[Federal Register Volume 89, Number 174 (Monday, September 9, 2024)]
[Notices]
[Pages 73104-73109]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2024-20155]


-----------------------------------------------------------------------

DEPARTMENT OF HOMELAND SECURITY

[Docket No. FEMA-2024-0019]


Privacy Act of 1974; System of Records

AGENCY: Federal Emergency Management Agency, U.S. Department of 
Homeland Security.

ACTION: Notice of a modified system of records.

-----------------------------------------------------------------------

SUMMARY: In accordance with the Privacy Act of 1974, the U.S. 
Department of Homeland Security (DHS)/Federal Emergency Management 
Agency (FEMA) proposes to modify and reissue an existing DHS system of 
records titled, ``DHS/FEMA-008 Disaster Recovery Assistance Files 
System of Records.'' This system of records describes DHS/FEMA's 
collection and maintenance of records on applicants for its Disaster 
Assistance programs that provide financial and other assistance to 
survivors of Presidentially declared disasters or emergencies. DHS/FEMA 
is updating this system of records notice to add or modify several 
routine uses and update the categories of records. This modified system 
will be included in DHS's inventory of record systems.

DATES: Submit comments on or before October 9, 2024. This modified 
system will be effective upon publication. New or modified routine uses 
will be effective October 9, 2024.

ADDRESSES: You may submit comments, identified by docket number FEMA-
2024-0019 by one of the following methods:
     Federal e-Rulemaking Portal: http://www.regulations.gov. 
Follow the instructions for submitting comments.
     Fax: 202-343-4010.
     Mail: Deborah T Fleischaker, Chief Privacy Officer (A), 
Privacy Office, U.S. Department of Homeland Security, Washington, DC 
20528-0655.
    Instructions: All submissions received must include the agency name 
and docket number FEMA-2024-0019. All comments received will be posted 
without change to http://www.regulations.gov, including any personal 
information provided.
    Docket: For access to the docket to read background documents or 
comments received, go to http://www.regulations.gov.

FOR FURTHER INFORMATION CONTACT: For general questions, please contact: 
Russell Bard, (202) 766-0582, [email protected], Chief Privacy 
Officer, Federal Emergency Management Agency, U.S. Department of 
Homeland Security, Washington, DC 20528. For privacy questions, please 
contact: Deborah T Fleischaker, [email protected], Chief Privacy 
Officer (A), Privacy Office, U.S. Department of Homeland Security, 
Washington, DC 20528-0655.

SUPPLEMENTARY INFORMATION:

I. Background

    In accordance with the Privacy Act of 1974, 5 U.S.C. 552a, this 
modified system of records notice is being published because the 
Federal Emergency Management Agency (FEMA) collects, maintains, uses, 
retrieves, and disseminates personally identifiable information of 
individuals who apply for FEMA disaster assistance when a Presidential 
disaster declaration or emergency has occurred or may be imminent. 
Applicant records maintained in this FEMA system may contain income 
information, insurance information, housing inspection reports, 
correspondence and notations about delivery of various types of 
assistance,

[[Page 73105]]

and appeals and recovery of disaster assistance funds information.
    The purpose of this system of records is to facilitate registration 
for FEMA's disaster assistance programs; correspond with applicants; 
verify Individuals and Households Program (IHP) Assistance applicant 
information; determine the eligibility of applicants; and focus, 
direct, and refer applicants to all sources of disaster assistance. 
Additional purposes include: preventing a duplication of Federal 
Government efforts and benefits; identifying the potential misuse of 
disaster assistance; identifying disaster assistance provided in error; 
identifying and preventing possible fraudulent activity in anticipation 
of or after a Presidentially declared major disaster or emergency; and 
assessing FEMA's disaster assistance programs for equity and customer 
satisfaction. The information maintained in this system of records may 
also be used by FEMA to identify and implement measures to reduce 
future disaster damage. To accomplish these purposes, FEMA may maintain 
investigative summary reports in this system of records to support the 
recoupment, appeals, and oral hearing processes.
    FEMA is updating this system of records notice to reflect the 
following changes: the addition and modification of new routine uses 
and an addition to the categories of records maintained in the system. 
Routine Use I is being modified for clarity by separating the two 
purposes of addressing disaster-related unmet needs and duplication of 
benefits into distinct routine uses. Routine Use J is being modified to 
allow FEMA to more broadly share data to appropriate agencies and 
organizations to assist with addressing disaster-related unmet needs of 
survivors and to specifically allow FEMA to share data limited to 
survivor name and contact information when certain entities that do not 
address disaster-related unmet needs of survivors provide other 
services like outreach or referrals. This modification also will enable 
FEMA to share data with local government entities that provide services 
to address disaster-related unmet needs, for example, if a local 
government needs to implement a State disaster program. This need often 
arises with States that require the use of local resources to implement 
the State disaster program. Additionally, Routine Use K has been added, 
replacing the previous Routine Use K, to cover limited sharing to 
government and private entities that issue permits and connect 
utilities to FEMA-provided temporary housing units for FEMA applicants 
eligible for direct temporary housing assistance, previously addressed 
(in part) under Routine Use I. Proceeding routine uses have been re-
lettered accordingly.
    The categories of records have been updated to include the data 
element Contractor Identification (ID). Contractor ID is a unique 
number specific to each contractor FEMA hires to conduct damage 
inspections of homes after a declared disaster to enable FEMA to 
determine survivor eligibility for assistance. FEMA added Contractor ID 
for a more comprehensive list of data included in the Inspection 
Reports and for quality control purposes.
    Consistent with DHS's information sharing mission, information 
stored within the DHS/FEMA-008 Disaster Recovery Assistance Files 
System of Records may be shared with other DHS Components that have a 
need to know the information to carry out their national security, law 
enforcement, immigration, intelligence, or other homeland security 
functions. In addition, DHS/FEMA may share information with appropriate 
Federal, State, local, Tribal, territorial, foreign, or international 
government agencies consistent with the routine uses set forth in this 
system of records notice.
    This modified system will be included in DHS's inventory of record 
systems.

II. Privacy Act

    The Privacy Act embodies fair information practice principles in a 
statutory framework governing the means by which Federal Government 
agencies collect, maintain, use, and disseminate individuals' records. 
The Privacy Act applies to information that is maintained in a ``system 
of records.'' A ``system of records'' is a group of any records under 
the control of an agency from which information is retrieved by the 
name of an individual or by some identifying number, symbol, or other 
identifying particular assigned to the individual. In the Privacy Act, 
an individual is defined to encompass U.S. citizens and lawful 
permanent residents. Additionally, the Judicial Redress Act (JRA) 
provides covered persons with a statutory right to make requests for 
access and amendment to covered records, as defined by the JRA, and 
judicial review for denials of such requests. In addition, the JRA 
prohibits disclosure of covered records, except as otherwise permitted 
by the Privacy Act.
    Below is the description of the DHS/FEMA-008 Disaster Recovery 
Assistance Files System of Records.
    In accordance with 5 U.S.C. 552a(r), DHS has provided a report of 
this system of records to the Office of Management and Budget and 
Congress.

SYSTEM NAME AND NUMBER:
    Department of Homeland Security (DHS)/Federal Emergency Management 
Agency (FEMA)-008 Disaster Recovery Assistance Files System of Records.

SECURITY CLASSIFICATION:
    Unclassified.

SYSTEM LOCATION:
    DHS/FEMA maintains records at the FEMA Headquarters in Washington, 
DC; FEMA Regional Offices; Joint Field Offices; National Processing 
Service Centers; Disaster Recovery Centers; and the DHS/FEMA data 
centers located in Bluemont, Virginia and Clarksville, Virginia.

SYSTEM MANAGER(S):
    Deputy Director, Individual Assistance Division, (202) 646-3642, 
[email protected], Federal Emergency Management Agency, 
500 C Street SW, Washington, DC 20472.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    Robert T. Stafford Disaster Relief and Emergency Assistance Act 
(the Stafford Act), Public Law 93-288, as amended (42 U.S.C. 5121-
5207); 6 U.S.C. 728, 776, 777, and 795; the Debt Collection Improvement 
Act of 1996, 31 U.S.C. 3325(d) and 7701(c)(1); the Government 
Performance and Results Act, Public Law 103-62, as amended; Executive 
Order 13411; and Executive Order 12862.

PURPOSE(S) OF THE SYSTEM:
    The purpose of this system is to register applicants seeking 
disaster assistance from FEMA after a Presidential major disaster 
declaration or emergency and when a declaration may be imminent, but 
not yet declared; verify Individuals and Households Program applicant 
information; determine eligibility of applicants; correspond with, 
focus, direct, and refer applicants to available sources of disaster 
assistance; and inspect damaged property. Additional purposes include: 
to identify and implement measures to reduce future disaster damage; 
prevent or correct a duplication of Federal Government efforts and 
benefits; identify possible fraudulent activity after a Presidentially 
declared disaster or emergency; identify assistance provided in error, 
funds spent inappropriately by the applicant, or misuse of disaster 
assistance; and assess the customer satisfaction of FEMA disaster 
assistance applicants.

[[Page 73106]]

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    All individuals and their household members who apply for or 
express interest in applying for FEMA disaster assistance following a 
Presidentially declared major disaster or emergency and when a 
declaration may be imminent (Note: FEMA will accept applications from 
any individual; however, an individual must self-certify as a U.S. 
citizen, non-citizen national, or qualified non-citizen to meet the 
eligibility requirements for Individuals and Households Program 
Assistance). Individuals also include those who apply for or express 
interest in non-FEMA assistance programs to facilitate a duplication of 
benefits check or determination of unmet needs.

CATEGORIES OF RECORDS IN THE SYSTEM:
    (a) Registration and Assistance Records.
     Disaster number;
     FEMA Registration ID/Occupant ID;
     Applicant/co-applicant information:
    [cir] Full name;
    [cir] Social Security number or A-Number;
    [cir] Citizenship status;
    [cir] Signature;
    [cir] Date of birth;
    [cir] Phone numbers;
    [cir] Email addresses;
    [cir] Mailing addresses;
    [cir] Position title and number of years;
    [cir] Employer name;
    [cir] Language(s) spoken;
    [cir] Number of dependents claimed;
    [cir] User ID;
    [cir] Password; and
    [cir] Personal Identification Number (PIN).
     Witness name and signature;
     Damaged dwelling:
    [cir] Addresses of the damaged dwelling and the applicant's current 
address (if other than the damaged dwelling);
    [cir] County;
    [cir] Geospatial location of the damaged dwelling; and
    [cir] Information related to the residence (accessibility, type, 
own/rent, damage sustained).
     Disaster-related expenses;
     Emergency needs (e.g., food, clothing, shelter);
     Disability-related needs and accommodations (e.g., sign 
language interpreter, Assistive Listening Device, braille, wheelchair 
access, mobility, mental, hearing, vision, other needs and 
accommodations);
     Occupant and household information (for all occupants at 
the time of disaster):
    [cir] Name (first name, middle initial, last name);
    [cir] Age;
    [cir] Relationship to applicant;
    [cir] Dependent;
    [cir] Sex;
    [cir] Pre- and post-disaster income information of occupants 18 
years of age or older; and
    [cir] Tribal Membership Status (if applicable).
     Business damage:
    [cir] Self-employment is primary income (Yes/No); and
     Business or rental property affected? (Yes/No)
     Authorization for electronic funds transfer of benefits:
    [cir] Institution name;
    [cir] Account type; and
    [cir] Account number and routing number.
     Comments and correspondence from the applicant;
     Supporting documents that show proof of occupancy or 
ownership of a dwelling and/or verify identity. This includes:
    [cir] Driver's license;
    [cir] State/Federal issued photo identification;
    [cir] Mortgage payment receipts;
    [cir] Real property insurance;
    [cir] Tax receipts or property tax bill;
    [cir] Property title;
    [cir] Contract for deed;
    [cir] Voter registration card;
    [cir] Death certificate and will; and/or
    [cir] Maintenance receipts.
     Public records information for identity verification;
     Pre-registration questionnaire information;
     Disaster loan status (i.e., rejected, approved, declined, 
verified, cancelled);
     Applicant travel and accommodations related information 
(e.g., flight information, travel assistance needs, companion 
information);
     Information related to determining eligibility for 
assistance, including date of the disaster, application status, 
insurance information, types and amount of damage to the dwelling, 
supporting documentation (e.g., death certificates, invoices, receipts, 
and documentation to support accommodations or access and functional 
need requests and repairs) and results of the home inspection 
(including inspector's notes and determination).
     Landowner's or landlord's information (in cases where FEMA 
is placing a manufactured housing unit on the individual's land or for 
other temporary housing assistance):
    [cir] Name;
    [cir] Address;
    [cir] Phone number; and
    [cir] Signature.
     Correspondence and documentation related to determining 
eligibility and appropriate housing unit size, type, and location for 
temporary housing assistance, including general correspondence; 
complaints; requests for disbursement of payments; inquiries from 
tenants and landlords; information related to household access and 
functional needs; general administrative and fiscal information; 
payment schedules and forms; termination notices; information shared 
with the temporary housing program staff from other agencies to prevent 
the duplication of benefits; leases; contracts; specifications for 
repair of disaster damaged residences; reasons for revocation or denial 
of aid; sales information related to occupant purchase of housing 
units; and the status or disposition of housing applications;
     Recoupment, appeals, and/or arbitration (oral hearings) of 
such determinations;
     Notice of Potential Debt Letter;
     Notations and reports of decisions for disaster or similar 
financial awards and assistance from other FEMA Programs, Federal and 
State agencies, insurance companies, employers, banks, financial, 
power/utility companies, health care providers, safety/rescue services, 
and public or private entities as they relate to determinations of 
applicants' eligibility for Individuals and Households Program disaster 
assistance; and
     Unsolicited information concerning an individual's 
suspected or actual exposure to illness during a public health 
emergency, including, but not limited to quarantine or isolation 
orders.
    (b) Inspection Reports:
     Inspection reports contain applicants' personally 
identifiable information (as outlined above) and results of assessments 
of damaged real property; personal property; and goods, which may 
include: descriptions and photographic images of an applicant's home 
and personal items; video and/or audio of the inspection conducted on 
the home; and notations of cleaning, sanitizing, and debris removal by 
contractors and partnering agencies. Inspection reports may also 
include Inspector ID and Contractor ID.
    (c) Assistance from Other Sources:
     Other files independently maintained by the State, 
territory, Tribe, local government, voluntary agency, or other source 
of assistance that contain records of persons who request disaster aid, 
including for the ``Other Needs'' assistance provision of the 
Individuals and Households Program administrative files and reports 
required by FEMA. The

[[Page 73107]]

States, territories, Tribes, local governments, voluntary agencies, and 
other sources of assistance maintain the same type of information about 
individuals as described above under registration, inspection, and 
temporary housing assistance records.
     Records of assistance from the FEMA National Flood 
Insurance Program to avoid duplication of benefits (name, address, 
disaster assistance coverage required code, policy number, policy 
number, policy effective date, policy coverage building, policy 
coverage contents, new policy date, and expiration date).
    (d) Customer service survey responses
     Demographic information, pursuant to Executive Order 13985 
(race, ethnicity, religion, gender, sex, nationality, age, disability, 
English proficiency, economic status, income level, marital status); 
and
     Responses to customer service and customer satisfaction 
survey questions.
    (e) Investigation results that may contain the name and address of 
the applicants to support recoupment, appeals, oral hearings, or other 
legal proceedings to recover disaster assistance.

RECORD SOURCE CATEGORIES:
    FEMA receives information from individuals who apply for disaster 
assistance through three different means: (1) Electronically via 
https://www.disasterassistance.gov (/FEMA Form 009-0-1 and FEMA Form 
009-0-2); (2) by calling FEMA's toll-free number 1-800-621-3362 (FEMA 
Form 009-0-1t and FEMA Form 009-0-2t); and (3) through submission of a 
paper copy of pre-registration intake, FEMA Form 009-0-1 and its 
Spanish-language equivalent, FEMA Form 009-0-2. In addition, 
information in this system of records derives from Temporary Housing 
Assistance Eligibility Determinations (FEMA Forms 009-0-5 and 009-0-6), 
Application for Continued Temporary Housing Assistance (FEMA Form 010-
0-12), and Housing Inspections (FEMA Forms 009-0-143, 009-0-144, and 
009-0-145). Information may also come from FEMA inspectors; financial 
institutions; insurance companies; other Federal, State, territorial, 
local, Tribal, and voluntary agencies; and commercial databases (for 
verification purposes, such as third-party identity proofing that 
verifies an individual's identity by validating the applicant's 
responses to verification questions). The final investigative summary 
report is maintained in this system of records if an applicant's file 
is investigated for potential fraud.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND PURPOSES OF SUCH USES:
    In addition to those disclosures generally permitted under 5 U.S.C. 
552a(b) of the Privacy Act, all or a portion of the records or 
information maintained in this system may be disclosed outside DHS as a 
routine use pursuant to 5 U.S.C. 552a(b)(3) as follows:
    A. To the Department of Justice (DOJ), including the U.S. Attorneys 
Offices, or other Federal agencies conducting litigation or proceedings 
before any court, adjudicative, or administrative body, when it is 
relevant and necessary to the litigation and one of the following is a 
party to the litigation or has an interest in such litigation:
    1. DHS or any Component thereof;
    2. Any employee or former employee of DHS in their official 
capacity;
    3. Any employee or former employee of DHS in their individual 
capacity, only when DOJ or DHS has agreed to represent the employee; or
    4. The United States or any agency thereof.
    B. To a congressional office from the record of an individual in 
response to an inquiry from that congressional office made at the 
request of the individual to whom the record pertains.
    C. To the National Archives and Records Administration or General 
Services Administration pursuant to records management inspections 
being conducted under the authority of 44 U.S.C. 2904 and 2906.
    D. To an agency or organization for the purpose of performing audit 
or oversight operations as authorized by law, but only such information 
as is necessary and relevant to such audit or oversight function.
    E. To appropriate agencies, entities, and persons when (1) DHS 
suspects or has confirmed that there has been a breach of the system of 
records; (2) DHS has determined that as a result of the suspected or 
confirmed breach there is a risk of harm to individuals, DHS (including 
its information systems, programs, and operations), the Federal 
Government, or national security; and (3) the disclosure made to such 
agencies, entities, and persons is reasonably necessary to assist in 
connection with DHS's efforts to respond to the suspected or confirmed 
breach or to prevent, minimize, or remedy such harm.
    F. To another Federal agency or Federal entity when DHS determines 
that information maintained in this system of records is reasonably 
necessary to assist the recipient agency or entity in (1) responding to 
a suspected or confirmed breach or (2) preventing, minimizing, or 
remedying the risk of harm to individuals, the recipient agency or 
entity (including its information systems, programs, and operations), 
the Federal Government, or national security, resulting from a 
suspected or confirmed breach.
    G. To an appropriate Federal, State, Tribal, local, international, 
or foreign law enforcement agency or other appropriate authority 
charged with investigating or prosecuting a violation or enforcing or 
implementing a law, rule, regulation, or order, when a record, either 
on its face or in conjunction with other information, indicates a 
violation or potential violation of law, which includes criminal, 
civil, or regulatory violations and such disclosure is proper and 
consistent with the official duties of the person making the 
disclosure.
    H. To contractors and their agents, grantees, experts, consultants, 
and others performing or working on a contract, service, grant, 
cooperative agreement, or other assignment for DHS/FEMA, when necessary 
to accomplish an agency function related to this system of records. 
Individuals provided information under this routine use are subject to 
the same requirements and limitations on disclosure as are applicable 
to DHS/FEMA officers and employees.
    I. To Federal, State, Tribal, territorial, and local governments, 
and voluntary organizations when disclosure of applicant information is 
necessary to prevent a duplication of efforts or a duplication of 
benefits in determining eligibility for disaster assistance for 
eligible or partially eligible FEMA applicants.
    J. To Federal, State, Tribal, territorial, and local governments, 
voluntary organizations, educational institutions, and private 
nonprofit organizations to address disaster-related unmet needs of FEMA 
applicants. The above-mentioned entities must be actively involved in 
the recovery efforts of the disaster and have a program or service that 
addresses one or more disaster-related unmet need(s) of FEMA 
applicants. If the service is for outreach or referrals, only name and 
contact information may be shared.
    K. To government and private entities for the purpose of issuing 
permits or connecting utilities to FEMA-provided temporary housing 
units for FEMA applicants eligible for direct temporary housing 
assistance. FEMA shall only release the address of where the 
transportable temporary housing unit will be placed.
    L. To Federal, State, Tribal, territorial, or local governments; 
voluntary organizations; private nonprofit

[[Page 73108]]

organizations, insurance companies; employers; any public or private 
entities; banks and financial institutions when an applicant's 
eligibility, in whole or in part, for FEMA's Individuals and Households 
Program depends upon financial benefits already received or available 
from that source for similar purposes as necessary to determine 
benefits; and to prevent duplication of disaster assistance benefits 
(as described in 42 U.S.C. 5155). FEMA initiates the data sharing by 
disclosing only applicant information necessary for identification 
purposes to obtain relevant information from entities listed above.
    M. To Federal, State, Tribal, territorial, and local governments, 
medical providers, dental providers, landlords, mechanics, childcare 
providers, or any other private entities (such as a home contractor) 
when cited by applicants as proof of an expense, to verify the accuracy 
of an expense for FEMA's Individuals and Households Program. FEMA may 
disclose the applicant's name and limited contact information 
(telephone number, current address, and/or damaged dwelling address) 
and a record identifier (e.g., account, invoice or estimate numbers) to 
the third-party service provider.
    N. To Federal, State, Tribal, territorial, or local government 
agencies charged with the implementation of hazard mitigation measures 
and the enforcement of hazard-specific provisions of building codes, 
standards, and ordinances. FEMA will only disclose information for the 
following purposes:
    1. For hazard mitigation planning purposes, to assist Federal, 
State, territorial, Tribal, or local government agencies in identifying 
high-risk areas and preparing mitigation plans that target those areas 
for hazard mitigation projects implemented under Federal, State, 
Tribal, territorial, or local hazard mitigation programs.
    2. For enforcement purposes, to enable Federal, State, Tribal, 
territorial, or local government agencies to ensure that owners repair 
or rebuild structures in conformity with applicable hazard-specific 
building codes, standards, and ordinances.
    O. To the Department of the Treasury to verify identity and account 
information of an applicant and to determine eligibility for final 
payment from Federal programs (e.g., Do Not Pay program). An 
applicant's Social Security number will be released in connection with 
a request that the Department of the Treasury provide a disaster 
assistance payment to an applicant under the Individuals and Households 
Program.
    P. To a State, local, territorial, or Tribal government agency in 
connection with billing that State, local, territorial, or Tribal 
government for the applicable non-Federal cost share under the 
Individuals and Households Program. Information shared shall only 
include applicants' names, contact information, and amounts of 
assistance received.
    Q. To State, Tribal, territorial, or local government emergency 
managers, when an applicant is occupying a FEMA temporary housing unit, 
for the purposes of preparing, administering, coordinating, and/or 
monitoring emergency response, public safety, and evacuation plans. 
FEMA shall only release the applicants' phone numbers, address, email 
address, and number of household occupants of the housing unit.
    R. To the Department of the Treasury, Department of Justice, the 
U.S. Attorney's Office, an Oral Hearing Official, or other third party 
for further collection action on any delinquent debt when circumstances 
warrant.
    S. To Federal, State, territorial, Tribal, or local law enforcement 
authorities, or agencies, or other entities authorized to investigate 
and/or coordinate locating missing children and/or reuniting families.
    T. To State, Tribal, territorial, or local government election 
agencies/authorities that oversee the voting process within their 
respective municipalities, for the purpose of ensuring voting rights of 
individuals who have applied for FEMA assistance, limited to their own 
respective citizens who are displaced from their voting jurisdiction by 
a Presidentially declared major disaster or emergency out of their 
voting jurisdiction.
    U. To other Federal, State, or local government agencies under 
approved computer-matching programs for the purposes articulated in 
subsection (a)(8)(A) of the Privacy Act.
    V. To the individual applicants, of whom the record contains third 
party personally identifiable information, to defend themselves during 
appeals and Oral Hearings on the recoupment of disaster assistance 
funds.
    W. To any law enforcement agency of the Federal Government or a 
State, local, territorial, or Tribal government to identify illegal 
conduct or address public safety or security issues, including 
compliance with sex offender notification laws, in the event of 
circumstances requiring an evacuation, sheltering, or mass relocation.
    X. To entities providing temporary housing or sheltering to 
disaster survivors during a declared public health emergency to provide 
indication that a survivor with an infectious disease is inhabiting or 
has inhabited a specific location, when necessary for the safety of 
individuals located in the facility and to comply with additional 
necessary infectious disease protocols.
    Y. To State, local, territorial, and Tribal government and private 
entities to verify applicant identity and account information as a 
fraud prevention measure.
    Z. To the news media and the public, with the approval of the Chief 
Privacy Officer in consultation with counsel, when there exists a 
legitimate public interest in the disclosure of the information, when 
disclosure is necessary to preserve confidence in the integrity of DHS, 
or when disclosure is necessary to demonstrate the accountability of 
DHS's officers, employees, or individuals covered by the system, except 
to the extent the Chief Privacy Officer determines that release of the 
specific information in the context of a particular case would 
constitute a clearly unwarranted invasion of personal privacy.

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
    DHS/FEMA stores records in this system electronically or on paper 
in secure facilities in a locked drawer behind a locked door. The 
records may be stored on magnetic disc, tape, and digital/electronic 
media.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
    DHS/FEMA retrieves records by an individual's name, email address, 
dwelling address, Social Security number, and case file number.

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
    Records pertaining to disaster assistance will be placed in 
inactive storage two years after FEMA receives the application and will 
be destroyed when they are six years and three months old, in 
accordance with National Archives and Records Administration Authority 
N1-311-86-1, DAP 8-1, item 4C10a. Records pertaining to temporary 
housing will be destroyed three years after closeout of the operation 
in accordance with National Archives and Records Administration 
Authority N1-311-86-1, DAP 8-2, item 4C10b. Closeout of a disaster 
operation occurs when the disaster contract is terminated. Records 
pertaining to the Individuals and Households Program (IHP) program will 
retire to the Federal Records Center (FRC) one year after closeout and 
be

[[Page 73109]]

destroyed three years after closeout in accordance with National 
Archives and Records Administration Authority N1-311-86-1, item 4C6c. 
Records pertaining to individual assistance customer satisfaction 
assessments are stored in accordance with National Archives and Records 
Administration Authority N1-311-00-01. Records pertaining to 
investigations are retired to inactive storage when two years old, and 
destroyed when six years, three months old in accordance with National 
Archives and Records Administration Authority N1-311-86-001, item 
4C10a. Customer service assessment forms that have been completed and 
returned by disaster assistance applicants are temporary records that 
are destroyed upon transmission of the final report, per National 
Archives and Records Administration Authority N1-311-00-01, DAP-14-1. 
The statistical and analytical reports resulting from these assessments 
are temporary records that are retired three years after the final 
report cutoff and destroyed 20 years after the report cutoff, per 
National Archives and Records Administration Authority N1-311-00-01, 
DAP-14-2. The assessment results database records are temporary records 
that are destroyed when no longer needed for analysis purposes, per 
National Archives and Records Administration Authority N1-311-00-01, 
DAP-14-3. Per current National Archives and Records Administration 
guidance, records pertaining to COVID-19 will be maintained permanently 
until further guidance regarding the retention of COVID-19 records is 
provided.

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
    DHS/FEMA safeguards records in this system according to applicable 
rules and policies, including all applicable DHS automated systems 
security and access policies. DHS/FEMA imposes strict controls to 
minimize the risk of compromising the information that is being stored. 
Access to the computer system containing the records in this system is 
limited to those individuals who have a need to know the information 
for the performance of their official duties and who have appropriate 
clearances or permissions.

RECORD ACCESS PROCEDURES:
    Individuals applying for Individuals and Households Program 
assistance may access their information online via the Disaster 
Assistance Center using the user ID, password, system generated PIN, 
and authentication that was established during the application process. 
Applicants may also call a FEMA National Processing Service Center 
(NPSC) representative to access their information by providing their 
registration ID, full name, damaged dwelling address, current mailing 
address (if different), current phone number, and the last four digits 
of their Social Security number.
    In addition, individuals seeking access to and notification of any 
record maintained in this system of records, or seeking to contest its 
content, may submit a request in writing to the FEMA Freedom of 
Information Act (FOIA) Officer, whose contact information can be found 
at https://www.dhs.gov/foia under ``Submit a FOIA Request.'' If an 
individual believes more than one Component maintains Privacy Act 
records concerning them, the individual may submit the request to the 
Chief Privacy Officer and Chief Freedom of Information Act Officer, 
Department of Homeland Security, Washington, DC 20528-0655. Even if 
neither the Privacy Act nor the Judicial Redress Act provide a right of 
access, certain records may be made available under the Freedom of 
Information Act. When an individual is seeking records about themself 
from this system of records or any other FEMA system of records, the 
individual's request must conform with the Privacy Act regulations set 
forth in 6 CFR part 5. The individual must first verify their identity, 
meaning that the individual must provide their full name, current 
address, and date and place of birth. The individual must sign the 
request, and the individual's signature must either be notarized or 
submitted under 28 U.S.C. 1746, a law that permits statements to be 
made under penalty of perjury as a substitute for notarization. An 
individual may obtain more information about this process at http://www.dhs.gov/foia. In addition, the individual should:
     Explain why they believe the Department would have the 
information being requested;
     Identify which Component(s) of the Department they believe 
may have the information;
     Specify when they believe the records would have been 
created; and
     Provide any other information that will help DHS determine 
which DHS Component agency may have responsive records.
    If the request is seeking records pertaining to another living 
individual, the request must include an authorization from the 
individual whose record is being requested, authorizing release to the 
requester.
    Without the above information, the Component(s) may not be able to 
conduct an effective search, and a request may be denied due to lack of 
specificity or lack of compliance with applicable regulations.

CONTESTING RECORD PROCEDURES:
    For records covered by the Privacy Act or covered Judicial Redress 
Act (JRA) records, individuals may make a request for amendment or 
correction of a record of the Department about the individual by 
writing directly to the Department Component that maintains the record, 
unless the record is not subject to amendment or correction. The 
request should identify each record in question, state the amendment or 
correction desired, and state why the individual believes that the 
record is not accurate, relevant, timely, or complete. The individual 
may submit any documentation that would be helpful. If the individual 
believes that the same record is in more than one system of records, 
the request should state such and be addressed to each Component that 
maintains a system of records containing the record. When an individual 
is making a request for amendment or correction of Departmental records 
about themself from this system of records or any other Department 
system of records, the individual's request must conform with the 
Privacy Act regulations set forth in 6 CFR part 5.

NOTIFICATION PROCEDURES:
    See ``Record Access Procedures'' above.

EXEMPTIONS PROMULGATED FOR THE SYSTEM:
    None.

HISTORY:
    87 FR 7852 (February 10, 2022); 78 FR 25282 (April 30, 2013); 74 FR 
48763 (September 24, 2009); 71 FR 38408 (July 6, 2006); 69 FR 65615 
(November 15, 2004); 66 FR 51436 (October 9, 2001); 64 FR 40596 (July 
27, 1999); 61 FR 49777 (September 23, 1996).
* * * * *

Deborah T. Fleischaker,
Chief Privacy Officer (A), U.S. Department of Homeland Security.
[FR Doc. 2024-20155 Filed 9-6-24; 8:45 am]
BILLING CODE 9110-17-P