified in section 454A(d) and (f) of the Act.
    (e) Safeguards. In addition to, and not in lieu of, the safeguards 
described in Sec.  307.13 of this chapter, which governs computerized 
support enforcement systems, the IV-D agency shall establish 
appropriate safeguards to comply with the provisions of this section. 
These safeguards shall also include prohibitions against the release of

[[Page 56445]]

information when the State has reasonable evidence of domestic violence 
or child abuse against a party or a child and that the disclosure of 
such information could be harmful to the party or the child, as 
required by section 454(26) of the Act, and shall include use of the 
family violence indicator required under Sec.  307.11(f)(1)(x) of this 
chapter.
    (f) Penalties for unauthorized disclosure. Any disclosure or use of 
confidential information in violation of the Act and implementing 
regulations shall be subject to any State and Federal statutes that 
impose legal sanctions for such disclosure.

    6. Revise Sec.  303.70 to read as follows:


Sec.  303.70  Procedures for submissions to the State Parent Locator 
Service (State PLS) or the Federal Parent Locator Service (Federal 
PLS).

    (a) The State agency will have procedures for submissions to the 
State PLS or the Federal PLS for the purpose of locating parents, 
putative fathers, or children for the purpose of establishing parentage 
or establishing, setting the amount of, modifying, or enforcing child 
support obligations; or for the purpose of enforcing any Federal or 
State law with respect to the unlawful taking or restraint of a child 
or making or enforcing a child custody or visitation determination as 
defined in section 463(d)(1) of the Act.
    (b) Only the central State PLS may make submittals to the Federal 
PLS for the purposes specified in paragraph (a) of this section.
    (c) All submittals shall be made in the manner and form prescribed 
by the Office.
    (d) All submittals shall contain the following information:
    (1) The parent's or putative father's name;
    (2) The parent's or putative father's Social Security Number (SSN). 
If the SSN is unknown, the IV-D program must make reasonable efforts to 
ascertain the individual's SSN before making a submittal to the Federal 
PLS; and
    (3) Any other information prescribed by the Office.
    (e) The director of the IV-D agency or his or her designee shall 
attest annually to the following:
    (1)(i) The IV-D agency will only obtain information to facilitate 
the discovery of any individual in accordance with section 453(a)(2) of 
the Act for the purpose of establishing parentage, establishing, 
setting the amount of, modifying, or enforcing child support 
obligations, or for determining who has or may have parental rights 
with respect to a child, or in accordance with section 453(a)(3) of the 
Act for enforcing a State law with respect to the unlawful taking or 
restraint of a child, or for making or enforcing a child custody or 
visitation determination as defined in section 463(d)(1) of the Act.
    (ii) The IV-D agency will only provide information to the 
authorized persons specified in sections 453(c) or 463(d) of the Act 
and Sec.  302.35 of this chapter.
    (2) In the case of a submittal made on behalf of a resident parent, 
legal guardian, attorney or agent of a child not receiving assistance 
under title IV-A, the IV-D agency must verify that the requesting 
individual has complied with the provisions of Sec.  302.35 of this 
chapter.
    (3) The IV-D agency will treat any information obtained through the 
Federal PLS and SPLS as confidential and shall safeguard the 
information under the requirements of sections 453(b), 453(l), 454(8), 
454(26), and 463(c) of the Act, Sec.  303.21 of this part and 
instructions issued by the Office.
    (f)(1) The IV-D agency shall reimburse the Secretary for the fees 
required under:
    (i) Section 453(e)(2) of the Act whenever Federal PLS services are 
furnished to a resident parent, legal guardian, attorney or agent of a 
child not receiving assistance under title IV-A of the Act;
    (ii) Section 454(17) of the Act whenever Federal PLS services are 
furnished in parental kidnapping and child custody or visitation 
determination;
    (iii) Section 453(k)(3) of the Act whenever a State agency receives 
information from the Federal PLS pursuant to section 453 of the Act.
    (2)(i) The IV-D agency may charge an individual requesting 
information, or pay without charging the individual, the fees required 
under sections 453(e)(2), 453(k)(3) or 454(17) of the Act except that 
the IV-D agency shall charge an individual specified in section 
453(c)(3) of the Act the fee required under section 453(e)(2) of the 
Act
    (ii) The IV-D agency may recover the fee required under section 
453(e)(2) of the Act from the noncustodial parent who owes a support 
obligation to a family on whose behalf the IV-D agency is providing 
services and repay it to the individual requesting information or 
itself.
    (iii) State funds used to pay the fee under section 453(e)(2) of 
the Act are not program expenditures under the State plan but are 
program income under Sec.  304.50 of this chapter.
    (3) The fees referenced in paragraph (f)(1) of this section shall 
be in an amount determined to be reasonable payment for the information 
exchange.
    (4)(i) If a State fails to transmit the fees charged by the Office 
under this section, the services provided by the Federal PLS in cases 
subject to the fees may be suspended until payment is received.
    (ii) Fees shall be transmitted in the amount and manner prescribed 
by the Office in instructions.

PART 307--COMPUTERIZED SUPPORT ENFORCEMENT SYSTEMS IN OPERATION 
AFTER OCTOBER 1, 1997

0
1. The authority citation for part 307 continues to read as follows:

    Authority: 42 U.S.C. 652 through 658, 664, 666 through 669A, and 
1302.


0
2. Amend Sec.  307.13 by revising paragraph (a) to read as follows:


Sec.  307.13  Security and confidentiality for computerized support 
enforcement systems in operation after October 1, 1997.

* * * * *
    (a) Information integrity and security. Have safeguards protecting 
the integrity, accuracy, completeness of, access to, and use of data in 
the computerized support enforcement system. These safeguards shall 
include written policies concerning access to data by IV-D agency 
personnel, and the sharing of data with other persons to:
    (1) Permit access to and use of data to the extent necessary to 
carry out the State IV-D program under this chapter;
    (2) Specify the data which may be used for particular IV-D program 
purposes, and the personnel permitted access to such data;
    (3) Permit exchanging information with State and Tribal agencies 
administering programs under titles IV, XIX, and XXI of the Act, to the 
extent necessary to carry out those State and Tribal agency 
responsibilities under such programs in accordance with section 
454A(f)(3) of the Act, and to the extent that it does not interfere 
with IV-D program meeting its own obligations.
    (4) Prohibit the disclosure of NDNH, FCR, financial institution, 
and IRS information outside the IV-D program except that:
    (i) IRS information is restricted as specified in the Internal 
Revenue Code;
    (ii) Independently verified information other than financial 
institution information may be released to authorized persons;
    (iii) NDNH and FCR information may be disclosed without independent 
verification to IV-B and IV-E agencies

[[Page 56446]]

for the purposes of establishing parentage or establishing parental 
rights with respect to a child; and
    (iv) NDNH and FCR information may be disclosed without independent 
verification to IV-A agencies for the purpose of assisting States to 
carry out their responsibilities of administering the Title IV-A 
programs.
* * * * *
[FR Doc. E8-22054 Filed 9-25-08; 8:45 am]
BILLING CODE 4184-01-P