Records are maintained in the Office of General Counsel (022), and in the Veterans Benefits Administration (215A), VA Central Office, Washington, DC 20420. Records will also be maintained in Veterans Benefits Administration Regional Offices, Regional Counsel Offices, and the Facility Information Security Offices of the Office of Information & Technology's Field Security Service. Records also will be maintained in the Austin Information Technology Center in Austin, TX. Address locations are listed in VA's "Facility and Locator Directory" at http://www1.va.gov/directory/guide/home.asp.

(1) Persons who have applied for accreditation by VA, are currently accredited by VA, or were previously accredited by VA to represent claimants as claims agents or attorneys; (2) individuals who have applied for accreditation by VA, are currently accredited by VA, or were previously accredited by VA to provide representation on a particular claim; (3) individuals recommended for VA accreditation by a recognized veterans service organization, currently accredited by VA as a service organization representative or were previously accredited by VA as a service organization representative; (4) claims agents, attorneys, accredited representatives, and individuals providing representation on a particular claim who have been the subject of correspondence, investigations, or proceedings relating to their fitness to represent claimants for benefits before VA; and (5) individuals, acting alone, or as part of organizations, not accredited by VA, who have been the subject of correspondence or investigations as to the legality of their representation of claimants for VA benefits.

Records (or information contained in records) in this system may include: (1) Name and other identifying information; (2) address; (3) service organization affiliations; (4) claims agent examination and grade; (5) correspondence concerning prospective, present, or former claims agents, attorneys, and accredited representatives, including attorney and claims agent recommendations and evaluations from third parties; (6) VA Forms 2-21 (former Application for Accreditation as Service Organization Representative) 21 (Application for Accreditation as Service Organization Representative), and 21a (Application for Accreditation as a Claims Agent or Attorney); (7) correspondence concerning a prospective, present, or former individual providing representation in a particular claim; (8) investigative reports, correspondence and other information concerning the fitness of a prospective, present, or former claims agent, attorney, accredited representative, or individual providing representation in a particular claim; (9) documents, decisions, correspondence, and other information relating to or including the granting, denial, suspension, or cancellation of accreditation of representatives, claims agents, or attorneys, and information concerning the placement of representatives, claims agents, or attorneys on probation by VA or VA's issuance of a reprimand to such an individual pertaining to conduct relating to representation of claimants for benefits before VA; (10) information concerning an individual's exercise of remote access privileges to the Veterans Benefits Administration automated claim records, including identification codes and codes used to access various VA automated communications systems and records systems, as well as security profiles and possible security violations; (11) information, documents, correspondence, and decisions relating to the application for, and the grant, denial, suspension, or revocation of an individual's privilege of remote access to Veterans Benefits Administration automated claim records; (12) information, documents, correspondence, and decisions regarding the legality of representation provided to claimants seeking benefits by unaccredited individuals.

Title 38, United States Code, Sections 501(a), 5901, 5902, 5903 and 5904.

The information collected in the system is used to ensure that claimants for veterans benefits have qualified, competent representation. The information will be used to determine whether a person is qualified to represent claimants before VA and, once accredited, whether a person may continue to represent claimants before VA.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress, or a staff person acting for the member, when the member or staff person requests the record on behalf of and at the request of that individual.

2. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by statute, regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

3. The name and address of a veteran which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation or order issued pursuant thereto, in response to its official request.

4. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law.

5. The name, business address, phone number, and service organization affiliation(s) of claims agents, attorneys, and accredited representatives may be disclosed to requesting service organizations, claimants for benefits, and the general public in order to aid the requestor in verifying the identity and service organization affiliation of the accredited representative.

6. Listings containing the names, business addresses, and status of accreditation of present and former accredited representatives may be provided to recognized service organizations.

7. The name and address of a prospective, present, or former accredited representative, and any information concerning such accredited representative which is relevant to a refusal to grant accreditation, or a potential or past suspension or termination of accreditation of such representative, may be disclosed to the service organization(s) with whom the representative is affiliated.

8. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may also disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

9. VA may disclose the name and address of any prospective, present, or former accredited representative, claims agent, or attorney, and any information concerning such individual that relates to unlawful, unprofessional, or unethical actions by that individual or to VA's denial, cancellation, suspension or termination of an individual's VA accreditation, or to both, where applicable, to employing entities and State and Federal licensing organizations when such information may be relevant to the initial or continued employment or licensing of a prospective, present, or former accredited representative, claims agent, or attorney by an employing entity or licensing organization. VA will not disclose the names and home addresses of claimants and their dependents to licensing organizations pursuant to this routine use.

10. VA may disclose the name and address of any prospective, present, or former accredited representative, claims agent, or attorney, and any information concerning such individual that relates to unlawful, unprofessional, or unethical actions by that individual or to VA's denial, cancellation, suspension or termination of an individual's VA accreditation, or to both, where applicable, to other Federal and State agencies and to Federal courts when such information may be relevant to the individual's provision of representational services before such agency or court. VA will not disclose the names and home addresses of claimants and their dependents pursuant to this routine use.

11. Disclosure may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under the authority of chapter 29 of title 44, United States Code.

12. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

13. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

14. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

15. VA may disclose the name, address, date of birth, and any other identifying information of any prospective, present, or former accredited representative, claims agent, attorney, or individual providing representation on a particular claim to a third-party individual or entity for the purpose of conducting a background check or to obtain information about the individual's present or past conduct, activities, licenses, or other information that may have a bearing on a determination of the individual's fitness to represent or to continue representing claimants before VA.

16. VA may disclose the name and address of any prospective, present, or former accredited representative, claims agent, attorney, or individual providing representation on a particular claim who is the subject of correspondence, an investigation, or a proceeding relating to his or her fitness to represent claimants for VA benefits, and any information concerning such individual that relates to unlawful, unprofessional, or unethical actions by that individual or to VA's possible denial, cancellation, suspension, or termination of the individual's VA accreditation, or to both, where applicable, to an individual or entity from whom VA has received a credible written complaint about the accredited individual's fitness to represent VA claimants.

17. VA may disclose the name and address of any individual (acting alone or as part of an organization) not accredited by VA who is the subject of correspondence, an investigation, or proceeding relating to the legality of representation provided by such individual to claimants for VA benefits, and any information concerning such individual that relates to unlawful, unprofessional, or unethical actions by that individual to an individual or entity from whom VA has received a credible written complaint about the legality of representation provided by the non-accredited individual.

Storage:

Active records are maintained in individual folders stored in file cabinets. File cards with name and business addresses of individuals previously covered by this system are maintained in file cabinets; these records and those of newly accredited persons are also maintained in an electronic database. Listings of claim agents, attorneys, and accredited representatives are maintained both on magnetic disk and in hard copy in file cabinets. Identification codes and codes used to access various VA automated communications systems and records systems, as well as security profiles and possible security violations, are maintained on magnetic media in a secured environment within VA workspaces. Hard copies are maintained in locked containers.

Records and electronic files are maintained in alphabetical order by last name of the individuals covered by this system. A searchable list of claims agents, attorneys, and accredited representatives is available at OGC's internet Web site http://www.va.gov/ogc/apps/accreditation/index.html. Information concerning possible security violations associated with exercise or remote access privileges is retrieved by individual assignment numbers. Information concerning individual security profiles and codes assigned to an individual for that person to obtain access to various computer systems is retrieved by the individual's assignment number.

1. This list of safeguards furnished in this System of Record is not an exclusive list of measures that has been, or will be, taken to protect individually-identifiable information.

VA will maintain the data in compliance with applicable VA security policy directives that specify the standards that will be applied to protect sensitive personal information. Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Access to and use of these records are limited to those persons whose official duties require such access. Personnel screening is employed to prevent unauthorized disclosure.

2. Access to Automated Data Processing files is controlled at two levels: (1) Terminals, central processing units, and peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected; and (2) the system recognizes authorized users by means of an individually unique password entered in combination with an individually unique user identification code.

3. Access to automated records concerning identification codes and codes used to access various VA automated communications systems and records systems, as well as security profiles and possible security violations is limited to designated automated systems security personnel who need to know the information in order to maintain and monitor the security of the VA's automated communications and veterans' claim records systems. Access to these records in automated form is controlled by individually unique passwords/codes. Agency personnel may have access to the information on a need to know basis when necessary to advise agency security personnel or for use to suspend or revoke access privileges or to make disclosures authorized by a routine use.

4. Access to VA facilities where records, identification codes, passwords, security profiles and possible security violations are maintained is controlled at all hours by the Federal Protective Service, VA, or other security personnel and security access control devices.

VA maintains and disposes of records in accordance with records disposition authority approved by the Archivist of the United States.

Assistant General Counsel (022), 810 Vermont Ave., NW., Washington, DC 20420; Director, Compensation and Pension Service (21), 810 Vermont Ave., NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained by the Assistant General Counsel under his or her name or other personal identifier, or wants to determine the contents of such records should submit a written request to the Assistant General Counsel (022), 810 Vermont Ave., NW., Washington, DC 20420. For requests concerning remote access program records, an individual should submit a written request to the Director, Compensation and Pension Service (21), 810 Vermont Ave., NW., Washington, DC 20420.

Individuals seeking copies of records under this system that pertain to themselves, or seeking to amend such records, should make those requests under the Privacy Act. Individuals seeking copies of records pertaining to others should request them under the Freedom of Information Act. All such requests must contain a reasonable description of the records requested and should be in writing, over the original, handwritten signature of the requester, and should be mailed to: FOIA/PA Officer (026G), Office of General Counsel, 810 Vermont Ave., NW., Washington, DC 20420. For requests concerning remote access program records, an individual should submit a written request to: FOIA/PA (20M33), Veterans Benefits Administration, 810 Vermont Ave., NW., Washington, DC 20420.

See Records Access Procedures above.

Applications for accreditation of individuals, correspondence with and updates from accredited individuals, investigative materials, and recommendations and correspondence from service organizations and third parties.

None.

VA health care facilities to which the applicant applied (address locations are listed in VA Appendix at the end of this document), except that, for physician, dentist, pharmacist, licensed physical therapist, and occupational therapist applicants, records may also be retained by the VA Delegated Examining Unit, 1201 Broad Rock Road, Richmond, Virginia 23224 -0269. For Canteen Management Training Program applicants, records will be retained only at the Veterans Canteen Service (133A1), Department of Veterans Affairs, 810 Vermont Avenue, NW, Washington, DC 20420. Records resulting from drug testing may be retained by the VA (e.g., by the VA Medical Review Official) and/or bya contractor laboratory.

Applicants for appointments under authority of 38 U.S.C. Chapter 73 are covered by this system. This includes candidates such as physicians, dentists, podiatrists, optometrists, nurses, nurse anesthetists, physician assistants, expanded-function dental auxiliaries, pharmacists, certified respiratory therapy technicians, registered respiratory therapists, licensed physical therapists, occupational therapists, and licensed practical or vocational nurses. Applicants for appointment under 38 U.S.C. Chapter 75 in the Veterans Canteen Service are also covered.

Records maintained in this system include: (1) Records of persons who have applied for Federal employment relating to their education and training; licensure, registration or certification by State licensing boards and/or national certifying bodies, including any finding of facts, evidence and any other related documents, relating to a disciplinary action; prior and/or current clinical privileges; employment history, appraisals of past performance; medical records; convictions of offenses against the law; appraisals of potential; honors, awards or fellowships; military service; veteran preference; birthplace; birth date; social security number; and home address. (2) Records resulting from the testing of the applicant for use of illegal drugs under Executive Order 12564. Such records may be retained by the VA (e.g., by the VA Medical Review Official) or by a contractor laboratory. This includes records of negative results, confirmed or unconfirmed positive test results, and lists of who have been tested, who failed to report for testing, and related documents.

Executive Order 12564; Urgent Relief for the Homeless Supplemental Appropriations Act of 1987; Pub. L. 100-71, section 503, 101 Stat. 468 (1987); and Title 38, United States Code, Chapter 3, section 210(c)(1); Chapter 73, section 4108 and Chapter 75, section 4202.

Except for Routine Use 8, no other Routine Use for this system of records applies to records included in Item (2) in the Categories of Records in the System section of this notice. Drug test results may not be releasedunder any other routine use.

1. In the event that a system of records maintained by this agency to carry out its function indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency. whether Federal, State, local or foreign, charged witn the responsibility of investigation or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

2. A record from this system of records may be disclosed as a "routine use. to a Federal, State, or local agency maintaining civil, criminal or other relevant information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other benefit.

3. A record from this system of records may be disclosed to a Federal, local or State agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

4. To provide statistical and other information in response to other legitimate and reasonable requests as approved by appropriate VA authorities, such as the release of information under the Freedom of Information Act.

5. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

6. Disclosure may be made to NARA (National Archives and Records Administration) and General Services Administration (GSA) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

7. Records from this system of records may be disclosed to a Federal Agency or to a State or local government licensing board and/or to a Federation of State Medical Boards or a similar nongovernment entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registrations necessary to practice an occupation, profession or specialty, in order for the Agency to obtain information relevant to an Agency decision concerning the hiring, retention or termination of an employee or to inform a Federal Agency or licensing boards or the appropriate nongovernment entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal Agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

8. To disclose the results of a drug test of a Title 38 applicant pursuant to an order of a court of competent jurisdiction where required by the United States Government to defend against any challenge against any adverse personnel action.

9. To disclose relevant information to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

10. To disclose information to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

11. To disclose information to any source when necessary to obtain information relevant to a conflict-of-interest investigation or determination.

12. To disclose information to the Office of Management and Budget at any stage in the legislative coordination and clearance process in connection with private relief legislation as set forth in OMB Circular No. A-19.

13. To disclose information to another Federal agency, to a court, or a party in litigation before a court or in an administrative proceeding being conducted by a Federal agency, either when the Government is a party to a judicial proceeding or in order to comply with the issuance of a subpoena. Information is also made available pursuant to a court order directing production of personnel records.

14. To disclose information to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

15. To disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines on Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

16. To disclose information to the Federal Labor Relations Authority (including its General Counsel) when requested in connection with investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised and matters before the Federal Service Impasses Panel.

17. To disclose information to a State or local government entity which has the legal authority to make decisions concerning the issuance, retention or revocation of licenses, certifications or registrations required to practice a health care profession, when requested in writing by an investigator or supervisory official of the licensing entity for the purpose of making a decision concerning the issuance, retention or revocation of the license, certification or registration of a named health care professional.

18. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

19. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning:

(1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual;

(2) A final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or,

(3) The acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

Storage:

Paper documents.

Records are indexed by name or by name within geographic location proference. Drug testing records are retrieved by name or social security number, or name or social security number by geographic location preference.

Records are stored in locked file cabinets or locked rooms. Strict control measures are enforced to ensure that access to and disclosure from these records are limited to a "need-to-know basis." In VA Central Office and in the Delegated Examining Unit these records are maintained in staffed rooms during working hours. During nonworking hours, there is limited access to the building with visitor control by security personnel. Drug testing records will be maintained in accordance with the Urgent Relief for the Homeless Supplemental Appropriations Act of 1987, Pub. L. 100- 71, section 503, 101 Stat. 468 (1987), as well as any Governmentwide guidance concerning the protection of these records. Employee drug testing records will be maintained and used with the highest regard for employee privacy. Contractor laboratories are subject to the same restrictions as VA employees.

Records are retained in accordance with records retention standards approved by the Archivist of the United States, the National Archives and Records Administration, and published in VA Records Control Schedules. Records arising in connection with employee drug testing under Executive Order 12564 are generally retained for up to 2 years. Records are destroyed by shredding or burning.

Director, Office of Personnel and Labor Relations (05), VA Central Office, 810 Vermont Avenue, NW., Washington DC 20420.

Individuals wishing to inquire whether this system of records contains records on them should contact the local facility to which they applied or the Physician and Dentist Placement Service. Individuals submitting requests should furnish identifying information as required by VA for their records to be located and identified: (1) Full name, (2) date of birth, (3) social security number, (4) name and location of VA facility or Physician and Dentist Placement Service where application was submitted, (5) date of application, and (6) signature.

(See Notification Procedures above.)

(See Notification Procedures above.)

Records in this system are obtained from VA officials and from individuals and organizations regarding the individual's qualifications, credentials and suitability for employment, including prior employers, education providers, state licensing boards and/or national certifying bodies, law enforcement entities, and health care providers. Drug testing records may be obtained from the Medical Review Official.

Blood Donor records are maintained at each of the Department of Veterans Affairs (VA) health care facilities that currently or previously collected donor blood. Addresses are listed in VA Appendix I of the biennial publication of Privacy Act Issuances.

Individuals who donate or have donated blood at a Veterans Health Administration (VHA) health care facility or blood bank for patient care under routine or emergency conditions.

Blood donor records contain sufficient information (i.e., donor name, social security number, or other unique identifier, date of donation, and type of donation, type of components produced by the donation, mandated tests results, and disposition of the blood or blood component) to provide a mechanism to track a donated blood product from the time of donor registration through the final disposition of each component prepared from that donation. For this system of record, final disposition is defined as transferred, transfused, or discarded.

1. Title 38, United States Code, sections 501(a) and 501(b).

2. Title 21, Code of Federal Regulations, parts 200–299 and parts 600–680.

3. Title 42, Code of Federal Regulations, section 493.1105.

The information and records are used to track the donor medical history, donation interval(s), results of donor testing, report positive or abnormal test results, and blood and/or blood components produced from the donation.

VA may disclose protected health information pursuant to the following routine uses where required by law, or required or permitted by 45 CFR parts 160 and 164.

1. Disclosure may be made to answer requests for information from Federal, State, local, and tribal medical facilities regarding the source from which blood was received. Such requests may be initiated by a qualified medical practitioner in the event that a donor’s or patient’s medical condition warrants it.

2. Disclosure may be made of blood availability, location, quantity on hand, and blood type for use by the area donor collection coordinators to answer and fill requests from health care facilities in need of type-specific blood.

3. VA may disclose on its own initiative any information in this system, except the names and home addresses of Veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

4. Disclosure from a system of records maintained by this component may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

5. A record from a system of records maintained by this component may be disclosed as a routine use to the General Services Administration for the purpose of records management inspections conducted under authority of Title 44 United States Code.

6. A record from a system of records maintained by this component may be disclosed as a routine use to the National Archives and Records Administration for the purpose of records management inspections conducted under authority of title 44 United States Code.

7. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

8. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA’s initiative or in response to DoJ’s request for the information, after either VA or DoJ determines that such information is relevant to DoJ’s representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

9. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

10. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any data breach analysis, as the terms are defined in 38 U.S.C. 5727 or provision of credit protection services as provided in 38 U.S.C. 5724.

Storage:

Paper documents, electronic media.

1. All VA blood donor manual records are indexed by name and social security number or other unique identifier of donor, cross-indexed by blood type.

2. Automated records are indexed by name, unique identifier, social security number, blood type, antibodies and date of last donation.

1. Access to VA working space and medical record storage areas is restricted to VA employees on a ‘‘need to know’’ basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service. Employees file records and file records of public figures or otherwise sensitive medical record files are stored in separate locked files. Strict control measures are enforced to ensure that disclosure is limited to a "need to know" basis.

2. Strict control measures are enforced to ensure that access to and disclosure from all records including electronic files are limited to VA employees whose official duties warrant access to those files. The system recognizes authorized employees by a series of individually unique passwords/codes, and the employees are limited to only that information in the file, which is needed in the performance of their official duties.

The records are disposed of in accordance with Section VIII-Laboratory Services of the VHA Records Control Schedule 10-1, Item number 113-31/36, National Archives and Records Administration under the National Archives Job No. N1–15–02–04.

Chief Consultant, Diagnostic Services

(10P4D), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC

20420.

Individuals seeking information concerning the existence and/or content of a blood donor information record pertaining to themselves must submit a written request or apply in person to the VA health care facility where the

donation occurred. All inquiries must reasonably identify the portion of the blood donor information record desired and the approximate date(s) that service was provided. Additionally, inquiries should include the individual’s full name, social security number, and home address at the time of medical service, if known.

Blood donors, patients of VA medical care facilities or duly authorized representatives seeking information regarding access to or who are

contesting VA health facility records may write, call or visit the VHA facility where medical service was provided or volunteered.

(See Record Access Procedures above.)

1. Blood donor.

2. Private hospitals and local blood banks.

3. Private physicians.

4. Non-VA Laboratories.

This system of records is located in the Office of the General Counsel (OGC), Professional Staff Group VI (026), U.S. Department of Veterans Affairs (VA), 810 Vermont Avenue, NW., Washington, DC 20420, and at the Regional Counsel Offices. Addresses for Regional Counsel Offices may be obtained from the above-mentioned General Counsel Office address.

The following categories of individuals and business entities are covered by this system: (1) Veterans; (2) Beneficiaries of Veterans; (3) Dependents of Veterans; (4) Non-Veterans; (5) Employees; (6) Attorneys; (7) Businesses; and (8) Non-Profit Organizations. These persons and groups are those who write to Office of General Counsel with questions or requesting information.

Records in this system contain the original incoming letter, any attachments to the letter provided by the requestor, research and background material compiled by the OGC or Regional Counsel attorney as backup for the response to the inquiry, and the actual response or opinion. The incoming letter will contain the name and address of the requestor, and may contain medical information, Social Security Number, VA Claim Number, financial information, or copies of personal papers.

Title 38, United States Code, Section 311.

This system documents the response of Office of General Counsel and the Regional Counsel Offices to respond to inquiries from outside the government.

1. VA may disclose information to a congressional office in response to an inquiry from the congressional office on behalf of and at the request of that individual.

2. VA may disclose information to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) as required to comply with statutory requirements to disclose information to NARA and GSA for them to perform their statutory records management activities and inspections under authority of title 44, Chapter 29, of the United States Code.

3. VA may disclose information to individuals, organizations, private or public agencies, other entities with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individuals with whom VA has contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

4. VA may disclose on its own initiative any information in this system, except the names, home addresses or other personally identifiable information of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

5. VA may provide Department of Justice (DoJ) with information needed to represent the United States in litigation. VA may also disclose the information for this purpose in proceedings in which DoJ is not representing the Agency.

6. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, or persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputation of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems of programs (whether maintained by the Department or another agency or entity) that rely upon potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the provision of credit protection services or any risk analysis services when necessary to respond to, and if necessary, mitigate damages that might arise from a data breach involving data covered by this system of records.

7. VA may disclose information to officials of the Merit Systems Protection Board or the Office of Special Counsel when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. sections 1205 and 1206, or as may be authorized by law.

8. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

9. VA may disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

10. Any information in this system from correspondence or inquiries sent to the VA may be disclosed to State or Federal agencies at the request of the correspondent or inquirer in order for those agencies to help the correspondent with his or her problem. The information disclosed may include the name and address of the correspondent or inquirer and details concerning the nature of the problem specified in the correspondence.

Storage:

Records are maintained in individual file folders on shelves in the OGC law library or in the Regional Counsel Office.

Records filed by the last name of the individual(s) or organization(s) covered by the system of records.

Records are maintained in a manned room during working hours. During nonworking hours, the file area is locked, and the building is protected by uniformed guards. Access to the records is only authorized to VA personnel on a "need to know" basis.

OGC correspondence records prior to 1975 relating to a veteran which result in a legal opinion have been placed on microfiche. The paper records are currently stored in the Washington National Records Center, and the microfiche is stored in the OGC Law Library. Records are maintained in the Office of General Counsel and the Regional Counsel Offices for a period of three years. After three years, general correspondence records are destroyed [Records Control Schedule N-15 -06-2, Item 1].

Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, United States Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Such requests must contain a reasonable description of the records requested. All inquiries must reasonably identify the information involved and should include the individual's full name, return address, and telephone number.

Individuals seeking information regarding access to VA information maintained by the Office of General Counsel may send a request by mail to the Assistant General Counsel, Professional Staff Group VI (026), Office of the General Counsel, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420, or may send a fax to the Assistant General Counsel, Professional Staff Group VI, 1-202-273-6645.

Individuals seeking information regarding contesting or amending VA information maintained by the Office of General Counsel may send a request by mail to the Assistant General Counsel, Professional Staff Group VI (026), Office of the General Counsel, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420, or may send a fax to the Assistant General Counsel, Professional Staff Group VI, 1-202-273-6645.

Veterans, beneficiaries and dependents of veterans, employees, business, and non-profit organizations.

None.

The system of records is located in the Office of the General Counsel, Professional Staff Group VI (026), U.S. Department of Veterans Affairs (VA), 810 Vermont Avenue, NW., Washington, DC 20420.

The following categories of individuals are covered by this system: (1) Veterans; (2) their beneficiaries; and, (3) their dependents. These individuals are those on behalf of whom private relief bills are introduced, or proposed for introduction, in Congress.

Records (or information contained in records) may include information pertinent to private relief bills such as: (1) The bill for relief (containing name, other personal identifying information, personal data, and the claim for a particular legislative relief); (2) reports of other Federal agencies pertaining to the relief bill; (3) VA reports pertaining to the relief bill; (4) Congressional Committee reports; and, (5) excerpts from the Congressional Record.

Title 38, United States Code, 210(c).

This system documents the efforts of VA and Congress to provide benefits and monetary relief to veterans, their dependents and beneficiaries outside those granted in public legislation.

1. VA may disclose information to a congressional office in response to an inquiry from the congressional office on behalf of and at the request of that individual.

2. VA may disclose information to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) as required to comply with statutory requirements to disclose information to NARA and GSA for them to perform their statutory records management activities and inspections under authority of Title 44, Chapter 29, of the United States Code.

3. VA may disclose information to individuals, organizations, private or public agencies, other entities with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individuals with whom VA has contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

4. VA may disclose on its own initiative any information in this system, except the names, home addresses or other personally identifiable information of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

5. VA may provide Department of Justice (DoJ) with information needed to represent the United States in litigation. VA may also disclose the information for this purpose in proceedings in which DoJ is not representing the Agency.

6. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, or persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputation of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems of programs (whether maintained by the Department or another agency or entity) that rely upon potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the provision of credit protection services or any risk analysis services when necessary to respond to, and if necessary, mitigate damages that might arise from a data breach involving data covered by this system of records.

7. VA may disclose information to officials of the Merit Systems Protection Board or the Office of Special Counsel when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. sections 1205 and 1206, or as may be authorized by law.

8. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

9. VA may disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

10. VA may disclose, on its own initiative, records pertinent to consideration of private relief bills to Congressional members in their elected representative capacity and to other Federal agencies to enable them to aid or comment on whether the petitioning individual should obtain the requested relief and to facilitate the preparation and release of reports regarding this matter.

Storage:

Records are maintained in individual file folders. The information in each folder is summarized and placed on file cards. Both the file cards and the file folders are kept in storage cabinets.

Records and file cards are indexed by the last name and bill number of the individual(s) covered by the system of records.

Records and file cards are maintained in a manned room during working hours. During nonworking hours, the file area is locked, and the building is protected by uniformed guards. Access to the records is only authorized to VA personnel on a "need to know" basis.

Records and file cards which result in Private Relief Bills are maintained permanently in the Office of General Counsel. Records and file cards for relief efforts which do not result in enacted legislation will be maintained for a period of ten years and then destroyed.

Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, United States Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Such requests must contain a reasonable description of the records requested. All inquiries must reasonably identify the information involved and should include the individual's full name, return address, and telephone number.

Individuals seeking information regarding access to VA information maintained by the Office of General Counsel may send a request by mail to the Assistant General Counsel, Professional Staff Group VI (026), Office of the General Counsel, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC, 20420, or may send a fax to the Assistant General Counsel, Professional Staff Group VI, 1-202-273-6645.

Individuals seeking information regarding contesting or amending VA information maintained by the Office of General Counsel may send a request by mail to the Assistant General Counsel, Professional Staff Group VI (026), Office of the General Counsel, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420, or may send a fax to the Assistant General Counsel, Professional Staff Group VI, 1-202-273-6645.

Courts, veterans, beneficiaries and dependents of veterans, litigants and their attorneys, Federal agencies, insurance carriers, witnesses, or any other interested participants to the proceedings.

None.

Records are maintained at the Veterans Administration Data Processing Centers Washington, DC, Hines, Illinois, Austin, Texas, St. Paul, Minnesota, Los Angeles, California, and Philadelphia, Pennsylvania, and at all VA health care facilities. Address locations are listed in VA Appendix I at the end of this document.

Veterans Administration Engineering employees with the Department of Medicine and Surgery.

Personal identification information; data on cost center, hourly wage rate, and work location.

Title 38, United States Code, Chapter 3, Subchapter II, Section 219.

1. To provide statistical and other information in response to other legitimate and reasonable requests as approved by appropriate VA authorities, such as the release of information under the Freedom of Information Act.

2. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

3. A record from this system of records may be disclosed as a 'routine use' to a Federal, State or local agency maintaining civil, criminal or other relevant information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other health, educational or welfare benefits.

4. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

5. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

6. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

7. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

8. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

9. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

10. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

11. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

12. VA may, on its own initiative, disclose information to another federal agency, court, or party in litigation before a court or other administrative proceedings conduced by an agency, if VA is a party to the proceeding and needs to disclose the information to protect its interests.

Storage:

Punched cards.

Indexed by employee identification number.

Physical Security: Access to VA working and storage areas is restricted to VA employees on a 'need to know' basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service. Strict control measures are enforced to ensure that disclosure is limited to a 'need to know' basis.

Records are retained until termination of employment. Destruction of records is accomplished by shredding or incineration.

Director Engineering Service (138), VA Central Office, Washington, DC 20420.

An individual seeking information concerning the existence and contents of a record pertaining to himself should submit a written request or apply in person to the nearest VA health care facility. All inquiries must reasonably identify the system of records involved. Inquiries should include the individual's full name, employee identification number, approximate date(s) of employment, and location of the health care facility where employed.

Veterans, beneficiaries, service personnel or duly authorized representatives seeking information regarding access to and contesting of Department of Medicine and Surgery Engineering Employee Management Information Records-VA records may contact the Engineering Officer at the nearest VA health care facility.

(See Record Access Procedures above.)

Employee and supervisory personnel

For current employees, records are located in VA medical, personnel, dispensary, health, safety or other designated offices at Central Office and field facilities (see Appendix 1); with another agency providing such services for the VA; or with private sector contractors. For former employees, most records will be located in an Employee Medical Folder (EMF) stored in Federal records centers operated by the National Archives and Records Administration (NARA). Paper record abstract information is stored in automated storage media records that are maintained at the health care facilities.

The following categories of individuals are covered by this system: current or former VA employees appointed under 38 U.S.C. Chapter 73 to the occupations identified in 38 U.S.C. 4103, 4104(1), and 4104(3); individuals in those occupations who are appointed under 38 U.S.C. 4114; and residents appointed under 38 U.S.C. 4114(b). This includes employees such as non-physician facility Directors, physicians, dentists, podiatrists, optometrists, nurses, nurse anesthetists, physician assistants, expanded-function dental auxiliaries, certified respiratory therapy technicians, registered respiratory therapists, licensed physical therapists, and licensed practical or vocational nurses. Current and former employees appointed under 38 U.S.C. Chapter 75 in the Veterans Canteen Service are also covered.

Records maintained in this system include: (1) Medical records, forms, and reports completed or obtained when an individual applies for a Federal job and is subsequently employed; (2) Medical records, forms, and reports completed during employment as a condition of employment, either by the VA or by another agency, State or local government entity, or a private sector entity under contract to the VA; (3) Records resulting from the testing of the employee for use of illegal drugs under Executive Order 12564. Such records may be retained by the VA (e.g., by the VA Medical Review Official) or by a contractor laboratory. This includes records of negative results, confirmed or unconfirmed positive test results, and lists of who has been tested, who failed to report for testing, and related documents. Records maintained by a VA dispensary are included in the system only when they are the result of a condition of employment or related to an on-the-job occurrence. (4) Files containing reports of on-the-job injuries and medical records, forms, and reports generated as a result of the filing of a claim for Workers' Compensation, whether the claim is accepted or not. (The official compensation claim file, maintained by the Department of Labor's Office of Workers' Compensation Program (OWCP) is part of that agency's system of records and not covered by this notice.) (5) All other medical records, forms, and reports created on an employee during his or her period of employment, including records retained on a short term/temporary basis (i.e., those designated to be retained only while the employee is with the VA) and records designated for long-term retention (i.e., those retained for the employee's duration of Federal service and for some period of time thereafter).

Executive Order 12564; Urgent Relief for the Homeless Supplemental Appropriations Act of 1987, Pub. L. No. 100-71, Section 503, 101 Stat. 468 (1987); and Title 38, United States Code, Chapter 3, Section 210(c)(1,); Chapter 73, Section 4108 and Chapter 75, Section 4202.

Except for Routine Use 7, no other Routine Use for this system of records applies to records included in Item (3) in the Categories of Records in the System section of this notice. Drug test results may not be released under any other routine use.

1. In the event that a system of records maintained by this agency to carry out its function indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigation or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

2. To assess physical capability of employees and to provide data for periodic reports of the health services program to the Civil Service Commission.

3. Information may be disclosed from this system of records to a Federal, State, or local agency to the extent necessary to comply with laws governing reporting of communicable diseases.

4. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

5. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

5. To disclose information to the Department of Labor, Social Security Administration, or a national, State, or local social security type agency, when necessary to adjudicate a claim (filed by or on behalf of the individual) under a retirement, insurance, or health benefit program.

6. To disclose information to another Federal agency, to a court, or a party in litigation before a court or in an administrative proceeding being conducted by a Federal agency, either when the Government is a party to a judicial proceeding or to comply with the issuance of a subpoena.

7. To disclose the results of a drug test of a Title 38 employee pursuant to an order of a court of competent jurisdiction where required by the United States Government to defend against any challenge against any adverse personnel action.

8. To disclose information to the Department of Justice, or in a proceeding before a court, adjudicative body, or other administrative body before which the VA is authorized to appear, when: (a) The VA, or any component thereof; or (b) any VA employee in his or her official capacity; or (c) any VA employee in his or her individual capacity where the Department of Justice or the VA has agreed to represent the employee; or (d) the United States, where the VA determines that litigation is likely to affect the VA or any of its components, is a party to litigation or has an interest in such litigation, and the use of such records by the Department of Justice or the VA is deemed by the VA to be relevant and necessary to the litigation, provided, however, that in each case it has been determined that the disclosure is compatible with the purpose for which the records were collected.

9. To disclose in response to a request for discovery or for appearance of a witness, information that is relevant to the subject matter involved in a pending judicial or administrative proceeding.

10. To disclose pertinent information to the appropriate Federal, State or local agency responsible for investigating, prosecuting, enforcing, or implementing a statute, rule, regulation, or order when the disclosing agency becomes aware of an indication of a violation or potential violation of civil or criminal law or regulation.

11. To disclose information to the Office of Management and Budget (OMB) at any stage in the legislative coordintion and clearance process in connection with private relief legislation as set forth in OMB Circular No. A-19.

12. To disclose information to officials of the Merit Systems Protection Board including the Office of Special Counsel, the Federal Labor Relations Authority and its general counsel, the Equal Employment Opportunity Commission, arbitrators, and hearing examiners to the extent necessary to carry out their authorized duties.

13. To disclose information to survey team members from the Joint Commission on Accreditation of Healthcare Organizations (JCAHO) when requested in connection with an accreditation review, but only to the extent that the information is relevant and necessary to meet JCAHO standards.

14. To disclose to health insurance carriers contracting with the Office of Personnel Management to provide a health benefits plan under the Federal Employee Health Benefits Program, information necessary to verify eligibility for payment of a claim for health benefits or to carry out the coordination of audit of benefit provisions of such contracts.

15. To locate individuals for health research or survey response and in the production of summary descriptive statistics and analytical studies (e.g., epidemiological studies) in support of the function for which the records are collected and maintained. While published statistics and studies do not contain individual identifiers, in some instances the selection of elements of data included in the study might be structured in such a way as to make the data individually identifiable by inference.

16. To disclose information to the Office of Federal Employees Group Life Insurance that is relevant and necessary to verify election, declination, or waiver of regular and/or optional life insurance coverage or eligibility for payment of a claim for life insurance.

17. To disclose information, when an individual to whom a record pertains is mentally incompetent or under other legal disability, to any person who is responsible for the care of the individual, to the extent necessary.

18. To disclose to the agency-appointed representative of an employee all notices, determinations, decisions, or other written communications issued to the employee, in connection with an examination ordered by the agency under: (a) Medical evaluation (formerly Fitness for Duty) examinations procedures, or (b) agency-filed disability retirement procedures.

19. To disclose to a requesting agency, organization, or individual the home address and other information concerning those individuals who it is reasonably believed might have contracted an illness or been exposed to or suffered from a health hazard while employed in the Federal work force.

20. To disclose information to a Federal agency, in response to its request or at the initiation of the VA, in connection with the retention of an employee, the issuance of a security clearance, the conducting of a suitability or security investigation of an individual, the letting of a contract, or the issuance of a license, grant, or other benefit by the other agency, or the lawful statutory, administrative or investigative purpose of the agency to the extent that the information is relevant and necessary to the other agency's decision on the matter.

21. To disclose to any Federal, State, or local government agency, in response to its request or at the initiation of the VA, information relevant and necessary to the lawful, statutory, administrative, or investigatory purpose as it relates to the conduct of job related epidemiological research or the assurance of compliance with Federal, State, or local government laws on health and safety in the work environment.

22. To disclose to officials of labor organizations recognized under 5 U.S.C. Chapter 71, analyses using exposure or medical records and employee exposure records, in accordance with the record access rules of the OSHA, Department of Labor, and subject to the limitations of 29 CFR 1910.20(e)(2)(iii)(B).

23. Records from this system of records may be disclosed to a Federal Agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registrations necessary to practice an occupation, profession or specialty, in order for the Agency to obtain information relevant to an Agency decision concerning the hiring, retention or termination of an employee or to inform a Federal Agency or licensing boards or the appropriate nongovernment entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal Agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

24. Information in this system of records may be disclosed to a State or local government entity which has the legal authority to make decisions concerning the issuance, retention or revocation of licenses, certifications or registrations required to practice a health care profession, when requested in writing by an investigator or supervisory official of the licensing entity for the purpose of making a decision concerning the issuance, retention or revocation of the license, certification or registration of a named health care professional.

25. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

26. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

Storage:

Records are stored in paper folders, microfiche, magnetic discs, magnetic tape, and on file cards, X-rays, or other medical reports and forms. These records are stored in VA medical, personnel, dispensary, health, safety or other designated offices at Central Office and field facilities. Information in the Decentralized Hospital Computer Program (DHCP) system is stored at health care facilities.

Records are retrieved by the employee's name, date of birth, social security number, or any combination of those identifiers.

Records are stored in locked file cabinets or locked rooms. Generally, file areas are locked after normal duty hours. Automated records are protected by restricted access procedures and audit trails. Access to Employee Medical File System records is strictly lilmited to VA or contractor officials with a bona fide need for access to the records. Strict control measures are enforced to ensure that access to and disclosure from these records are limited to a "need-to-know basis." In VA Central Office these records are maintained in staffed rooms during working hours. During nonworking hours, there is limited access to the building with visitor control by security personnel. Access to the DHCP computer rooms within the health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automated data processing peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Information in the DHCP system may be accessed by authorized VA employees. Access to file information is controlled at two levels; the system recognizes authorized employees by a series of individually unique passwords/codes as a part of each data message, and the employees are limited to only that information in the file which is needed in the performance of their official duties. Drug testing records will be maintained in accordance with the Urgent Relief for the Homeless Supplemental Appropriations Act of 1987, Pub. L. No. 100- 71, Section 503, 101 Stat. 468 (1987). Contractor laboratories are subject to the same restrictions as VA employees.

Records are retained in accordance with records retention standards approved by the Archivist of the United States, the National Archives and Records Administration, and published in Agency Records Control Schedules. Records arising in connection with employee drug testing under Executive Order 12564 are generally retained for up to 2 years. Records are destroyed by shredding, burning, or by erasing the magnetic media. Automated storage media is retained and disposed of in accordance with disposition authorization approved by the Archivist of the United States.

Director, Office of Personnel and Labor Relations (05), VA Central Office, 810 Vermont Avenue NW, Washington, DC 20420.

Individuals wishing to inquire whether this sytem of records contains records on them should follow the appropriate procedure listed below.

a. Current employees. Current employees should contact the local facility at which they are employed. Individuals must furnish such identifying information as required by VA for their records to be located and identified.

b. Former employees. Former employees should contact the local facility at which they were employed. Individuals submitting requests must submit the following information for their records to be located and identified: (1) Full name, (2) date of birth, (3) social security number, (4) name and location of VA facility where last employed and dates of employment, and (5) signature.

Individuals requesting access to and contesting the contents of records must submit the following information for their records to be located and identified: (1) Full name, (2) date of birth, (3) social security number, (4) name and location of VA facility where last employed and dates of employment, and (5) signature.

(See Record Access Procedures above).

Records in this system are obtained from: The individual to whom the records pertain, VA employee health unit staff, Federal and private sector medical practitioners and treatment facilities, supervisors/managers and other VA officials, testimony of witness, and other VA records.

VA station personnel offices, whose address locations are listed in VA Appendix 1 at the end of this document.

VA employees or labor union representatives who have filed, in the name of VA employees, unfair labor practice charges or complaints and negotiated agreement grievances.

Various material, considered pertinent by parties to proceedings, needed for processing charges, complaints, grievances and arbitrations.

Executive Order 11491 as amended.

1. In the event that a system of records maintained by this agency to carry out its function indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigation or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

2. Files may be released to arbitrators for processing arbitrations and to authorized Department of Labor officers for processing unfair labor practice complaints.

3. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

4. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

5. Records from this system of records may be disclosed to a Federal Agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty , in order for the Agency to obtain information relevant to an Agency decision concerning the hiring, retention or termination of an employee or to inform a Federal Agency or licensing boards or the appropriate nongovernment entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal Agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

6. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

7. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

Storage:

Paper documents in files.

Alphabetically by name at some VA stations. Some stations do not maintain records retrievable by name or other personal identifier.

Access to files is restricted to authorized Va employees in the Personnel Office and to operating officials.

Records are retained indefinitely.

Officials maintaining the system-VA Personnel Officers where records are maintained. (See VA Appendix 1 for local addresses.) Official responsible for policies and procedures-Asistant Administrator for Personnel (05), VA Central Office, Washington, DC 20420.

VA station Personnel Officer. Individual should provide full name, social security number and date and nature of proceeding involved.

Individuals or representatives designated in writing may contact their servicing Personnel Office for gaining access to their records and contesting the contents thereof.

(See Record Access Procedures above.)

VA officials, employees, and labor organization officials.

Department of Veterans Affairs (VA), Office of Inspector General (OIG), Office of Investigations (51), Washington, DC 20420.

The following categories of individuals will be covered by the system: (1) Employees, (2) veterans and other VA beneficiaries, and (3) private citizens, such as contractors, who conduct official business with the VA, or private citizens whose actions affect or relate to the programs and operations of VA. The individuals who are or have been the subjects of investigations are those alleged to have violated criminal laws, either Federal or state, either in the performance of their official duties or related to the programs and operations of VA.

Records (or information contained in records) in this system include reports of criminal investigations of the OIG, Office of Investigations. These reports may include (1) A narrative summary or synopsis, (2) allegations of specific wrongdoing or crimes committed, (3) progress reports, (4) exhibits or attachments to the reports, (5) internal documentation and memoranda, and (6) affidavits or sworn statements. The name of the subject of an investigation, his or her title, his or her date of birth, his or her social security number, his or her home address, the station at which an investigation took place, the OIG's case number, the time period the investigation took place, and the outcome of the case are maintained in an electronic database and in hard copy files.

Title 5, United States Code, Appendix 3.

The records and information are used for the purpose of identifying individual criminal offenders and alleged offenders, identifying witnesses and documents relevant to the investigation of the allegations, and compiling evidence to prove or disprove criminal conduct. The records and information in the system are used in Federal and state grand jury proceedings, pre-trial negotiations, plea agreements, pre-trial diversions, court hearings and trials. The records and information in the system may also be used in administrative proceedings when administrative action is taken against the subject of the investigation.

1. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office that is made at the request of that individual.

2. Disclosure may be made to the National Archives and Records Administration (NARA) in records management activities and inspections conducted under authority of Title 44, United States Code.

3. Disclosure may be made to the Department of Justice including United States Attorneys, or in a proceeding before a court, adjudicative body, or other administrative body when the litigation or adjudicative or administrative process is likely to affect VA, its employees, or any of its components, or when VA, its employees, or any of its components is a party to the litigation process, or has an interest in the litigation or process and the use of these records is deemed by VA to be relevant and necessary to the litigation or process, provided that the disclosure is compatible with the purpose for which the records were collected.

4. Any information in this system, except the name and address of a veteran, may be disclosed to a Federal, state, or local agency maintaining civil or criminal violation records or other pertinent information such as prior employment history, prior Federal employment background investigations, and/or personal or educational background in order for VA to obtain information relevant to the hiring, transfer, or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

5. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and dependents to a Federal or state agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

6. To assist attorneys in representing their clients, any information in this system may be disclosed to attorneys representing subjects of criminal investigations, including veterans, Federal government employees, retirees, volunteers, contractors, subcontractors, or private citizens, except where VA has decided release is inappropriate under Title 5, United States Code, Section 552a(j) and (k).

7. Disclosure of information to the Federal Labor Relations Authority (FLRA), including its General Counsel, in connection with the investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised, in connection with matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

8. Information may be disclosed to the Equal Employment Opportunity Commission in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

9. Information may be disclosed to officials of the Merit Systems Protection Board, and the Office of Special Counsel, if properly requested, in connection with appeals, special studies of the civil service and other merit systems, reviews of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in Title 5, United States Code, Sections 1205 and 1206, or as may be authorized by law.

10. Any information in this system of records may be disclosed, in the course of presenting evidence in or to a court, magistrate, administrative tribunal, or grand jury, including disclosures to opposing counsel in the course of such proceedings or in settlement negotiations.

11. Any information in this system may be disclosed to any source or person, either private or governmental, to the extent necessary to secure from such source or person information relevant to, and sought in furtherance of, a legitimate investigation, review, or inspection.

12. Any information in this system, except the name and address of a veteran, may be disclosed to Federal, state, or local professional, regulatory, or disciplinary organizations or associations, including but not limited to bar associations, state licensing boards, and similar professional entities, for use in disciplinary proceedings and inquiries preparatory thereto, where VA determines that there is good cause to question the legality or ethical propriety of the conduct of a person employed by VA or a person representing a person in a matter before VA. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

13. VA may disclose information to individuals, organizations, private or public agencies, or other entities with which VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

14. A record may be disclosed to any official charged with the responsibility to conduct qualitative assessment reviews of internal safeguards and management procedures employed in investigative operations. This disclosure category includes members of the President's Council on Integrity and Efficiency and officials and administrative staff within their investigative chain of command, as well as authorized officials of the Department of Justice and the Federal Bureau of Investigation.

15. Disclosure of any information within this system may be made when it is suspected or confirmed that the security or confidentiality of information in the system or records has been compromised and VA has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interest, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the compromised information; and the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

Records and information are stored electronically in the VA OIG's MCI (Master Case Index) databases and servers at the OIG's headquarters office at 801 I Street, NW., Washington, DC 20420, in the OIG's Information Technology Division. Backup records are stored on magnetic disc, tape and CD-ROM and may also be retained in hard copy format in secure file folders. Office of Investigations personnel are responsible for electronically inputting records and information into the MCI database. Hard copies of records and information are discussed in the storage section below. Access to electronic records is limited to Office of Investigations personnel and certain other OIG employees with an official need to know the information in the course of their official duties.

STORAGE:

Hard copies of documents and information are maintained by the OIG Office of Investigations office that conducts the investigation. The office that conducts the investigation will maintain all documents, evidence, and work papers compiled or collected in the course of the investigation. Hard copies of reports and attachments and certain administrative documents are also maintained at OIG headquarters. Records and documents are also maintained electronically in the MCI database.

Information and records are retrieved by MCI case number and the name of the subject of the investigation. Scanned documents, reports and other uploaded information that are made part of the electronic file cannot be searched or retrieved from the MCI database as part of a general search.

Information in the system is protected from unauthorized access through administrative, physical, and technical safeguards. Access to the hard copy and computerized information is restricted to authorized OIG personnel on a need-to-know basis. Hard copy records are maintained in offices that are restricted during work hours, or are locked after duty hours. The headquarters building is protected by security guards and access is restricted during non-duty hours. Access to the computerized information is limited to VA OIG employees by means of passwords and authorized user identification codes. Computer system documentation is maintained in a secure environment in the OIG, VA Central Office.

Records will be maintained and disposed of in accordance with a records disposition authority approved by the Archivist of the United States.

Assistant Inspector General for Investigations (51), Department of Veterans Affairs, Office of Inspector General, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained by the Assistant Inspector General for Investigations under his or her name in this system or wishes to determine the contents of such records should submit a written request to the Assistant Inspector General for Investigations (51), at the address listed in the preceding paragraph. However, a majority of records in this system are exempt from the notification requirement under 5 U.S.C. 552a(j) and (k). To the extent that records in this system of records are not subject to exemption, they are subject to notification. A determination as to whether an exemption applies shall be made at the time a request for notification is received.

An individual who seeks access to or wishes to contest records maintained under his or her name in this system must submit a written request to the Assistant Inspector General for Investigations (51). However, a majority of records in this system are exempt from the record access and contesting requirements under 5 U.S.C. 552a(j) and (k). To the extent that records in this system of records are not subject to exemption, they are subject to access and contest. A determination as to whether an exemption applies shall be made at the time a request for access or contest is received.

(See record access procedures above.)

Information is obtained from VA employees, veterans, private citizens, VA records, private entities, and congressional, Federal, state, and local offices or agencies.

Under 5 U.S.C. 552a(j)(2), the head of any agency may exempt any system of records within the agency from certain provisions of the Privacy Act, if the agency or component that maintains the system performs as its principal function any activities pertaining to the enforcement of criminal laws. The Inspector General Act of 1978, Public Law 95-452, (IG Act) mandates the Inspector General to recommend policies for, and to conduct, supervise and coordinate activities in the Department of Veterans Affairs (VA) and between VA and other Federal, state, and local governmental agencies with respect to all matters relating to the prevention and detection of fraud in programs and operations administered or financed by VA and the identification and prosecution of participants in such fraud. Under the IG Act, whenever the Inspector General has reasonable grounds to believe there has been a violation of Federal criminal law, the Inspector General must report the matter expeditiously to the Attorney General. This system of records has been created in major part to support the criminal law-related activities assigned by the Inspector General to the Office of Investigations. These activities constitute the principal function of this staff. In addition to principal functions pertaining to the enforcement of criminal laws, the Inspector General may receive and investigate complaints or information from various sources concerning the possible existence of activities constituting noncriminal violations of law, rules or regulations, or mismanagement, gross waste of funds, abuses of authority or substantial and specific danger to the public and safety. This system of records also exists to support inquiries by the Assistant Inspector General for Investigations into these noncriminal violation types of activities. Based upon the foregoing, the Secretary of Veterans Affairs has exempted this system of records, to the extent that it encompasses information pertaining to criminal law-related activities, from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(j)(2):

5 U.S.C. 552a(c)(3) and (4);

5 U.S.C. 552a(d);

5 U.S.C. 552a(e)(1), (2) and (3);

5 U.S.C. 552a(e)(4)(G), (H) and (I);

5 U.S.C. 552a(e)(5) and (8);

5 U.S.C. 552a(f);

5 U.S.C. 552a(g).

The Secretary of Veterans Affairs has exempted this system of records, to the extent that it does not encompass information pertaining to criminal law-related activities under 5 U.S.C. 552a(j) (2), from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(k)(2):

5 U.S.C. 552a(c)(3);

5 U.S.C. 552a(d);

5 U.S.C. 552a(e)(1);

5 U.S.C. 552a(e)(4)(G), (H) and (I);

5 U.S.C. 552a(f).

REASONS FOR EXEMPTIONS:

The exemption of information and material in this system of records is necessary in order to accomplish the law enforcement functions of the Office of Inspector General, to prevent subjects of investigations from frustrating the investigatory process, to prevent the disclosure of investigative techniques, to fulfill commitments made to protect the confidentiality of sources, to maintain access to sources of information, and to avoid endangering these sources and law enforcement personnel.

Board of Veterans Appeals, Department of Veterans Affairs, 810 Vermont Avenue, NW, Washington, DC 20420.

Persons requesting information under the Freedom of Information Act and the Privacy Act.

Requests for information, responses to requests, and loose-leaf log book.

5 U.S.C. 552, 552a; 38 CFR 1.556.

1. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

2. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

3. Disclosure may be made to NARA (National Archives and Records Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

Storage:

File folders and loose-leaf log book.

By name.

Files are under the control of the Freedom of Information Act Officer. They are stored in a secured area. Access to the area is limited to the officers and employees of the Board who have a need for the records in the system in the performance of their duties.

Records are retained in accordance with records retention standards approved by the Archivist of the United States, the National Archives and Records Administration, and published in Agency Records Control Schedules. Records are destroyed by shredding or burning.

Privacy Act Officer/Freedom of Information Act Officer (01C1), Board of Veterans Appeals, 810 Vermont Avenue, NW, Washington, DC 20420.

An individual desiring to know whether this system of records contains a record pertaining to him or her, how he or she may gain access to such a record, and how he or she may contest the content of such a record may write to the following address: Privacy Act Officer/Freedom of Information Act Officer (01C1), Board of Veterans Appeals, 810 Vermont Avenue, NW, Washington, DC 20420. The following information should be furnished in order to identify the record: His or her name and the Department of Veterans Affairs claim number, or other file number, if applicable.

Individuals seeking information regarding access to information contained in this system of records may write, call or visit the Board of Veterans Appeals Privacy Act Officer/Freedom of Information Act Officer whose address and telephone number are as follows: Privacy Act Officer/Freedom of Information Act Officer (01C1), Board of Veterans Appeals, 810 Vermont Avenue, NW, Washington, DC 20420, (202) 233-3365.

(See notification procedures above.)

Data furnished by persons requesting information, records in the custody of the Board, and data furnished by Board employees.

VA Data Processing Center, Austin, Texas and the fiscal offices of Central Office and other field stations where the fiscal transactions are processed.

Contractors, vendors, non-salaried employees, consultants, attendings, fee basis physicians and dentists, and patients.

Vendor identification listings, invoices and payment records.

Budget and Accounting Act of 1950 and General Accounting Office Title 8, Chapter 3.

To the extent that records contained in the system include information protected by 38 U.S.C. 4132, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a Routine Use unless there is also specific statutory authority permitting disclosure.

1. Transfer payment information necessary to complete payment of claims and to furnish income data Form 1099 to the Treasury Department in order to effect payment of claims to vendors and to furnish income information.

2. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

3. A record from this system of records may be disclosed as a 'routine use' to a Federal, State or local agency or to a non-governmental organization maintaining civil, criminal or other relevant information, such as current licenses, registration or certification, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the use of an individual as a consultant, attending or to provide fee basis health care, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other benefits. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

4. A record from this system of records may be disclosed to a Federal, State or local agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

5. Relevant information from this system of records, including the nature and amount of financial obligation, may be disclosed as a routine use, in order to assist the Veterans Administration in the collection of unpaid financial obligations owed the VA, to a debtor's employing agency or commanding officer so that the debtor-employee may be counseled by his or her Federal employer or commanding officer. This purpose is consistent with 5 U.S.C. 5514, 4 CFR 102.5, and section 206 of Executive Order 11222 of May 8, 1965 (30 FR 6469).

6. Relevant information from this system of records, including available identifying data regarding the debtor, such as name of debtor, last known address of debtor, name of debtor's spouse, social security account number of debtor, VA insurance number, VA loan number, VA claim number, place of birth and date of birth of debtor, name and address of debtor's employer or firm and dates of employment, may be disclosed to other Federal agencies, State probate courts, State drivers license bureaus, and State automobile title and license bureaus as a routine use in order to obtain current address, locator and credit report assistance in he collection of unpaid financial obligations owed the U.S. This purpose is consistent with the Federal Claims Collection Act of 1966 (Pub.L. 89-508, 31 U.S.C. 951-953) and 4 CFR parts 101-105.

7. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

8. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

9. Records from this system of records may be disclosed to a Federal Agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty , in order for the Agency to obtain information relevant to an Agency decision concerning the hiring, retention or termination of an employee or to inform a Federal Agency or licensing boards or the appropriate nongovernment entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal Agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

10. Relevant information (excluding medical treatment information related to drug or alcohol abuse, infection with the human immunodeficiency virus or sickle cell anemia) may be disclosed to the Department of Health and Human Services (HHS) for the purpose of identifying improper duplicate payments made by Medicare fiscal intermediaries where VA authorized and was responsible for payment for medical services obtained at non-VA health care facilities. The purpose of the review is for HHS to identify duplicate payments and initiate recovery of identified overpayments and, where warranted, initiate fraud investigations, or, to seek reimbursement from VA for those services which were authorized by VA and for which no payment, or partial payment, was made by VA. HHS will provide information to identify the patient to include the patient name, address, Social Security number, date of birth, and information related to the period of medical treatment for which payment was made by Medicare to include the name and address of the hospital, the admission and discharge dates, the services for which payment was made, and the dates and amounts of payment. Information disclosed from this system of records will be limited to that information that is necessary to confirm or disprove an inappropriate payment by Medicare. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

11. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

12. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

Storage:

Paper documents, microfiche, magnetic tape.

Alphabetically by name and numerically by identification number.

Access to the records is restricted to VA Finance employees. These records are protected from outside access by Federal Protective Service.

Governed by General Accounting Office Regulations which require retention for records created prior to July 2,1975: 10 years and 3 months after the period of the account; records created on and after July 2, 1975: 6 years and 3 months after the period of the account. Records are normally retired to Federal Record Centers within 1 or 2 years after payment and audit.

Director, Office of Budget and Finance (Controller)(04), VA Central Office, Washington, DC 20420.

Individuals seeking information concerning the existence of a record pertaining to themselves may submit a written request to the VA office to which the invoice/voucher was submitted. All inquiries must reasonably identify the invoice/voucher involved. Inquiries should include name and return address.

Individuals or authorized representatives seeking information regarding access to and contesting of records may write, call or visit the VA office to which the invoice/voucher was submitted.

(see Record Access Procedures above)

These payment records are compiled from documentation from the vendor, contractor, and employee; Dun and Bradstreet (identifying numbers); and procurement and authorization documentation generated by the Veterans Administration.

Department of Veterans Affairs, Human Resources Management Offices.

Physicians, dentists and nurses; health occupations trainees including residents appointed under 38 U.S.C. 7406 whose stipends and fringe benefits are centrally administered under the provisions of 38 U.S.C. 7406(c); research personnel; other scientific and technical personnel.

Copies of applications, appointment letters, other documents and papers maintained in connection with these appointments.

All categories of records may include identifying information, such as names(s), date of birth, home address, mailing address, Social Security Number(s), and telephone number(s). Records in this system are:

Reflecting work experience, licensure, credentials, educational-level achieved, and specialized education or training occurring outside of Federal service.

Government-sponsored training or participation in employee development programs designed to broaden an employee's work experiences or for the purposes of advancement.

Title 38, United States Code, Chapter 73.

The information in this system is used to evaluate the qualifications of approximately 30,000 medical residents appointed under 38 U.S.C. 7406 whose stipends and fringe benefits are not centrally administered under the provisions of 38 U.S.C. 7406(c).

1. To disclose the information listed in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

2. To disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

3. Disclosure may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

4. To disclose information to officials of the Merit Systems Protection Board, or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

5. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons under the following circumstances: when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or program (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

6. To disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

7. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

8. VA may disclose information from this system to the National Archives and Records Administration (NARA) and General Services Administration (GSA) in records management inspections conducted under Title 44, Chapter 29, of the U.S. Code.

9. A record from this system of records may be disclosed as a 'routine use' to a Federal, State or local agency maintaining civil, criminal or other relevant information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee or health professions trainee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other benefits.

10. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee or health professions trainee, the issuance of a security clearance, the reporting of an investigation of an employee or health professions trainee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

11. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

12. Records from this system of records may be disclosed to a Federal agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar non- government entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty in order for the agency to obtain information relevant to an agency decision concerning the hiring, retention or termination of an employee or health professions trainee or to inform a Federal agency or licensing boards or the appropriate non- government entities about the health care practices of a terminated, resigned or retired health care employee or health professions trainee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

13. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee, or health professions trainees.

14. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

15. Allows disclosure of relevant health care information to individuals or organizations (private or public) with whom VA has a contract or sharing agreement for the provision of health care, administrative or financial services. VA must be able to share information with other organizations participating in the care of veterans.

16. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred concerning:

(1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual;

(2) A final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or,

(3) The acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by a healthcare entity relating to possible incompetence or improper professional conduct or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

17. Allows disclosure of information from this system of records to the following:

a. Government training facilities (Federal, State, and local) and to non-government training facilities (private vendors of training courses or programs, private schools, etc.) for training purposes.

b. Educational institutions about the appointment of their recent graduates to VA positions. These disclosures are made to enhance recruiting relationships between VA and these institutions.

c. College and university officials with information about students who are working at VA to receive academic credit for the experience.

Storage:

Records are maintained on paper documents, magnetic tape and computer printouts at VA facilities and VA Office of Academic Affiliation Data Management Center.

Records are retrieved by the names and personal identifiers assigned to the individuals on whom they are maintained.

Electronic files are password protected and accessible only by authorized persons. Access to VA working and storage areas is restricted on a "need-to-know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

Paper records and information stored on electronic storage media are maintained and disposed of in accordance with records disposition authority approved by the National Archives and Records Administration.

Officials maintaining the policy and procedures: Human Resources Management Offices (135) where this system is utilized. (See VA Appendix 1 for local addresses.) Officials responsible for policies and procedures: Deputy Assistant Secretary for Human Resources Management (05), VA Central Office, Washington, DC 20420. Officials maintaining the system: Directors at the facility where the individual(s) were associated and the Chief Academic Affiliations Officer (14), Department of Veterans Affairs, Veterans Health Administration, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals who wish to determine whether this system of records contains information about them should contact the VA facility at the location where they made application. For a record pertaining to the individual, they must submit a written request to the Privacy Officer or VA human resources office of the last place of employment.

Individuals who wish to determine whether this system of records contains information about them should contact the Privacy Officer at the VA facility where they made application. Individuals must submit a written request to the Privacy Officer or to the VA Office of Human Resources Management or to the VA facility of the last place of employment for former employees.

See "Notification procedure" above.

Records in this system are obtained from: applicants, VA officials and from individuals and organizations regarding the individual's qualifications; credentials and suitability for employment, including prior employers, academic organizations, State licensing boards and/or national certifying bodies, law enforcement entities, and health care providers.

The system of records is located in the Office of the General Counsel, Professional Staff Group VI (026), U.S. Department of Veterans Affairs (VA), 810 Vermont Avenue, NW., Washington, DC 20420.

The following categories of individuals are covered by this system: (1) Veterans; (2) their beneficiaries and their dependents; (3) VA employees; (4) insurance companies; (5) business entities; (6) Veteran Service Organizations; (7) attorneys representing litigants; and (8) other litigants.

Records (or information contained in records) may include (1) pleadings; (2) opinions; (3) briefs; (4) decisions; (5) evidentiary and nonevidentiary matter relating to a case or controversy in an administrative or litigation proceeding.

42 U.S.C. 2651 et seq.; 31 U.S.C. 3911; 28 U.S.C. 1346; 29 CFR 1600-1699; 38 U.S.C. 311.

This system stores VA litigation and administrative investigations managed by Office of General Counsel, other than Veterans' appeals before the U.S. Court of Appeals for Veterans Claims, from the date of closure of the case to the final expiration of the period during which an appeal could be filed.

1. VA may disclose information to a congressional office in response to an inquiry from the congressional office on behalf of and at the request of that individual.

2. VA may disclose information to the National Archives and Records Administration (NARA) and to the General Services Administration (GSA) as required complying with statutory requirements to disclose information to NARA and GSA for them to perform their statutory records management activities and inspections under authority of title 44, Chapter 29, of the United States Code.

3. VA may disclose information to individuals, organizations, private or public agencies, other entities with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individuals with whom VA has contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

4. VA may disclose on its own initiative any information in this system, except the names, home addresses or other personally identifiable information of Veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. On its own initiative, VA may also disclose the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

5. Pleadings, opinions, briefs, decisions and evidentiary and nonevidentiary matters may be disclosed to a Federal agency upon its official request to enable that agency to properly prepare a particular case or controversy regarding an administrative claim filed under the Federal Tort Claims Act or a debt collection proceeding under the Federal Medical Care Recovery Act.

6. Pleadings, opinions, briefs, decisions and evidentiary and nonevidentiary matter may be disclosed to a Federal agency to enable the VA to obtain records necessary for the VA to properly prepare a particular case or controversy under the Federal Tort Claims Act or a proceeding under the Federal Medical Care Recovery Act.

7. Pleadings, opinions, briefs, decisions and evidentiary and nonevidentiary matter may be disclosed to a Federal or a State court to enable the VA to file pleadings, comply with rules and procedures of the court, or to respond to a request from the court in any case or controversy.

8. Pleadings, opinions, briefs, decisions and matters of evidentiary and nonevidentiary matter may be disclosed to a Federal, State, local, or foreign agency, insurance carriers, other individuals from whom the VA is seeking reimbursement and other parties litigant or having an interest in administrative, prelitigation, litigation and post-litigation phases of a case or controversy, provided, that the name and address of a Veteran can only be disclosed under this routine use if the release is for a VA debt collection proceeding, or if the name and address has been provided to the VA by the party seeking the information.

9. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, or persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputation of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems of programs (whether maintained by the Department or another agency or entity) that rely upon potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the provision of credit protection services or any risk analysis services when necessary to respond to, and if necessary, mitigate damages that might arise from a data breach involving data covered by this system of records.

10. VA may provide Department of Justice (DoJ) with information needed to represent the United States in litigation. VA may also disclose the information for this purpose in proceedings in which DoJ is not representing the Agency.

11. VA may disclose information to officials of the Merit Systems Protection Board or the Office of Special Counsel when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in Title 5, United States Code, Sections 1205 and 1206, or as may be authorized by law.

12. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or for other functions vested in the Commission as authorized by law or regulation.

13. VA may disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

Storage:

Records are maintained in individual file folders organized by the OGC Professional Staff Group (PSG) handling the litigation.

The individual litigation folders are sorted by the OGC Professional Staff Group (PSG) handling the matter. Within each PSG section the records are maintained in alphabetical order by last name of an individual, business or organization involved in the litigation.

Records are maintained in a manned room during working hours. During nonworking hours, the file area is locked, and the building is protected by the Federal Protective Service. Access to the records is only authorized to VA personnel on a "need to know" basis.

Upon completion of a case, except for precedent-setting cases (which are maintained permanently), records are treated as follows:

In Central Office, litigation files other than EEO records are maintained in the OGC Docket Room for two years, retired to the Washington National Federal Records Center for four years and then destroyed. EEO complainant records are maintained in the OGC Docket Room for four years, and then destroyed.

In Regional Counsel Offices, litigation files other than EEO records are maintained in the respective Regional Counsel Office for six years, and then destroyed. EEO complainant records are maintained in the Regional Counsel Office for four years, then destroyed. A Regional Counsel Office may choose to transfer records to the VA Records Center and Vault in Neosho, MO.

Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, United States Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Such requests must contain a reasonable description of the records requested. All inquiries must reasonably identify the information involved and should include the individual's full name, return address, and telephone number.

Individuals, businesses or organizations seeking information regarding access to VA information maintained by the Office of General Counsel Central Office or Regional Counsel Offices may send a request by mail to the Assistant General Counsel, Professional Staff Group VI (026), Office of the General Counsel, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals, businesses or organizations seeking information regarding access to VA information maintained by the Office of General Counsel Central Office or Regional Counsel Offices may send a request by mail to the Assistant General Counsel, Professional Staff Group VI (026), Office of the General Counsel, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Courts, Veterans, beneficiaries and dependents of Veterans, litigants and their attorneys, Federal and state agencies, insurance carriers, witnesses, or any other interested participants to the proceedings.

None.

Records on nonsuspended fee personnel and program participants are maintained at Department of Veterans Affairs (VA) regional offices, medical and regional office centers, VA offices, and VA centers having loan guaranty activities. Records of nonsupervised lenders and subsidiaries of supervised lenders having authority to process VA loans automatically are maintained in VA Central Office. National Control List of suspended program participants and fee personnel are maintained at VA regional offices, medical and regional office centers, VA offices, and VA centers having loan guaranty activities. A Master Control list is maintained only at VA Central Office. Address locations are listed in Appendix 1 at the end of this document.

The following categories of individuals will be covered by this system: (1) Fee personnel who may be paid by VA or by someone other than VA (i.e., appraisers, compliance inspectors, management brokers, and loan closing and fee attorneys who are not VA employees but are paid for actual case work performed), and (2) program participants (i.e., property management brokers and agents, real estate sales brokers and agents, participating lenders and their employees, title companies whose fees are paid by someone other than VA, and manufactured home dealers, manufacturers, and manufactured home park or subdivision owners).

Records (or information contained in records) may include: (1) Applications by individuals to become VA-approved fee basis appraisers, compliance inspectors, fee attorneys, or management brokers. These applications include information concerning applicant's name, address, business phone numbers, Social Security numbers or taxpayer identification numbers, and professional qualifications; (2) applications by non-supervised lenders for approval to close guaranteed loans without the prior approval of VA (automatically); (3) applications by lenders supervised by Federal or State agencies for designation as supervised automatic lenders in order that they may close loans without the prior approval (automatically) of VA; applications for automatic approval or designation (i.e., (2) and (3)) contain information concerning the corporate structure of the lender, professional qualifications of the lender's officers or employees, financial data such as profit and loss statements and balance sheets to insure the firm's financial integrity; (4) identifying information such as names, business names (if applicable), addresses, phone numbers, and professional resumes of corporate officials or employees; (5) corporate structure information on prior approval lenders, participating real estate sales brokers or agents, developers, builders, investors, closing attorneys, or other program participants as necessary to carry out the functions of the Loan Guaranty Program; (6) records of performance concerning appraisers, compliance inspectors, management brokers, or fee attorneys on both firms and individual employees; (7) records of performance including disciplinary proceedings, concerning program participants; e.g., lenders, investors, real estate brokers, builders, fee appraisers, compliance inspectors, and developers both as to the firm and to individual employees maintained on an as-needed basis to carry out the functions of the Loan Guaranty Program; (8) National Control Lists which identify suspended real estate brokers and agents, lenders and their employees, investors, manufactured home dealers and manufacturers, and builders or developers; and (9) a master record of the National Control List (i.e., Master Control List) which includes information regarding parties previously suspended but currently reinstated to participation in the Loan Guaranty Program in addition to all parties currently suspended.

Title 38, United States Code, chapter 3, section 210(c)(1); title 38, United States Code, chapters 21 and 37.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the request of that individual.

2. Any information in this system may be disclosed to a Federal, State, or local agency, upon its official request, to the extent the agency has demonstrated that it is relevant and necessary to that agency's decision on: The hiring, transfer, or retention of an employee; the issuance of a security clearance; the letting of a contract; or the issuance or continuance of a license, grant, or other benefit by that agency.

3. Any information in this system may be disclosed to a Federal, State, or local agency maintaining civil or criminal violation records, or other pertinent information such as prior employment history, prior Federal employment background investigations, and personal or educational background in order for VA to obtain information from that agency relevant to the hiring, transfer, or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit.

4. Any information in this system which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, may be disclosed to a Federal, State, local, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation, or order issued pursuant thereto.

5. Identifying information and the reasons for the suspension of builders, developers, lenders, lender employees, real estate sales brokers and agents, manufactured home dealers, manufacturers, or other program participants suspended from participation in the Loan Guaranty Program may be disclosed to the Department of Housing and Urban Development (HUD), the Federal Housing Administration (FHA), United States Department of Agriculture (USDA), Farmers Home Administration, or other Federal, State, or local agencies to enable that agency to consider imposing similar restrictions on these suspended persons and/or firms.

6. Identifying information and the performance records of qualified fee appraisers and compliance inspectors, including any information regarding their termination, non-redesignation, temporary suspension, or resignation from participation in the Loan Guaranty Program, including the records of any disciplinary proceedings, may be disclosed to Federal, State, or local, or non-government agencies, businesses, and professional organizations, to permit these entities to employ, continue to employ or contract for the services of qualified fee personnel, monitor the performance of such personnel, and take any appropriate disciplinary action.

7. Identifying information as well as other information such as educational background and former business associations may be disclosed to business and professional organizations in order for VA to obtain these organizations' recommendations concerning the performance, character, professional activities, and other qualifications relating to participation in the Loan Guaranty Program.

8. Identifying information and information concerning amounts paid to contractors, fee personnel, and other contractors, fee personnel and other program participants may be released to the Department of the Treasury, Internal Revenue Service, where required by law.

9. Any information in this system may be disclosed to a Federal Grand jury, a Federal court or a party in litigation, or a Federal agency or party to an administrative proceeding being conducted by a Federal agency, in order for VA to respond to and comply with the issuance of a Federal subpoena.

10. Any information in this system may be disclosed to a State or municipal grand jury, a State or municipal court or a party in litigation, or to a State or municipal administrative agency functioning in a quasi-judicial capacity or a party to a proceeding being conducted by such agency, in order for VA to respond to and comply with the issuance of a State or municipal subpoena; provided, that any disclosure of claimant information made under this routine use must comply with the provisions of 38 CFR 1.511.

11. Identifying information and the reasons for suspension of individuals and/or firms suspended from the Loan Guaranty Program may be disclosed to other participants in the Loan Guaranty Program in order that they may decide whether or not to employ, or continue to employ, or contract with a suspended individual or firm.

12. Identifying information and information concerning the performance of contractors, fee personnel, and other program participants may be released to consumer reporting agencies in order that VA may obtain information on their prior dealings with other Government agencies and so that other Government agencies may have the benefit of VA's experience with such parties.

13. The names and addresses of debarred or suspended Loan Guaranty Program participants as well as the effective date and term of the exclusion may be disclosed to the General Services Administration to compile and maintain the "Lists of Parties Excluded from Federal Procurement or Nonprocurement Programs."

Storage:

Records on fee personnel and program participants are kept on paper documents and maintained in file folders and as electronically scanned documents. The National Control List of suspended program participants is also maintained on magnetic disk at Central Office.

All records are indexed or cross-indexed by the name of the individual or the firm.

Access to VA working spaces and record file storage areas is restricted to VA employees on a "need to know" basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service or other VA security personnel. Sensitive files involving pending suspension or a legal action are stored in separate locked files.

File cards and paper documents on suspended fee personnel and program participants are maintained until there has been a notification that the suspension has been terminated and the party reinstated into the Loan Guaranty Program, at which time these records are destroyed by VA regional offices or centers. The Master Control List records are retained indefinitely. Records on fee personnel and program participants are retained for various periods extending up to 2 years after all loans have been liquidated. Destruction of all the above records is accomplished by either shredding or burning.

Director, Loan Guaranty Service (26), VA Central Office, Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier or wants to determine the contents of such record should submit a written request or apply in person to the nearest VA Regional Loan Center. Address locations are listed in VA Appendix 1 at the end of this document. All inquiries must reasonably identify the relationship of the individual with the Loan Guaranty Program. Inquiries should include the individual's name, address, firm represented, if any, and capacity in which the individual participates or participated in the Loan Guaranty Program. However, some of the records in this system are exempt from the notification requirement under 5 U.S.C. 552a(k). To the extent that records in this system of records are not subject to exemption, they are subject to notification. A determination as to whether an exemption applies shall be made at the time a request for notification is received.

An individual seeks access to or wishes to contest records maintained under his or her name on this system may write, call, or visit the nearest VA Regional Loan Center. Address locations are listed in VA Appendix 1 at the end of this document. However, some of the records in this system are exempt from the record access and contesting requirements under 5 U.S.C. 552a(k). To the extent that records in this system of records are not subject to exemption, they are subject to access and contest. A determination as to whether an exemption applies shall be made at the time a request for access or contest is received.

(See "Record access procedures" above.)

The information and the records in this system are obtained from the applicant, lenders, brokers and builder/sellers, credit and financial reporting agencies, an applicant's credit sources, depository institutions and employers, independent auditors and accountants, hazard insurance companies, taxing authorities, title companies, fee personnel, business and professional organizations, other VA records, other Federal, State, and local agencies, and other parties of interest involving VA-guaranteed, insured, vendee or direct loans or specially adapted housing.

The Secretary of Veterans Affairs has exempted this system of records from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(k)(2) and (5).

5 U.S.C. 552a(c)(3)

5 U.S.C. 552a(d)

5 U.S.C. 552a(e)(1)

5 U.S.C. 552a(e)(4)(G), (H), and (I)

5 U.S.C. 552a(f)

Reasons for exemptions:

The exemption of information and material in this system of records is necessary in order to accomplish the law enforcement functions of the Loan Guaranty Service to prevent subjects of internal audit investigations for potential fraud and abuse in the VA Loan Guaranty Program from frustrating the investigatory process, to fulfill commitments made to protect the confidentiality of sources, to maintain access to sources of information, and to avoid endangering these sources. This information is also being exempted to maintain the confidentiality and integrity of material compiled solely for the purpose of determining the suitability, eligibility, or the qualifications of prospective VA program participants.

Active records are located at the Veterans Administration (VA) Central Office, 810 Vermont Avenue, NW, Washington, DC 20420. Inactive records will be stored at the same address. Information from these records is also maintained in automated files at the VA Central Office. Duplicate copies of certain manual and automated files are maintained only by the VA Central Office. No other VA facility has access to the Centralized Staffing System automated data.

Employees in specified occupations and at specified grade levels leading to centralized managerial or executive positions.

All categories of records may include names of individuals, social security numbers, dates of birth, inquiries or correspondence sent to the VA by individuals, information pertinent to decisions or responses given by the Administrator, Department Heads, Associate Deputy Administrators, and Staff Office Directors, and copies of the decisions or responses of the Administrator, Department Heads, Associate Deputy Administrators, and Staff Office Directors. The records will also include:

a. Records reflecting work experience, educational level, and specialized training obtained outside of the Federal service.

b. Records reflecting Federal service and documenting work experience and specialized education or training received while employed. Such records contain information about: Past and present positions held including grades, salaries, and duty station locaitons.

c. Records pertaining to annual performance evaluation and supervisory assessment of performance in response to specific knowledge, skills, abilities and other characteristics.

d. Records relating to incentive awards received while employed within or outside of the agency.

e. Records reflecting ratings assigned by a promotion panel to individuals participating in the system.

f. Records reflecting geographic mobility and mobility statements.

g. Records reflecting qualification determinations made on individuals participating in the system.

Title 5, United States Code, Sections 301 and 302.

1. In the event that a system of records maintained by this agency to carry out its function indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigation or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

2. To provide statistical and other information in response to other legitimate and reasonable requests as approved by appropriate VA authorities, such as the release of information under the Freedom of Information Act.

3. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

4. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

Storage:

Paper documents, magnetic tape and disks.

Folder files are filed by name, automated records are indexed by social security number within station.

1.Physical Security. The VA Central Office is protected from outside access by the Federal Protective Service. All file areas are restricted to authorized personnel on a need-to- know basis. Hard copy records pertaining to employees, or other sensitive records are stored in locked cabinets. Access to the VA Central Office computer rooms is restricted to authorized operating personnel through electronic locking devices. All other persons gaining access to the computer room are escorted by an individual with authorized access.

2. System Security: Access to computer programs is controlled at three levels: Programming, auditing, and operations. The CSS provides automated recognition of authorized users and their respective access restrictions through passwords. Passwords are changed periodically and are restricted to authorized individuals on a need-to-know basis for system access or security purposes. In addition to passwords, there are other levels of security assigned to system personnel only.

These levels are strictly monitored by the Systms Manager. The VA Central Office Systems Security Officer is assigned responsiblity for privacy-security measures, including review of violation logs and local control and distribution of passwords.

Folder files are destroyed immediately upon separation from VA. Folders are retained two years if employee withdraws from system and subsequently destroyed. Automated records are stored on disks for a period of ten years. Automated records in excess of ten years are then stored on remote disks separate from active disks. Other records are retained and disposed of in accordance with disposition authorization approved by the Achivist of the United States.

Director, Office of Personnel, (054), VA Central Office, Washington, DC 20420.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name, or who has a routine inquiry concerning the status of his or her application under this system may contact the Director, Recruitment and Placement Service, Office of Personnel and Labor Relations, VA Central Office, Washington, DC 20420. Requests concerning the specific content of a record must be in writing or in person. Employee should provide full name, social security number, employing station and position title.

Employee or representative designated in writing may contact their servicing personnel office in person or in writing for information on procedures for gaining access to his/her record.

(See Record Access Procedures above.)

Employee, Supervisory officials (appraisals), Personnel and Accounting Pay System.

Records are maintained at each VA Health Care Facility, where the authorization to operate a Government-owned vehicle was issued, or at the facility where an accident occurred. Address locations are listed in VA Appendix 1 at the end of this document.

VA employees authorized to operate a Government-owned vehicle. Individuals involved in a motor vehicle accident at a VA facility.

Driving tests, road tests, accident reports, physical fitness reports. Reports and records documenting the facts, circumstances and evidence surrounding a motor vehicle accident.

Title 38, United States Code, Chapter 3, Section 210(c)(1); Title 38, United States Code, Chapter 57, Section 3311.

1. To issue or remove a permit to operate a Governmental vehicle by the General Service Administration to insure against the operation of a GSA vehicle by a driver who is not qualified or who is a poor risk.

2. Transfer of required information to attorneys representing parties involved in litigation of motor vehicle accidents to assist attorneys in representing their clients.

3. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

4. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that he information is relevant and necessary to the requesting agency's decision on the matter.

5. A record from this system of records may be disclosed as a 'routine use' to a Federal, State or local agency maintaining civil, criminal or other relevant information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other health, educational or welfare benefits.

6. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

7. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

8. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

9. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

10. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

11. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

12. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

13. VA may, on its own initiative, disclose information to another federal agency, court, or party in litigation before a court or other administrative proceedings conduced by an agency, if VA is a party to the proceeding and needs to disclose the information to protect its interests.

Storage:

(a) Paper documents. (b) Photographs.

(a) The operator permits are filed alphabetically by name of operator.

Physical Security: Access to VA working space and medical record storage areas is restricted to VA employees on a 'need to know' basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service. Employee file records and file records of public figures or otherwise sensitive medical record files are stored in separate locked files. Strict control measures are enforced to ensure that disclosure is limited to a 'need to know' basis.

(a) The operators permit file is disposed of three (3) years after separation or three (3) years after cancellation of authorization to operate, whichever is earlier. (b) The accident files are disposed of two (2) years after last activity. (c) Destruction of records is accomplished by burning or shredding.

Director, Engineering Service (138), VA Central Office, Washington, DC 20420.

Individuals seeking information concerning the existence or content of a record pertaining to themselves must submit a written request or apply in person to the VA facility where the permit was issued or the accident occurred. All inquiries must reasonably identify the portion of the record system desired, i.e., Driver permit, or accident report. Inquiries should include the individual's full name, dates of employment or approximate date of accident, vehicle license number, description of the vehicles involved in the accident.

Individuals or duly authorized representatives seeking information regarding access to and contesting of these records may write, call or visit the VA facility where the permit was issued or accident occurred.

(See Record Access Procedures above.)

1. Employee, 2. Private citizens involved in accidents, 3. Federal, State and local law enforcement agencies, and 4. Private insurance companies.

Paper and electronic records, including electronic images of Non-VA Care (fee) claims are maintained at the authorizing VA healthcare facility; the VA Financial Services Center (FSC), Austin, Texas; Austin. Information Technology Center (AITC), Austin, Texas; and Federal record centers. Information is also stored in automated storage media records that are maintained at the authorizing VA healthcare facility; VA Chief Business Office Purchased Care (CBOPC), Denver, Colorado; Department of Veterans Affairs Headquarters, Washington, DC; VA Allocation Resource Center (ARC), Braintree, Massachusetts; VA Office of Information Field Offices (OIFOs); and FSC & AITC. Address locations for VA facilities are listed in VA Appendix 1 of the biennial Privacy Act Issuances publication.

1. Veterans who seek healthcare services under 38 U.S.C. Chapter 17.

2. Beneficiaries of other Federal agencies authorized VA medical services.

3. Pensioned members of allied forces seeking healthcare services under 38 U.S.C.109.

4. Healthcare providers treating individuals who receive care under 38 U.S.C. Chapters 1 and 17.

Records maintained in this system include application, eligibility, and claim information regarding payment determination for medical services provided to VA beneficiaries by non-VA healthcare institutions and providers. Application and eligibility data may include personal information of the claimant (e.g., name, address, social security number, date of birth, date of death, VA claim number, other health insurance data), description of VA adjudicated compensable or non-compensable medical conditions, and military service data (e.g., dates, branch and character of service, medical information). Claim data in this system may include information needed to properly consider claims for payment such as an Explanation of Benefit (EOB), description of the medical conditions treated and services provided, authorization and treatment dates, amounts claimed for healthcare services, health records including films, and payment information (e.g., invoice number, account number, date of payment, payment amount, check number, payee identifiers). Additional information may include the healthcare provider’s name, address, and taxpayer identification number, correspondence concerning individuals and documents pertaining to claims for medical services, reasons for denial of payment, and appellate determinations.

Title 5 U.S.C 301, Title 26 U.S.C 61. Title 38, U.S.C. sections 31, 109, 111, 501, 1151 1703, 1705, 1710, 1712, 1717, 1720, 1721, 1724, 1725, 1727, 1728, 1741-1743, 1781, 1786, 1787, 3102, 5701 (b)(6)(g)(2)(g)(4)(c)(1), 5724, 7105, 7332, and 8131-8137. 38 Code of Federal Regulations 2.6 and 45 CFR part 160 and 164. Title 44 U.S.C and Title 45 U.S.C. Veterans Access, Choice, and Accountability Act of 2014.

Records may be used to establish, determine, and monitor eligibility to receive VA benefits and for authorizing and paying Non-VA healthcare services furnished to veterans and beneficiaries. Other uses of this information include reporting healthcare provider earnings to the Internal Revenue Service; Third Party Liability, preparing responses to inquiries; performing statistical analyses for use in managerial activities, resource allocation and planning; processing and adjudicating administrative benefit claims by VBA Regional Office (RO) staff; conducting audits, reviews and investigations by staff of the VA healthcare facility, Veterans Integrated Service Network (VISN) Offices, VA FSC, VA Headquarters, and the VA Office of Inspector General (OIG); in the conduct of law enforcement investigations; and in the performance of quality assurance audits, reviews and investigations.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their beneficiaries, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, or Tribal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. VA may disclose on its own initiative the names and addresses of Veterans and their beneficiaries to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

2. A record from this system of records may be disclosed to a Federal, State, or local government agency, maintaining civil, criminal, or other relevant information, such as current licenses, registration or certification, if necessary, to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the use of an individual as a consultant, attending or to provide Non-VA Care (fee), the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant, or other health, educational or welfare benefits. Any information in this system also may be disclosed to any of the above-listed governmental organizations as part of a series of ongoing computer matches to determine if VA healthcare practitioners and private practitioners used by the VA hold current, unrestricted licenses, or are currently registered in a State, and are board certified in their specialty, if any.

3. VA may disclose information from this system of records to a Federal agency or the District of Columbia government, in response to its request, in connection with the hiring or retention of an employee and the issuance of a security clearance as required by law, the reporting of an investigation of an employee, the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency’s decision.

4. Information from this system of records may be disclosed to the Department of the Treasury to facilitate VA payment to physicians, clinics, and pharmacies for reimbursement of services rendered, to facilitate payments to veterans for reimbursements of authorized expenses, or to collect, by set off or otherwise, debts owed the United States.

5. Disclosure may be made to a congressional office, from the record of an individual, in response to an inquiry from the congressional office made at the request of that individual.

6. Disclosure may be made to National Archives and Records Administration (NARA), and General Services Administration (GSA) in records management inspections conducted under authority of 44 United States Code.

7. Records from this system of records may be disclosed to a Federal agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity which maintains records concerning individuals’ employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty, in order for the agency to obtain information relevant to an agency decision concerning the hiring, retention or termination of an employee or to inform a Federal agency or licensing boards or the appropriate non-government entities about the healthcare practices of a terminated, resigned or retired healthcare employee whose professional healthcare activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer-matching program to accomplish these purposes.

8. Identifying information in this system, including name, address, social security number, and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging of healthcare practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging, retention or termination of the applicant or employee.

9. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (a) Any payment for the benefit of a physician, dentist, or other licensed healthcare practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (b) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or (c) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the healthcare entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer-matching program to accomplish these purposes.

10. Relevant identifying and medical treatment information (excluding medical treatment information related to drug or alcohol abuse, infection with the human immunodeficiency virus or sickle cell anemia) may be disclosed to a Federal agency or non-VA healthcare provider or institution, including their billing or collection agent, when VA refers a patient for treatment or medical services, or authorizes a patient to obtain non-VA medical services and the information is needed by the Federal agency or non-VA institution or provider to perform the services, or for VA to obtain sufficient information in order to consider or make payment for health care services, to evaluate the services rendered, or to determine the need for additional services.

11. Information maintained in this system concerning non-VA healthcare institutions and providers, including name, address, social security or employer’s taxpayer identification numbers, may be disclosed to the Department of the Treasury, Internal Revenue Service, to report calendar year earnings of $600 or more for income tax reporting purposes.

12. The name, date of birth and social security number of a Veteran or beneficiary, and any other identifying and claim information as is reasonably necessary, such as provider identification, description of services furnished, and VA payment amount, may be disclosed to another Federal agency for its use in identifying potential duplicate payments for healthcare services paid by Department of Veteran Affairs and that agency. This information may also be disclosed as part of a computer matching agreement to accomplish this purpose.

13. Relevant information from this system of records may be disclosed to individuals, organizations, or private or public agencies, with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

14. Any relevant information in this system of records may be disclosed to attorneys, insurance companies, employers, and courts, boards, or commissions; such disclosures may be made only to the extent necessary to aid VA in the preparation, presentation, and prosecution of claims authorized under Federal, State, or local laws, and regulations promulgated thereunder.

15. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA’s initiative or in response to DoJ’s request for the information, after either VA or DoJ determines that such information is relevant to DoJ’s representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

16. Any information in this system may be disclosed in connection with any proceeding for the collection of an amount owed to the United States by virtue of a person’s participation in any benefit program administered by the Veterans Health Administration when in the judgment of the Secretary, or an official generally delegated such authority under standard agency delegation of authority rules (38 CFR 2.6), such disclosure is deemed necessary and proper, in accordance with 38 U.S.C. 5701(b)(6).

17. The name and address of a veteran or beneficiary, and other information as is reasonably necessary to identify such individual, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the individual’s indebtedness to the United States by virtue of the individual’s participation in a benefits program administered by VA, may be disclosed to a consumer reporting agency for the purpose of locating the individual, obtaining a consumer report to determine the ability of the individual to repay an indebtedness, or assisting in the collection of such indebtedness provided that the applicable requirements of 38 U.S.C. 5701(g)(2) and 38 U.S.C. 5701(g)(4) have been met.

18. In response to an inquiry about a named individual from a member of the general public, information from this system may be disclosed to report the amount of VA monetary benefits being received by the individual. This disclosure is consistent with 38 U.S.C. 5701(c)(1).

19. VA may disclose information from this system to a Federal agency for the purpose of conducting research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and VA has determined prior to the disclosure that the VA data handling requirements are satisfied.

20. Any information in this system of records relevant to a claim of a Veteran or beneficiary, such as the name, address, the basis and nature of a claim, amount of benefit payment information, medical information and military service and active duty separation information may be disclosed to accredited service organizations, VA approved claim agents and attorneys acting under a declaration of representation, so that these individuals can aid claimants in the preparation, presentation and prosecution of claims under the laws administered by VA. The name and address of a claimant will not, however, be disclosed to these individuals under this routine use if the claimant has not requested the assistance of an accredited service organization, claims agent or an attorney.

21. Any information in this system, including medical information, the basis and nature of claim, the amount of benefits, and other personal information may be disclosed to a VA Federal fiduciary or a guardian ad litem in relation to his or her representation of a claimant, but only to the extent necessary to fulfill the duties of the VA Federal fiduciary or the guardian ad litem.

22. The individual’s name, address, social security number and the amount (excluding interest) of any indebtedness which is waived under 38 U.S.C. 3102, compromised under 4 CFR Part 103, otherwise forgiven, or for which the applicable statute of limitations for enforcing collection has expired, may be disclosed to the Department of the Treasury, Internal Revenue Service, as a report of income under 26 U.S.C. 61(a)(12).

23. The name of a veteran or beneficiary, other information as is reasonably necessary to identify such individual, and any other information concerning the individual’s indebtedness by virtue of a person’s participation in a benefits program administered by VA, may be disclosed to the Department of the Treasury, Internal Revenue Service, for the collection of Title 38 benefit overpayments, overdue indebtedness, and/or costs of services provided to an individual not entitled to such services, by the withholding of all or a portion of the person’s Federal income tax refund.

24. The name, date of birth, and social security number of a Veteran or beneficiary, and other identifying information as is reasonably necessary may be disclosed to Social Security Administration for the purpose of validating social security numbers. This information may also be disclosed as part of a computer matching agreement to accomplish this purpose.

25. The name and address of any healthcare provider in this system of records who has received payment for claimed services in behalf of a Veteran or beneficiary may be disclosed in response to an inquiry from a member of the general public.

26. Relevant information from this system of records may be disclosed to an accrediting Quality Review and Peer Review Organization with which VA has an agreement or contract to conduct such reviews in connection with the review of claims or other review activities associated with VA healthcare facility accreditation to professionally accepted standards, such as The Joint Commission or Utilization Review Accreditation Commission (URAC) or American Accreditation HealthCare Commission.

27. Eligibility and claim information from this system of records may be disclosed verbally or to a healthcare provider seeking reimbursement for claimed medical services to facilitate billing processes, verify eligibility for requested healthcare services, and provide payment information for claimed services. Eligibility or entitlement information disclosed may include the name, social security number, effective dates of eligibility, reasons for any period of ineligibility, and evidence of other health insurance information of the named individual. Claim information disclosed may include payment information such as payment identification number, date of payment, date of service, amount billed, amount paid, name of payee, and reasons for non-payment.

28. Identifying information, including social security number of Veterans, spouse(s) of Veterans, and dependents of Veterans, may be disclosed to other Federal agencies for purposes of conducting computer matches, to obtain information to determine or verify eligibility of Veterans who are receiving VA medical care under relevant sections of Title 38 U.S.C.

29. VA may disclose patient identifying information to Federal agencies and VA and government-wide third-party insurers responsible for payment of the cost of medical care for the identified patients, in order for VA to seek recovery of the medical care costs. These records may also be disclosed as part of a computer matching program to accomplish this purpose.

30. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

31. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are maintained on paper documents or stored electronically by magnetic discs, magnetic tape, and optical or digital imaging at the authorizing VA healthcare facility. Reports and information on automated storage media (e.g., microfilm, microfiche, magnetic tape and disks, and digital and laser optical media) is stored at the authorizing VA healthcare facility, VA Headquarters, ARC, OIFOs, FSC, AITC, and Veterans Integrated Service Network (VISN) offices.

Information pertaining to electronic claims submitted to VA for payment consideration may be stored at the authorizing VA healthcare facility, FSC, AITC, and at CBOPC. Records maintained at CBOPC are stored electronically.

Paper and electronic records pertaining to the individual may be retrieved by the name or Social Security number of the record subject. Records pertaining to the healthcare provider are retrieved by the name or Social Security and taxpayer identification number of the non-VA healthcare institution or provider. Records at the ARC are retrieved only by Social Security number.

1. VA will maintain the data in compliance with applicable VA security policy directives that specify the standards that will be applied to protect sensitive personal information. Contractors and their subcontractors who access the data are required to maintain the same level of security as VA staff. Working spaces and record storage areas in VA facilities are restricted to VA employees. Generally, file areas are locked after normal duty hours and healthcare facilities are protected from outside access by security personnel. Access to the records is restricted to VA employees who have a need for the information in the performance of their official duties. Employee records or records of public figures or otherwise sensitive records are generally stored in separate locked files.

2. Electronic data security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Access to computer rooms at healthcare facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Access to file information is controlled at two levels: the system recognizes authorized employees by a series of individually unique passwords/codes that must be changed periodically by the employee, and employees are limited by role-based access to only that information in the file which is needed in the performance of their official duties. Information that is downloaded and maintained on personal computers is afforded similar storage and access protections as the data that is maintained in the original files. Remote access to file information by staff of the OIFOs, and access by OIG staff conducting an audit or investigation at the healthcare facility or an OIG office location remote from the healthcare facility is controlled in the same manner.

3. Access to FSC and AITC is generally restricted to each Center’s employees, custodial personnel and security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted. Authorized VA employees at remote locations, including VA healthcare facilities, OIFOs, VA Headquarters, VISN offices, and OIG headquarters and field staff, may access information stored in the computer. Access is controlled by individually unique passwords/codes that must be changed periodically by the employee.

4. Access to records maintained at VA Headquarters, ARC, OIFOs, and VISN offices is restricted to VA employees who have a need for the information in the performance of their official duties. Access to information stored on automated storage media is controlled by individually unique passwords/codes that must be changed periodically by the employee. Authorized VA employees at remote locations including VA healthcare facilities may access information stored in the computer. Access is controlled by individually unique passwords/codes. Records are maintained in manned rooms during nonworking hours. The facilities are protected from outside access during working hours by security personnel.

5. Information downloaded and maintained by the OIG Headquarters and field offices on automated storage media is secured in storage areas or facilities to which only OIG staff members have access. Paper documents are similarly secured. Access to paper documents and information on automated storage media is limited to OIG employees who have a need for the information in the performance of their official duties. Access to information stored on automated storage media is controlled by individually unique passwords/codes.

6. Access to records maintained at CBOPC Office of Information and Technology (OI&T) is restricted to VA employees who have a need for the information in the performance of their official duties. Access to information stored on automated storage media is controlled by individually unique passwords/codes that must be changed periodically by the employee. Authorized VA employees at remote locations including VA healthcare facilities may access and print information stored in the computer. Access is controlled by individually assigned unique passwords/codes. Records are maintained in a secured, pass card protected and alarmed room. The facilities are protected from outside access during non-working hours by security personnel.

Paper and electronic documents at the authorizing healthcare facility related to authorizing the Non-VA Care (fee) and the services authorized, billed and paid for are maintained in ‘‘Patient Medical Records-VA’’ (24VA10P2). These records are retained at healthcare facilities for a minimum of three years after the last episode of care. After the third year of inactivity the paper records are transferred to a records facility for seventy-two (72) more years of storage.

Automated storage media, imaged Non-VA Care (fee) claims, and other paper documents that are included in this system of records and not maintained in ‘‘Patient Medical Records-VA’’ (24VA10P2) are retained and disposed of in accordance with disposition authority approved by the Archivist of the United States.

Paper records that are imaged for viewing electronically are destroyed after they have been scanned, and the electronic copy is determined to be an accurate and complete copy of the paper record imaged.

Official responsible for policies and procedures: Chief Business Officer (10NB), Department of Veterans Affairs, Veterans Health Administration, VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420. Official Maintaining the System: Director, National Non-VA Care (Fee) Program Office, VHA Chief Business Office Purchased Care, P.O. Box 469066, Denver, CO 80246.

An individual who wishes to determine whether a record is being maintained in this system under the individual’s name or other personal identifier, or who wants to determine the contents of such record, should submit a written request or apply in person to the last VA healthcare facility where care was authorized or rendered. Addresses of VA healthcare facilities may be found in VA Appendix 1 of the Biennial Publication of Privacy Act Issuances. All inquiries must reasonably identify the portion of the Non-VA Care (fee) record involved and the place and approximate date that medical care was provided. Inquiries should include the patient’s full name, social security number, and return address.

Individuals seeking information regarding access to health records and/or contesting health l records may write, call or visit the VA facility where medical care was last authorized or provided. Individuals seeking information regarding access to claims and/or billing records will write to the VHA Chief Business Office Purchased Care, Privacy Office, PO BOX 469060, Denver, CO. All Requests for records about another person are required to provide a Request for an Authorization to Release Medical Records or Health Information signed by the record subject by using form VA Form 10-5345.

(See Record Access Procedures above.)

The Veteran or other VA beneficiary, family members or accredited representatives, and other third parties; military service departments; private medical facilities and healthcare professionals; electronic trading partners; other Federal agencies; Veterans Health Administration facilities and automated systems; Veterans Benefits Administration facilities and automated systems; VA FSC facility and automated systems; and deployment status and availability.

Records are maintained at each VA health care facility (in most cases, backup information is stored at off-site locations). Subsidiary record information is maintained at the various respective services within the health care facility (e.g., Pharmacy, Fiscal, Dietetic, Clinical Laboratory, Radiology, Social Work, Psychology) and by individuals, organizations, and/or agencies with which VA has a contract or agreement to perform such services, as VA may deem practicable.

Address locations for VA facilities are listed in Appendix 1 of the biennial publication of the VA Privacy Act Issuances. In addition, information from these records or copies of these records may be maintained at the Department of Veteran Affairs Central Office, 810 Vermont, NW., Washington, DC 20420; VA National Data Centers; VA Health Data Repository (HDR), located at the VA National Data Centers; VA Chief

Information Office Field Offices; Veterans Integrated Service Networks (VISN); and Regional and General Counsel Offices.

1. Veterans who have applied for health care services under Chapter 17 of Title 38, United States Code, and members of their immediate families;

2. Spouses, surviving spouses, and children of veterans who have applied for health care services under Chapter 17 of Title 38, United States Code;

3. Beneficiaries of other Federal agencies;

4. Individuals examined or treated under contract or resource sharing agreements;

5. Individuals examined or treated for research or donor purposes;

6. Individuals who have applied for Title 38 benefits but who do not meet the requirements under Title 38 to receive such benefits;

7. Individuals who were provided medical care under emergency conditions for humanitarian reasons;

8. Pensioned members of allied forces provided health care services under Chapter I of Title 38, United States Code; and

9. Caregivers.

The patient medical record is a consolidated health record (CHR) which may include:

(i) An administrative (non-clinical information) record (e.g., medical benefit application and eligibility information) including information obtained from Veterans Benefits Administration automated records such as the Veterans and Beneficiaries Identification and Records Locator Subsystem-VA (38VA23) and the Compensation, Pension, Education and Rehabilitation Records-VA (58VA21/22/28), and correspondence

about the individual;

(ii) A medical record (a cumulative account of sociological, diagnostic, counseling, rehabilitation, drug and alcohol, dietetic, medical, surgical, dental, psychological, and/or psychiatric information compiled by VA professional staff and non-VA health care providers), and

(iii) Subsidiary record information (e.g., Bed Management Solution (BMS), tumor registry, certain clinically oriented information associated with My HealtheVet such as secure messages, minimum data set, dental, pharmacy, nuclear medicine, clinical laboratory, radiology, and patient scheduling information). The CHR may include identifying information (e.g., name, address, date of birth, VA claim number, social security number); military service information (e.g., dates, branch and character of service, service number, medical information); family information (e.g., next of kin and person to notify in an emergency; address information, name, social security number, and date of birth for a veteran’s spouse and dependents; family medical history information); employment information (e.g., occupation, employer name and address); financial information (e.g., family income; assets; expenses; debts; amount and source of income for veteran, spouse, and dependents); third-party health plan contract information (e.g., health insurance carrier name and address, policy number, amounts billed and paid); and information pertaining to the individual’s medical, surgical, psychiatric, dental, and/or psychological examination, evaluation, and/or treatment (e.g., information related to the chief complaint and history of present illness; information related to physical, diagnostic, therapeutic special examinations; clinical laboratory, pathology and x-ray findings; operations; medical history; medications prescribed and dispensed; treatment plan and progress; consultations; photographs taken for identification and medical treatment; education and research purposes; facility locations where treatment is provided; observations and clinical impressions of health care providers to include identity of providers and to include, as appropriate, the present state of the patient’s health; and an assessment of the patient’s emotional, behavioral, and social status, as well as an assessment of the patient’s rehabilitation potential and nursing care needs). Abstract information (e.g., environmental, epidemiological and treatment regimen registries) is maintained in auxiliary paper and automated records.

Title 38, United States Code, Sections 501(b) and 304.

The paper and automated records may be used for such purposes as: Ongoing treatment of the patient; documentation of treatment provided; payment; health care operations such as producing various management and patient follow-up reports; responding to patient and other inquiries; for epidemiological research and other health care related studies; statistical analysis, resource allocation and planning; providing clinical and administrative support to patient medical care; determining entitlement and eligibility for VA benefits; processing and adjudicating benefit claims by Veterans Benefits Administration Regional Office staff; for audits, reviews, and investigations conducted by staff of the health care facility, the networks, VA Central Office, and the VA Office of Inspector General (OIG); sharing of health information between and among VHA, DoD, Indian Health Services, and other government and private industry health care organizations; law enforcement investigations; quality assurance audits, reviews, and investigations; personnel management and evaluation; employee ratings and performance evaluations; and employee disciplinary or other adverse action, including discharge; advising health care professional licensing or monitoring bodies or similar entities of activities of VA and former VA health care personnel; accreditation of a facility by an entity such as the Joint Commission (JCAHO); and notifying medical schools of medical students’ performance and billing.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia, or infection with the human immunodeficiency virus, that information may not be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. VA may disclose health care information as deemed necessary and proper to Federal, State, and local government agencies and national health organizations in order to assist in the development of programs that will be beneficial to claimants, protect their rights under law, and assure that they are receiving all benefits to which they are entitled.

2. VA may disclose health care information furnished and the period of care, as deemed necessary and proper to accredited service organization representatives and other approved agents, attorneys, and insurance companies to aid claimants whom they represent in the preparation, presentation, and prosecution of claims under laws administered by VA, or State or local agencies.

3. VA may disclose on its own initiative any information, except the names and addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature, and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

4. VA may disclose information to a Federal agency or the District of Columbia government, in response to its request, in connection with the hiring or retention of an employee and the issuance of a security clearance as required by law, the reporting of an investigation of an employee, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency’s decision.

5. Health care information may be disclosed by appropriate VA personnel to the extent necessary and on a need-to-know basis, consistent with good medical-ethical practices, to family members and/or the person(s) with whom the patient has a meaningful relationship.

6. In response to an inquiry from a member of the general public about a named individual, VA may disclose the patient’s name, presence (and location when needed for visitation purposes) in a medical facility, and general condition that does not reveal specific medical information (e.g., satisfactory, seriously ill).

7. In the course of presenting evidence to a court, magistrate, or administrative tribunal in matters of guardianship, inquests, and commitments, VA may disclose relevant information to private attorneys representing veterans rated incompetent in conjunction with issuance of certificates of incompetency and to probation and parole officers in connection with court-required duties.

8. VA may disclose relevant information to a guardian ad litem in relation to his or her representation of a claimant in any legal proceeding.

9. VA may disclose information to a member of Congress or a congressional staff member in response to an inquiry from the congressional office made at the request of that individual.

10. VA may disclose name(s) and address(es) of present or former members of the armed services and/or their dependents under certain circumstances: (a) To any nonprofit organization, if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, or (b) to any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety, if a qualified representative of such organization, agency, or instrumentality has made a written request for such name(s) or address(es) for a purpose authorized by law, provided that the records will not be used for any purpose other than that stated in the request and that the organization, agency, or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

11. VA may disclose the nature of the patient’s illness, probable prognosis, estimated life expectancy, and need for the presence of the related service member to the American Red Cross for the purpose of justifying emergency leave.

12. VA may disclose relevant information to attorneys, insurance companies, employers, third parties liable or potentially liable under health plan contracts, and courts, boards, or commissions, to the extent necessary to aid VA in the preparation, presentation, and prosecution of claims authorized under Federal, State, or local laws, and regulations promulgated thereunder.

13. VA may disclose health information for research purposes determined to be necessary and proper to epidemiological and other research entities approved by the Under Secretary for Health or designee, such as the Medical Center Director of the facility where the information is maintained.

14. VA may disclose health information, including the name(s) and address(es) of present or former personnel of the Armed Services and/or their dependents, (a) to a Federal Department or agency or (b) directly to a contractor of a Federal Department or agency, at the written request of the head of the agency or the designee of the head of that agency, to conduct Federal research necessary to accomplish a statutory purpose of an agency. When this information is to be disclosed directly to the contractor, VA may impose applicable conditions on the Department, agency, and/or contractor to ensure the appropriateness of the disclosure to the contractor.

15. VA may disclose relevant information to the Department of Justice or other Federal agencies in pending or reasonably anticipated litigation or other proceedings before a court, administrative body, or other adjudicative tribunal, when:

(a) VA or any subdivision thereof;

(b) Any VA employee in his or her official capacity;

(c) Any VA employee in his or her individual capacity, where DoJ has agreed to represent the employee; or

(d) The United States, where VA determines that the proceedings are likely to affect the operations of VA or any of its components is a party to or has an interest in the proceedings, and VA determines that the records are relevant and necessary to the proceedings.

16. Health care information may be disclosed by the examining VA physician to a non-VA physician when that non-VA physician has referred the individual to VA for medical care.

17. VA may disclose records to the National Archives and Records Administration and the General Services Administration in records management inspections and other activities conducted under Title 44.

18. VA may disclose health care information concerning a non-judicially declared incompetent patient to a third party upon the written authorization of the patient’s next of kin in order for the patient or, consistent with the best interest of the patient, a member of the patient’s family, to receive a benefit to which the patient or family member is entitled or to arrange for the patient’s discharge from a VA medical facility. Sufficient information to make an informed determination will be made available to such next of kin. If the patient’s next of kin is not reasonably accessible, the chief of staff, director, or

designee of the custodial VA medical facility may make the disclosure for these purposes.

19. VA may disclose information to a Federal agency, a state or local government licensing board, and/or the Federation of State Medical Boards or a similar non-governmental entity that maintains records concerning individuals’ employment histories or concerning the issuance, retention, or revocation of licenses, certifications, or registration necessary to practice an occupation, profession, or specialty, to inform the entity about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

20. VA may disclose information maintained in connection with the performance of any program or activity relating to infection with the Human Immunodeficiency Virus (HIV) to a Federal, State, or local public health authority that is charged under Federal or State law with the protection of the public health, and to which Federal or State law requires disclosure of such record, if a qualified representative of such authority has made a written request that such record be provided as required pursuant to such law for a purpose authorized by the law. The person to whom information is disclosed, under 38 U.S.C. 7332(b)(2)(C), should be advised that they shall not re-disclose or use such information for a purpose other than that for which the disclosure was made. The disclosure of patient name and address under this routine use must comply with the provisions of 38 U.S.C. 5701(f)(2).

21. Information indicating that a patient or subject is infected with the Human Immunodeficiency Virus (HIV) may be disclosed by a physician or professional counselor to the spouse of the patient or subject, to an individual with whom the patient or subject has a meaningful relationship, or to an individual whom the patient or subject has during the process of professional counseling or of testing to determine whether the patient or subject is infected with the virus, identified as being a sexual partner of the patient or subject. Disclosures may be made only if the physician or counselor, after

making reasonable efforts to counsel and encourage the patient or subject to provide the information to the spouse or sexual partner, reasonably believes that the patient or subject will not provide the information to the spouse or sexual partner and that the disclosure is necessary to protect the health of the spouse or sexual partner. Such disclosures should, to the extent feasible, be made by the patient’s or subject’s treating physician or professional counselor. Before any patient or subject gives consent to being tested for the HIV, as part of pre-testing counseling, the patient or subject must be informed fully about these notification procedures.

22. VA may disclose information, including name, address, social security number, and other information as is reasonably necessary to identify an individual, to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/re-privileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention, or termination of the applicant or employee.

23. VA may disclose relevant information to the National Practitioner Data Bank and/or State Licensing Board in the state(s) in which a practitioner is licensed, the VA facility is located, and/ or an act or omission occurred upon which a medical malpractice claim was based, when VA reports information concerning: (a) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice, if an appropriate determination is made in accordance with Department policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (b) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or (c) the surrender of clinical privileges or any restriction of such privileges by a physician or dentist, either while under investigation by the health care entity relating to possible incompetence or improper professional conduct. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

24. VA may disclose relevant health care information to a state veterans home for the purpose of medical treatment and/or follow-up at the state home when VA makes payment of a per diem rate to the state home for the patient receiving care at such home, and the patient receives VA medical care.

25. VA may disclose relevant health care information to (a) a Federal agency or non-VA health care provider or institution when VA refers a patient for hospital or nursing home care or medical services, or authorizes a patient to obtain non-VA medical services, and the information is needed by the Federal agency or non-VA institution or provider to perform the services, or (b) a Federal agency or a non-VA hospital (Federal, State and local, public or private) or other medical installation having hospital facilities, blood banks, or similar institutions, medical schools or clinics, or other groups or individuals that have contracted or agreed to provide medical services or share the use of medical resources under the provisions of 38 U.S.C. 513, 7409, 8111, or 8153, when treatment is rendered by VA under the terms of such contract or agreement, or the issuance of an authorization, and the information is needed for purposes of medical treatment and/or follow-up, determining entitlement to a benefit, or recovery of the costs of the medical care.

26. VA may disclose health care information for program review purposes and the

seeking of accreditation and/or certification to survey teams of the JCAHO, College of American Pathologists, American Association of Blood Banks, and similar national accrediting agencies or boards with which VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

27. VA may disclose relevant health care information to a non-VA nursing home facility that is considering the patient for admission, when information concerning the individual’s medical care is needed for the purpose of preadmission screening under 42 CFR 483.20(f), to identify patients who are mentally ill or mentally retarded so they can be evaluated for appropriate placement.

28. VA may disclose information which relates to the performance of a health care student or provider to a medical or nursing school or other health care related training institution, or other facility with which VA has an affiliation, sharing agreement, contract, or similar arrangement, when the student or provider is enrolled at or employed by the school, training institution, or other facility, and the information is needed for personnel management, rating, and/or evaluation purposes.

29. VA may disclose relevant health care information to individuals, organizations, and private or public agencies with which VA has a contract or sharing agreement for the provision of health care or administrative services.

30. VA may disclose identifying information, including social security number of a veteran, spouse, and dependent, to other Federal agencies for purposes of conducting computer matches to obtain information to determine, or to verify eligibility of veterans who are receiving VA medical care under Title 38.

31. VA may disclose the name and social security number of a veteran, spouse, and dependent, and other identifying information as is reasonably necessary, to the Social Security Administration, Department of Health and Human Services (HHS), for the purpose of conducting a computer match to obtain information to validate the social security numbers maintained in VA records.

32. VA may disclose the patient’s name and relevant health care information concerning an adverse drug reaction to the Food and Drug Administration (FDA), HHS, for purposes of quality of care management, including detection, treatment, monitoring, reporting, analysis, and follow-up actions relating to adverse drug reactions.

33. VA may disclose relevant health care information to DoD or its components for the counseling and treatment of individuals or families involved in abuse, neglect or in the provision of spiritual and pastoral care.

34. VA may disclose information pursuant to 38 U.S.C. 7464, and notwithstanding

§§ 5701 and 7332, to a former VA employee, as well as an authorized representative of the employee, whose case is under consideration by the VA Disciplinary Appeals Board, in connection with the considerations of the Board, to the extent the Board considers appropriate for purposes of the proceedings of the Board in that case, when authorized by the chairperson of the Board.

35. Information that a patient is infected with Hepatitis C may be disclosed by a physician or professional counselor to the spouse, the person or subject with whom the patient has a meaningful relationship, or an individual whom the patient or subject has identified as being a sexual partner of the patient or subject.

36. VA may disclose to the Federal Labor Relations Authority, including its General Counsel, information related to the establishment of jurisdiction, investigation, and resolution of allegations of unfair labor practices, or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised in matters before the Federal Service Impasses Panel.

37. VA may disclose information to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working

conditions.

38. VA may disclose information to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, such

other functions promulgated in 5 U.S.C. 1205 and 1206, or as otherwise authorized by law.

39. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination

practices, examinations of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions of the

Commission as authorized by law or regulation.

40. VA may disclose relevant health care information to health and welfare agencies, housing resources, and utility companies, possibly to be combined with disclosures to other agencies, in situations where VA needs to act quickly in order to provide basic and/ or emergency needs for the patient and patient’s family where the family resides with the patient or serves as a caregiver.

41. VA may disclose health care information to funeral directors or representatives of funeral homes in order for them to make necessary arrangements prior to and in

anticipation of a patient’s death.

42. VA may disclose health care information to the FDA, or a person subject to the jurisdiction of the FDA, with respect to FDA-regulated products for purposes of reporting adverse events, product defects or problems, or biological product deviations; tracking

products; enabling product recalls, repairs, or replacement; and/or conducting post marketing surveillance.

43. VA may disclose health care information to a non-VA health care provider, such as private health care providers or hospitals, DoD, or Indian Health Services (HIS) providers, for the purpose of treating VA patients.

44. VA may disclose information to telephone company operators acting in their capacity to facilitate phone calls for hearing impaired individuals, such as patients, patients’ family members, or non-VA providers, using telephone devices for the hearing impaired, including Telecommunications Device for the Deaf (TDD) or Text Telephones

(TTY).

45. VA may disclose information to any Federal, State, local, tribal, or foreign law enforcement agency in order to report a known fugitive felon, in compliance with 38 U.S.C. 5313B(d).

46. Relevant health care information may be disclosed by VA employees who are designated requesters (individuals who have completed a course offered or approved by an Organ Procurement Organization), or their designees, for the purpose of determining suitability of a patient’s organs or tissues for organ donation to an organ procurement organization, a designated requester who is not a VA employee, or their

designees acting on behalf of local organ procurement organizations.

47. VA may disclose relevant heath care information to DoD, or its components, as necessary in addressing the transition, health care, benefits, and administrative support needs of or for wounded, ill, and injured active duty service members or reserve components, veterans, and their beneficiaries.

48. VA may disclose information to other Federal agencies in order to assist those agencies in preventing, detecting, and responding to possible fraud or abuse by individuals in their operations and programs.

49. VA may, on its own initiative, disclose any information to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise,

there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially

compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department’s efforts to report or respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

50. VA may disclose information to any third party or Federal agency, including contractors to those parties, who are responsible for payment of the cost of medical care for the identified patients, in support of VA recovery of medical care costs or for any activities related to payment of medical care costs. These records may also be

disclosed as part of a computer matching program to accomplish these purposes.

51. VA may disclose relevant information to health plans, quality review and/or peer review organizations in connection with the audit of claims or other review activities to determine quality of care or compliance with professionally accepted claims processing standards.

52. VA may disclose identifying information, including name, address, and date of birth, as needed to verify the identity of an individual or to facilitate delivery of benefits or services to travel agencies, transportation carriers, or others authorized to act on behalf of VA to provide or arrange travel for examination, treatment, or care, or in connection with vocational rehabilitation or counseling services.

53. VA may disclose information to a former VA employee or contractor, as well as the authorized representative of a current or former employee or contractor of VA, in pending or reasonably anticipated litigation against the individual regarding health care

provided during the period of his or her employment or contract with VA.

54. VA may disclose information to a former VA employee or contractor, as well as the authorized representative of a current or former employee or contractor of VA, in defense or reasonable anticipation of a tort claim, litigation, or other administrative or

judicial proceeding involving VA when the Department requires information or consultation assistance from the former employee or contractor regarding health care provided during the period of his or her employment or contract with VA.

55. VA may disclose information to a former VA employee or contractor, as well as the authorized representative of a current or former employee or contractor of VA, in connection with or in consideration of the reporting of:

(a) Any payment for the benefit of the former VA employee or contractor that was made as the result of a settlement or judgment of a claim of medical malpractice, if an appropriate determination is made in accordance with Department policy that payment

was related to substandard care, professional incompetence, or professional misconduct on the part of the individual;

(b) A final decision which relates to possible incompetence or improper professional conduct that adversely affects the former employee’s or contractor’s clinical privileges for a period longer than 30 days; or

(c) The former employee’s or contractor’s surrender of clinical privileges or any restriction of such privileges while under investigation by the health care entity relating to possible incompetence or improper professional conduct to the National Practitioner Data Bank or the state licensing board in any state in which the individual is licensed, the VA facility is located, or an act or omission occurred upon which a medical malpractice claim was based.

56. VA may disclose information to a former VA employee or contractor, as well as the authorized representative of a current or former employee or contractor of VA, in connection with or in consideration of reporting that the individual’s professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients, to a Federal agency, a State or local government licensing board, or the Federation of State Medical Boards or a similar nongovernmental entity which maintains

records concerning individuals’ employment histories or concerning the issuance, retention, or revocation of licenses, certifications, or registration necessary to practice an occupation, profession, or specialty.

57. VA may disclose information to a former VA employee or contractor, as well as the authorized representative of a current or former employee or contractor of VA, in connection with investigations by the Equal Employment Opportunity Commission pertaining to alleged or possible discrimination practices, examinations of Federal

affirmative employment programs, or other functions of the Commission as authorized by law or regulation.

58. VA may disclose information to a former VA employee or contractor, as well as the authorized representative of a current or former employee or contractor of VA, in proceedings before the Merit Systems Protection Board or the Office of the Special Counsel in connection with appeals, special studies of the civil service and other merit

systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1205 and 1206, or as otherwise authorized by law.

59. VA may disclose relevant information, including but not limited to, patient name, address, and social security number, to a state prescription drug monitoring program (PMDP), or similar program, for the purpose of submitting to or receiving from the program information regarding prescriptions to an individual for controlled substances, as required under the applicable state law.

60. VA may disclose relevant health information to the Centers for Medicare & Medicaid Services and/or their designee to evaluate compliance with Medicare or Medicaid health care standards.

Storage:

Records are maintained on paper, microfilm, electronic media including images and scanned documents, or laser optical media in the consolidated health record at the health care facility where care was rendered, in the VA Health Data Repository, at the VHA Records Center and Vault, and at Federal Record Centers. In most cases, copies of backup computer files are maintained at offsite locations. Subsidiary record information is maintained at the various respective services within the health care facility (e.g., pharmacy, fiscal, dietetic, clinical laboratory, radiology, social work, psychology) and by individuals, organizations, and/or agencies with whom VA has a contract or agreement to perform such services, as the VA may deem practicable.

Records are retrieved by name, social security number, or other assigned identifiers of the individuals to whom they pertain.

1. Access to working spaces and patient medical record storage areas in VA health care facilities is restricted to authorized VA employees. Generally, file areas are locked after normal duty hours. Health care facilities are protected from outside access by the Federal Protective Service and/or other security personnel. Access to patient medical records is restricted to VA employees who have a need for the information in the performance of their official duties. Sensitive patient medical records, including employee patient medical records, records of public figures, or other sensitive patient

medical records are generally stored in separate locked files or a similar electronically controlled access environment. Strict control measures are enforced to ensure that access to and disclosures from these patient medical records are limited.

2. Access to computer rooms within health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. ADP peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Only authorized VA employees or vendor employees may access information in the system. Access to file information is controlled at two levels: the system recognizes authorized employees by a series of individually unique passwords/codes as a part of each data message, and the employees are limited to only that information in the file that is needed in the performance of their official duties. Information that is downloaded and maintained on personal computers must be afforded similar storage and access protections as the data that is maintained in the original files. Access by remote data users such as Veterans’ Outreach Centers, Veterans Service Officers with power of attorney to

assist with claim processing, VBA Regional Office staff for benefit determination and processing purposes, OIG staff conducting official audits or investigations and other authorized individuals is controlled in the same manner.

3. Access to the VA National Data Centers is generally restricted to Center employees, custodial personnel, Federal Protective Service, and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted.

Information stored in the computer may be accessed by authorized VA employees at remote locations including VA health care facilities, VA Central Office, VISNs, and OIG Central Office and field staff. Access is controlled by individually unique passwords/codes that must be changed periodically by the employee.

4. Access to the VA HDR, located at the VA National Data Centers, is generally restricted to Center employees, custodial personnel, Federal Protective Service, and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted. Information stored in the computer may be accessed by authorized VA employees at remote locations including VA health care facilities, VA Central Office, VISNs, and OIG Central Office and field staff. Access is controlled by individually unique passwords/codes that must be changed periodically by the employee.

5. Access to records maintained at VA Central Office, the Allocation Resource Center Chief Information Office Field Offices, and VISNs is restricted to VA employees who have a need for the information in the performance of their official duties. Access to information stored in electronic format is controlled by individually unique passwords/codes. Records are maintained in manned rooms during working hours. The facilities are protected from outside access during non-working hours by the Federal Protective Service or other security personnel.

6. Computer access authorizations, computer applications available and used, information access attempts, and frequency and time of use are recorded.

In accordance with the records disposition authority approved by the Archivist of the United States, paper records and information stored on electronic storage media are maintained for seventy-five (75) years after the last episode of patient care and then destroyed/or deleted.

Patient Medical Records: Director, Information Assurance (10P2), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Health Data Repository: Director, Health Data Systems (19â€"SL), Department of Veterans Affairs, 295 Chipeta Way, Salt Lake City, UT 84108.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to review the contents of such record, should submit a written request or apply in person to the last VA health care facility where care was rendered. Addresses of VA health care facilities may be found in VA Appendix 1 of the Biennial Publication of Privacy Act Issuances. All inquiries must reasonably describe the portion of the medical record involved and the place and approximate date that medical care was provided. Inquiries should include the patient’s full name, social security number, and return address.

Individuals seeking information regarding access to and contesting of VA medical records may write, call, or visit the last VA facility where medical care was provided.

(See Record Access Procedures above.)

The patient, family members, friends, or accredited representatives, employers; military service departments; health insurance carriers; private medical facilities and health care professionals; state and local agencies; other Federal agencies; VA Regional Offices, Veterans Benefits Administration automated record systems (including Veterans and Beneficiaries Identification and Records Location Subsystem-VA (38VA23) and the Compensation, Pension, Education and Rehabilitation Records-VA (58VA21/22/28); and various automated systems providing clinical and managerial support at VA health care facilities.

This system of records is located in the VA Central Office, Washington, DC; the VA Austin Information Technology Center and VA Austin Financial Services Center, Austin, Texas; at the facilities of the Defense Finance and Accounting Service (DFAS) and the Department of Agriculture's National Finance Center (NFC); at the offices of contractors and subcontractors; and VA field facilities.

Individuals covered by the system are all VA employees, except employees appointed on a without compensation basis, medical or dental residents who receive their stipends and fringe benefits through full disbursement agreements, and employees of the VA Office of Inspector General.

These records include, but are not limited to: Name; home address; social security number (SSN); taxpayer identification number (TIN); date of birth; grade; race; employing organization; timekeeper number; salary; pay plan; number of hours worked, including compensatory time; leave accrual rate, usage, and balances; records related to retirement and benefit elections; FICA withholdings; Federal, State, and local tax withholdings; records related to travel expenses and payments; telework indicator codes; carpool and ridesharing program records (i.e., name, address, office location at the facility); public transportation benefit program records; records related to garnishments, deductions, allotments, and direct deposit/electronic funds transfer (DD/EFT); and records related to background information investigations.

38 U.S.C. 501(a); 5 U.S.C. Part III, Subparts D and E.

These records are used to administer the pay, leave, and travel requirements related to VA employees.

1. To produce and maintain automated human resources and payroll information, including reports and statistical data, on VA employees for use by Federal, State, and local agencies and organizations authorized by law or regulation, to have access to such information. These records may be disclosed as part of an ongoing computer-matching program to accomplish these purposes. This Routine use does not authorize the disclosure of information that must be disclosed under the criteria contained in 5 U.S.C. 552a(b)(7), (8), and (11).

2. To transfer human resources and payroll information to complete payroll checks and DD/EFT, bond deductions, and withholding taxes to DFAS to affect delivery of salary payments to VA employees.

3. Transfer payroll information to the Social Security Administration in order to credit quarterly posting for social security.

4. Transfer withholding tax information to State and/or city governments to effect payment of taxes to State and/or city governments and to create W-2s.

5. Transfer retirement record information to the Office of Personnel Management (OPM) in order to provide a history of service and retirement deductions.

6. Information and records in this system may be transferred to the National Archives and Records Administration (NARA) to provide a history of all salaries, deductions, and time and leave.

7. Transfer unemployment compensation information to State agencies to compile unemployment compensation data.

8. Transfer personnel data to OPM in order to provide OPM with a readily accessible major data source for meeting workforce information needs of OPM, national planning agencies, Congress, the White House, and the public.

9. VA may disclose on its own initiative any information in this system, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependants to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

10. A record from this system of records may be disclosed as a "routine use" to a Federal, State, or local agency, or to a non-governmental organization maintaining civil, criminal, or other relevant information, such as current licenses, registration, or certification, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the use of an individual as a consultant, attending or to provide fee basis health care, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant, or other benefits. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

11. A record from this system of records may be disclosed to a Federal, State, or local agency in response to its request, in connection with the hiring and retention of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract or the issuance of a license, grant or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

12. Relevant information from this system of records, including the nature and amount of a financial obligation, may be disclosed as a "routine use", in order to assist VA in the collection of unpaid financial obligations owed to VA, to a debtor's employing agency or commanding officer so that the debtor-employee may be counseled by his or her Federal employer or commanding officer. This purpose is consistent with the Government-wide debt collection standards set forth at 31 U.S.C. chapter 37, subchapters I and II, 31 CFR parts 900-904, and VA regulations 38 CFR 1.900-1.954.

13. To provide State and local taxing authorities employee names, home addresses, social security numbers, gross compensation paid for a given period, taxes withheld for the benefit of the recipient jurisdiction or other jurisdictions, according to the provisions of State and/or local law.

14. Relevant information from this system of records, including available identifying data regarding the debtor, such as name of debtor, last known address of debtor, social security number of debtor, place and date of birth of debtor, name and address of debtor's employer or firm, and dates of employment, may be disclosed to other Federal agencies, State probate courts, State drivers' license bureaus, and State automobile title and license bureaus as a "routine use " in order to obtain current address, locator and credit report assistance in the collection of unpaid financial obligations owed to the U.S. This purpose is consistent with the Government-wide debt collection standards set forth at 38 U.S.C., chapter 37, subchapters I and II, 31 CFR parts 900 -904, and VA regulations 38 CFR 1.900-1.954.

15. The record of an individual who is covered by this system may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

16. Information and records in this system may be disclosed to NARA in records management inspections conducted under the authority of title 44 U.S.C.

17. The name and general geographic location where an employee resides (not specific home address) may be disclosed by the facility Employee Transportation Coordinator to other employees in order to promote the car/vanpooling and ridesharing program established in accordance with Executive Order 12191 and to enable VA to verify membership in car and vanpools.

18. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

19. The name of the employee, social security number, beginning and ending pay period dates, the number of hours worked during a given pay period, the gross salary and duty station may be disclosed to the Department of Labor's (DOL) Office of Inspector General (IG) in order for DOL IG to conduct a computer match of these records with various State unemployment benefit files. The purpose of this computer-matching program will be to determine if Federal employees have been properly drawing State unemployment benefit payments. These payments are ultimately reimbursed to the State by the Federal Government.

20. Records from this system of records may be disclosed to a Federal, State, or local government agency or licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity. These entities maintain records concerning an individual's employment or practice histories or concerning the issuance, retention, or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty. Disclosures may be made in order for the agency to obtain information determined relevant to an agency decision concerning the hiring, retention, or termination of an employee. Disclosures may also be made to inform a Federal agency or licensing boards or the appropriate nongovernment entities about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients. These records may also be disclosed as part of an ongoing computer-matching program to accomplish these purposes.

21. Any information in this system of records may be disclosed to any State, local, or foreign civil or criminal law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety for the purpose of protecting public health or safety if qualified representatives of such agency or instrumentality has made a written request that such information be provided in order to meet a statutory reporting requirement.

22. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or other licensed health care practitioner for a period longer than 30 days; or (3) the acceptance of the surrender of clinical privilege or any restriction of such privileges by a physician or other licensed health care practitioner either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer-matching program to accomplish these purposes.

23. Any information in this system may be disclosed to the Department of the Treasury, Internal Revenue Service (IRS), where required by law or regulation to report withholding information and to affect payment of taxes withheld to IRS and to create W-2s.

24. Relevant information from this system of records, including social security number, date of birth, home address, and the amount of contributions, interfund transfers, or other financial information may be disclosed to the Federal Retirement Thrift Investment Board in order to effect employee participation in the Thrift Savings Plan.

25. Relevant information from this system of records concerning residents employed at VA Medical Centers, including names, social security numbers, occupational titles, and dates of service, may be disclosed to the Health Care Financing Administration (HCFA) as part of an ongoing computer-matching program. The purpose of this computer-matching program is to help ensure that no resident is counted as more than one full-time equivalent in accordance with program regulations governing Medicare education costs.

26. Information from this system of records may be disclosed in response to legal processes, including interrogatories, served on the agency in connection with garnishment proceedings against current or former VA employees under 5 U.S.C. 5520a.

27. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other agencies with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

28. The names, social security numbers, home addresses, dates of birth, dates of hire, quarterly earnings, employer identifying information, and State of hire of employees may be disclosed to the Office of Child Support Enforcement, Administration for Children and Families, Department of Health and Human Services Federal Parent Locator System (FPLS) for the purpose of locating individuals to establish paternity, establishing and modifying orders of child support, identifying sources of income, and for other child support enforcement actions as required by the Personal Responsibility and Work Opportunity Reconciliation Act (Welfare Reform Law, Pub. L. 104-193).

29. Information from this system of records may be released to the Social Security Administration for verifying social security numbers in connection with the operation of the FPLS by the Office of Child Support Enforcement.

30. Information from this system of records may be released to the Department of the Treasury for purposes of administering the Earned Income Tax Credit Program (Section 32, Internal Revenue Code of 1986) and verifying a claim with respect to employment in a tax return.

31. To disclose information to the FLRA (including its General Counsel) when requested in connection with the investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised, in connection with matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

32. VA may disclose information from this system of records to a court, administrative entity, or custodial parent of a child in order to provide documentation of payroll deductions for child healthcare insurance coverage in accordance with a court or administrative order as required by 5 U.S.C. 8905(h), as enacted by Public Law 106-394, and in accordance with the procedures stated in the applicable Office of Personnel Management Benefits Administration and Payroll Office Letters. VA may also disclose information from this system of records to healthcare insurance carriers in order to enroll employees and their children in healthcare insurance plans in accordance with Public Law 106-394.

33. Any information in this system of records may be disclosed to the Secretary of the Treasury, or to any designated Government disbursing official, for the purpose of conducting administrative offset of any eligible Federal payments in order to collect debts owed to the United States under the authority set forth in 31 U.S.C. 3716. Tax refund and Federal salary payments may be included in those Federal payments eligible for administrative offset.

34. Any information in this system of records concerning a delinquent debt may be disclosed to the Secretary of the Treasury for appropriate collection or termination action, including the transfer of the indebtedness for collection or termination, in accordance with 31 U.S.C. 3711(g)(4), to DFAS, to a debt collection center designated by the Secretary of the Treasury, to a private collection agency, or to the Department of Justice. The Secretary of the Treasury, through the Department of the Treasury, a designated debt collection center, a private collection agency, or DoJ, may take appropriate action on a debt in accordance with the existing laws under which the debt arose.

35. Any information in this system of records may be disclosed to a third party purchaser of delinquent debt sold pursuant to the provisions of 31 U.S.C. 3711(i).

36. To disclose to the Office of Federal Employees' Group Life Insurance information necessary to verify election, declination, or waiver of regular and/or optional life insurance coverage or eligibility for payment of a claim for life insurance.

37. To disclose information to health insurance carriers contracting with OPM under the Federal Health Benefits Program that is necessary to identify enrollment in the plan, to verify eligibility for payment of a claim for health benefits, or to carry out the coordination or audit of benefits provisions of such contracts.

38. Any information in this system of records, including social security numbers and home addresses, may be disclosed to DFAS so that DFAS may process the payment of pay and allowances for VA employees.

39. Any information in this system of records, including social security numbers, may be disclosed to another Federal agency when that agency has been requested to conduct a Federal salary offset hearing under 5 U.S.C. 5514(a)(2)(D) for VA employees.

40. Disclosures to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

41. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This Routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

42. VA may disclose information from this system to the Merit Systems Protection Board (MSPB), or the Office of Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1205 and 1206, or as authorized by law.

43. VA may disclose information from this system to the FLRA, including its General Counsel, information related to the establishment of jurisdiction, investigation, and resolution of allegations of unfair labor practices, or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; for it to address matters properly before the Federal Services Impasses Panel, investigate representation petitions, and conduct or supervise representation elections.

44. VA may disclose information from this system to the Equal Employment Opportunity Commission (EEOC) when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or other functions of the Commission as authorized by law or regulation.

45. VA may disclose information or records from this system to appropriate Federal Government agencies, upon request, for employee accountability purposes, during the time of a declared national, state, or local emergency.

Disclosure to consumer reporting agencies:

Disclosures pursuant to 5 U.S.C. 552a(b)(12), VA may disclose records from this system of records to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f)) or the Federal Claims Collection Act of 1966 (31 U.S.C. 3701(a)(3)). The disclosure is limited to information necessary to establish the identity of the individual, including name, address, and taxpayer identification number (social security number), the amount, status and history of the claim; and the agency or program under which the claim arose for the sole purpose of allowing the consumer reporting agency to prepare a commercial credit report. 31 U.S.C. 3711(e) governs the release of names and addresses of any person to consumer reporting agencies under certain circumstances.

Storage:

Paper documents, microfilm, microfiche, and computer storage media.

These records may be retrieved using various combinations of name, birth date, social security number, or identification number of the individual on whom the records are maintained.

PHYSICAL SECURITY:

Access to these records is restricted to authorized VA employees, contractors, or subcontractors on a "need to know" basis. Offices where these records are maintained are locked after working hours and are protected from outside access by the Federal Protective Service, other security officers, and alarm systems. Access to computerized records is restricted to authorized VA employees, contractors, or subcontractors by means of unique user identification and passwords.

The payroll records are maintained for the period of the employee's service in VA and are then transferred to the National Personnel Records Center for storage or, as appropriate, to the next employing Federal agency. Other records are either retained at VA for various lengths of time in accordance with NARA records schedules or destroyed when they have served their purpose or the employee leaves VA. Records contained in computer accessible media may be retained indefinitely as a basis for longitudinal work history statistical studies. After the disposition date of related paper-based payroll records in General Records Schedules 1 and 2, the records in this system will not be used in making decisions concerning employees.

Deputy Assistant Secretary for Finance (047), VA Central Office, Washington, DC 20420.

Individuals seeking information concerning the existence of a record pertaining to themselves must submit a written request to the VA station of employment. Such request must contain a reasonable description of the records requested. In addition, identification of the individual requesting the information will be required in the written request and will consist of the requester's name, signature, address, and social security number, or other identifier, as a minimum.

VA uses the self-service application, MyPay, which is provided by DFAS to all Federal agencies receiving payroll services. MyPay provides VA employees and managers with a way to process their personal and benefit transactions without the personal assistance of human resources or payroll staff. Access is obtained through the use of the employee's social security number and a personal identification number (PIN).

See "Notification Procedure" above.

Current and former VA employees wishing to request amendment of their records should contact their current station of employment. Individuals must furnish the following for their records to be located and identified: Full name, social security number, or other identifier, and signature.

Information received from employees, VA officials, other Federal, State, and local agencies.

Records are maintained at each of the Veterans Administration health care facilities. Address locations are listed in VA Appendix 1 at the end of this document.

Health practitioners authorized to prescribe drugs under the Controlled Substance Act.

Registration Card Record containing the information necessary for verification of employee control under the Controlled Substance Act. The employee's name, social security number, signature and his Drug Enforcement Agency control number, assigned by either the State or the Veterans Administration, depending on local policy as required by the Act.

Title 38, United States Code, Chapter 3, Section 210(c)(1), Pub. L. 91-513, Controlled Substance Act of 1970.

1. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued thereto.

2. A record from this system of records may be disclosed as a 'routine use' to a Federal, State or local agency maintaining civil, criminal or other relevant information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other health, educational or welfare benefits.

3. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

4. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

5. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

6. Records from this system of records may be disclosed to a Federal Agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty , in order for the Agency to obtain information relevant to an Agency decision concerning the hiring, retention or termination of an employee or to inform a Federal Agency or licensing boards or the appropriate nongovernment entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal Agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

7. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

8. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

9. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

10. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

11. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

12. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

13. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

14. VA may, on its own initiative, disclose information to another federal agency, court, or party in litigation before a court or other administrative proceedings conduced by an agency, if VA is a party to the proceeding and needs to disclose the information to protect its interests.

Storage:

Paper documents.

All registration records under the Controlled Substance Act are indexed by employee's name, social security number or Drug Enforcement Agency's Control Number.

Physical Security: Access to VA working space and medical record storage areas is restricted to VA employees on a 'need to know' basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service. Employee file records and file records of public figures or otherwise sensitive medical record files are stored in separate locked files. Strict control measures are enforced to ensure that disclosure is limited to a 'need to know' basis.

This record is retained in Pharmacy while the individual is employed at a Veterans Administration health care facility. When the employee terminates his position in a particular VA health care facility his record is combined with his personnel folder and transferred to the next facility or forwarded to the Civilian Personnel Records Center, St. Louis, for retention.

Director Pharmacy Service (119), VA Central Office, Washington, DC 20420.

Individuals seeking information concerning the existence and content of a record pertaining to themselves must submit a written request or apply in person to the VA health care facility, where record is maintained. All inquiries must reasonably identify the record involved and the approximate date it was maintained. Inquiries should include employee's name, social security number, and Drug Enforcement Agency's Control Number.

Employees or duly authorized representatives seeking information regarding access to and contesting of VA records may write, call, or visit the Veterans Administration facility where employee's record was maintained.

(See Record Access Procedures above.)

(1) The employee.

(2) Drug Enforcement Agency or VA health care facility.

Records are maintained at each of the VA health care facilities. Address locations are listed in VA Appendix 1 at the end of this document.

1. Veterans, employees and private citizens who have been injured as a result of accident or assault.

2. Veterans who have died as a result of violence or accident, such as, suicide, homicide, reaction to anesthesia or drugs, assault, transfusion accident, blood incompatibility, error in treatment, neglect of patient, fire, firearms, explosion, etc.

3. Employees and private citizens who have died as a result of violence or accident.

4. Veterans who have left the health care facility without authorization.

5. Veterans, employees and private citizens who have alleged the loss of personal property, funds or valuables.

6. Veterans and private citizens who have alleged abuse by members of the health care facility staff.

7. Employees who have alleged discrimination, abuse or threats of violence by other employees, veterans and private citizens.

8. Veterans, employees and visitors who have assaulted other individuals.

9. Veterans, employees or private citizens who have been involved in the sale of illegal drugs or alcohol within the health care facility.

10. Veterans, employees and private citizens who have been accused of stealing from other individuals or from the VA health care facility.

11. Employees who have been accused of improper and unethical conduct.

12. Veterans, employees and private citizens who have willfully or accidentally destroyed or damaged Federal property.

Copies of reports of investigations, findings, and follow-up concerning employees, patients and private citizens, injuries, property damage, accidents, thefts, assaults, discrimination, complaints, elopments, unethical conduct, etc.

Title 38, United States Code, Chapter 3, Section 210(c)(1), and Title 38, United States Code, Chapter 57, Section 3311.

1. Transfer of required information to private insurance companies to determine whether payments of benefits are appropriate and determine liability.

2. Transfer of required information to local and State unemployment agencies to determine whether payments of benefits are appropriate.

3. Transfer of required information to the Office of Workers Compensation Program to determine whether payments of benefits are appropriate.

4. Transfer of required information to attorneys representing employees, veterans or private citizens accused of unethical conduct to assist attorneys in representing their clients.

5. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

6. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

7. A record from this system of records may be disclosed as a 'routine use' to a Federal, State or local agency maintaining civil, criminal or other relevant information, such as current licenses, if necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other health, educational or welfare benefit.

8. Relevant information from this system of records, including the nature and amount of a financial obligation, may be disclosed as a routine use, in order to assist the Veterans Administration in the collection of unpaid financial obligations owed the VA, to a debtor's employing agency or commanding officer so that the debtor-employee may be counseled by his or her Federal employer or commanding officer. This purpose is consistent with 5 U.S.C. 55l4, 4 CFR 102.5, and section 206 of Executive Order 11222 of May 8, 1965 (30 FR 6469).

9. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

10. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

11. Records from this system of records may be disclosed to a Federal Agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar nongovernment entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty , in order for the Agency to obtain information relevant to an Agency decision concerning the hiring, retention or termination of an employee or to inform a Federal Agency or licensing boards or the appropriate nongovernment entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal Agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

12. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

13. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

Storage:

Paper documents and Photographs.

Alphabetically by name.

Physical Security: Access to VA working space and medical record storage areas are restricted to VA employees on a 'need to know' basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service. Employee file records and file records of public figures or otherwise sensitive medical record files are stored in separate locked files. Strict control measures are enforced to ensure that disclosure is limited to a 'need to know' basis.

Disposed of two years after case is closed.

Medical Inspector, Office of the Medical Inspector (10A6), VA Central Office, Washington, DC 20420.

Individuals seeking information concerning the existence and content of a record pertaining to themselves must submit a written request or apply in person to the appropriate VA health care facility. All inquiries must reasonably identify the incident involved and date of the incident. Inquiries should include the individual's full name and return address.

Veterans, employees and private citizens or duly authorized representatives seeking information regarding access to and contesting of VA records may write, call or visit the appropriate VA health care facility.

(See Record Access Procedures above.)

1. Veterans. 2. Employees of a VA health care facility. 3. Other VA health care facilities, private physicians and dentists, or private hospitals and clinics. 4. Private citizens involved in the incident. 5. Federal, State, local and foreign law enforcement agencies. 6. Private insurance companies.

Records are maintained in Department of Veterans Affairs (VA) medical center databases. Extracts are maintained at the Austin Automation Center (AAC), Austin, Texas, and Hines Information Service Center, Hines, Illinois. VA health care facility address locations are listed in VA Appendix I of the Biennial Privacy Act Issuances publication.

Contracted fabricators of prosthetic and orthotic appliances; vendors and manufacturers of durable medical equipment and sensory-neural aids; medical supply companies; VA beneficiaries; and VA employees.

VA field facility ordering the orthotic device; Patient Identification Number; Health Care Financing Administration Common Procedure Coding System (HCPCS); item purchased/issued to patient; cost; quantity; type of issue (initial/replace/repair/spare); patient eligibility category (service- connected, prisoner of war, aid and attendance); responsible VA procurement officer or representative; order creation date; order close/delivery date; calculated processing days; transaction/purchase order number; type of form used to purchase item (VAF 2421, PC2421, VAF 2529, VAF 2914, etc.); and vendor/contractor name. All other patient information, i.e., name, address, telephone number, can be retrieved by prosthetic program officials in VA Central Office by using the unique Patient Identification Number assigned to the patient in NPPD.

Title 38, United States Code, Section 527.

The records or information in this system will be used to furnish administrative and clinical statistical procurement and prescription information, including total cost and summary of activity, including equipment usage, data to VA and other health care providers, both Federal and non-Federal, to aid in furthering the improvement of health care, research and education.

VA may disclose protected health information pursuant to the following routine uses where required by law, or required or permitted by 45 CFR Parts 160 and 164.

1. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

2. To furnish administrative and clinical statistical procurement and prescription information, including total cost and summary of activity, including equipment usage, data to VA and other health care providers, both Federal and non-Federal, to aid in furthering the improvement of health care, research and education.

3. To provide statistical and other information in response to legitimate and reasonable requests as approved by appropriate VA authorities.

4. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

5. Disclosure may be made to National Archives and Records Administration (NARA) and General Services Administration (GSA) in records management inspections conducted under authority of Title 44 United States Code.

6. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

7. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

8. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

9. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

10. VA may, on its own initiative, disclose information to another federal agency, court, or party in litigation before a court or other administrative proceedings conduced by an agency, if VA is a party to the proceeding and needs to disclose the information to protect its interests.

Storage:

Compact and magnetic disk.

Indexed by Patient Identification Number for VA prosthetic personnel.

1. Access to VA working and storage areas is restricted to VA employees on a "need to know" basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service. Strict control measures are enforced to ensure that disclosure is limited to a "need to know" basis. Physical access to the AAC is generally restricted to AAC staff, Central Office employees, custodial personnel, Federal Protective Service and authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted.

2. Access to computer rooms at health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automated data processing peripheral devices are placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Information in the Veterans Health Information System and Technology Architecture (VistA) may be accessed by authorized VA employees. Access to file information is controlled at two levels; the systems recognize authorized employees by a series of individually- unique passwords/codes as a part of each data message, and the employees are limited to only that information in the file which is needed in the performance of their official duties. Access to information stored on automated storage media at other VA locations is controlled by individually- unique passwords/codes.

Regardless of the record medium, records will be maintained and disposed of in accordance with the record disposition authority approved by the Archivist of the United States under National Archives Job No. N1-15-01-4.

Chief Consultant, Prosthetic and Sensory Aids Service Strategic Healthcare Group (113), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals seeking information concerning the existence and content of a record pertaining to themselves must submit a written request or apply in person to the VA health care facility where they received the orthotic/prosthetic device/appliance/equipment. All inquiries must reasonably identify the records involved and the approximate date that medical care was provided. Inquiries should include the individual's full name, and identifying characteristics.

Individuals seeking information regarding access to and contesting of a VA prosthetic- related record may write, call, or visit the VA facility where medical care was provided.

(See Record Access Procedures above.)

VistA-VA (79VA19), Patient Medical Records-VA (24VA19), and veterans' records.

Records are maintained at each VA health care facility where the research project was conducted, at VA facilities where research administration or oversight activities occur, and at VA Central Office (VACO). Address locations are listed in VA Appendix 1 of the biennial Privacy Act Issuance publication. In addition, records are maintained at contractor and fieldwork sites as studies are developed, data collected and reports written. A list of locations where individually identifiable data are currently located is available from the System Manager.

The following categories of individuals will be covered by this system: (1) Veterans; (2) patients; (3) employees; (4) volunteers who have indicated their willingness to be a participant in research projects being performed by VA, by a VA contractor or by another Federal agency in conjunction with VA; and (5) members of research committee or subcommittees, (6) research and development investigators, and research development employees.

Records, or information contained in records, vary according to the specific research involved or research related activity involved and may include: (1) Research on biomedical, prosthetic and health care services; (2) research stressing spinal cord injuries and diseases and other disabilities that tend to result in paralysis of the lower extremities; and (3) morbidity and mortality studies on former prisoners of war, (4) research related to injuries sustained while on active duty military service such as traumatic amputations, traumatic brain injury, and burns; (5) electronic or other databases containing research information developed during a research project(s) or for future research; (6) research information systems such as the Research and Development Information System (RDIS); (7) copies of medical records of research participants; (8) merit review of the research projects; (9) review and evaluation of proposed research; (10) continuing review and oversight of ongoing research; (11) evaluation of research committees, and (12) a review and evaluation of the research and development investigators and of the participants in the program. The review and evaluation information concerning the research and development investigators may include personal and educational background information as well as specific information concerning the type of research conducted. Invention records contain: a certification page, describing the place, time, research support related to the invention and co-inventors; Technology Transfer Program Invention Evaluation Sheet Internal or External Invention Assessment reports; Research and Development Information System (RDIS) reports or other research information system reports on research support related to the invention; Correspondence; and the Office of General Counsel Letter of Determination.

Title 38, United States Code, Section 7301.

The records and information may be used to determine eligibility for research funding, to determine handling of intellectual properties, to manage proposed and/or approved research endeavors, and to evaluate the research and development program.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. Transfer of statistical and other data to Federal, State, and local government agencies and national health organizations to assist in the development of programs.

2. VA may disclose on its own initiative any information in this system, except the names, home addresses, scrambled social security number, and social security number of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names, scrambled social security number, and social security number addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto unless a Certificate of Confidentiality has been issued for the research by the National Institutes of Health under section 301(d) of the Public Health Service Act (42 U.S.C. 241(d)).

3. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

4. Disclosure may be made to National Archives and Records Administration (NARA), General Services Administration (GSA) in records management inspections conducted under authority of 44 United States Code.

5. Disclosure of medical record data, excluding name, address, scrambled social security number, and social security number (unless name, address, scrambled social security number, and social security number is furnished by the requester) for research purposes determined to be necessary and proper, to epidemiological and other research facilities approved by the Under Secretary for Health.

6. In order to conduct Federal research necessary to accomplish a statutory purpose of an agency, at the written request of the head of the agency, or designee of the head of that agency, the name(s) and address(es) of present or former personnel of the Armed Services and/or their dependents may be disclosed (a) to a Federal department or agency or (b) directly to a contractor of a Federal department or agency. When a disclosure of this information is to be made directly to the contractor, VA may impose applicable conditions on the department, agency or contractor to ensure the appropriateness of the disclosure to the contractor.

7. In order to conduct VA research, names, addresses, and social security numbers may be disclosed to other Federal and state agencies for the purpose of the Federal or state agency disclosing information on the individuals back to VA.

8. Upon request for research project data from VA approved research, the following information will be released to the general public, including governmental and non-governmental agencies and commercial organizations: Project title and number; name and educational degree of principal investigator unless the release of this information would place the investigator at risk (physical, professional, etc.); VHA medical center location; type (initial, progress, or final) and date of last report; name and educational degree of associate investigators unless the release of this information would place the investigator at risk (physical, professional, etc.); project abstract if the project is ongoing, and project summary if the project has been completed. In addition, upon specific request, keywords and indexing codes will be included for each project.

9. Upon request for information regarding VA employees conducting research, the following information will be released to the general public, including governmental agencies and commercial organizations: Name and educational degree of investigator; VHA title; academic affiliation and title; hospital service; primary and secondary specialty areas and subspecialty unless the release of this information would place the investigator at risk (physical, professional, etc.).

10. A record from this system of records may be disclosed to a Federal agency, state or local government licensing board and/or to the Federation of State Medical Boards or a similar non- government entity, upon its request for use in the issuance of a security clearance, the investigation of an employee, the letting of a contract, or the issuance of a license, grant or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting that organization's decision on the matter.

11. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

12. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and State Licensing Board in the States in which a practitioner is licensed, in which the VA facility is located, or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (a) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice of an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (b) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (c) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

13. Information concerning individuals who have submitted research program proposals for funding, including the investigator's name, social security number, research qualifications and the investigator's research proposal, may be disclosed to qualified reviewers for their opinion and evaluation of the applicants and their proposals as part of the application review process.

14. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

15. Any invention information in this system may be disclosed to affiliated intellectual property partners to aid in the possible use, interest in, or ownership rights in VA intellectual property.

16. VA may disclose information concerning merit review of proposals submitted by an individual to the individual except that information concerning a third party, such as the name or other identifying information about the qualified reviewer of the proposal.

17. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

18. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

19. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

Disclosure to consumer reporting agencies:

Reports of all transactions dealing with data will be used within VA and will not be provided to any consumer-reporting agency.

Storage:

(1) Paper documents (2) Microscope slides (3) Magnetic tape or disk or other electronic media (4) Photographs and (5) Microfilm.

Records are retrieved by individual identifiers and indexed by a specific project site or location, project number, or under the name of the research or development investigator.

This list of safeguards furnished in this System of Record is not an exclusive list of measures that has been, or will be, taken to protect individually-identifiable information. VHA will maintain the data in compliance with applicable VA security policy directives that specify the standards that will be applied to protect sensitive personal information. Physical Security: Access to VA working space and medical record storage areas is restricted to VA employees on a "need to know" basis.

Generally, VA file areas are locked after normal duty hours and protected from outside access by the Federal Protective Service. Employee file records and file records of public figures or otherwise sensitive medical record files are stored in separate locked files. Strict control measures are enforced to ensure that disclosure is limited to a "need to know" basis.

Access to a contractor's records and their system of computers used with the particular project are available to authorized personnel only. Records on investigators stored on automated storage media are accessible by authorized VA personnel via VA computers or computer systems. They are required to take annual VA mandatory data privacy and security training. Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Contractors and their subcontractors who access the data are required to maintain the same level of security as VA staff.

The records contained in this system have not been scheduled and will be kept indefinitely until such time as they are. The records may not be destroyed until VA obtains an approved records disposition authority from the Archivist of the United States.

Director of Operations, Research and Development (12), Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420.

Interested persons should write to: Director of Operations, Research and Development (12), Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. All inquiries must reasonably identify the project and site location; date of project and team leader.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where they made application for employment or are or were employed.

(See Record Access Procedures above.)

(1) Patients and patient records (2) employees and volunteers (3) other Federal agencies (4) National Institutes of Health (5) Centers for Disease Control (Atlanta, Georgia) (6) individual veterans (7) other VA systems of records (8) research and development investigators, and (9) research and development databases.

VA Insurance records are maintained as follows:

Active Insurance records are located at the VA Regional Office and Insurance Center (VAROIC) in Philadelphia, Pennsylvania. (The complete address is available in Appendix 1 at the end of this document.)

Inactive Insurance records are located at the VA Regional Office and Insurance Center (VAROIC) in Philadelphia, Pennsylvania. (The complete address is available in Appendix 1 at the end of this document.) In addition, inactive records are stored at various servicing Federal archives and records centers in Northeast Philadelphia, Pennsylvania; Miamisburg, Ohio; Lee's Summit, Missouri; Lenexa, Kansas; Chicago, Illinois; and Pittsfield, Massachusetts. (The complete addresses are available in Appendix 1 at the end of this document.)

Some pre-1968 records pertaining to beneficiaries of deceased veterans are located in local VA regional offices in VA claim folders.

Insurance file numbers, policies numbers, and folder locations are available to all VA regional offices through VETSNET.

Back-up computerized insurance records and automated data maintained by the VA Information Technology Center (VA ITC), the primary computer processing center, is stored by Iron Mountain Off- Site Data in Itasca, Illinois. (The complete address is available in Appendix 1 at the end of this document.)

Records for the supervised programs of government insurance are maintained by the Office of Servicemembers' Group Life Insurance (OSGLI) in Roseland, New Jersey. (The complete address is available in Appendix 1 at the end of this document.)

The following categories of individuals will be covered by this system:

1. Veterans (not including dependents) and members of the uniformed services (including dependents) who have applied for and/or have been issued government life insurance.

2. Beneficiaries of government life insurance entitled to or in receipt of insurance proceeds.

3. Attorneys drawing fees for aiding in settlement of VA insurance claims.

The individuals noted above are covered by this system based on applications, claims, and notices of eligibility for the following government life insurance programs provided in 38 U.S.C. Chapters 19 and 21:

(1) U.S. Government Life Insurance (USGLI) under Section 1942.

(2) National Service Life Insurance (NSLI) under Section 1904.

(3) Veterans' Special Life Insurance (VSLI) under Section 1923.

(4) Veterans' Reopened Insurance (VRI) under Section 1925.

(5) Service-Disabled Veterans Insurance (S-DVI) under Section 1922 and 1922A.

(6) Veterans' Mortgage Life Insurance (VMLI) under Section 2106.

(7) Servicemembers' Group Life Insurance (SGLI), including Family Servicemembers' Group Life Insurance (FSGLI), Veterans' Group Life Insurance (VGLI), and Servicemembers' Group Life Insurance Traumatic Injury Protection (TSGLI) under Sections 1967 through 1980A.

Life insurance records (or information contained in records) may consist of:

1. Applications for insurance, including the name and address of the veteran or member of the uniformed services, e-mail address, phone number, correspondence to and from the veteran or member of the uniformed services or their legal representatives, date of birth, social security number, military service number, dates of service, military ranking, character of discharge, VA file number, plan or type of insurance, disability rating, medical information regarding disability and health history, method of payment, amount of insurance coverage requested, and bank routing and account numbers. Applications for Veterans' Mortgage Life Insurance (VMLI), including supporting mortgage documents, contain the address of the mortgaged property, name and address of the mortgagor, the mortgage account number, the rate of interest, the original amount of the mortgage, and the current amount of the mortgage, the monthly payment amount, the mortgage payment period, and VA Specially Adapted Grant Cards (which contain the veteran's or uniformed services member's name, address, dates of military service, branch of service, method of separation, whether the veteran or member of the uniformed services has VMLI, the name and address of the lender, the legal description and property address, improvements to such property, date applied for disability compensation, date of initial application submission, grant information, amount of the grant approved or whether the grant was denied or canceled).

2. Beneficiary and option designation information, including the names and addresses of principal and contingent beneficiaries, beneficiary social security number, share amount to each beneficiary, the method of payment, and the designated estate(s) and trust(s).

3. Insurance contract information, including: (a) Authorization of allotment payment; (b) authorization for deduction from VA benefit payments; (c) authorization for deduction from military retired pay; (d) authorization for deduction from employee payroll; (e) paid dividend information; (f) claims for disability or death payments; (g) cash value, policy loan, and lien information; (h) a listing of lapsed actions and unpaid insurance proceeds; (i) payment vouchers; (j) reinstatement information; (k) premium records status, and retired status of the policy; (l) court-martial orders; (m) copies of personal papers of the insured, including birth certificate, marriage license, divorce decree, citizen or naturalization papers, death certificate, adoption decree, and family support documents; (n) correspondence to and from the veteran, member of the uniformed services, legal representative and payee; (o) employment information; (p) returned check and check tracer information; (q) court documents; and (r) insurance death claims settlement information, including indebtedness, interest, and other credits.

4. Records of checks withheld from delivery to certain foreign countries.

5. Index of payees, including CO index cards and premium record cards.

6. Disability Outreach Tracking System (DOTS) records stored in the Veterans Insurance Claims Tracking and Response System (VICTARS) including the veteran's or uniformed services member's name, address, phone number, and disability status.

7. Policy information and access history from the VA Insurance Web site self-service-portal stored in VICTARS, which includes the name of the insured, file number, policy number, address, phone number, e-mail address, loan status, including loan amount requested, denied, or pending, the date of request for information, loan history, policy changes, dividend option changes, and Web site pages accessed.

8. Information from the VA Insurance Web site's "Autoform" program which provides access to veterans for completion of an application for Service-Disabled Veterans Insurance (S -DVI), which includes the veteran's name, address, social security number, date of birth, phone number, medical history, e-mail address, and beneficiary information, such as the beneficiary's name, address, and social security number.

9. Records of incoming calls recorded in the "Freedom Enterprise" system. These are recordings of incoming phone calls received by insurance personnel of the Veterans Insurance Phone Section (VIPS) from veterans, members of the uniformed services, beneficiaries, personal representatives, members of Congress and their staff, other interested parties, and stakeholders. (The recordings are maintained for quality assurance and training purposes only.)

Title 38, United States Code (U.S.C.), chapter 5, section 501, and chapter 3, including sections 303 and 315.

Title 38, U.S.C., chapter 19; chapter 21, section 2106; and chapter 77, sections 7721-7725.

Title 5 U.S.C. 552(a) and 5514.

VA gathers or creates these records in order to enable it to administer and supervise statutory government life insurance programs for veterans, members of the uniformed services, and their spouses, surviving spouses, dependents, and beneficiaries who apply for government life insurance benefits administered or supervised by the VA Insurance Program. See the statutory provisions cited in "Authority for maintenance of the system."

1. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

2. Disclosure may be made to the National Archives and Records Administration and the General Services Administration in records management inspections conducted under authority of title 44 U.S.C.

3. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans, members of the uniformed services, and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans, members of the uniformed services, and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

8. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: The hiring, retention or transfer of an employee; the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans will only be made with the veteran's prior written consent.

9. Any information in this system may be disclosed to a State or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision on: The hiring, transfer or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by that agency; provided, that if the information pertains to a veteran or member of the uniformed services, the name and/or address of the veteran or member of the uniformed services will not be disclosed unless the name and address is provided first by the requesting State or local agency.

10. Any information in this system may be disclosed to a Federal, State or local agency maintaining civil or criminal violation records, or other pertinent information such as prior employment history, prior Federal employment background investigations, and personal or educational background at the request of the veteran or member of the uniformed services in order for VA to obtain information relevant to the hiring, transfer or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit.

11. Any information in this system may be disclosed to a Federal agency, except for the name and address of a veteran or member of the uniformed services, in order for VA to obtain information relevant to the issuance of a benefit under title 38 U.S.C. The name and address of a veteran or member of the uniformed services may be disclosed to a Federal agency under this routine use if they are required by the Federal agency to respond to VA inquiry.

12. Except for beneficiary and option designations, any information in this system including the name and address of a veteran or member of the uniformed services may be disclosed to any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under title 38 U.S.C. (such disclosures include computerized lists of names and addresses).

13. Except for medical information and beneficiary and option designations, any information including insurance contract information (e.g., name, address, status of the account, dividends paid, cash value, and policy loans) may be disclosed at the request of a veteran or member of the uniformed services to an attorney acting under a declaration of representation, a VA-approved claims agent, an insurance agency, a trust officer, or to employees or members of an accredited service organization, so that these individuals or organizations can aid veterans or members of the uniformed services in the preparation, presentation, prosecution of claims under the laws administered by VA. The name and address of a veteran or member of the uniformed services will not, however, be disclosed to these individuals under this routine use if the veteran or member of the uniformed services has not requested the assistance of an accredited service organization, claims agent, trust officer, or an attorney.

14. The name, address, insurance account information of an insured veteran or member of the uniformed services, their beneficiary(ies), legal representatives, or designated payee(s), and the amount of payment may be disclosed to the Treasury Department, upon its official request, in order for the Treasury Department to make payment of dividends, policy loans, cash surrenders, maturing endowments, insurance refunds, issue checks and perform check tracer activities for the veteran or member of the uniformed services, beneficiary(ies), legal representative or designated payee(s).

15. The name and address of an insured veteran or member of the uniformed services, date and amount of payments made to VA, including specific status of each policy (e.g., premiums paid in, dividends paid out, cash and loan values) may be disclosed to the Internal Revenue Service (IRS), upon its official request, in order for the IRS to collect tax liens by withholding insurance payments to satisfy unpaid taxes. This purpose is consistent with title 26 of the United States Code, section 7602.

16. The name, address, social security number, date of discharge from the military, medical information concerning the grounds for total disability or the nature of an injury or illness, and dependency or beneficiary related information of a member of the uniformed services or veteran may be disclosed to the Office of Servicemembers' Group Life Insurance (OSGLI) at the request of a member of the uniformed services or veteran in order to aid OSGLI in the verification of such information for the purpose of issuance and maintenance of insurance policies provided to members of the uniformed services or veterans participating in the Servicemembers' Group Life Insurance (SGLI) program and/or Veterans' Group Life Insurance (VGLI) program and to pay insurance benefits under these programs.

17. The name, address, and other identifying information such as a social security number or a military service number may be disclosed to the Department of Defense (Army, Air Force, Navy, Marine Corps); the Coast Guard of the Department of Homeland Security; the Commissioned Officers Corps of the U.S. Public Health Service; and the Commissioned Officers Corps of the National Oceanic and Atmospheric Administration (NOAA) of the Department of Commerce; this disclosure may be made upon their official request, for use in order for these departments to establish and maintain allotments from active and retired service pay for VA insurance premiums and loan repayments.

18. The face amount and cash and/or loan value of an insurance policy, verification of an existing insurance policy, and the name and address of an insured veteran or member of the uniformed services may be disclosed at the request of the veteran or member of the uniformed services to a Federal, State, or local agency, in order for these agencies to assist a veteran or member of the uniformed services applying for Medicaid, Medicare, nursing home admittance, welfare benefits, or other benefits provided by the requesting agency to the extent that the information is relevant and necessary to the agency's decision regarding benefits.

19. The name and address of a veteran or member of the uniformed services and military service information (e.g., dates of service, branch of service) may be disclosed to the Armed Forces Institute of Pathology (AFIP), upon its official request, in order for the AFIP to conduct research for specified official purposes.

20. The name(s) and address(es) of a veteran or member of the uniformed services may be disclosed to another Federal agency or to a contractor of that agency, at the written request of the head of that agency or designee of the head of that agency for the purpose of conducting government research necessary to accomplish a statutory purpose of that agency.

21. Any information in this system, including the nature and amount of a financial obligation, may be disclosed to a debtor's employing agency or commanding officer, upon its official request, as a routine use in order to assist VA in the collection of unpaid financial obligations owed to VA so that the debtor-employee may be counseled by his or her Federal employer or commanding officer. This purpose is consistent with 5 U.S.C. 5514, 31 U.S.C. 3701-3702, and 3711-3718.

22. Any information in this system, including available identifying data regarding the debtor, such as the name of the debtor, last known address of the debtor, name of the debtor's spouse, social security account number of the debtor, VA insurance number, VA loan number, VA file number, place of birth and date of birth of the debtor, name and address of the debtor's employer or firm and dates of employment, may be disclosed to other Federal agencies, State probate courts, State drivers license bureaus, and State automobile title and license bureaus as a routine use in order to obtain current address, locator and credit report assistance in the collection of unpaid financial obligations owed the United States. This purpose is consistent with the Federal Claims Collection Act of 1966 (Pub. L. 89-508) and subsequent amendments, and 31 United States Codes 3701- 3702 and 3711-3718.

23. Any information concerning the veteran's or uniformed services member's indebtedness to the United States by virtue of a person's participation in a benefits program administered by VA, including personal information obtained from other Federal agencies through computer matching programs, may be disclosed to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of an amount owed to the United States. Purposes of these disclosures may be to (a) assist VA in collection of title 38 benefit overpayments, overdue indebtedness, and or costs of services provided individuals not entitled to such services, and (b) initiate legal actions for prosecuting individuals who willfully or fraudulently obtain title 38 benefits without entitlement. This disclosure is consistent with 31 U.S.C. 3701-3702, 3711 -3718; and 38 U.S.C. 5701(b)(6).

24. The name and address of a veteran or member of the uniformed services, other information as is reasonably necessary to identify such veteran or member of the uniformed services, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the veteran's or uniformed services member's indebtedness to the United States by virtue of the person's participation in a benefits program administered by VA may be disclosed to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the provisions of 31 U.S.C. 3701-3702 and 3711-3718 and 38 U.S.C 5701(g)(4) have been met.

25. Any information in this system such as notice of renewal, reinstatement, premium due, lapse actions, miscellaneous insurance instructions, disposition of dividends, policy loans, and transfer of records may be disclosed to VA fiduciaries, court-appointed guardians/conservators, powers of attorney, or military trustees of incompetent veterans or members of the uniformed services in order to advise VA fiduciaries, court-appointed guardians/conservators, powers of attorney, or military trustees of current actions to be taken in connection with ownership of U.S. government life insurance policies and to enable them to properly perform their duties as fiduciaries or guardians, powers of attorney, or military trustees.

26. Any information in this system of records may be disclosed, in the course of presenting evidence in or to a court, magistrate, administrative tribunal, or grand jury, including disclosures to opposing counsel in the course of such proceedings or in settlement negotiations.

27. Identifying information, except for the name and address of a veteran or member of the uniformed services, may be disclosed to a Federal, State, County or Municipal agency for the purpose of conducting computer matches to obtain information to validate the entitlement of a veteran or member of the uniformed services who is receiving or has received government insurance benefits under title 38 of the United States Code. The name and address of a veteran or member of the uniformed services may also be disclosed to a Federal agency under this routine use if they are required by the Federal agency to respond to the VA inquiry.

Storage:

Records are stored in two computerized systems called Veterans Insurance Claims Tracking and Response System (VICTARS), and the Insurance Terminal System (ITS). VICTARS utilizes imaging and electronic technology to store paper documents, including applications and correspondence, and it records all processing related activities involving insurance policies, disability outreach services, and Web site self-service and "Autoform" access.

The Insurance Terminal System (ITS) provides direct access to insurance records relative to claims processing via computer monitors. Both VICTARS and ITS store and retrieve all information in the insurance records system through the local area network (LAN) maintained through the VA Information Technology Center (VA ITC) at the Philadelphia VA Regional Office and Insurance Center.

"Freedom Enterprise" creates recordings of incoming phone calls received by insurance personnel regarding insurance policy related issues and stores the call as part of the LAN maintained through the VA ITC.

Back-up VA insurance records are stored by Iron Mountain Off-Site Data in a secured area. (The complete address is provided in Appendix 1 at the end of this document.)

Inactive records are also stored on microfilm, microfiche, disks, Central Office (CO) index cards, premium record cards in hardcopy folders, on computer lists, and on punch cards, which are kept in locked files and secured areas.

All hardcopy and electronically stored insurance records are retrievable by the government insurance file number, VA file number, policyholder's name, social security number, or date of birth.

Information input through the VA Insurance Web site's self-service portal relative to loan applications is retrievable by the use of unique personal identification numbers (PINs), passwords, and an insurance file number. Approved encryption technology is used to protect personal information.

Incomplete Service-Disabled Veterans Insurance (S-DVI) applications are retrievable on the VA Insurance Web site through the "Autoform" program with the use of a personal password, social security number, and date of birth of the veteran. (The completed S-DVI application becomes part of the VICTARS storage system.) Approved encryption technology is used to protect personal information.

The "Interactive Voice Response (IVR)" system permits veterans to access audible information about their insurance records which is stored by the VA Insurance Program's LAN via touch-tone telephone technology utilizing the VA Insurance file number.

1. PHYSICAL SECURITY:

a. All VA facilities are protected by the Federal Protective Service or other security personnel. All Insurance files and processing areas are restricted to authorized personnel on a need-to-know basis. Areas containing paper and computerized records are protected by a sprinkler system. Paper records pertaining to employees and public figures, or otherwise sensitive files, are stored in locked files. Microfilm records and computerized disk (CD) back-up files of Collections (the payment processing unit) activities are stored in locked, fireproof, humidity-controlled vaults at the VA Regional Office and Insurance Center. Automated records which are not in use by the VA ITC are stored in locked, secured areas at Iron Mountain Off-Site Data Center. (The complete address of the facility is available in Appendix 1 at the end of this document.)

b. Access to the VA ITC and Collections (the payment processing unit) is restricted to VA ITC and Collections employees, custodial personnel, and Federal Protective Service or other security personnel. Access to VA ITC and Collections is restricted to authorized personnel and is secured by electronic locking devices. All other persons gaining access to computer rooms and the Collections Unit are escorted by an individual with authorized access.

c. Access to insurance records at the Philadelphia VA Regional Office and Insurance Center through computerized storage systems, including VICTARS, ITS, "Freedom Enterprise", and the VA ITC is protected by password access, magnetic access card readers, and audible alarms. Electronic keyboard locks are activated upon security errors. Video surveillance is also provided in secured processing and computer protected areas, such as Claims, Collections, and VA ITC. An Information Security Officer is assigned responsibility for privacy-security measures, including review of violations logs and local control and distribution of passwords.

2. SYSTEM SECURITY:

a. In the VA ITC, identification of computerized tapes and disks containing data is enforced using automated labeling techniques. Access to computer programs is controlled at the Operations level.

b. The Veterans Insurance Claims Tracking and Response System (VICTARS), the Insurance Terminal System (ITS), and "Freedom Enterprise" utilizes the VA Insurance Program's LAN as the storage and retrieval conduit which provides automated recognition of authorized users and their respective access levels and restrictions through the use of passwords. Passwords are changed periodically and are restricted to authorized individuals on a need-to-know basis for system access or security purposes.

c. Back-up insurance records and VA ITC data records are stored in a secured site by Iron Mountain Off-Site Data. (The address of the facility is listed in Appendix 1 at the end of this document.)

d. The VA Insurance Web site self-service pages, including its "Autoform" application, which is used by veterans, their legal representatives, and payees is only accessible with the use of personal identifiers consisting of personal identification numbers (PINs), passwords, file numbers, loan numbers, social security number, and date of birth. The access portals utilize LAN based encryption technology and firewalls to protect personal data.

e. The "Interactive Voice Response" (IVR) system, which is protected as part of the VA Insurance Program's LAN, permits veterans to listen to information from their insurance records via touch-tone telephone technology which utilizes the VA Insurance file number to access the record.

f. Data exchange by e-mail within the agency or between other Federal agencies is done by means of dedicated communication lines utilizing approved encryption technology.

Hardcopy records are retained and disposed of in accordance with disposition authorization approved by the Archivist of the United States.

VICTARS, the primary records storage and retrieval system for the Insurance Program maintains imaged insurance records indefinitely through the VA Insurance Program's LAN. Hardcopy records imaged into VICTARS are stored for 31 days prior to destruction. Original copies of imaged beneficiary designation documents are stored indefinitely at the NARA Mid Atlantic Regional Center. (The complete address is provided in Appendix I at the end of this document.) Computerized records accessible through ITS are also maintained indefinitely through the VA Insurance Program's LAN.

Back-up VA ITC archive records are stored on tape for 1 year prior to being erased or written over.

Records in the "Freedom Enterprise" system which records incoming phone calls regarding insurance policies are maintained for 1 year and purged 13 months after the call.

Director (00), VA Regional Office and Insurance Center, 5000 Wissahickon Avenue, P.O. Box 8079, Philadelphia, PA 19101.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or who wants to determine the contents of such record, or has a routine inquiry concerning the status of his or her insurance under this system may contact the VA Regional Office and Insurance Center in Philadelphia, Pennsylvania at (215) 381-3029. Requests concerning the specific content of a record must be made in writing or made in person to the VA Regional Office and Insurance Center in Philadelphia, Pennsylvania. The inquirer should provide the full name of the veteran or member of the uniformed services, their insurance file number or VA claim number or social security number, the date of birth of the veteran or member of the uniformed services, and reasonably identify the benefit or system of records involved. If the insurance file number or any of the other identifiers noted above are not available, the service number, and/or location of insurance records that will aid VA personnel in locating the official insurance records should be provided. (Address locations of records storage facilities for this system are listed in Appendix 1 at the end of this document.)

Individuals desiring access to, and contesting of, VA records and related procedures should write to the VA Regional Office and Insurance Center at 5000 Wissahickon Avenue, P.O. Box 8079, Philadelphia, Pennsylvania 19101.

(See Records access procedures above.)

The veteran, member of the uniformed services, or someone acting on their behalf; the uniformed services, other Federal agencies, including the Department of Defense (DoD); Social Security Administration (SSA); U.S. Treasury Department; Office of Servicemembers' Group Life Insurance (OSGLI); State and local agencies; Federal, State, and local courts; VA records; VA and private physicians; VA and private medical facilities; accredited veterans service organizations and other organizations aiding veterans and members of the uniformed services; VA-approved claims agents; VA fiduciaries; court-appointed guardians/conservators, powers of attorney, and military trustees; financial institutions; beneficiaries; commercial insurance companies; undertakers; lending institutions holding a veteran's or uniformed services member's mortgage; VA Loan Guaranty records; contractors remodeling or enlarging or adding construction to existing homes; relatives and other interested persons; Westlaw and InfoUSA; Inquiry Routing & Information System (IRIS) (maintained under System of Records "151VA005N" by the Office of Information & Technology); and the general public.

Appendix I: Address Locations of VA Insurance Records Facilities

1. VA Regional Office and Insurance Center, 5000 Wissahickon Avenue, P.O. Box 8079, Philadelphia, PA 19101.

2. Iron Mountain Offsite Data, 1397 Glenlake Avenue, Ilasca, IL 60143.

3. NARA Mid Atlantic Region (Northeast Philadelphia), 14700 Townsend Road, Philadelphia, PA 19154.

4. NARA Great Lakes Region (Dayton Kingsridge), 8801 Kingsridge Drive, Miamisburg, OH 45458.

5. NARA Central Plains Region (Lee's Summit), 200 Space Center Drive, Lee's Summit, MO 64064.

6. NARA Central Plains Region (Lenexa), 17501 West 98th Street, Suite 31-50, Lenexa, KS 66219.

7. NARA Great Lakes Region (Chicago), 7358 South Pulaski Road, Chicago, IL 60629.

8. NARA Northeast Region (Pittsfield), 10 Conte Drive, Pittsfield, MA 01210.

9. Office of Servicemembers' Group Life Insurance, 80 Livingston Avenue, Roseland, NJ 07068.

Records are maintained at the Department of Veterans Affairs (VA) fiduciary hub that has jurisdiction over the geographical area in which the VA beneficiary resides, and the Austin Data Processing Center in Austin, Texas. The BFFS system and associated electronic records are maintained at a private Federal hosting facility. Addresses of VA fiduciary hubs and the Data Processing Center are listed in VA Appendix 1.

Documents and information pertaining to program issues and categories of individuals covered by the system are stored in an electronic record repository.

The following categories of individuals are covered by this system:

1. VA beneficiaries (i.e., a veteran or a non-veteran adult who receives VA monetary benefits, lacks the mental capacity to manage his or her own financial affairs regarding disbursement of funds without limitation, and is either rated incapable of managing his or her financial affairs or adjudged to be under legal disability by a court of competent jurisdiction; or a child who has not reached majority under State law and receives VA monetary benefits).

2. Current, former, and prospective VA-appointed fiduciaries (i.e., a VA Federal fiduciary appointed by VA to serve as fiduciary of VA monetary benefits for a VA beneficiary determined unable to manage his or her financial affairs; or a person or legal entity appointed by a State or foreign court to supervise the person and/or payee

of a VA beneficiary adjudged to be under a legal disability). The statutory title of a court-appointed fiduciary may vary from State to State.

3. A chief officer of a hospital, domiciliary, institutional or nursing home care facility where a beneficiary, who VA has determined is unable to manage his or her financial affairs, is receiving care and who has contracted to use the veteran's VA funds in a specific manner.

4. Supervised Direct Payment (SDP) (i.e., an adult beneficiary in the fiduciary program who manages his or her VA benefits with limited and temporary supervision based upon a field examination and subsequent to determination by the hub manager pertaining to benefits eligibility and other issues; or, to develop evidence for further investigations of potential criminal issues).

5. Physicians named in treatment records and financial managers or attorneys who help disperse funds for VA beneficiaries deemed unable to manage those funds.

The records in the electronic fiduciary folder are the primary records in this system. Social Security Administration (SSA) derived records, as needed, are also contained in this system. These records may contain the following types of information:

1. Field examination reports (i.e., VA Form 27-4716a or 27-3190, Field Examination Request and Report, which contains a VA beneficiary's name, address, Social Security number, VA file number, an assessment of the beneficiary's ability to handle VA and non-VA funds, description of family relationships, economic and social adjustment information, information on the beneficiary’s activities, and the name, address, and assessment of the performance of a VA-appointed fiduciary).

2. Correspondence from and to a VA beneficiary, a VA-appointed fiduciary, and other interested third parties.

3. Medical records (i.e., medical and social work reports generated in VA, State, local, or private medical treatment facilities or private physicians' offices indicating the medical history of a VA beneficiary, including diagnosis, treatment and nature of any physical or mental disability).

4. Financial records (e.g., accountings regarding a fiduciary's management of a beneficiary's income, investments, and accumulated funds, amount of monthly benefits received, amounts charged for fees by the fiduciary, certificates of balance on accounts from financial institutions, and withdrawal agreements between VA, financial institutions, and the fiduciary).

5. Court documents (e.g., petitions, court orders, letters of guardianship, inventories of assets, and depositions).

6. Agreements to serve as a VA Federal fiduciary.

7. Information pertaining to individuals, including companies and other entities, who previously served as a VA-appointed fiduciary.

8. Information related to the qualification and appointment of individuals, including companies and other entities, considered by VA for appointment as a fiduciary.

9. Photographs of people (beneficiaries who VA has determined are unable to manage their financial affairs, fiduciaries, and other persons who are the subject of a VA investigation), places, and things.

10. Fingerprint records.

11. SSA records containing information about the type and amount of SSA benefits paid to beneficiaries who are eligible to receive benefits under both VA and SSA eligibility criteria, records containing information developed by SSA about SSA beneficiaries who are in need of representative payees, accountings provided to SSA, and records containing information about SSA representative payees. Also contained in this system are copies of non-fiduciary program investigation records. These records are reports of field examinations or investigations performed at the request of any organizational element of VA about any subject under the jurisdiction of VA other than a fiduciary issue. In addition to copies of the reports, records may include copies of exhibits or attachments such as photographs of people, places, and things; sworn statements; legal documents involving loan guaranty transactions, bankruptcy, and debts owed to VA; accident reports; birth, death, and divorce records; certification of search for vital statistics documents; beneficiary's financial statements and tax records; immigration information; and newspaper clippings.

Section 501(a), (b), and chapter 55 of Title 38, United States Code.

This system will collect a limited amount of personally identifiable information to provide authorized individuals access to or interaction with VA. The information collected by the system will include: Name, mailing address, Social Security number, medical record information, and financial information. The system also enables VA to maintain the name, mailing address, Social Security or tax identification number, and credit and criminal histories of individuals who are currently VA-appointed fiduciaries, who previously served as VA-appointed fiduciaries, or who were considered for service as VA-appointed fiduciaries, for the purpose of qualifying the individual for service as a fiduciary and providing oversight of fiduciaries. See the statutory provisions cited in ‘‘Authority for maintenance of the system.’’ VA gathers or creates these records in order to enable it to administer these statutory benefits programs.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the request of that individual.

2. Any information in this system, except for the name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, may be disclosed to a Federal, State, local, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation, or order issued pursuant thereto, at the initiative of VA.

3. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto, in response to its official request, when that information is for law enforcement investigation purposes, and such request is in writing and otherwise complies with subsection (b)(7) of the Privacy Act.

4. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State, or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety, if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law, and, if the information is sought for law enforcement investigation purposes, and the request otherwise complies with subsection (b)(7) of the Privacy Act.

5. The name and address of a veteran may be disclosed to any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under title 38 (such disclosures include computerized lists of names and addresses).

6. Any information in this system, including name, address, Social Security number, VA file number, medical records, financial records, and field examination reports of a VA beneficiary, and the name, address, and information regarding the activities of a VA-appointed fiduciary or beneficiary may be disclosed at the request of a VA beneficiary or fiduciary to a Federal, State, or local agency in order for VA to obtain information relevant to a VA decision concerning the payment and usage of funds payable by VA on behalf of a beneficiary, or to enable VA to assist a beneficiary or VA-appointed fiduciary in obtaining the maximum amount of benefits for a VA beneficiary from a Federal, State, or local agency.

7. Any information in this system, including name, address, Social Security number, VA file number, medical records, financial records, and field examination reports of a VA beneficiary who is in receipt of VA and SSA benefits concurrently, and the name, address, and information regarding the activities of a VA-supervised fiduciary may be disclosed to a representative of the SSA to the extent necessary for the operation of a VA program, or to the extent needed as indicated by such representative.

8. The name and address of a VA beneficiary, the VA rating that indicates the beneficiary is unable to manage his or her financial affairs, and the field examination report upon which the rating was based may be disclosed to a Federal agency, upon its official request, in order for that agency to make decisions on such matters as competency and dependency in connection with eligibility for that agency's benefits. This information may also be disclosed to a State or local agency, upon its official request, in order for that agency to make decisions on such matters as competency and dependency in connection with eligibility for that agency's benefits, if the information pertains to a VA beneficiary who is not a veteran, or if the name and address of the veteran is provided beforehand.

9. Any information in this system, including medical records, financial records, field examination reports, correspondence and court documents may be disclosed in the course of presenting evidence to a court, magistrate or administrative tribunal in matters of guardianship, inquests and commitments, and to probation and parole officers in connection with court required duties.

10. Only so much information, including information in VA records obtained from the SSA, and the name and address of a VA beneficiary, fiduciary, or other person under investigation, as is necessary to obtain a coherent and informed response may be released to a third party who may have information bearing on an issue under VA investigation.

11. Any information in this system may be disclosed to a VA-appointed fiduciary in order for that fiduciary to perform his or her duties, provided this information will only be released when the disclosure is for the benefit of the beneficiary. Any information in this system may also be disclosed to a proposed fiduciary in order for the fiduciary to make an informed decision with regard to accepting fiduciary responsibility for a VA beneficiary.

12. Any information in this system, including medical records, correspondence records, financial records, field examination reports, and court documents may be disclosed to an attorney employed by the beneficiary, or to a spouse, relative, next friend, or to a guardian ad litem representing the interests of the beneficiary, provided the name and address of the beneficiary is given beforehand and the disclosure is for the benefit of the beneficiary, and the release is authorized by 38 U.S.C. 7332, if applicable. Records subject to 38 U.S.C. 7332 contain information on medical treatment for drug abuse, alcoholism, sickle cell anemia, and HIV.

13. Any information in this system may be disclosed to the Department of Justice and to U.S. Attorneys for litigation involving the United States and to Federal agencies upon their official request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672, as well as other claims.

14. Any information in this system including available identifying information regarding the debtor, such as the name of the debtor, last known address of the debtor, name of debtor's spouse, Social Security number, VA insurance number, VA file number, place of birth and date of birth of debtor, name and address of debtor's employer or firm, and dates of employment may be disclosed to other Federal agencies, State probate courts, State driver’s license bureaus, State automobile title and license bureaus, and the General Accounting Office in order to obtain current address, locator, and credit report assistance in the collection of unpaid financial obligations owed the United States. The purpose is consistent with the Federal Claims Collection Act of 1966 and 38 U.S.C. 5701(b)(6).

15. Any information in this system relating to the adjudication of a VA beneficiary’s ability to manage his or her VA benefits, either by a court of competent jurisdiction or by VA, may be disclosed to a lender or prospective lender participating in the VA Loan Guaranty Program who is extending credit or proposing to extend credit on behalf of a veteran for VA to protect veterans in this category from entering into unsound financial transactions which might deplete the resources of the veteran and to protect the interest of the Government giving credit assistance to a veteran.

16. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA’s initiative or in response to DoJ’s request for the information, after either VA or DoJ determines that such information is relevant to DoJ’s representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

17. Disclosure of relevant information may be made to individuals, organizations, public or private agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

18. VA may disclose on its own initiative any information in this system, except the names and mailing addresses of veterans and their dependents, that is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature, and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order.

19. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

20. VA may on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to the economic or property interests, identity theft or fraud, or harm to the programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out VA’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

21. The name and mailing address of a VA beneficiary, and other information as is reasonably necessary to identify such a beneficiary, who has been adjudicated as incapable of managing his or her financial affairs under 38 CFR 3.353, may be provided to the Attorney General of the United States or his/her designee, for use by DoJ in the National Instant Criminal Background Check System mandated by the Brady Handgun Violence Prevention Act, Public Law 103-59.

22. The name, mailing address, and any other information obtained by VA pertaining to the qualification of an individual seeking appointment as a VA fiduciary may be released to the beneficiary or his or her accredited representative or court-appointed guardian for the purpose of notifying the beneficiary of the reasons for selection or non-selection of the individual.

23. The name, mailing address, and any other information obtained by VA pertaining to the allegation, investigation, determination of misuse by a fiduciary, or determination of negligence on the part of VA may be released to the beneficiary or his or her accredited representative or court-appointed guardian for the purpose of notifying the beneficiary of the reasons for VA’s decision regarding misuse.

Storage:

VA electronically maintains fiduciary program beneficiary and fiduciary information in electronic fiduciary folders in BFFS at the VA Data Processing Center in Austin, Texas. Non-fiduciary program investigations and related information are maintained on paper documents and stored at the fiduciary hubs and at VA Central Office.

Records (or information contained in records) are also maintained in electronic file folders (e.g., Virtual VA). Such information may be accessed through data telecommunication terminal systems designated for the Benefits Delivery Network (BDN), Virtual VA, and Veterans Service Network (VETSNET). BDN, Virtual VA, and VETSNET terminal locations include VA Central Office, regional offices, VA health care facilities, Veterans Integrated Service Networks, Department of Defense Finance and Accounting Service Centers, and the U.S. Coast Guard Pay and Personnel Center. Remote online access is also made available to authorized remote sites and claimants’ representatives, to include VA-accredited representatives of VA-recognized veterans service organizations, and VA-accredited attorneys and claims agents. A VA claimant must execute a prior written consent or a power of attorney authorizing access to his or her claims records before VA will allow the representative to have access to the claimant’s automated claims records. Representatives may use the access solely for the purpose of assisting an individual claimant whose records are accessed in a claim for benefits administered by VA. Information relating to receivable accounts owed to VA, designated the Centralized Accounts Receivable System (CARS), is maintained on magnetic tape, microfiche and microfilm. CARS is accessed through a data telecommunications terminal system at St. Paul, Minnesota.

Paper documents and automated storage media are indexed by name and file number of VA beneficiary or other individual.

1. Historical individual case folder and computer lists are generally kept in steel cabinets when not in use. The cabinets are located in areas which are locked after work hours. Access to these records is restricted to authorized VA personnel on a "need to know" basis.

2. Access to the computer rooms within the regional office with jurisdiction over fiduciary hubs is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automatic Data Processing peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Information in the BFFS may be accessed by authorized VA employees. Access to file information is controlled at two levels; the system recognizes authorized employees by a series of individually unique passwords/codes, and the employees are limited to only the information in the file which is needed in the performance of their official duties.

3. Access to the VA data processing center is generally restricted to center employees, custodial personnel, Federal Protective Service, and other security personnel. Access to the computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted.

4. Access to records in VA Central Office is only authorized to VA personnel on a "need to know" basis. Records are maintained in manned rooms during working hours. During non-working hours, there is limited access to the building with visitor control by security personnel.

Paper documents received are scanned into VA’s electronic document repository and subsequently destroyed after 90 days. Electronic records are not purged.

Director, Pension and Fiduciary Service (21PF), VA Central Office, Washington, DC 20420.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the content of such records, should submit a written request or apply in person to the nearest VA regional office or center. Addresses for VA regional offices and centers may be found in VA Appendix 1. All inquiries must reasonably identify the type of records involved, e.g., fiduciary file. Inquiries should include the individual's full name, VA file number, and return address. If a VA file number is not available, then as much of the following information as possible should be forwarded: Full name, branch of service, dates of service, service numbers, Social Security number, and date of birth.

Individuals seeking information regarding access to or contesting VA records in this system may write, call, or visit the nearest VA regional office or center.

See records access procedures above.

VA beneficiary, VA beneficiary's dependents, VA-appointed fiduciaries, individuals who were previously VA-appointed fiduciaries, individuals who VA considered for service as a VA-appointed fiduciary but did not select, field examiners, legal instrument examiners, fiduciary program personnel, third parties, other Federal, State, and local agencies, and VA records.

Records are maintained at the VA Data Processing Center, 1615 East Woodward Street, Austin, TX, 78722; VA Central Office, 810 Vermont Avenue, NW, Washington, DC 20420; VA Records Processing Center, PO Box 5020, St. Louis, MO 63115 and at Neosho, MO.

The following categories of individuals will be covered by the system: (1) Veterans who applied for VA benefits (e.g., compensation, pension,, rehabilitation and education, U.S. Government life insurance, National Service life insurance, and medical and dental care); (2) veterans discharged from military service since March 1973; (3) veterans because of whose military service benefits have been sought by others (e.g., beneficiaries (spouse, children or parents) who have applied for or who are receiving or have received VA benefits (i.e., insurance awards, education, burial benefits)); (4) Medal of Honor recipients; and (5) service members who have established accounts from which future applications for VA educational benefits under title 38, United States Code, Chapter 32 may be used.

The record, or information contained in the record may include (1) identifying information, (2) military discharge information, (3) date of death, (4) VA claims and insurance file numbers, (5) records location and (6) cross-references to beneficiaries of a veteran and to other names used by the veteran. Identifying information may include the following concerning the veteran: Full name, social security number, service number, date of birth, entry and release from active duty, character of service, and branch of service. Military discharge information may include sex, total amount of active service, the dollar amount of readjustment or severance pay, number of nonpaydays, pay grade, narrative reason for separation and information on whether the veteran was discharged with a disability, served during the Vietnam Conflict, reenlisted in the military service, or received a Purple Heart award.

Title 38, United States Code, Chapter 3, section 210(c)(1)

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: The hiring, retention or transfer of an employee; the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans will only be made with the veteran's prior written consent.

3. Any information in this system may be disclosed to a State or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision on: The hiring, transfer or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by that agency; provided, that if the information pertains to a veteran, the name of the veteran will not be disclosed unless the name is provided first by the requesting State or local agency.

4. Any information in this system, except for the name of a veteran, may be disclosed to a Federal agency in order for the VA to obtain information relevant to the issuance of a benefit under title 38, United States Code. The name of a veteran may be disclosed to a Federal agency under this routine use if the name is required by the Federal agency to respond to the VA inquiry.

5. Any information in this system, except for the name of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal, State, local or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation or order issued pursuant thereto.

6. The name of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto, in response to its official request.

7. The name of a veteran, which is relevant to a suspected violation, or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that the name be provided for a purpose authorized by law.

8. Any information, including the name of a veteran, may be disclosed to any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under title 38 U.S.C. (such disclosures include computerized lists of names).

9. The file number and folder location may be disclosed to the Railroad Retirement Board (RRB) pursuant to its standing request. This information is used by the RRB to obtain information from VA compensation, pension, or education records in accordance with the Railroad Retirement Act of 1937, section 228.1(i).

10. Any information in this system may be disclosed to components of the Armed Forces such as the National Personnel Record Center (NPRC) and the U.S. Army Reserve Components Personnel and Administration Center (RCPAC) in accordance with its standing request. This information is used to aid in rebuilding lost military service records and to upgrade the character of discharge or to correct or complete military records.

11. Identifying information, the claims file number and folder location may be disclosed to the National Research Council, National Academy of Sciences, in accordance with its standing request. This information is used in medical studies for the VA or another Federal agency as approved by the Chief Medical Director.

12. Identifying information, the claims file number and folder location may be disclosed to the U.S. Treasury upon its official request. This information is used to obtain the necessary information to return U.S. savings bonds to veterans which are currently in the safekeeping of the U.S. Treasury.

13. A veteran's claims or insurance file number and folder location may be disclosed to accredited service organization representatives, VA-approved claims agents and attorneys acting under a declaration of representation so that these individuals can aid veterans in the preparation, presentation, and prosecution of claims under the laws administered by the VA.

14. Identifying information, the claims file number and folder location may be disclosed to research facilities provided the name of the veteran is furnished by the requestor. The purpose of this disclosure is for such research facilities to obtain information necessary to assist in the medical studies of the veterans. These studies must be approved by the VA Chief Medical Director.

15. Identifying information, the claims file number and folder location may be disclosed to the Federal Parent Locator Service (PLS) of the Department of Health and Human Services upon its official request in accordance with Pub. L. 93-647, which requires disclosure of this information in order to locate missing parents.

16. The claims file number and the folder location may be disclosed to a third party requestor who is seeking the current address of the veteran, in order to refer the requestor to the VA regional office where the veteran's folder is located and to assist the regional office in conducting a blind mailing in accordance with 38 CFR 1.518(c). The file number and folder location may be disclosed to a third party requestor who is seeking the current address of or information about a veteran, in order to (1) refer the requestor to the VA regional office or insurance center where the veteran's folder is located to assist such office or center in conducting a blind mailing in accordance with 38 CFR 1.1518(c) or (2) aid in the efficient Agency records maintenance functions of associating and collating correspondence with existing records.

17. Identifying information, except for the name of a veteran, may be disclosed to a Federal, State, County or Municipal agency for the purpose of conducting computer matches to obtain information to validate the entitlementof a veteran who is receiving or has received veterans insurance benefits under Title 38, United States Code. The name of a veteran may also be disclosed to a Federal agency under this routine use if they are required by the Federal agency to respond to the VA inquiry.

18. The name and address of a prospective, present, or former accredited representative, claims agent or attorney and any information concerning such individual relating to a suspension, revocation, or potential suspension or revocation of that individual's privilege of remote access to Veterans Benefits Administration automated claim records, may be disclosed to any recognized service organization with which the accredited representative is affiliated, and to any entity employing the individual to represent veterans on claims for veterans benefits.

19. The name and address of a former accredited representative, claim agent or attorney, and any information concerning such individual, except a veterans' name and home address, which is relevant to a revocation of remote access privileges to Veterans Benefits Administration automated claim records may be disclosed to an appropriate governmental licensing organization where VA determines that the individual's conduct which resulted in revocation merits reporting.

20. the power of attorney of a claimant for the VA benefits or the information that a power of attorney has not been appointed by the claimant may be disclosed from the Benefits Delivery Network to any recognized veterans service organization even though the service oprganization does not hold a current power of attorney for the claimant.

Any information in this system of records may be disclosed to a Federal agency for the purpose of conducting a computer matching program (as defined in 5 U.S.C. 552a(a)(8)) in accordance with the provision of 552a.

Storage:

The basic file is on automated storage media (e.g., magnetic tapes and disks), with backup copies of the information on magnetic tape. Such information may be accessed through a data telecommunication terminal system designated the Benefits Delivery Network (BDN). BDN terminal locations include VA Central Office, VA regional offices, VBA Debt Management Center, VA health care facilities, Department of Defense Finance and Accounting Service Centers and the U.S. Coast Guard Pay and Personnel Center. An adjunct file (at the Records Processing Center (RPC) in St. Louis, MO) contains microfilm and paper documents of former manual Central Index claims numbers registers, partial files of pensioners with service prior to 1930, personnel with service between 1940 and 1948 with VA insurance, and partial lists of other Armed Forces personnel indexed by service number. A duplicate of the microfilm is also located at VA Central Office.

Remote on-line access is also made available to authorize representatives of claimants and to attorneys of record for claimants. A VA claimant must execute a prior written consent or a power of attorney authorizing access to his or her claims records before VA will allow the representative or attorney to have access to the claimant's automated claims records. Access by representatives and attorneys of record is to be used solely for the purpose of assisting an individual claimant whose records are accessed in a claim for benefits administered by VA.

Information is retrievable by the use of name only, name and one or more numbers (service, social security, VA claims file and VA insurance file), name and one or more criteria (e.g., dates of birth, death and service), number only, or initials or first five letters of the last name with incorrect file number.

Access to the basic file in the Austin DPC (Data Processing Center) is restricted to authorized VA employees and vendors. Accredited service organization representatives, VA-approved claims agents and attorneys acting under a declaration of representation so that these individuals can aid veterans in the preparation, presentation, and prosecution of claims under the laws administered by VA are provided read-only access.

Access to BDN data telecommunications network is by authorization controlled by the site security officer who is responsible for authorizing access to the BDN by a claimant's representative or attorney approved for access in accordance with VA regulations. The site security officer is responsible for ensuring that the hardware, software and security practices of a representative or attorney satisfy VA security requirements before granting access. The security requirements applicable to access to automated claims files by VA employees also apply to access to automated claims files by claimants' representatives or attorneys. The security officer is assigned responsibility for privacy-security measures, especially for review of violation logs, information logs and control of password distribution, including password distribution for claimants' representatives.

Access to the computer room where the basic file is maintained within the DPC is further restricted to authorized VA employees and vendor personnel on a "need to know" basis and is protected from unauthorized access by an alarm system, the Federal Protective Service, and VA security personnel. As to access to Target terminals, see Safeguards, Compensation, Pension, Education, and Rehabilitation Records--58VA21/22. Authorized terminals with access to the VBA Benefits Delivery Network are located only at VA regional officers, VA medical facilities, VA Central Office, VBA Debt Management Center, National Cemetery System facilities, Railroad Retirement Board through the Chicago Regional Office, the National Personnel Records Center, the U.S. Army Reserve Components Personnel and Administration Center at St. Louis, MO, and at remote sites nationwide. The adjunct file is accessible for official use only by personnel assigned to Systems Development Service (20M4), VA Central Office, Washington, DC, and the Administrative Division at VA Records Processing Center, St. Louis, MO.

Records are maintained on magnetic tape, disks, microfilm or paper documents and are retained and disposed of in accordance with disposition authorization approved by the Archivist of the United States.

Director, Compensation and Pension Service (21), VA Central Office, 810 Vermont Avenue, NW, Washington, DC 20420.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record should submit a written request or apply in person to the nearest VA regional office or center. Addresses for these offices may be found in VA Appendix 1. Inquiries should include the individual's full name and VA claims file number. If the VA claims file number is not available, then as much of the following information concerning the service person as possible should be furnished: Social security number, service number, branch of service, dates of service, date of birth or date of death.

Individuals seeking information regarding access to and contesting of VA records in this system may write, call or visit the nearest VA regional office.

(See Record access procedures above.)

Information contained in the records is obtained from veterans' military separation documents, veterans, VA records, the Railroad Retirement Board and other Federal agencies.

Veterans Administration Central Office and the National Cemetery where reservation is made. Address locations are listed in VA Appendix 1 at the end of this document.

Veterans and their dependents.

Military service data, name and address of individual; data on gravesite reservation.

Pub. L. 93-43 dated June 18, 1973 "National Cemeteries Act of 1973".

1. A record from this system of records may be disclosed as a "routine use" to a foreign government allied with the U.S. during war, or a Federal, State or local agency maintaining civil, criminal or other pertinent information or military service data, if necessary to obtain information relevant to an agency decision concerning eligibility for burial or a reservation in a National Cemetery or the issuance of a Government headstone to mark a grave.

2. A record from this system of records may be disclosed to a Federal agency in response to its request in connection with the granting of a benefit to a veteran (including active duty personnel) or a dependent by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

3. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potenial violation of law, whether civil, criminal or regulatory in nature, and whether arising by general staute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

4. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

5. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

Storage:

Paper documents and magnetic tape.

Alphabetically by name and reservation survey date.

Released only to the person concerned or the next-of-kin upon receipt of proper.

Paper records are destroyed after interment; automated record is erased after reservation is used or cancelled.

Director (41), National Cemetery System, Veterans Administration Central Office, Washington, DC 20420.

Same as System Manager.

Same as System Manager.

(See System Manager above.)

Reservee involved and official military records.

VA Central Office, and the National Cemetery where veteran or his dependent is interred. Address locations are listed in VA Appendix 1 at the end of this document.

Deceased veterans and their dependents.

Military service data, name and address of next-of-kin, burial location and cemetery burial services data.

Pub. L. 93-43 dated June 18, 1973 "National Cemeteries Act of 1973".

1. A record from this system of records may be disclosed as a "routine use" to a foreign government allied with the U.S. during war, or a Federal, State or local agency maintaining civil, criminal or other pertinent information or military service data, if necessary to obtain information relevant to an agency decision concerning eligibility for burial or a reservation in a National Cemetery or the issuance of a government headstone to mark a grave.

2. A record from this system of records may be disclosed to a Federal agency in response to its request in connection with the granting of a benefit to a veteran (including active duty personnel) or a dependent by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

3. To reply to inquiries, written and verbal, from family members and friends.

4. In the event that a system of records maintained by this agency to carry out its functions indicates a violation or potential violation of law, hether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records in the system of records may be referred, as a routine use, to the appropriate agency, whether Federal, State, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

5. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

6. Disclosure may be made to NARA (National Archives and Records Administration) GSA (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

Storage:

Paper documents and microfilm.

Alphabetically by name.

Released only to the person concerned or the next-of-kin upon receipt of proper identification.

Retained permanently.

Director (41), National Cemetery System, VA Central Office, Washington, DC 20420.

(See System Manager above.)

(See System Manager above.)

(See System Manager above.)

The veteran, family members of the deceased, official military records, and VA claims records.

Computerized records will be maintained at the following computer site locations: VA Austin Automation Center, 1615 Woodward Street, Austin, Texas 78722; VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420; or with private contractors acting as agents of the VA. Paper records are stored at the Washington National Records Center (WNRC) or with private contractors acting as agents of the VA.

(1) Veterans,

(2) Family members of veterans,

(3) Military service members,

(4) Family members of service members, and

(5) Other VA beneficiaries.

The categories of records in the system may include:

1. Personal identifiers (e.g., respondents' names, addresses, phone numbers, social security numbers, employer identification numbers);

2. Demographic and socioeconomic characteristics (e.g., date of birth, sex, race/ethnicity, education, marital status, employment and earnings, financial information, business ownership information);

3. Military service information (e.g., military occupational specialties, periods of active duty, branch of service including National Guard or Reserves, date of separation, rank);

4. Health status information (e.g., diagnostic, health care utilization, cost, and third-party health plan information);

5. Benefit and service information (e.g., data on transition assistance services, VA medical and other benefit eligibility, awareness, knowledge, understanding, and use; data on access and barriers to VA benefits or services; data about satisfaction with VA outreach, benefits, or services);

6. The records may also include information about DoD military personnel from DoD files (e.g., utilization files that contain inpatient and outpatient medical records, and eligibility files from the Defense Eligibility Enrollment Reporting System (DEERS));

7. The records may include information on Medicare beneficiaries from Health Care Financing Administration (HCFA) databases (e.g., Denominator file identifies the population being studied; Standard Analytical files on inpatient, outpatient, physician supplier, nursing home, hospice, home care, durable medical equipment; and Group and other Health Plans).

5 U.S.C. 306, 38 U.S.C. 527, and Sections 211 and 805 of Public Law 108ndash;454.

The purpose of this system of records is to collect data about the characteristics of America's veteran, service member, family member, and beneficiary population through surveys that may be augmented with information from several existing VA systems of records and with information from non-VA sources to:

1. Conduct statistical studies and analyses relevant to VA programs and services.

2. Plan and improve services provided;

3. Decide about VA policies, programs, and services;

4. Study the VA's role in the use of VA and non-VA benefits and services; and

5. Study the relationship between the use of VA benefits and services and the use of related benefits and services from non-VA sources. These types of studies are needed for VA to forecast future demand for VA benefits and services.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism, or alcohol abuse, sickle cell anemia, or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. Any system records may be disclosed to the National Archives and Records Administration (NARA), and General Services Administration (GSA) for records management inspections conducted under the authority of 44 United States Code.

2. Any system records may be disclosed to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement for the performance of the services identified in the contract or agreement. The person performing the agreement or contract (or employees of the person) also may disclose records covered by the contract or agreement to any secondary entity or individual to perform an activity necessary to provide to VA the service identified in the contract or agreement as permitted under the contract or agreement.

3. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

4. Any system records may be disclosed to a Federal agency for the conduct of research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and OPP has determined prior to the disclosure that OPP data handling requirements are satisfied. OPP may disclose limited individual identification information to another Federal agency for the purpose of matching and acquiring information held by that agency for OPP to use for the purposes stated for this system of records.

5. Any system records may be disclosed to a Member of Congress or to a Congressional staff member in response to an inquiry of the Congressional Office made at the written request of the constituent about whom the record is maintained.

6. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

7. VA may, on its own initiative, disclose information when VA reasonably believes that there may have been a data breach with respect to information in the system such that the confidentiality or integrity of information in the system of records may have been compromised to such agencies, entities, and persons who are reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed data breach and prevent, minimize, or remedy such harm, including conduct of any risk analysis, or provision of credit protection services as provided in 38 U.S.C. 5724.

Storage:

VA sensitive information includes health information that is stored on electronic media, laser optical media, on a segregated secure server or in paper form. Electronic media, or laser optical media data are kept locked in a safe when not in immediate use. The data is located in a combination-locked safe which is secured inside a key-accessed room at the U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Information stored on paper is kept locked in file cabinets when not in immediate use. Databases are temporarily placed on a secured server inside a restricted network area for data match purposes only. Information that resides on a segregated server is kept behind cipher locked doors with limited access. Requestors of OPP stored health information within VA, or from external individuals, contractors, organizations, and/or agencies with whom VA has a contract or agreement, must provide an equivalent level of security protection and comply with current VA policies and procedures for storage and transmission as codified in VA directives such as but not limited to VA Directive 6504.

Health care information is kept separate from individual identifiers. Unique codes are assigned to individual health information. A codebook for decoding is stored in a safe for name, social security number or other assigned identifiers of the individuals on whom they are maintained. These records may be retrieved by name, address, social security number, date of birth, military service number, claim or file number, DoD's identification numbers, or other personal identifiers.

1. This list of safeguards furnished in this System of Record is not an exclusive list of measures that has been, or will be, taken to protect individually-identifiable information. HIPAA guidelines for protecting health information will be followed by adopting health care industry best practices in order to provide adequate safeguards. Further, VA policy directives that specify the standards that will be applied to protect health information will be reviewed by VA staff and contractors through mandatory data privacy and security training.

2. Access to data storage areas is restricted to authorized VA employee or contract staff who have been cleared to work by the VA Office of Security and Law Enforcement. Health information file areas are locked after normal duty hours. VA facilities are protected from outside access by the Federal Protective Service and/or other security personnel.

3. Access to health information provided by the Veterans Health Administration (VHA) pursuant to a Business Associate Agreement (BAA) is restricted to those OPP employees and contractors who have a need for the information in the performance of their official duties. As a general rule, full sets of health care information are not provided for use unless authorized by the Assistant Secretary. File extracts provided for specific official uses will be limited to contain only the information fields needed for the analysis. Data used for analyses will have individual identifying characteristics removed whenever possible.

4. Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Health information files containing unique identifiers such as social security numbers are encrypted to NIST verified FIPS 140ndash;2 standard or higher for storage, transport, or transmission. All files stored or transmitted on laptops, workstations, data storage devices and media are encrypted. Files are kept encrypted at all times except when data is in immediate use. These methods are applied in accordance with HIPAA regulations [45 CFR 164.514] and VA Directive 6504.

5. Contractors and their subcontractors are required to maintain the same level of security as VA staff for health care information that has been disclosed to them. Any data disclosed to a contractor or subcontractor to perform authorized analyses requires the use of Data Use Agreements, Non-Disclosure Statements and Business Associates Agreements (BAA's) to protect health information. Unless explicitly authorized in writing by the VA, sensitive or protected data made available to the contractor and subcontractors shall not be divulged or made known in any manner to any person. Other federal or state agencies requesting health care information need to provide Data Use Agreements to protect data.

6. OPP's work area is accessed for business-only needs. The data is stored in a combination- protected safe which is secured inside a limited access room. Direct access to the safe is controlled by select individuals who possess background security clearances. Only a few employees with strict business needs or ldquo;need-to-knowrdquo; access and completed background checks will ever handle the data once it is removed from the safe for data match purposes.

7. Data matches are conducted on a secured server which is housed in a restricted access network area with appropriate locking devices. Access to such records are controlled by three measures: The application of a VA security identification card coded with special permissions network area's key pad; the proper input of a series of individually-unique passwords/codes by a recognized user; and the entrance of those select individuals for the performance of their official information technology-related duties.

8. Access to Automated Data Processing (ADP) files is controlled by using an individually unique password entered in combination with an individually unique user identification code.

9. Access to VA facilities where identification codes, passwords, security profiles and possible security violations are maintained is controlled at all hours by the Federal Protective Service, VA, or other security personnel and security access control devices.

10. Public use files prepared for purposes of research and analysis are purged of personal identifiers.

11. Paper records, when they exist, are maintained in a locked room at the WNRC. The Federal Protective Service protects paper records from unauthorized access.

Records are maintained and disposed of in accordance with the records disposition authority approved by the Archivist of the United States and the National Archives and Records Administration (NARA) and published in Agency Records Control Schedules. If the Archivist has not approved disposition authority for any records covered by the system notice, the System Manager will take immediate action to have the disposition of records in the system reviewed in accordance with VA Handbook 6300.1, Records Management Procedures. The records may not be destroyed until VA obtains an approved records disposition authority. See Records Control Schedule (RCS) 10ndash;1 for further guidance. OPP destroys electronic files when no longer needed for administrative, legal, audit, or other operational purposes. In accordance with title 36 CFR, Section 1234.34, Destruction of Electronic Records, ldquo;electronic records may be destroyed only in accordance with a records disposition schedule approved by the Archivist of the United States, including General Records Schedules.rdquo;

Director, Policy Analysis Service (008A1), 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wants to determine whether the Director, Policy Analysis Service (008A1) is maintaining a record under the individual's name or other personal identifier or wants to determine the content of such records must submit a written request to the Director, Program Analysis Service (008A1). The individual seeking this information must prove his or her identity and provide the name of the survey in question, approximate date of the survey, social security number, full name, and date of birth, telephone number, and return address. All inquiries must reasonably identify the health care information involved and the approximate date that medical care was provided.

Individual seeking information regarding access to and contesting of records maintained by the Office of Policy and Planning under his or her name or other personal identifier may write the System Manager named above and specify the information being requested or contested.

(See Records Access Procedures.)

Information in this system of records is obtained from survey questionnaire data provided by veterans, veteran family members, military service members, families of service members, or VA beneficiaries in a survey sample and from veterans, family members, military service members, or beneficiaries on specific VA benefit rolls. Information may also be obtained from the Patient Medical Records System (24VA19), the Patient Fee Basis Medical and Pharmacy Records (23VA19); Veterans and Beneficiaries Identification and Records Location Subsystem (38VA23); Compensation, Pension, Education, and Rehabilitation Records (58VA21/22); Health Care Eligibility Center Records (89VA19); DoD utilization files and DEERS files; and HCFA Denominator file or its successor, Standard Analytical files (inpatient, outpatient, physician supplier, nursing home, hospice, home care, durable medical equipment) and Group Health Plan, and other public or private health provider, federal agency, or insurance programs and plans.

Board of Veterans' Appeals, Department of Veterans Affairs (VA), 810 Vermont Avenue NW., Washington, DC 20420, at the Wilkes-Barre VA facility, 1127 East End Boulevard, Building 42, Wilkes-Barre, PA 18702, and with the Board's contractor, Promisel & Korn, Inc., 3228 Amberley Lane, Fairfax, VA 22031.

Veterans, other appellants, Veterans Law Judges, Board staff attorneys and Members of Congress.

The computer database entitled Veterans Appeals Control and Locator System (VACOLS) is a part of this system and can include electronically attached copies of Board of Veterans' Appeals decisions and remands; personal information on appellants and contesting parties including names, addresses, identifying numbers, phone numbers, service dates and issues on appeal; names, addresses and phone numbers of representatives, powers of attorney and attorney fee agreements; information on and dates of procedural steps taken in claims; records of and electronic copies of correspondence concerning appeals; diary entries, notations of mail received, information requests; transcripts of hearings; tracking information as to file location and employee productivity information. Material in this system that is not maintained in VACOLS includes verbatim digital recordings of hearings that are maintained indefinitely, microfiche decision locator tables and indices to decisions from 1983 to 1994, and microfiche reels with texts of decisions from 1977 to 1989.

38 U.S.C. 7101(a), 7104, 5904.

Initial decisions on claims for Federal Veterans' benefits are made at VA field offices throughout the nation. Claimants may appeal those decisions to the Board of Veterans' Appeals. See 38 U.S.C. Chapter 71. The Board gathers or creates the records in this system in order to carry out its appellate function, to statistically evaluate the appellate process, and to evaluate employee performance.

1. Disclosure to law enforcement personnel and security guards may be made in order to alert them to the presence of dangerous persons in VA facilities or at VA activities conducted in non-VA facilities.

2. VA may disclose on its own initiative any information in this system, except the names and home addresses of Veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

3. A record from this system of records may be disclosed to a Veteran, claimant or a third party claimant (e.g., a Veteran's survivors or dependents) to the extent necessary for the development of that claimant's claim for VA benefits.

4. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

5. Disclosure may be made to the National Archives and Records Administration (NARA) in records management inspections conducted under authority of Title 44 U.S.C.

6. A record from this system (other than the address of the beneficiary) may be disclosed to a former representative of a beneficiary to the extent necessary to develop and adjudicate a claim for payment of attorney fees to such representative from past due benefits under 38 U.S.C. 5904(d).

7. Where VA determines that there is good cause to question the legality or ethical propriety of the conduct of a person or organization prospectively, presently or formerly representing a person in a matter before VA, a record from this system may be disclosed, on VA's initiative, to any or all of the following: (1) Applicable civil or criminal law enforcement authorities; (2) a person or entity responsible for the licensing, supervision, or professional discipline of the person or organization prospectively, presently or formerly representing a person in a matter before VA; (3) to other Federal and State agencies and to Federal courts when such information may be relevant to the individual's or organization's provision of representational services before such agency or court. Names and home addresses of Veterans and their dependents will be released on VA's initiative under this routine use only to Federal entities.

8. Disclosure may be made to the VA-appointed representative of an employee, including all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

9. Disclosure may be made to officials of the Merit Systems Protection Board, or the Office of Special Counsel, or both, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

10. Disclosure may be made to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions of the Commission as authorized by law or regulation.

11. VA may disclose to the Federal Labor Relations Authority (FLRA), including its General Counsel, information from this system related to the establishment of jurisdiction, investigation, and resolution of allegations of unfair labor practices, or the resolution of exceptions to arbitration awards when a question of material fact is raised and to address matters properly before the Federal Services Impasses Panel, investigate representation petitions, and conduct or supervise representation elections.

12. Disclosure of information in this system of records may be made to the United States Court of Appeals for Veterans Claims when requested by the Court to further the performance of its duties as delineated in Chapter 72 of Title 38 of the United States Code Annotated with respect to any action brought under that chapter.

13. A record from this system may be disclosed to a Service Organization where the Service Organization is the representative of record of the subject of the records to be released.

14. As permitted by the Privacy Act at 5 U.S.C.A. § 552a(b)(10), the Board will release information from this system of records to the Comptroller General, or any of his or her authorized representatives, in the course of the performance of the duties of the United States General Accountability Office.

15. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

16. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purpose of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

17. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

18. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Note: Any record maintained in this system of records, which may include information relating to drug abuse, alcoholism or alcohol abuse, infection with the human immunodeficiency virus, or sickle cell anemia will be disclosed pursuant to an applicable routine use for the system only when permitted by 38 U.S.C. 7332.

Storage:

Information is kept in a computer database entitled VACOLS and backed up on computer tape. Archived records that were created prior to expansion of the Board of Veterans' Appeals' electronic storage capability may be stored in filing folders or cabinets, microfiche, computer disks, or computer tape. Hearings before the Board are digitally recorded and stored indefinitely. Where a facility must use audio tape to record hearings, the recording is maintained for one year after which period it is destroyed. A transcript is made for each hearing held and is electronically attached to the record in VACOLS. Digital recordings of hearings are maintained on a back-up server. Under the Vital Records Schedule, electronic back-up tapes are updated quarterly. A back-up tape is transferred weekly to the Board's contractor for quick access back-up tape storage.

VACOLS records in this system may be retrieved by any searchable field in the VACOLS database. This system notice covers only information retrieved by an individual's name or other identifier. Archived material from this system that is not in VACOLS may be retrieved by Veteran's name, VA file number, or BVA archive citation number.

Files are under custody of designated VA employees, including employees of the Board of Veterans' Appeals and its contractor, all of whom have a need to know the contents of the system of records in order to perform their duties. Access to VACOLS is strictly limited to reflect the need individual employees have for the different records in the system. Where a Veterans Service Organization office is located in a VA facility and has access to VACOLS through the Wide Area Network, that access is strictly limited to viewing records of current clients of the organization. No personal identifiers are used in statistical and management reports, and personal identifiers are removed from all archived Board of Veterans' Appeals decisions and other records in this system before VA makes them available to the public. Files kept by the contractor are in a locked safe in locked rooms in a secured building.

Records in this system, in VACOLS, and those collected prior to VACOLS' use as a repository are retained indefinitely as Category B Vital Records unless otherwise specifically noted. Under the Vital Records Schedule, electronic back-up tapes are destroyed by erasure upon receipt of the next quarterly tape set. Recordings of hearings will be made as described in Rule 714, 38 CFR 20.714, and transcriptions of recordings of hearings will be attached electronically in VACOLS. Electronic recordings of hearings will be retained for at least one year from the date of the hearing, giving the hearing subject the opportunity to challenge the accuracy of the transcript.

Chairman (01), Board of Veterans' Appeals, 810 Vermont Avenue NW., Washington, DC 20420.

An individual desiring to know whether this system of records contains a record pertaining to him or her, how she or he may gain access to such a record, and how she or he may contest the content of such a record may write to the following address: Privacy Act Officer (01C1), Board of Veterans' Appeals, 810 Vermont Avenue NW., Washington, DC 20420. The following information, or as much as is available, should be furnished in order to identify the record: Name of Veteran, name of appellant other than the Veteran (if any), and Department of Veterans Affairs file number. For information about hearing transcripts or tape recordings, also furnish the date, or the approximate date, of the hearing.

Individuals seeking information regarding access to information contained in this system of records may write or call the Board of Veterans' Appeals Freedom of Information Act Officer, whose address and telephone number are as follows: Freedom of Information Act Officer (01C1), Board of Veterans' Appeals, 810 Vermont Avenue NW., Washington, DC 20420.

(See notification procedures above.)

VA Claims, insurance, loan guaranty, vocational rehabilitation, education, hospital records, and outpatient clinic records folders and associated folders; Board of Veterans' Appeals records; data presented by appellants and their representatives at hearings and in briefs and correspondence; and data furnished by Board of Veterans' Appeals employees.

None.

Records are maintained at the Department of Veterans Affairs (VA) regional offices, VA Medical Centers, the VA Records Management Center, St. Louis, Missouri, and at the Corporate Franchise Data Center in Austin, Texas. Address locations are listed in the VA Appendix 1, located at the end of this document.

Individuals (veterans only) released from active military service from March 1973, for whom separation documents (i.e., DD Forms 214, 215) were received in the Corporate Franchise Data Center in Austin, Texas.

The record, or information contained in the record may include personally identifiable information (PII) and military discharge information. PII may include the following concerning the veteran: Full name, social security number, service number, date of birth. Military discharge information may include the primary military occupational specialty number, entry and release from active duty, character of service, branch of service, and mailing address at the time of discharge, level of education (e.g., high school graduate or equivalent or not high school graduate or equivalent), sex, total amount of active service, the dollar amount of readjustment or severance pay, number of non-paydays, pay grade, narrative reason for separation and whether the veteran was discharged with a disability, served in the Vietnam Conflict, reenlisted in the military service or received a military decoration such as a Purple Heart.

Title 38, United States Code, Chapter 3, section 501(a), (b).

Purpose:

This system collects a limited amount of personally identifiable information for the purpose of maintaining records and providing benefits to veterans who file claims for a wide variety of Federal veteran's benefits administered by VA at VA facilities located throughout the United States. See the statutory provisions cited in "Authority for maintenance of the system". VA gathers or creates these records in order to enable it to administer these statutory benefits programs.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the written request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: The hiring, retention or transfer of an employee; the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans will only be made with the veteran's prior written consent.

3. Any information in this system may be disclosed to a State or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision on: The hiring, transfer or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by that agency; provided, that if the information pertains to a veteran, the name and address of the veteran will not be disclosed unless the name and address is provided first by the requesting State or local agency.

4. Any information in this system may be disclosed to a Federal agency, except for the name and address of a veteran, in order for VA to obtain information relevant to the issuance of a benefit under title 38, United States Code. The name and address of a veteran may be disclosed to a Federal agency under this routine use if they are required by the Federal agency to respond to the VA inquiry.

5. Any information in this system, except for the name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation or order.

6. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto, in response to its official request.

7. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law.

8. Any information, including name and address of a veteran, may be disclosed to any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under title 38, United States Code (such disclosures include computerized lists of names and addresses).

9. A listing of names and addresses of educationally disadvantaged veterans residing in a specific geographic area may be disclosed to VA-approved nonprofit educational facilities in order to aid these facilities in VA outreach programs by permitting direct contact with the educationally disadvantaged veteran.

10. Identifying information may be disclosed at the request of the veteran to accredited service organization representatives, VA-approved claims agents and attorneys acting under a declaration of representation so that these individuals can aid veterans in the preparation, presentation, and prosecution of claims under the laws administered by VA. The name and address of a veteran will not, however, be disclosed to these individuals if the veteran has not requested the assistance of an accredited service organization, claims agent or an attorney.

11. The names and addresses and military discharge information (e.g., job-related information regarding veterans with a certain primary occupational specialty number) may be disclosed upon official request to the Departments of Justice, Labor and to the Department of Health and Human Services, Operation Military Experience Directed Into Health Careers (MEDIHC) State coordinators. These disclosures help veterans who were trained in health and other skills while in the military to learn of career opportunities.

12. Any information in this system of records may be disclosed to the Department of Defense Manpower Data Center, upon its official request, for statistical compilation of information contained on the separation documents issued by the Department of Defense. Veterans' addresses that are contained in this system of records may be disclosed to the Department of Defense Manpower Data Center, upon its official request, for military recruiting command needs: Department of Defense civilian personnel offices' mobilization studies and mobilization information, debt collection, and Individual Ready Reserve (IRR) Units' locator services.

13. The name, address, date of birth and other identifying data, including social security numbers, of a male veteran covered by this system may be released to the Selective Service System for the purpose of identifying men who served on active military duty, but failed to register with the Selective Service System upon separation or discharge from the service; providing the current addresses of veterans; correcting or supplementing the data which the Selective Service System receives from Department of Defense separation points; and ensuring the proper classification of veterans for induction purposes in the event of a return to the draft. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

14. Identifying information from this system of records, including name, mailing address, service discharge date, social security number, date of birth, service branch, gender, disability status, pay grade, educational level, date of enlistment and the amount of Servicemen's Group Life Insurance coverage carried at the time of discharge may be disclosed to the Office of Servicemen's Group Life Insurance for the purposes of soliciting applications for life insurance coverage under the Veteran's Group Life Insurance program.

15. Disclosure may be made to the National Archives and Records (NARA) Administration and the General Services Administration (GSA) in records management inspections conducted under authority of chapter 29 of title 44, United States Code.

16. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its on initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

17. Disclosure of relevant information may be made to individuals, organizations, public or private agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

18. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

19. VA may disclose on its own initiative any information in this system, except the names and mailing addresses of veterans and their dependents, that is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation or order.

20. VA may on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to the economic or property interests, identity theft or fraud, or harm to the programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

21. The name and mailing address of a VA beneficiary, and other information as is reasonably necessary to identify such a beneficiary, who has been adjudicated as incompetent under 38 CFR 3.353, may be provided to the Attorney General of the United States or his/her designee, for use by the Department of Justice in the National Instant Criminal Background Check System (NICS) mandated by the Brady Handgun Violence Prevention Act, Public Law 103-159.

Storage:

Records (or information contained in records) are maintained on paper documents in claims folders (C-folders), vocational rehabilitation folders, electronic file folders (e.g., Virtual VA and TIMS File), and on automated storage media (e.g., microfilm, microfiche, magnetic tape and disks). Such information may be accessed through data telecommunication terminal systems designated the Benefits Delivery Network (BDN), Virtual VA and Veterans Service Network (VETSNET). BDN, Virtual VA and VETSNET terminal locations include VA Central Office, regional offices, VA health care facilities, and Veterans Integrated Service Network (VISN) offices. Remote on-line access is also made available to authorized remote sites, representatives of claimants and to attorneys of record for claimants. A VA claimant must execute a prior written consent or a power of attorney authorizing access to his or her claims records before VA will allow the representative or attorney to have access to the claimant's automated claims records. Access by representatives and attorneys of record is to be used solely for the purpose of assisting an individual claimant whose records are accessed in a claim for benefits administered by VA.

Information is retrievable by the use of name only; name and one or more numbers (service, social security, VA claims file, and VA insurance file); name and one or more criteria (e.g., date of birth, death and service); VA file number only; or initials or first five letters of the last name and VA file number.

Access to the basic file in the Corporate Franchise Data Center in Austin, Texas is restricted to authorized VA employees and vendors. Access to working spaces and claims folder file storage areas in VA regional offices and centers is restricted to VA employees who have a need-to- know for the performance of their official duties associated with providing veterans benefits. Generally, file areas are locked after normal duty hours and the offices and centers are protected from outside access by the Federal Protective Service or other security personnel. Access to BDN, Virtual VA and VETSNET data telecommunication networks are by authorization controlled by the site security officer who is responsible for authorizing access to the BDN, Virtual VA and VETSNET by a claimant's representative or attorney approved for access in accordance with VA regulations. The site security officer is responsible for ensuring that the hardware, software and security practices of a representative or attorney satisfy VA security requirements before granting access. The security requirements applicable to the access of automated claims files by VA employees also apply to the access of automated claims files by claimants' representatives or attorneys. The security officer is assigned responsibility for implementing and enforcing privacy-security measures, especially for review of violation logs, information logs and control of password distribution, including password distribution for claimants' representatives.

Records are maintained on magnetic tape, disks and microfiche and are retained and disposed of in accordance with disposition and authorization approved by the National Archives and Records Administration.

Director, Compensation and Pension Service (21), VA Central Office, 810 Vermont Avenue NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the Director, Administrative Service (23), VA Central Office, 810 Vermont Avenue NW., Washington, DC 20420. Inquiries should include the individual's full name and social security number to ensure that the information is shared with the correct individual.

Individuals seeking information regarding access to and contesting of VA records in this system may write, call or visit the nearest VA regional office.

See Record access procedures above.

The Department of Defense, which provides copies to VA of DD Form 214, Certificate of Release or Discharge from Active Duty, DD Form 215, Correction to DD Form 214; U.S. Public Health Service, which provides copies to VA of PHS-1867, Statement of Service Verification of Status of Commissioned Officers of the U.S. PHS; and the National Oceanic and Atmospheric Administration, which provides VA with copies of ESSA Form 56-16, Report of Separation Discharge.

Appendix 1: Department of Veterans Affairs Regional Offices and Centers

Alabama AL

VA Regional Office, 345 Perry Hill Rd., Montgomery, Alabama 36109.

Alaska AK

VA Regional Office, 1201 N Muldoon Rd., Anchorage 99504.

Arizona AZ

VA Regional Office, 3333 North Central Ave., Phoenix, Arizona 85012.

Arkansas AR

VA Regional Office, 2200 Fort Roots Dr., Bldg. 65, North Little Rock, Arkansas 72144.

California CA

VA Regional Office, Federal Bldg., 11000 Wilshire Blvd., Los Angeles, California 90024.

VA Regional Office, 1301 Clay St., Rm. 1300 North, Oakland, California 94612.

VA Regional Office, 8810 Rio San Diego Dr., San Diego, California 92108.

Colorado CO

VA Regional Office, 155 Van Gordon St., Lakewood, Colorado 80228.

Connecticut CT

VA Regional Office, 555 Willard Ave., Newington, Connecticut 06111.

Delaware DE

VA Regional Office, 1601 Kirkwood Hwy., Wilmington, Delaware 19805.

District of Columbia DC

VA Regional Office, 1722 I St., NW., Washington, DC 20421.

VA Central Office, 810 Vermont Ave., NW., Washington, DC 20420.

Florida FL

VA Regional Office, 9500 Bay Pines Blvd., St. Petersburg, Florida 33708.

Georgia GA

VA Regional Office, 1700 Clairmont Rd., Decatur, Georgia 30033.

Hawaii HI

VA Regional Office, 459 Patterson Rd., E-Wing, Honolulu, Hawaii 96819.

Idaho ID

VA Regional Office, 444 W. Fort St., Boise, Idaho 83702.

Illinois IL

VA Regional Office, 2122 W. Taylor St., Chicago, Illinois 60612.

Indiana IN

VA Regional Office, 575 N. Pennsylvania St., Indianapolis, Indiana 46204.

Iowa IA

VA Regional Office, 210 Walnut St., Des Moines, Iowa 50309.

Kansas KS

VA Regional Office, 5500 E. Kellogg Ave., Wichita, Kansas 67128.

Kentucky KY

VA Regional Office, 321 W. Main St., Ste. 390, Louisville, Kentucky 40202.

Louisiana LA

VA Regional Office, 1250 Poydras St., New Orleans, Louisiana 70056.

Maine ME

VA Regional Office, One VA Center, Augusta, Maine 04330.

Maryland MD

VA Regional Office, Federal Bldg., 31 Hopkins Plaza, Baltimore, Maryland 21201.

Massachusetts MA

VA Regional Office, John Fitzgerald Kennedy Federal Bldg., Government Center, Boston, Massachusetts 02203.

Michigan MI

VA Regional Office, Patrick V. McNamara Federal Bldg., 477 Michigan Ave., Rm. 1400, Detroit, Michigan 48226.

Minnesota MN

VA Regional Office, Bishop Henry Whipple Federal Bldg., 1 Federal Dr., Fort Snelling, St. Paul, Minnesota 55111.

Mississippi MS

VA Regional Office, 1600 East Woodrow Wilson Ave., Jackson, Mississippi 39216.

Missouri MO

VA Regional Office, 400 South 18th St., St. Louis, Missouri 63103.

Montana MT

VA Regional Office, 3633 Veterans Dr., Fort Harrison, Montana 59636.

Nebraska NE

VA Regional Office, 5631 S. 48th St., Lincoln, Nebraska 68516.

Nevada NV

VA Regional Office, 5460 Reno Corporate Dr., Reno, Nevada 89511.

VA Benefits Office, 4800 Alpine Pl., Suite 12, Las Vegas, Nevada 89107.

New Hampshire NH

VA Regional Office, Norris Cotton Federal Bldg., 275 Chestnut St., Manchester, New Hampshire 03101.

New Jersey NJ

VA Regional Office, 20 Washington Place, Newark, New Jersey 07120.

New Mexico NM

VA Regional Office, Dennis Chavez Federal Bldg., 500 Gold Ave., SW., Albuquerque, New Mexico 87102.

New York NY

VA Regional Office, 245 W. Houston St., New York, New York 10014.

VA Regional Office, Niagra Center, 130 S. Elmwood Ave., Buffalo, New York 14202.

North Carolina NC

VA Regional Office, Federal Office Building, 251 North Main Street, Winston-Salem, North Carolina 27155.

North Dakota ND

VA Regional Office, 2101 Elm St., Fargo, North Dakota 58102.

Ohio OH

VA Regional Office, Anthony J. Celebreeze Federal Office Bldg., 1240 East Ninth St., Cleveland, Ohio 44199.

Oklahoma OK

VA Regional Office, 125 South Main St., Muskogee, Oklahoma 74401.

Oregon OR

VA Regional Office, Edith Green/Wendell Wyatt Federal Building, 1220 SW. Third Ave., Portland, Oregon 97204.

Pennsylvania PA

VA Regional Office, 1000 Liberty Ave., Pittsburgh, Pennsylvania 15222.

VA Regional Office and Insurance Center, 5000 Wissahickon Ave., Philadelphia, Pennsylvania 19101.

Philippines

VA Regional Office and Outpatient Clinic, 1131 Roxas Blvd., Manila, Philippines; MAILING ADDRESS from U.S.: VA Regional Office, PSC 501, DPO AP 96515-1100.

Puerto Rico, Commonwealth of (including the Virgin Islands)

VA Regional Office, 150 Carlos Chardon Ave., Suite 300, San Juan, Puerto Rico 00918.

Rhode Island RI

VA Regional Office, 380 Westminster Street, Providence, Rhode Island 02903.

South Carolina SC

VA Regional Office, 6437 Garners Ferry Rd., Columbia, South Carolina 29201.

South Dakota SD

VA Regional Office, P.O. Box 5046, 2501 W. 22nd St., Sioux Falls, South Dakota 57105.

Tennessee TN

VA Regional Office, 110 9th Ave. South, Nashville, Tennessee 37203.

Texas TX

VA Regional Office, 6900 Almeda Rd., Houston, Texas 77030.

VA Regional Office, One Veterans Plaza, 701 Clay Ave., Waco, Texas 76799.

Utah UT

VA Regional Office, 550 Foothill Drive, Salt Lake City, Utah 84148.

Vermont VT

VA Regional Office, 215 North Main Street, White River Junction, Vermont 05001.

Virginia VA

VA Regional Office, 210 Franklin Rd., SW, Roanoke, Virginia 24011.

Washington WA

VA Regional Office, Federal Bldg., 915 Second Ave., Seattle, Washington 98174.

West Virginia WV

VA Regional Office, 640 4th Ave., Huntington, West Virginia 25701.

Wisconsin WI

VA Regional Office, 5400 W. National Ave., Milwaukee, Wisconsin 53214.

Wyoming WY

VA Regional Office and Medical Center, 2360 East Pershing Blvd., Cheyenne, Wyoming 82001.

Records are maintained at the Department of Veterans Affairs (VA) Central Office, Washington, DC.

Deceased Veterans and eligible family members.

The records in the system are the primary records and may contain the following types of information:

1. Military Service Data.

2. Applicant's name and address.

3. Place of burial.

4. Data on headstone or marker.

5. Consignee's name, address and phone number.

Public Law 93-43.

Purpose:

National Cemetery Administration (NCA) collects a limited amount of personally Identifiable information in order to provide authorized individual's access to or interact with the Department of Veterans Affairs. The system enables VA to maintain lists of individuals who receive a variety of Federal Veteran's Benefits administered by VA at VA facilities located throughout the country. VA gathers or creates these records in order to enable it to administer these statutory benefits programs.

Information from this system also may be disclosed as a routine use for the following purposes:

1. For use in connection with the issuance of a government headstone or marker in a National Cemetery or a private cemetery.

2. VA on its own initiative may disclose any information in the system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

3. A record from this system of records may be disclosed as a "routine use" to a foreign government allied with the U.S. during war, or a Federal, State or local agency maintaining civil, criminal or other pertinent information or military service data, if necessary to obtain information relevant to an agency decision concerning eligibility for burial or a reservation in a national cemetery or the issuance of a government headstone to mark a grave.

4. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the granting of a benefit to a Veteran (including active duty personnel) or a dependent by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

5. The record of an individual who is covered by a system of records may be disclosed to a Member of congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

6. Disclosure may be made to the National Archives and Records Administration in records management inspections conducted under authority of Title 44 U.S.C.

7. VA may disclose records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

8. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

9. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

10. VA may, on its own initiative disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

The information contained in the Veterans (Deceased) Headstone and Marker Records are maintained in paper documents and are stored at Veterans Administration Central Office.

Paper documents are indexed and retrievable by name of VA beneficiary or eligible family member.

NCA will maintain the data in compliance with applicable VA security policy Directives that specify the standards that will be applied to protect sensitive personal information. Further, only authorized individuals may have access to the data and only when needed to perform their duties. They are required to take annual VA mandatory data privacy and security training.

Because the information is related to deceased veterans, the paper documents are retained indefinitely.

Director, National Cemetery Administration (41), Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420.

Any individual who wishes to access information in order to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the content of such records should submit a written request to the Privacy Officer, National Cemetery Administration, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. All inquiries must reasonably identify the type of records involved. Inquiries should include the individual's full name, branch of service, dates of service, service numbers, social security number, and date of birth.

See "Notification Procedures" above.

See "Notification Procedures" above.

Include family members of the deceased, official military records and VA claims records.

Records are maintained at the Chief Business Office

Purchased Care (CBOPC), 3773 Cherry Creek North Drive, Denver, Colorado

80209.

Categories of individuals covered by the system include the following:

1. Family members of Veterans who seek health care under 38 U.S.C. 1720G, 1781, 1787, 1802, 1803, 1812, 1813, 1821,Public Law 103-446, section 107 and Public Law 111-163 section 101.

2. Veterans seeking health care services in a foreign country under 38 U.S.C. 1724.

3. Veterans receiving community fee-for-service benefits at VA expense under Title 38 U.S.C. 1703, 1725 and 1728.

4. Health care providers treating individuals who receive care under 38 U.S.C. 1703, 1720G, 1724, 1725, 1728, 1781, 1787, 1803, 1812, 1813, 1821, Public Law 103-446 section 107 and Public Law 111-163 section 101.

5. Caregivers of Veterans providing personal care services and in receipt of a stipend under 38 U.S.C. 1720G and Public Law 111-163 section 101.

Records maintained in the system include program applications, eligibility information concerning the Veteran, family members, caregivers: other health insurance information to include information regarding eligibility or entitlement to other federal medical programs: correspondence concerning individuals who have applied for benefits in these programs; claims (billing) for medical care and services; documents pertaining to claims for medical services; information related to claims processing; documents pertaining to stipend calculation and payment; documents pertaining to appeals; and third party liability information and recovery actions taken by VA and/or TRICARE. The record may include the name, address and other identifying information concerning health care providers, services provided, amounts claimed and paid for health care services, amounts calculated and paid for stipends, medical records, and treatment and payment dates.

Additional information may include Veterans, who have applied for benefits in these programs; claims (billing) for medical care and services; documents pertaining to claims for medical services; information related to claims processing; documents pertaining to stipend calculation and payment; documents pertaining to appeals; and third party liability information and recovery actions. family member, and caregiver identifying information (e.g., name, address, social security number, VA claim file number, date of birth), and military service information concerning the Veteran and spouse or other family member (when applicable- e.g., dates, branch and character of service, medical information).

Title 38, United States Code, sections 501(a), 501(b), 1703, 1720G, 1724, 1725, 1728, 1781, 1787, 1802, 1803, 1812, 1813, 1821, Public Law 103-446 section 107 and Public Law 111-163 section 101.

Records may be used for purposes of establishing and monitoring eligibility to receive VA benefits, processing claims for medical care and services, and processing stipends.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Eligibility and claim information from this system of records may be disclosed verbally or in writing. For example, disclosure may be made via correspondence, call service center, interactive voice recognition, portal or interactive Web page, in response to an inquiry made by the claimant, claimant's guardian, claimant's next of kin, health care provider, trading partner, other federal agency or contractor. Purposes of these disclosures are to assist the provider or claimant in obtaining reimbursement for claimed medical services, to facilitate billing processes, to verify beneficiary eligibility and to provide payment information regarding claimed services. Eligibility or entitlement information disclosed may include the name, authorization number (social security number), effective dates of eligibility, reasons for any period of ineligibility, and other health insurance information of the named individual. Claim or stipend information disclosed may include payment information such as payment identification number, date of payment, date of service, amount billed, amount paid, name of payee, or reasons for non-payment.

2. Statistical and other data to Federal, State, and local government agencies and national health organizations to assist in the development of programs that will be beneficial to health care recipients, to protect their rights under the law, and to ensure that they are receiving all health benefits to which they are entitled.

3. VA may disclose on its own initiative any information in this system, except the names and home addresses of Veterans and their family members or caregivers which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of Veterans, their family members or caregivers to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

4. A record from this system of records may be disclosed to a Federal agency upon its request for use in the issuance of a security clearance, the investigation of an employee, the letting of a contract, or the issuance of a license, grant or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting Agency's decision on the matter.

5. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

6. Disclosure may be made to National Archives and Records Administration and to General Services Administration in records management inspections conducted under authority of 44 U.S.C.

7. Any relevant information in this system of records may be disclosed to attorneys, insurance companies, employers, and to courts, boards, or commissions; such disclosures may be made only to the extent necessary to aid the VA in preparation, presentation, and prosecution of claims authorized under Federal, State, or local laws, and regulations promulgated thereunder.

8. Any information in this system of records may be disclosed to the United States Department of Justice or United States Attorneys in order to prosecute or defend litigation involving or pertaining to the United States, or in which the United States has an interest.

9. Any information in this system of records may be disclosed to a Federal agency or party to an administrative proceeding being conducted by a Federal agency, in order for VA to respond to and comply with the issuance of an order by that Federal agency requiring production of the information.

10. Any information in this system of records may be disclosed to a State or municipal grand jury, a State or municipal court or a party in litigation, or to a State or municipal administrative agency functioning in a quasi-judicial capacity or a party to a proceeding being conducted by such agency, provided that any disclosure of claimant information made under this routine use must comply with the provisions of 38 CFR 1.511.

11. Any information concerning the claimant's indebtedness to the United States by virtue of a person's participation in a benefits program administered by VA, including personal information obtained from other Federal agencies through computer matching programs, may be disclosed to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of any amount owed to the United States. Purposes of these disclosures may be to assist VA in collection of costs of services provided individuals not entitled to such services and to initiate legal actions for prosecuting individuals who willfully or fraudulently obtain Title 38 benefits without entitlement. This disclosure is consistent with 38 U.S.C. 5701(b)(6).

12. Any relevant information from this system of records may be disclosed to TRICARE, the Department of Defense (DoD) and the Defense Eligibility Enrollment Reporting System (DEERS) to the extent necessary to determine eligibility for the Civilian Health and Medical Program of the Department of Veterans Affairs (CHAMPVA) or TRICARE benefits, to develop and process CHAMPVA or TRICARE claims, and to develop cost-recovery actions for claims involving individuals not eligible for the services or claims involving potential third party liability.

13. The name and address of a Veteran, family member or caregiver, and other information as is reasonably necessary to identify such individual, may be disclosed to a consumer reporting agency for the purpose of locating the individual or obtaining a consumer report to determine the ability of the individual to repay an indebtedness to the United States by virtue of the individual's participation in a benefits program administered by VA, provided that the requirements of 38 U.S.C. 5701(g)(2) have been met.

14. The name and address of a Veteran, family member or caregiver and other information as is reasonably necessary to identify such individual, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the individual's indebtedness to the United States by virtue of the individual's participation in a benefits program administered by VA, may be disclosed to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the requirements of 38 U.S.C. 5701(g)(4) have been met.

15. In response to an inquiry about a named individual from a member of the general public, disclosure of information may be made from this system of records to report the amount of VA monetary benefits being received by the individual. This disclosure is consistent with 38 U.S.C. 5701(c)(1).

16. The name and address of a Veteran, family member or caregiver may be disclosed to another Federal agency or to a contractor of that agency, at the written request of the head of that agency or designee of the head of that agency, for the purpose of conducting government research necessary to accomplish a statutory purpose of that agency.

17. Any information in this system of records relevant to a claim of a Veteran, family member or caregiver such as the name, address, the basis and nature of a claim, amount of benefit payment information, medical information and military service and active duty separation information may be disclosed at the request of the claimant to accredited service organizations, VA approved claim agents and attorneys acting under a declaration of representation, so that these individuals can aid claimants in the preparation, presentation and prosecution of claims

under the laws administered by VA. The name and address of a claimant will not, however, be disclosed to these individuals under this routine use if the claimant has not requested the assistance of the accredited service organization, claims agent or an attorney.

18. Any information in this system, including medical information, the basis and nature of claim, the amount of benefits and personal information may be disclosed to a VA Federal fiduciary or a guardian ad litem in relation to his or her representation of a claimant only to the extent necessary to fulfill the duties of the VA Federal fiduciary or the guardian ad litem.

19. The individual's name, address, social security number and the amount (excluding interest) of any indebtedness which is waived under 38 U.S.C. 3102, compromised under 4 CFR Part 103, otherwise forgiven, or for which the applicable statute of limitations for enforcing collection has expired, may be disclosed to the Treasury Department, Internal Revenue Service, as a report of income under 26 U.S.C. 61(a)(12).

20. The name of a Veteran, family member or caregiver, or other information as is reasonably necessary to identify such individual, and any other information concerning the individual's indebtedness by virtue of a person's participation in a benefit program administered by VA, may be disclosed to the Treasury Department, Internal Revenue Service, for the collection of Title 38, U.S.C. benefit overpayments, overdue indebtedness, and/or costs of services provided to an individual not entitled to such services, by the withholding of all or a portion of the person's Federal income tax refund.

21. The name, date of birth and social security number of a Veteran, family member or caregiver, and other identifying information as is reasonably necessary may be disclosed to Social Security Administration and Centers for Medicare & Medicaid Services, Department of Health and Human Services, for the purpose of validating social security numbers and Medicare information.

22. The name and address of any health care provider in this system of records who has received payment for claimed services on behalf of a

Veteran, family member or caregiver may be disclosed in response to an inquiry from a member of the general public who requests assistance in locating medical providers who accept VA payment for health care services.

23. Relevant information from this system of records may be disclosed to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA in order for the contractor or subcontractor to perform the services of the contract or agreement.

24. Relevant information from this system of records may be disclosed to an accrediting Quality Review and Peer Review Organization in connection with the review of claims or other review activities associated with CBOPC accreditation to professionally accepted claims processing standards.

25. Identifying information, including social security number, of

Veterans, spouse(s) of veterans, and dependents of Veterans, family members and caregivers, may be disclosed to other Federal agencies for purposes of conducting computer matches, to obtain information to determine or verify eligibility of Veterans who are receiving VA medical care under relevant sections of Title 38, U.S.C.

26. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

27. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed

data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

28. Any relevant information from this system of records may be disclosed to the Centers for Medicare and Medicaid, the Social Security Administration, Veterans Benefit Administration, or any other federal or state agency.

Storage:

Records are stored electronically, in paper folders, magnetic discs, and magnetic tape. Paper documents may be scanned/digitized and stored for viewing electronically.

Paper records are retrieved by name or VA claims file number or social security number of the Veteran, family member or caregiver. Computer records are retrieved by name or social security number of the Veteran family member, caregiver, or VA claims file number of the Veteran.

Working spaces and record storage areas at CBOPC are secured during all business and non-business hours. All entrance doors require an electronic pass card for entry. The CBOPC Logistics Department issues electronic pass cards. CBOPC staff control visitor entry by door release and escort. The building is equipped with an intrusion alarm system monitored by CBOPC security staff during business hours and by a security service vendor during non-business hours. Electronic/Digital records are stored in an electronic controlled storage filing area. Paper records in work areas are stored in locked file cabinets or locked rooms. Access to record storage areas is restricted to VA employees on a "need-to-know" basis. Access to the computer room is limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automated Data Processing (ADP) peripheral devices are generally placed in secure areas or are otherwise protected. Authorized VA employees may access information in the computer system by a series of individually unique passwords/codes.

Record Control Schedule (RCS) 10-1 item XXXVIII Civilian Health and Medical care (CHMC) Records. NARA job number N1-015-3-1Item 1-8b. (Master file) item 3, Destroy 6 years after all individuals in the record become ineligible for program benefits.

Official responsible for policies and procedures: Chief Business Officer (10NB), Department of Veterans Affairs, Veterans Health Administration, VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420. Official Maintaining the System: Deputy Chief Business Officer Purchased Care, Department of Veterans Affairs, P.O. Box 469060, Denver, CO 80246-9060.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to Chief Business Office Purchased Care, P.O. Box 469060, Denver, Colorado 80246-9060, or apply in person to the VHA Chief Business Office Purchased Care, 3773 Cherry Creek North Drive, Denver, Colorado 80209. All inquiries (Veteran and beneficiary) should include the Veteran’s full name and social security and VA claims file numbers, and the spouse’s family member or caregiver’s name, social security number and return address.

An individual who seeks access to records maintained under his or her name in this system may write or visit the Deputy Chief Business Officer, VHA CBO Purchased Care.

(See Record Access Procedures above.)

The Veteran sponsor, family member, caregiver, military service departments, private medical facilities and health care professionals, electronic trading partners, contractors, DoD, TRICARE, DEERS, other Federal agencies, VA Regional Offices, Veterans Benefits Administration (VBA) automated record systems, and VA Medical Centers.

Records are maintained at the Health Administration Center (HAC), 3773 Cherry Creek North Drive, Denver, Colorado 80209.

Categories of individuals covered by the system include the following:

1. Dependents of veterans who seek health care under 38 U.S.C. 1781, 1802, 1803, 1813 and Public Law 103-446, section 107.

2. Veterans seeking health care services in a foreign country under 38 U.S.C. 1724.

3. Veterans or dependents receiving community fee for service benefits at VA expense under Title 38 U.S.C 1703, 1725 and 1728.

4. Health care providers treating individuals who receive care under 38 U.S.C. 1703, 1724, 1725, 1728, 1781, 1803, 1813, and Public Law 103-446 section 107.

Records maintained in the system include medical benefit application and eligibility information concerning the veteran and, when applicable, their spouse and/or dependent(s), other health insurance information, correspondence concerning individuals and documents pertaining to claims for medical services, information related to claims processing and third party liability recovery actions taken by VA and/or TRICARE. The record may include the name, address and other identifying information concerning health care providers, services provided, amounts claimed and paid for health care services, medical records, and treatment and payment dates. Additional information may include veteran, spouse and/or dependent identifying information (e.g., name, address, social security number, VA claims file number, date of birth), and military service information concerning the veteran sponsor (e.g., dates, branch and character of service, medical information).

Title 38, United States Code, sections 501(a), 501(b), 1703, 1724, 1725, 1728, 1781, 1802, 1803, 1813, and Public Law 103-446 section 107.

Records may be used for purposes of establishing and monitoring eligibility to receive VA benefits and processing medical claims for payment for eligible beneficiaries and veterans.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Eligibility and claim information from this system of records may be disclosed verbally or in writing. For example, disclosure may be made via correspondence, call service center or by interactive Web page, in response to an inquiry made by the claimant, claimant's guardian, claimant's next of kin or person with whom the claimant has a meaningful relationship, health care provider, trading partner or contractor. Purposes of these disclosures are to assist the provider or claimant in obtaining reimbursement for claimed medical services, to facilitate billing processes, to verify beneficiary eligibility for requested services, and to provide payment information regarding claimed services. Eligibility or entitlement information disclosed may include the name, authorization number (social security number), effective dates of eligibility, reasons for any period of ineligibility, and other health insurance information of the named individual. Claim information disclosed may include payment information such as payment identification number, date of payment, date of service, amount billed, amount paid, name of payee, or reasons for non-payment.

2. Statistical and other data to Federal, State, and local government agencies and national health organizations to assist in the development of programs that will be beneficial to health care recipients, to protect their rights under the law, and to ensure that they are receiving all health benefits to which they are entitled.

3. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

4. A record from this system of records may be disclosed to a Federal agency upon its request for use in the issuance of a security clearance, the investigation of an employee, the letting of a contract, or the issuance of a license, grant or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting Agency's decision on the matter.

5. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

6. Disclosure may be made to National Archives and Records Administration and to General Services Administration in records management inspections conducted under authority of 44 U.S.C.

7. Any relevant information in this system of records may be disclosed to attorneys, insurance companies, employers, and to courts, boards, or commissions; such disclosures may be made only to the extent necessary to aid the VA in preparation, presentation, and prosecution of claims authorized under Federal, State, or local laws, and regulations promulgated thereunder.

8. Any information in this system of records may be disclosed to the United States Department of Justice or United States Attorneys in order to prosecute or defend litigation involving or pertaining to the United States, or in which the United States has an interest.

9. Any information in this system of records may be disclosed to a Federal agency or party to an administrative proceeding being conducted by a Federal agency, in order for VA to respond to and comply with the issuance of an order by that Federal agency requiring production of the information.

10. Any information in this system of records may be disclosed to a State or municipal grand jury, a State or municipal court or a party in litigation, or to a State or municipal administrative agency functioning in a quasi-judicial capacity or a party to a proceeding being conducted by such agency, provided that any disclosure of claimant information made under this routine use must comply with the provisions of 38 CFR 1.511.

11. Any information concerning the claimant's indebtedness to the United States by virtue of a person's participation in a benefits program administered by VA, including personal information obtained from other Federal agencies through computer matching programs, may be disclosed to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of any amount owed to the United States. Purposes of these disclosures may be to assist VA in collection of costs of services provided individuals not entitled to such services and to initiate legal actions for prosecuting individuals who willfully or fraudulently obtain Title 38 benefits without entitlement. This disclosure is consistent with 38 U.S.C. 5701(b)(6).

12. Any relevant information from this system of records may be disclosed to TRICARE, the Department of Defense (DoD) and the Defense Eligibility Enrollment Reporting System (DEERS) to the extent necessary to determine eligibility for the Civilian Health and Medical Program of the Department of Veterans Affairs (CHAMPVA) or TRICARE benefits, to develop and process CHAMPVA or TRICARE claims, and to develop cost-recovery actions for claims involving individuals not eligible for the services or claims involving potential third party liability.

13. The name and address of a veteran or dependent, and other information as is reasonably necessary to identify such individual, may be disclosed to a consumer reporting agency for the purpose of locating the individual or obtaining a consumer report to determine the ability of the individual to repay an indebtedness to the United States by virtue of the individual's participation in a benefits program administered by VA, provided that the requirements of 38 U.S.C. 5701(g)(2) have been met.

14. The name and address of a veteran or dependent, and other information as is reasonably necessary to identify such individual, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the individual's indebtedness to the United States by virtue of the individual's participation in a benefits program administered by VA, may be disclosed to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the requirements of 38 U.S.C. 5701(g)(4) have been met.

15. In response to an inquiry about a named individual from a member of the general public, disclosure of information may be made from this system of records to report the amount of VA monetary benefits being received by the individual. This disclosure is consistent with 38 U.S.C. 5701(c)(1).

16. The name and address of a veteran or dependent may be disclosed to another Federal agency or to a contractor of that agency, at the written request of the head of that agency or designee of the head of that agency, for the purpose of conducting government research necessary to accomplish a statutory purpose of that agency.

17. Any information in this system of records relevant to a claim of a veteran or dependent, such as the name, address, the basis and nature of a claim, amount of benefit payment information, medical information and military service and active duty separation information may be disclosed at the request of the claimant to accredited service organizations, VA approved claim agents and attorneys acting under a declaration of representation, so that these individuals can aid claimants in the preparation, presentation and prosecution of claims under the laws administered by VA. The name and address of a claimant will not, however, be disclosed to these individuals under this routine use if the claimant has not requested the assistance of the accredited service organization, claims agent or an attorney.

18. Any information in this system, including medical information, the basis and nature of claim, the amount of benefits and personal information may be disclosed to a VA Federal fiduciary or a guardian ad litem in relation to his or her representation of a claimant only to the extent necessary to fulfill the duties of the VA Federal fiduciary or the guardian ad litem.

19. The individual's name, address, social security number and the amount (excluding interest) of any indebtedness which is waived under 38 U.S.C. 3102, compromised under 4 CFR Part 103, otherwise forgiven, or for which the applicable statute of limitations for enforcing collection has expired, may be disclosed to the Treasury Department, Internal Revenue Service, as a report of income under 26 U.S.C. 61(a)(12).

20. The name of a veteran or dependent, other information as is reasonably necessary to identify such individual, and any other information concerning the individual's indebtedness by virtue of a person's participation in a benefits program administered by VA, may be disclosed to the Treasury Department, Internal Revenue Service, for the collection of Title 38, U.S.C. benefit overpayments, overdue indebtedness, and/or costs of services provided to an individual not entitled to such services, by the withholding of all or a portion of the person's Federal income tax refund.

21. The name, date of birth and social security number of a veteran, spouse or dependent, and other identifying information as is reasonably necessary may be disclosed to Social Security Administration and Centers for Medicare & Medicaid Services, Department of Health and Human Services, for the purpose of validating social security numbers and Medicare information.

22. The name and address of any health care provider in this system of records who has received payment for claimed services on behalf of a veteran and beneficiary may be disclosed in response to an inquiry from a member of the general public who requests assistance in locating medical providers who accept VA payment for health care services.

23. Relevant information from this system of records may be disclosed to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA in order for the contractor or subcontractor to perform the services of the contract or agreement.

24. Relevant information from this system of records may be disclosed to an accrediting Quality Review and Peer Review Organization in connection with the review of claims or other review activities associated with VA Health Administration Center accreditation to professionally accepted claims processing standards.

25. Identifying information, including social security number, of veterans, spouse(s) of veterans, and dependents of veterans, may be disclosed to other Federal agencies for purposes of conducting computer matches, to obtain information to determine or verify eligibility of veterans who are receiving VA medical care under relevant sections of Title 38, U.S.C.

26. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

27. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are stored electronically, in paper folders, magnetic discs, and magnetic tape. Paper documents may be scanned/digitized and stored for viewing electronically.

Paper records are retrieved by name or VA claims file number or social security number of the veteran sponsor. Computer records are retrieved by name or social security number of the veteran sponsor, spouse, and/or dependent, or VA claims file number of the veteran sponsor.

Working spaces and record storage areas at HAC are secured during all business and non- business hours. All entrance doors require an electronic pass card for entry. The HAC Security Officer issues electronic pass cards. HAC staff control visitor entry by door release and escort. The building is equipped with an intrusion alarm system monitored by HAC security staff during business hours and by a security service vendor during non-business hours. Electronic/Digital records are stored in an electronic controlled storage filing area. Paper records in work areas are stored in locked file cabinets or locked rooms. Access to record storage areas is restricted to VA employees on a "need-to-know" basis. Access to the computer room is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automated Data Processing (ADP) peripheral devices are generally placed in secure areas or are otherwise protected. Authorized VA employees may access information in the computer system by a series of individually unique passwords/codes.

Records are maintained and disposed of in accordance with record disposition authority approved by the Archivist of the United States. Paper records that are scanned and digitized for viewing electronically are destroyed after they have been scanned onto optical disks, and the electronic copy determined to be an accurate and complete copy of the paper record scanned.

Official responsible for policies and procedures: Chief Business Officer (16), Department of Veterans Affairs, Veterans Health Administration, VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420. Official Maintaining the System: Director, Health Administration Center, Department of Veterans Affairs, P.O. Box 469060, Denver, CO 80246-9060.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to Director, VA Health Administration Center, P.O. Box 469060, Denver, Colorado 80246-9060, or apply in person to the Director, VA Health Administration Center, 3773 Cherry Creek North Drive, Colorado 80209. Inquiries should include the veteran sponsor's full name and social security and VA claims file numbers, and the spouse or dependent's name, social security number and return address.

An individual who seeks access to records maintained under his or her name in this system may write or visit the Director, VA Health Administration Center.

(See Record Access Procedures above.)

The veteran sponsor, spouse and/or dependent, military service departments, private medical facilities and health care professionals, electronic trading partners, contractors, DoD, TRICARE, DEERS, other Federal agencies, VA Regional Offices, Veterans Benefits Administration (VBA) automated record systems, and VA Medical Centers.

Records are maintained at the VA Central Office, the regional offices, medical and regional office centers, VA offices and VA data processing centers. These records generally will be maintained by the regional office, medical and regional office center or VA office having jurisdiction over the geographic area in which the property securing a VA guaranteed, insured or direct loan or on which a specially adapted housing grant has been issued is located and at the Servicing Data Processing Centers at Hines, Illinois; Austin, Texas; and St. Paul, Minnesota. Records may be temporarily transferred between fields stations or to VA Central Office for necessary appeals, reviews, or quality control reviews. Address locations are listed in VA Appendix I. Records provided to the Department of Housing and Urban Development (HUD) for inclusion on its Credit Alert Interactive Voice Response System (CAIVRS) are located at a data processing center under contract to HUD at Reston, Virginia.

The following categories of individuals will be covered by this system: (1) Disabled veterans who have applied for and received specially adapted housing assistance under title 38, United States Code, chapter 21; (2) veterans, their spouses or unmarried surviving spouses who have applied for and received VA housing credit assistance under title 38, United States Code, chapter 37; (3) person(s) applying to purchase VA owned properties (vendee loans); (4) transferee owners of properties encumbered by a VA-guaranteed, insured, direct or vendee loan (e.g., individuals who have assumed a VA-guaranteed loan and those who have purchased property directly from the VA); and (5) individuals other than those identified above who may have applied for loan guaranty benefits.

Records (or information contained in records) may include the following: (1) Military service information from a veteran's discharge certificate (DD Form 214, 215) which specifies name, service number, date of birth, rank, period of service, length of service, branch of service, pay grade, and other information relating to a veteran's military service (e.g., character of service, assigned separation reason code, whether a veteran is out of the service); (2) medical records containing specific information regarding a veteran's physical disability (e.g., blindness, paraplegic condition, loss of limbs) which is used to determine eligibility and need for specially adapted housing. Adjudication records relating to: (a) Medical determinations by the VA that a veteran is eligible and needs specially adapted housing; or (b) VA determinations on whether a veteran who has received an other than honorable discharge should be eligible for VA credit assistance benefits; (3) applications for certificates of eligibility (these applications generally contain information from a veteran's military service records except for character of discharge); (4) applications for FHA veterans' low-downpayment loans (these applications generally contain information from a veteran's military service records including whether or not a veteran is in the service); (5) applications for a guaranteed or direct loan, applications for release of liability, applications for substitutions of VA entitlement and applications for specially adapted housing (these applications generally contain information relating to employment, income, credit, personal data; e.g., social security number, marital status, number and identity of dependents; assets and liabilities at financial institutions, profitability data concerning business of self-employed individuals, information relating to an individual veteran's loan account and payment history on a VA-guaranteed, direct, or vendee loan on an acquired property, medical information when specially adapted housing is sought, and information regarding whether a veteran owes a debt to the United States) and may be accompanied by other supporting documents which contain the above information; (6) applications for the purchase of a VA acquired property (e.g., vendee loans--these applications generally contain personal and business information on a prospective purchaser such as social security number, credit, income, employment history, payment history, business references, personal information and other financial obligations and may be accompanied by other supporting documents which contain the above information); (7) loan instruments including deeds, notes, installment sales contracts, and mortgages; (8) property management information; e.g., condition and value of property, inspection reports, certificates of reasonable value, correspondence and other information regarding the condition of the property (occupied, vandalized), and a legal description of the property; (9) information regarding VA loan servicing activities regarding default, repossession and foreclosure procedures, assumability of loans, payment of taxes and insurance, filing of judgments (liens) with State or local authorities and other related matters in connection with active and/or foreclosed loans; and (10) information regarding the status of a loan (i.e., approved, pending or rejected by the VA).

Title 38, United States Code, chapter 3, section 210(c)(1); title 38, United States Code, chapters 21 and 37.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the request of that individual.

2. Any information in this system, except for the name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal, State, local or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation or order issued pursuant thereto.

3. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto, in response to its official request.

4. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local government agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law.

5. Any information in this system, such as the name and address of a veteran or the veteran's spouse, and the property address may be disclosed to credit reporting agencies, companies extending credit, depository institutions, utility companies, investors, insurance companies, governmental agencies, lenders, and employers to enable such parties to provide the VA with information regarding income, credit, assets and liabilities information on applicants, mortgagors, or obligors and to provide the VA with information regarding the status of obligations, payment records, employment histories, assets for closing fees and other assets and liabilities.

6. Information on the application for a guaranteed or direct loan, and on the certificate of reasonable value and information verifying an applicant's employment and/or amount of deposit in a financial institution, may be disclosed to a prospective mortgagee proposing to make a guaranteed loan on the veteran applicant's behalf.

7. Information regarding the status (i.e., approved, pending, or rejected) or an application for VA loan benefits or for a loan account and the reasons for rejection may be disclosed to a prospective lender. When the VA has rejected a loan application, the information disclosed may include information from another VA record such as a debt which the veteran owes to the United States or information from a claims file relating to a veteran's ability to discharge an obligation.

8. Only the fact that the loan has been approved, rejected, or is pending may be disclosed to a seller, a spouse of a seller, or the spouse of the veteran-applicant who is an actual party in interest to the guaranteed, insured or direct loan transaction in order to inform such party of the status of the loan application. However, a statement of the reason for rejection of the loan may also be provided to the spouse of the veteran-applicant, if the spouse is a joint applicant for the loan or would be jointly liable on the loan.

9. Any information on the application for a VA-acquired property (vendee loan) concerning a prospective purchaser may be disclosed to a broker aiding in the sale of a VA-acquired property in order that the broker may assist the prospective purchaser in completing his or her application. Such information may include an explanation of specific loan document discrepancies or specific information on income or credit.

10. Information on the status (i.e., the payment record), of a guaranteed, insured, direct, or VA-acquired property (vendee) loan account(s) may be disclosed to persons or organizations extending credit or providing services or other benefits to the obligor, or persons or organizations considering the extension of credit, services or other benefits to the potential obligor provided the name, address, or other information necessary to identify the obligor is given beforehand by the requester.

11. The name and address of an obligor (e.g., an individual who has obtained a VA-guaranteed loan or purchased a VA property), and the account number (insurance, tax number) may be disclosed to hazard insurance companies and real estate taxing authorities to obtain billings and to authorize payments of such obligations as they become due from the direct and vendee (portfolio) loan escrow accounts.

12. Information as to the acceptability or nonacceptability of a prospective purchaser preparing to assume liability to VA under a mortgage contract or of a prospective purchaser preparing to substitute loan guaranty entitlement for the party presently obligated may be disclosed to parties presently liable on a VA loan, loan guaranty or loan insurance agreement. In addition, the acceptability or nonacceptability of a transferee owner may be disclosed to parties presently liable on a VA loan, loan guaranty or loan insurance agreement, for the purpose of releasing the original veteran borrower, or a veteran who substituted loan guaranty entitlement for the original veteran borrower, from liability. The reason(s) for nonacceptability of the prospective loan assumer or transferee or of a purchaser/transferee (e.g. poor credit history, insufficient income and/or debts owed the U.S.) may also be disclosed to parties presently liable on a VA loan, loan guaranty or loan insurance agreement in order to inform the parties presently liable of the reasons for the nonacceptability.

13. Information on the default status of a delinquent loan account (e.g., amount of payments in arrears, number of months in arrears, what efforts the VA has taken to service the loan, condition of the property, repayment schedule, and total amount of debt) may be disclosed to prior owners remaining contingently liable for indebtedness to permit prior owners to take necessary action(s) to protect their interest where loan liquidation is indicated and to prevent a possible debt to the Government which may be placed against the prior owner.

14. Any information in this system such as current obligor, prior obligors, debt outstanding, current credit reports containing an obligor's name and address and date(s) and cause of the default, and loan account information (e.g., loan account number, property condition, legal description, date loan issued, amount of loan and amount in arrears) may be disclosed to the U.S. Department of Justice or United States Attorneys in order for the Department of Justice of U.S. Attorneys to liquidate a defaulted loan by judicial process, and take title on the foreclosed property in accordance with State law. Any information in this system may also be disclosed to the Department of Justice or U.S. Attorneys in order for the foregoing parties to prosecute or defend litigation involving or pertaining to the United States. Any relevant information in this system may also be disclosed to other Federal agencies upon their request in connection with review of administrative tort claims and potential tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672, the Military Claims Act, 10 U.S.C. 2733, and other similar claims statutes.

15. Loan account information (e.g., loan account number, property condition, legal description of property, date loan issued, amount of loan and amount in arrears), current credit reports containing name and address of an obligor and the cause and date(s) of default may be disclosed to the General Accounting Office (GAO) to enable the GAO to pursue necessary collection activities and obtain a judgment against the obligor(s).

16. Any information in a direct or vendee loan account record may be disclosed to active investors purchasing or considering the purchase of VA direct or vendee loans from VA or from a previous investor. Such information will be furnished to active prospective investors to provide a basis for their submitting an offer to purchase loans and to actual investors in order that they may establish loan accounts on purchased loans. Such information may also be disclosed to financial advisors to assist VA in developing strategies for marketing these loans, and to investment bankers, bond rating agencies, other government agencies, private mortgage insurance companies, bonding companies, master servicers, and others involved in the marketing or sale of vendee loans, including legal counsel, accountants and auditors for such entities.

17. Any information in this system, including the nature and amount of a financial obligation, may be disclosed to a debtor's Federal employing agency or commanding officer so that the debtor- employee may be counseled by his or her Federal employer or commanding officer and to assist in the collection of unpaid financial obligations owed the U.S. This purpose is consistent with 5 U.S.C 5514, 4 CFR 102.5, and section 206 of Executive Order 11222 of May 8, 1965 (30 FR 6469).

18. Any information in this system may be disclosed to a guardian ad litem in relation to the guardian's representation of a veteran in any legal or administrative proceeding so long as the disclosure is for the benefit of the veteran.

19. Any information in this system such as available identifying information regarding the debtor(s), name of debtor(s) spouse, social security account number of debtor(s), VA insurance number(s), VA loan number(s), VA claim number(s), place(s) of birth and date(s) of birth of debtor(s), name(s) and address(es) of debtor(s) employer(s), and dates of employment may be disclosed to other Federal agencies, State probate courts, State drivers license bureaus, and State automobile title and license bureaus in order for the VA to obtain current name, address, locator and credit report assistance in the collection of unpaid financial obligations owed to the United States. This purpose is consistent with the Federal Claims Collection Act of 1966 (Pub. L. 89- 508, 31 U.S.C. 951-953 and 4 CFR parts 101-105), and the disclosure is authorized by 38 U.S.C. 3301(b)(6).

20. Any information in this system, such as a loan applicant's or a defaulted obligor's (i.e., a defaulted obligor is an individual that has not performed one or more of the required obligations under the terms of the loan instruments) name and address, property address, balance of debt, amount of debt owed per month, loan account number, credit reports and reasons for notice to quit, may be disclosed to fee attorneys, fee appraisers, management brokers, process servers, subordinate lienholders, title companies, and abstractors for the purposes of loan approval or loan termination of direct or vendee loans by judicial or nonjudicial means, to obtain possession of VA property in cases of default or Foreclosure to issue and post Demands for Possession or Notices to Quit, to file judgments (liens) in accordance with State and local law and to carry out all other necessary VA program responsibilities. VA fee attorneys may disclose record information contained therein to title insurance companies and title agents, for Trustee's sale advertisements, and to subordinate lienholders. This disclosure authority by VA fee attorneys is consistent with 38 U.S.C. 3301 (e) and (h).

21. An obligor's social security number and other information regarding the filing of judgments (liens) may be disclosed to appropriate State and local authorities in order to conform to State and local law requirements and to assist the VA and State and local authorities in identifying VA judgment debtors on State and local judgment records. This disclosure is consistent with 38 U.S.C. 3301(b)(6).

22. Any information in this system relating to the adjudication of incompetency of a veteran either by a court of competent jurisdiction or by the VA may be disclosed to a lender or prospective lender extending credit or proposing to extend credit on behalf of a veteran in order for the VA to protect incompetent veterans from entering into unsound financial transactions which might deplete the resources of the veteran and to protect the interests of the Government giving credit assistance to a veteran.

23. Any information in this system may be disclosed to a Federal Grand jury, a Federal court or a party in litigation, or a Federal agency or party to an administrative proceeding being conducted by a Federal agency, in order for the VA to respond to and comply with the issuance of a Federal subpoena.

24. Any information in this system may be disclosed to a State or municipal court or a party in litigation; or to a State or municipal grand jury, a State or municipal administrative agency functioning in a quasi-jurdicial capacity or a party to a proceeding being conducted by such agency, in order for the VA to respond to and comply with the issuance of a State or municipal subpoena; provided, that any disclosure of claimant information made under this routine use must comply with the provisions of 38 CFR 1.511.

25. Any information concerning the veteran's indebtedness to the United States by virtue of a person's participation in a benefits program administered by the VA, including personal information obtained from other Federal agencies through computer matching programs, may be disclosed to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of any amount owed to the United States. Purposes of these disclosures may be (a) to assist the VA in collection of title 38 benefit overpayments, overdue indebtedness, and/or costs of services provided individuals not entitled to such services, and (b) to initiate legal actions for prosecuting individuals who willfully or fraudulently obtained title 38 benefits without entitlement. This disclosure is consistent with 38 U.S.C. 3301(b)(6).

26. The name and address of an obligor, other information as is reasonably necessary to identify such person, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning such person's delinquency or default on a loan made or guaranteed by the VA may be disclosed to a consumer reporting agency for purposes of reporting delinquencies, defaults and indebtedness and assisting in the collection of such indebtness, provided that the provisions of 38 U.S.C. 3301(g)(4) have been met.

27. Any information in this system, except for the name and address of a veteran, may be disclosed to a Federal agency in order for the VA to obtain information relevant to the making, insuring, or guaranteeing of a loan under chapter 37 of title 38 U.S.C. The name and address of a veteran may be disclosed to a Federal agency under this routine use if they are required by the Federal agency to respond to the VA inquiry.

28. The name of a veteran, or other beneficiary, other information as is reasonably necessary to identify such individual, and any other information concerning the individual's indebtedness by virtue of a person's participation in a benefits program administered by the VA, may be disclosed to the Treasury Department, Internal Revenue Service, for the collection of Title 38, U.S.C. benefit overpayments, overdue indebtedness, and/or costs of services provided to an individual not entitled to such services, by the withholding of all or a portion of the person's Federal income tax refund.

29. Any information in the system may be disclosed to the Department of the Treasury, Internal Revenue Service, where required by law, including the borrower's name, address, social security or taxpayer identification number, amount of interest paid, and informaiton relating to any abandonment or foreclosure of a property.

30. Any information on a property which has been acquired by VA such as loan number, property address, property survey, title limitations/policy, termite inspections, existing warranties, repairs made by VA and items still requiring repair, and dues payable to and services provided by homeowner or condominum associations may be disclosed to prospective purchasers and their representatives in order to assist VA in the timely disposal of its acquired preperties. Such information may include the name of the purchaser and purchaser's sales agent, price and terms of the successful offeror's, along with the reason(s) for selecting such offer over any other competing offer.

31. Any information in the system may be disclosed to the lender or holder of a VA guaranteed loan, or their attorneys, in support of a decision by VA to reject a claim under guaranty, demand reimbursement for a claim previously paid, or in the course of settlement negotiations. When a demand for reimbursement will be made against a party other than the lender or holder, such as the real estate broker, fee appraiser or seller of the property, the information may be disclosed to the party and its attorneys.

32. The social security number and loan account number of all persons with VA-guaranteed and portfolio loans which fall under one of the following categories: (a) The accounts are not current; (b) there has been a foreclosure; or (c) the Department has paid a claim, may be provided to the Department of Housing and Urban Development for inclusion in its Credit Alert Interactive Voice Response System (CAIVRS). Information included in this system may be disclosed to all participating agencies and lenders who participate in the agencies' programs to enable them to verify information provided by new loan applicants and evaluate the creditworthiness of applicants. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

33. Relevant loan guaranty record information may be disclosed to any individual, organization, or other entity with whom VA has a contract or agreement under which that entity will perform services to assist VA in the administration of the Loan Guaranty Program. The information that may be disclosed under this routine use is limited to that which is necessary to permit the contractor to perform the services required under the contract or agreement.

34. Any information in this system may be disclosed to an active VA lender, lender's agent, mortgage broker, or otherprogram participant in response to a request from that individual or entity if that information is necessary in connection with the origination of a VA-guaranteed Interest Rate Reduction Refinancing Loan (RRL). In order to obtain to information under this routine use, the party requesting the information must establish the fact that it is a participant in the VA home loan program through the use of a VA lender identification number. The requester must also provide the veteran's name and social security number and the month and eyar of the loan being refinanced or the 12-digit VA loan number.

35. Any information in this system may be disclosed to a servicemember's commanding officer or designee if VA determines that sharing this information is necessary in order to reach a servicemember who has otherwise not responded to VA to attempt to assist in curing a default or resolving a foreclosure or eviction of a VA-guaranteed or direct loan.

Storage:

VA-guaranteed, insured, direct and vendee loan records are maintained in individual folders on paper documents, on automated storage media (i.e, microfilm, microfiche, magnetic tape and magnetic disks), and on electronically scanned documents.

All VA loan applications and loan records are indexed by name and VA loan file number in the local VA office having jurisdiction over the geographic area in which the property is located. Automated records are indexed for statistical purposes by a file number, field station and county code number and lender identification number. However, an individual loan record in automated format may only be retrieved by name or loan number. Records in CAIVRS may only be retrieved by social security number.

Access to VA working spaces and record file storage areas is restricted to VA employees on a "need to know" basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service or other VA security personnel. Loan and property security instruments are stored in separate fire resistant locked files. VA employee loan file records and other files which, in the opinion of VA, are, or may become, sensitive are stored in separate locked files.

Information in the system may be accessed from authorized terminals in the VA telecommunications network. Terminal locations include VA Central Office and regional offices. Access to terminals is by authorization controlled by the site security officer. The security officer is assigned responsibility for privacy-security measures, especially for review of violations logs, information logs and control of password and badge readers and audible alarms. Electronic keyboard locks are activated on security errors. Also, beginning in 1986, sensitive files were established using the social security numbers of the VA Veterans Benefits Administration employees and other prominent individuals to prevent indiscriminate access to their automated records.

At the data processing centers, identification of magnetic tape and disks containing data is rigidly enforced using labeling techniques. Automated storage media which are not in use are stored in tape libraries which are secured in locked rooms. Access to programs is controlled at three levels: Programming, auditing, and operations. Access to data processing centers is generally restricted to center employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted.

Access to the data processing center where HUD maintains CAIVRS is generally restricted to center employees, authorized HUD employees and authorized subcontractors. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted.

Files in CAIVRS use social security numbers as identifiers. Access to information in files is restricted to authorized employees of participating agencies and authorized employees of lenders who participate in the agencies' programs. Access is controlled by agency distribution of passwords. Information in the system may be accessed by use of a touchtone telephone by authorized agency and lender employees on a "need to know" basis.

A VA-approved, active VA lender, lender's agent, mortgage broker, or other program participant may botain access to the computerized VA system maintaining this system of records for the purpose of learning whether an applicant for a VA-guaranteed loan under the following circumstances. The lender must log on to the system using the unique 10-digit lender identification number assigned by VA and a unique password. The lender also must enter information identifying the specific veteran for whom the IRRRL lender seeks information, including the veteran's name, social security number and other identifying information, such as the 12-digit loan number for the veteran's current VA- guaranteed loan or the month and year of the loan.

Records in individualized case folder concerning active VA guaranteed or insured loans are retained at the VA servicing facility for up to three years and forwarded to the Federal Archives and Records Center (FARC) where they are retained up to thirty-three years and then destroyed. Active direct loan case folders are retained at the VA servicing facility until the case becomes inactive, e.g., existing loan balance is paid in full.

Inactive guaranteed and direct loan folders are forwarded to the FARC annually, retained for five years and then destroyed. Vendee loan records being maintained in case folders are kept at the VA servicing facility until five years after the case becomes inactive and are then destroyed. Specially adapted housing (SAH) records are maintained either at VA Central Office (VACO) and/or the VA servicing facility. Once SAH records are closed, SAH records at VACO are maintained for one year and then sent to the FARC where they are retained for thirty years and then destroyed. Closed SAH records maintained at regional offices are maintained for ten years and then destroyed. Generally, automated records (e.g., computer lists, discs, and microfiche) are maintained for up to five years and then destroyed. Destruction of records is accomplished by shredding, burning, and/or erasure.

File information for CAIVRS is provided to HUD by VA on magnetic tape. After information from the tape has been read into the computer the tape is returned to VA for updating. HUD does not keep separate copies of the tape.

Director, Loan Guaranty Service (26), VA Central Office, Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier or wants to determine the contents of such record should submit a written request or apply in person to the nearest Veterans Administration regional office or center. Addresses for VA regional offices and centers may be found in VA Appendix 1 at the end of this document. All inquiries must reasonably identify the benefit or system of records involved, i.e.; Loan Guaranty. Inquiries should include the individual's full name, VA file number or loan number. If the VA file or loan number is not available, then as much of the following information as possible should be forwarded: Address of the property secured by a VA-guaranteed, insured or portfolio loan, owner or former owners of the property, name of lender and lender's loan number, branch of service, service number or social security number. Some of the records in this system are exempt from the notification requirement under 5 U.S.C. 552a(k). To the extent that records in this system of records are not subject to exemption, they are subject to notification. A determination as to whether an exemption applies shall be made at the time a request for notification is received.

An individual who seeks access to or wishes to contest records maintained under his or her name in this system may write, call or visit the nearest Veterans Administration regional office or center. Address locations are listed in VA Appendix 1 at the end of this document. However, some of the records in this system are exempt from the record access and contesting requirements under 5 U.S.C. 552a(k). To the extent that records in this system of records are not subject to exemption, they are subject to access and contest. A determination as to whether an exemption applies shall be made at the time a request for access or contest is received.

(See Record access procedures above.)

The VA records in this system are obtained from the applicant, lenders, brokers and builder/sellers, an applicant's credit sources, depository institutions and employers, hazard insurance companies, taxing authorities, title companies, fee personnel, other VA records, other Federal, State and local agencies, and other parties of interest involving VA-guaranteed, insured, vendee or direct loans or specially adapted housing.

The Administrator of Veterans Affairs has exempted this system of records from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(k)(2).

5 U.S.C. 552a(c)(3)

5 U.S.C. 552a(d)

5 U.S.C. 552a(e)(1)

5 U.S.C. 552a(e)(4)(G), (H) and (I)

5 U.S.C. 552a(f)

Reasons for exemptions: The exemption of information and material in this system fo records is necessary in order to accomplish the law enforcement functions of the Loan Guaranty Service to prevent subjects of internal audit investigations for potential fraud and abuse in the VA Loan Guaranty Program from frustrating the investigatory process, to fulfill commitments made to protect the confidentiality of sources, to maintain access to sources of information and to avoid endangering these sources.

Records are maintained at each of the VA health care facilities and in the Voluntary Service System (VSS). Active records are retained at the facility where the individual has volunteered to assist the administrative and professional personnel and in the VSS. Basic information for all inactive records is retained at the facility where the volunteer worked and in the VSS. VSS is a Web-based volunteer timekeeping package currently housed on Web-servers at Silver Spring, MD.

All volunteers, regularly-scheduled and occasional, including non-affiliated and members of voluntary service organizations; welfare, service, veterans, fraternal, religious, civic, industrial, labor, and social groups or clubs which voluntarily offer the services of their organizations and/or individuals to assist with the provision of care to patients, either directly or indirectly, through VA Voluntary Service under Title 38, United States Code, Section 513.

Administrative records containing personal information about the individual making application to become a volunteer in a VA health care facility, VA regional office, or VA cemetery. Information relating to the individual membership in service organizations, qualifications, restrictions and preferences of duty and availability to schedule time of service. Training records pertaining to the volunteer's service will also be maintained for all active volunteers at the facility where the volunteer works. Medical records of active volunteers will be maintained in the facility's Employee Health office. Fingerprint and background investigation records will be maintained by the local facility's office that handles those investigations.

Title 38, United States Code, Section 513.

The records and information are used for tracking the number of Regularly Scheduled (RS) Volunteers, Occasional Volunteers, and student volunteers; to produce statistical and managerial reports on the number of hours and visits of all volunteers each month; and to present volunteers with certificates of appreciation for service.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Any information in this system, except the name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal, State, local or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

2. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto, in response to its official request.

3. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law.

4. Volunteer records may be used to confirm volunteer service, duty schedule, and assignments to service organizations, Bureau of Unemployment, insurance firms, office of personnel of the individual's full-time employment; to assist in the development of VA history of the volunteer and his/her assignments; and to confirm voluntary hours for on-the-job accidents, and for recognition awards.

5. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

6. Disclosure may be made to the National Archives and Records Service, General Services Administration, in records management inspections conducted under authority of Title 44 United States Code.

7. VA may disclose information from this system of records to the Department of Justice (DOJ), either on VA's initiative or in response to DOJ's request for the information, after either VA or DOJ determines that such information is relevant to DOJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DOJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

8. Relevant information may be disclosed to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement. VA occasionally contracts out certain of its functions when this would contribute to effective and efficient operations.

9. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

10. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Digital information of all active volunteers is maintained in Silver Spring, Maryland, on secured Web-servers. Paper documents for all active volunteers are maintained at the individual VA facilities where the volunteer has donated time. Computer files containing such basic information as name, address, date of birth, volunteer assignments, hours/years volunteered, and award information are retained for all volunteers, either active or inactive, at the VA facility where the volunteer worked.

(a) All volunteer records are filed by unique identification numbers within the VA's Voluntary Service System, (VSS), and are cross-referenced under the organization(s) they represent.

(b) Medical records are stored by name and SSN in the VISTA patient files.

Physical Security:

1. Access to VA working space and medical record storage areas and the Web-servers in Silver Spring, Maryland, is restricted to VA employees on a "need to know" basis. Generally, VA file areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service. Volunteer file records of sensitive medical record files are stored in separate locked files.

2. Strict control measures are enforced to ensure that access to and disclosure from all records including electronic files and volunteer specific data elements stored in the VSS are limited to VAVS employees whose official duties warrant access to those files. The automated record system recognizes authorized users by keyboard entry of a series of unique passwords. Once the employee is logged onto the system, access to files is controlled by discreet menus which are assigned by the VSS package local system administrator based upon the employee's demonstrated need to access the data to perform the employee's assigned duties. A number of other security measures are implemented to enhance security of electronic records (automatic timeout after short period of inactivity, device locking after pre-set number of invalid logon attempts, etc.). Employees are required to sign a user access agreement acknowledging their knowledge of confidentiality requirements, and all employees receive annual training on information security. Access is deactivated when no longer required for official duties. Recurring monitors are in place to ensure compliance with nationally and locally established security measures.

3. On-line data resides on VSS Web-servers in Silver Spring, Maryland, that is highly secured.

4. Any sensitive information that may be downloaded or printed to hard copy format is provided the same level of security as the electronic records. All paper documents and informal notations containing sensitive data are shredded prior to disposal.

5. All new VAVS employees receive initial information security training, and refresher training is provided to all employees on an annual basis.

1. The individual volunteer's record of service is maintained by the Department of Veterans Affairs health care facility, as long as he or she is living and actively participating in the VAVS program. VSS maintains minimum information on all volunteers indefinitely. These minimum records include the volunteer's name, address, date of birth, telephone number, next of kin information, assignments worked, hours and years of service and last award received.

2. Depending on the record medium, records are destroyed by either shredding or degaussing. Summary reports and other output reports are destroyed when no longer needed for current operation. Regardless of record medium, no records will be retired to a Federal records center.

Official responsible for policies and procedures: Director, Voluntary Service Office (10C2), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Official maintaining the system: dNovus Contractor, Jay Singh, VHA Oakland OIFO, 1301 Clay Street, Suite 1350N, Oakland, CA 94612.

Individuals seeking information concerning the existence and content of their service records must submit a written request or apply in person to the VA health care facility where their voluntary service was accomplished. All inquiries must reasonably identify, to the VA facility, the portion of the volunteer's service record they want information about and the approximate dates of service, in order to receive that information. Inquiries should include the volunteer's name, organization represented, date of birth, and last address while serving as a volunteer to the VA.

Volunteers, dependents, survivors or duly authorized representatives seeking information regarding access to and contesting of VA Voluntary Service records may contact the Voluntary Service office at the Department of Veterans Affairs health care facility where the individual was a volunteer worker.

(See Record Access Procedures above.)

Information in this system of records may be provided by the volunteer, his/her family, civic and service organization, "Patient Medical Records--VA" (24VA136) system of records, and Voluntary Service at the health care facility where volunteer worked.

Records are maintained at VA regional offices, VA centers, the VA Records Management Center (RMC), St. Louis, Missouri, the Data Processing Center at Hines, Illinois, the Corporate Franchise Data Center in Austin, Texas, the Information Technology Center at Philadelphia, PA., and Terremark Worldwide, Inc., Federal Hosting Facilities in Culpepper, VA, and Miami FL. Active records are generally maintained by the regional offices having jurisdiction over the domicile of the claimant. Active educational assistance records are generally maintained at the regional processing office having jurisdiction over the educational institution, training establishment, or other entity where the claimant pursues or intends to pursue training.

The automated individual employee productivity records are temporarily maintained at the VA data processing facility serving the office in which the employee is located. The paper record is maintained at the VA regional office having jurisdiction over the employee who processed the claim. Records provided to the Department of Housing and Urban Development (HUD) for inclusion on its Credit Alert Interactive Voice Response System (CAIVRS) are located at a data processing center under contract to HUD at Lanham, Maryland. Address locations of VA facilities are listed in the VA Appendix I and are also listed at http://www2.va.gov/directory/guide/home.asp?isFlash=1.

The following categories of individuals will be covered by this system.

1. Veterans who have applied for compensation for service-connected disability under 38 U.S.C. chapter 11.

2. Veterans who have applied for nonservice-connected disability under 38 U.S.C. chapter 15.

3. Veterans entitled to burial benefits under 38 U.S.C. chapter 23.

4. Surviving spouses and children who have claimed pension based on nonservice-connected death of a Veteran under 38 U.S.C. chapter 15.

5. Surviving spouses and children who have claimed death compensation based on service-connected death of a Veteran under 38 U.S.C. chapter 11.

6. Surviving spouses and children who have claimed dependency and indemnity compensation for service-connected death of a Veteran under 38 U.S.C. chapter 13.

7. Parents who have applied for death compensation based on service-connected death of a Veteran under 38 U.S.C. chapter 11.

8. Parents who have applied for dependency and indemnity compensation for service-connected death of a Veteran under 38 U.S.C. chapter 13.

9. Individuals who applied for educational assistance benefits administered by VA under title 38 U.S.C.

10. Individuals who applied for educational assistance benefits maintained by the Department of Defense (DoD) under 10 U.S.C. that are administered by VA.

11. Veterans who apply for training and employers who apply for approval of their programs under the provisions of the Emergency Veterans' Job Training Act of 1983, Public Law 98-77.

12. Any VA employee who generates or finalizes adjudicative actions using the Benefits Delivery Network (BDN) or the Veterans Service Network (VETSNET) computer processing systems.

13. Veterans who apply for training and employers who apply for approval of their programs under the provisions of the Service Members Occupational Conversion and Training Act of 1992, Public Law 102-484.

14. Representatives of individuals covered by the system.

The record, or information contained in the record, may include identifying information (e.g., name, address, social security number); military service and active duty separation information (e.g., name, service number, date of birth, rank, sex, total amount of active service, branch of service, character of service, pay grade, assigned separation reason, service period, whether Veteran was discharged with a disability, reenlisted, received a Purple Heart or other military decoration); payment information (e.g., Veteran payee name, address, dollar amount of readjustment service pay, amount of disability or pension payments, number of nonpay days, any amount of indebtedness (accounts receivable) arising from title 38 U.S.C. benefits and which are owed to the VA); medical information (e.g., medical and dental treatment in the Armed Forces including type of service-connected disability, medical facilities, or medical or dental treatment by VA health care personnel or received from private hospitals and health care personnel relating to a claim for VA disability benefits or medical or dental treatment); personal information (e.g., marital status, name and address of dependents, occupation, amount of education of a Veteran or a dependent, dependent's relationship to Veteran); education benefit information (e.g., information arising from utilization of training benefits such as a Veteran trainee's induction, reentrance or dismissal from a program or progress and attendance in an education or training program); applications for compensation, pension, education and vocational rehabilitation benefits and training which may contain identifying information, military service and active duty separation information, payment information, medical and dental information, personal and education benefit information relating to a Veteran or beneficiary's incarceration in a penal institution (e.g., name of incarcerated Veteran or beneficiary, claims file number, name and address of penal institution, date of commitment, type of offense, scheduled release date, Veteran's date of birth, beneficiary relationship to Veteran and whether Veteran or beneficiary is in a work release or half-way house program, on parole or has been released from incarceration).

The VA employee's BDN, VETSNET or VBMS identification numbers, the number and kind of actions generated and/or finalized by each such employee, the compilation of cases returned for each employee.

Title 10 U.S.C. chapters 106a, 510, 1606 and 1607 and Title 38, U.S.C., section 501(a) and Chapters 11, 13, 15, 18, 23, 30, 31, 32, 33, 34, 35, 36, 39, 51, 53, and 55.

VA gathers or creates these records in order to enable it to administer statutory benefits programs to Veterans, Servicemembers, reservists, and their spouses, surviving spouses, and dependents, who file claims for a wide variety of Federal Veteran's benefits administered by VA. See the statutory provisions cited in "Authority for maintenance of the system."

1. The record of an individual who is covered by this system or records may be disclosed to a Member of Congress, or staff person acting for the member when, the member or staff person requests the record on behalf of and at the written request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: The hiring, retention or transfer of an employee; the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of Veterans will only be made with the Veteran's prior written consent.

3. Any information in this system may be disclosed to a State or local agency, upon official request, to the extent that it is relevant and necessary to that agency's decision on: The hiring, retention or transfer of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by that agency including eligibility for unemployment compensation; provided, that if the information pertains to a Veteran, the name and address of the Veteran will not be disclosed unless the name and address is provided first by the requesting State or local agency.

4. VA may disclose on its own initiative any information in this system, except the names and home addresses of individuals, that are relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation or order.

5. VA may disclose on its own initiative the names and addresses of individuals, that are relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal agency charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute, regulation, rule or order.

6. The name and address of an individual, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law.

7. The name, address, entitlement code (e.g., compensation or pension), period(s) of service, sex, and date(s) of discharge may be disclosed to any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under title 38 U.S.C. Disclosures may be in the form of a computerized list.

8. Any information in this system, except for the name and address of an individual, may be disclosed to a Federal agency in order for VA to obtain information relevant to the issuance of a benefit under title 38 U.S.C. The name and address of an individual may be disclosed to a Federal agency under this routine use if they are required by the Federal agency to respond to the VA inquiry.)

9. Any information in this system may be disclosed in connection with any proceeding for the collection of an amount owed to the United States by virtue of a person's participation in any benefit program administered by VA when in the judgment of the Secretary, or official generally delegated such authority under standard agency delegation of authority rules (38 CFR 2.6), such disclosure is deemed necessary and proper, in accordance with 38 U.S.C. 5701(b)(6).

10. The name and address of an individual, and other information as is reasonably necessary to identify such individual, may be disclosed to a consumer reporting agency for the purpose of locating the individual, or obtaining a consumer report to determine the ability of the individual to repay an indebtedness to the United States arising by virtue of the individual's participation in a benefits program administered by the VA, provided that the requirements of 38 U.S.C. 5701(g)(2) have been met.

11. The name and address of an individual, and other information as is reasonably necessary to identify such individual, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the individual's indebtedness to the United States by virtue of the person's participation in a benefits program administered by VA, may be disclosed to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the provisions of 38 U.S.C. 5701(g)(4) have been met.

12. Any information in this system, including available identifying information regarding the debtor, such as name of debtor, last known address of debtor, VA insurance number, VA loan number, VA claim number, place of birth, date of birth of debtor, name and address of debtor's employer or firm and dates of employment may be disclosed, under this routine use, except to consumer reporting agencies, to a third party in order to obtain current name, address, locator, and credit report in connection with any proceeding for the collection of an amount owed to the United States by virtue of a person's participation in any VA benefit program when in the judgment of the Secretary such disclosure is deemed necessary and proper. This purpose is consistent with the Federal Claims Collection Act of 1966 (Pub. L. 89-508, 31 U.S.C. 951-953 and 4 CFR parts 101-105 and 38 U.S.C. 5701(b)(6)).

13. Any information in this system, including the nature and amount of a financial obligation, may be disclosed to a debtor's employing agency or commanding officer so that the debtor-employee may be counseled by his or her Federal employer or commanding officer and to assist in the collection of unpaid financial obligations owed VA.

14. Payment information may be disclosed to the Department of the Treasury, in accordance with its official request, to permit delivery of benefit payments to Veterans or other beneficiaries.

15. Medical information may be disclosed in response to a request from the superintendent of a State hospital for psychotic patients, a commissioner or head of a State department of mental hygiene, or a head of a State, county or city health department or any fee basis physician or sharing institution in direct connection with authorized treatment for a Veteran, provided the name of the individual to whom the record pertains is given and the information will be treated as confidential, as is customary in civilian professional medical practice.

16. The name, address, VA file number, effective date of compensation or pension, current and historical benefit pay amounts for compensation or pension, service information, date of birth, competency payment status, incarceration status, and social security number of Veterans and their surviving spouses may be disclosed to the following agencies upon their official request: DoD; Defense Manpower Data Center; Marine Corps; Department of Homeland Security; Coast Guard; Public Health Service; National Oceanic and Atmospheric Administration and Commissioned Officer Corps in order for these departments and agencies and VA to reconcile the amount and/or waiver of service, department and retired pay. These records may also be disclosed as a part of an ongoing computer- matching program to accomplish these purposes. This purpose is consistent with 10 U.S.C. 12316, 38 U.S.C. 5304 and 38 U.S.C. 5701.

17. The amount of pension, compensation, dependency and indemnity compensation, educational assistance allowance, retirement pay and subsistence allowance of any individual identified to VA may be disclosed to any person who applies for such information.

18. Identifying, personal, payment and medical information may be disclosed to a Federal, State, or local government agency at the request of a Veteran in order to assist the Veteran and ensure that all of the title 38 U.S.C. or other benefits to which the Veteran is entitled are received. This information may also be disclosed upon the request from a Federal agency, or to a State or local agency, provided the name and address of the Veteran is given beforehand by the requesting agency, in order to assist the Veteran in obtaining a non-title 38 U.S.C. benefit to which the Veteran is entitled. These records may also be disclosed as part of an ongoing computer-matching program to accomplish this purpose.

19. Any information in this system, which directly affects payment or potential payment of benefits to contesting claimants, including parties claiming an apportioned share of benefits, may be coequally disclosed to each affected claimant upon request from that claimant in conjunction with the claim for benefits sought or received.

20. Any information in this system, such as identifying information, nature of a claim, amount of benefit payments, percentage of disability, income and medical expense information maintained by VA which is used to determine the amount payable to recipients of VA income-dependent benefits and personal information, may be disclosed to the Social Security Administration (SSA), upon its official request, in order for that agency to determine eligibility regarding amounts of social security benefits, or to verify other information with respect thereto. These records may also be disclosed as part of an ongoing computer-matching program to accomplish this purpose.

21. VA may disclose an individual's identifying information to an educational institution, training establishment, or other entity which administers programs approved for VA educational assistance in order to assist the individual in completing claims forms, to obtain information necessary to adjudicate the individual's claim, or to monitor the progress of the individual who is pursuing or intends to pursue training at the request of the appropriate institution, training establishment, or other entity administrating approved VA educational programs or at the request of the Veteran.

22. Medical data (excluding the name and address of a Veteran unless the name and address are furnished by the requestor) may be disclosed to epidemiological and other research facilities approved by the Under Secretary for Health to obtain data from those facilities necessary to assist in medical studies on Veterans for VA or for any research purposes determined to be necessary and proper by the Under Secretary for Health.

23. The name(s) and address(es) of a Veteran may be disclosed to another Federal agency or to a contractor of that agency, at the written request of the head of that agency or designee of the head of that agency for the purpose of conducting government research necessary to accomplish a statutory purpose of that agency.

24. Any information in this system relevant to a Veteran's claim such as the name, address, the basis and nature of a claim, amount of benefit payment information, medical information and military service and active duty separation information may be disclosed at the request of the Veteran to accredited service organizations, VA-approved claims agents and attorneys acting under a declaration of representation so that these individuals can aid Veterans in the preparation, presentation and prosecution of claims under the laws administered by VA.

25. Identifying and payment information may be disclosed, upon the request of a Federal agency, to a State or local government agency, to determine a beneficiary's eligibility under programs provided for under Federal legislation and for which the requesting Federal agency has responsibility. These records may also be disclosed as a part of an ongoing computer-matching program to accomplish these purposes. This purpose is consistent with 38 U.S.C. 5701.

26. Any information in this system such as the amount of benefit or disability payments and medical information may be disclosed in the course of presenting evidence to a court, magistrate, or administrative authority, in matters of guardianship, inquests, and commitments, to private attorneys representing Veterans rated incompetent in conjunction with issuance of Certificates of Incompetency, and to probation and parole officers in connection with court-required duties.

27. Any information in this system including medical information, the basis and nature of claim, the amount of benefits and personal information may be disclosed to a VA Federal fiduciary or a guardian ad litem in relation to his or her representation of a Veteran only to the extent necessary to fulfill the duties of the VA Federal fiduciary or the guardian ad litem.

28. Any relevant information (including changes in disability ratings) may be disclosed to the DOJ and United States Attorneys in the defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims and potential tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672, the Military Claims Act, 10 U.S.C. 2733, and other similar claims statutes.

29. Any information in this system including the name, social security number, date of birth, delimiting date and remaining entitlement of VA educational benefits, may be disclosed to the Department of Education (ED) upon its official request, or contractor thereof, for specific use by the ED to validate information regarding entitlement to VA benefits which is submitted by applicants who request educational assistance grants from the ED. The ED or contractor thereof will not use such information for any other purpose. These records may also be disclosed as part of an ongoing computer-matching program to accomplish this purpose.

30. VA may, at the request of the individual, disclose identifying information of an individual who is pursuing or intends to pursue training at an educational institution, training establishment, or other entity which administers programs approved for VA educational assistance in order for the VA to obtain sufficient information necessary to pay that individual or the educational or training establishment the correct monetary amounts in an expeditious manner. However, information will not be provided under this routine use to an educational institution, training establishment, or other entity when the request is clearly an attempt by that establishment to seek assistance in collection attempts against the individual.

31. Identifying information and information regarding the induction, reentrance and dismissal of a disabled Veteran from a vocational rehabilitation program may be disclosed at the request of the Veteran to a VA-approved vocational rehabilitation training establishment to ensure that the trainee receives the maximum benefit from training.

32. Identifying information and information regarding the extent and nature of a Veteran's disabilities with respect to any limitations to be imposed on the Veteran's vocational programs may be disclosed at the request of the Veteran to a VA-approved vocational rehabilitation-training establishment to ensure that the trainee receives the maximum benefit from training.

33. Information regarding the type and amount of training/education received, and the name and address of a Veteran, may be disclosed at the request of a Veteran to local and State agencies and to prospective employers in order to assist the Veteran in obtaining employment or further training.

34. The name, claims file number and any other information relating to a Veteran's or beneficiary's incarceration in a penal institution and information regarding a dependent's right to a special apportionment of the incarcerated individual's VA benefit payment may be disclosed to those dependents who may be eligible for entitlement to such apportionment in accordance with 38 U.S.C. 5313, 5307.

35. The name, claims file number and any other information relating to an individual who may be incarcerated in a penal institution may, pursuant to an arrangement, be disclosed to penal institutions or to correctional authorities in order to verify information concerning the individual's incarceration status. The disclosure of this information is necessary to determine that individual's continuing eligibility as authorized under 38 U.S.C. 5313, 5307. These records may also be disclosed as part of an ongoing computer-matching program to accomplish this purpose.

36. Identifying information, except for the name and address of a Veteran, may be disclosed to a State agency for the purpose of conducting a computer match to determine if income and employment data are being properly reported to VA and to detect the unwarranted payment of benefits under title 38 U.S.C.

37. Identifying, disability, and award (type, amount and reasons for award) information may be released to the Department of Labor (DOL) in order for the DOL to conduct a computer matching program against the Office of Workers' Compensation Programs Federal Employees Compensation File, DOL/ESA-13, published in 46 FR 12357 on February 13, 1981. This match will permit the DOL to verify a person's eligibility for DOL payments as well as to detect situations where recipients may be erroneously receiving concurrent multiple payments from the DOL and VA, to identify areas where legislative and regulatory amendments directed toward preventing overpayments are needed, and to collect debts owed to the United States Government. This matching program is performed pursuant to the DOL Inspector General's authority under Public Law 95-452, section 4(a) to detect and prevent fraud and abuse. This disclosure is consistent with 38 U.S.C. 5701(b)(3).

38. The beneficiary's name, address, social security number and the amount (excluding interest) of any indebtedness waived under 38 U.S.C. 5302, or compromised under 4 CFR part 103 may be disclosed to the Treasury Department, Internal Revenue Service (IRS), as a report of income under 26 U.S.C. 61(a)(12).

39. Identifying information, including social security number, except for the name and address, may be disclosed to a Federal, State, County or Municipal agency for the purpose of conducting computer matches to obtain information to validate the entitlement of an individual, who is receiving or has received Veterans' benefits under Title 10 or Title 38, U.S.C. The name and address of individuals may also be disclosed to a Federal agency under this routine use if required by the Federal agency in order to provide information.

40. Identifying information, including the initials and abbreviated surname, the social security number, the date of birth and coding indicating the category of the individual's records, the degree of disability, the benefit program under which benefits are being paid and the computed amount of VA benefits for a calendar year may be released to the Department of the Treasury, and IRS, in order for IRS to conduct a computer matching program against IRS Forms 1040, Schedule R, Credit for the Elderly and the Permanently and Totally Disabled. This match will permit IRS to determine the eligibility for and the proper amount of Elderly and Disabled Credits claimed on IRS Form 1040, Schedule R. This matching program is performed pursuant to the provisions of Internal Revenue Code Section 7602. This disclosure is consistent with 38 U.S.C. 5701(b)(3).

41. Identifying information, such as name, social security number, VA claim number, date and place of birth, etc., in this system may be disclosed to an employer or school having information relevant to a claim in order to obtain information from the employer or school to the extent necessary to determine that eligibility for VA compensation or pension benefits continues to exist or to verify that there has been an overpayment of VA compensation or pension benefits. Any information in this system also may be disclosed to any of the above-entitled individuals or entities as part of ongoing computer matching programs to accomplish these purposes.

42. The name of a Veteran, or other beneficiary, other information as is reasonably necessary to identify such individual, and any other information concerning the individual's indebtedness by virtue of a person's participation in a benefits program administered by VA, may be disclosed to the Treasury Department, IRS, for the collection of Title 38, U.S.C. benefit overpayments, overdue indebtedness, and/or costs of services provided to an individual not entitled to such services, by the withholding of all or a portion of the person's Federal income tax refund.

43. Veterans' addresses which are contained in this system of records may be disclosed to the Defense Manpower Data Center, upon its official request, for military recruiting command needs, DoD civilian personnel offices' mobilization studies and mobilization information, debt collection, and Individual Ready Reserve Units' locator services.

44. The name, address, VA file number, date of birth, date of death, social security number, and service information may be disclosed to the Defense Manpower Data Center. DoD will use this information to identify retired Veterans and dependent members of their families who have entitlement to DoD benefits but who are not identified in the Defense Enrollment Eligibility Reporting System program and to assist in determining eligibility for Civilian Health and Medical Program of the Uniformed Services benefits. This purpose is consistent with 38 U.S.C. 5701. These records may also be disclosed as part of an ongoing computer-matching program to accomplish this purpose.

45. The name, address, VA file number, social security number, sex of Veteran, date(s) of birth of the Veteran and dependents, current benefit pay amounts for compensation or pension, pay status, check amount, aid and attendance status, Veteran and spouse annual income amounts and type and combined degree of disability will be disclosed to the Department of Health and Human Services. The SSA will use the data in the administration of the Supplemental Security Income payment system as prescribed by Public Law 92-603. These records may also be disclosed as part of an ongoing computer-matching program to accomplish these purposes. This purpose is consistent with 38 U.S.C. 5701.

46. The names and current addresses of VA beneficiaries who are identified by finance centers of individual uniformed services of DoD and the Department of Homeland Security (Coast Guard) as responsible for the payment of Survivor Benefit Plan (SBP) premium payments to be released from this system of records to them upon their official written request for such information for their use in attempting to recover amounts owed for SBP premium payments.

47. This routine use authorizes VA to compile lists of the social security numbers and loan account numbers of all persons with VA-guaranteed and portfolio loans in default, or VA loans on which there has been a foreclosure and the Department paid a claim and provide these records to HUD for inclusion in its CAIVRS. Information included in this system may be disclosed to all participating agencies and lenders who participate in the agencies' programs to enable them to verify information provided by new loan applicants and evaluate the creditworthiness of applicants. These records may also be disclosed as part of an ongoing computer-matching program to accomplish these purposes.

48. Identifying information including social security number, abbreviated surname, first and middle initial, date of birth, sex and claim number, and excluding the full name and address, may be disclosed to the SSA for the purpose of conducting a computer match to obtain information to validate the social security number maintained in VA records.

49. Any information contained in the files of Veterans whose claims were referred to VA Central Office for an advisory opinion concerning their claims that their disabilities were incurred secondary to occupational radiation exposure may be disclosed to the Department of the Navy. The information to be furnished to the Navy would include the medical opinions, dose estimates, advisory opinions, and rating decisions including Veterans' names, addresses, VA claim numbers, social security numbers and medical information. The requested information may be disclosed to the Department of the Navy upon receipt of its official written request for such information for its use in the review and assessment of its occupational radiation exposure controls and training.

50. A Veteran's claims file number and folder location may be disclosed to a court of proper jurisdiction that has issued a garnishment order for that Veteran under 42 U.S.C. 659 through 660.

51. An individual's identifying and payment information may be disclosed to the educational institution, training establishment, or other entity the individual attends (or attended) if that individual received educational assistance from VA based on training at that educational institution, training establishment, or entity. VA will disclose this information to assist the educational institution, training establishment, or other entity in verifying the individual's receipt of VA educational assistance and to assist the individual in applying for additional financial aid (e.g. student loans).

52. The name and address of a prospective, present, or former accredited representative, claims agent or attorney and any information concerning such individual which is relevant to a refusal to grant access privileges to automated Veterans' claims records, or a potential or past suspension or termination of such access privileges may be disclosed to the entity employing the individual to represent Veterans on claims for Veterans benefits.

53. The name and address of a former accredited representative, claim agent or attorney, and any information concerning such individual, except a Veteran's name and home address, which is relevant to a revocation of such access privileges may be disclosed to an appropriate governmental licensing organization where VA determines that the individual's conduct that resulted in revocation merits reporting.

54. A record from this system (other than the address of the beneficiary) may be disclosed to a former representative of a beneficiary to the extent necessary to develop and adjudicate a claim for payment of attorney fees to such representative from past-due benefits under 38 U.S.C. 5904(d) and Public Law 109-461 or to review a fee agreement between such representative and the beneficiary for reasonableness under 38 U.S.C. 5904(c)(2) and Public Law 109-461.

55. Disclosure of tax returns and return information received from the IRS may be made only as provided by 26 U.S.C. 6103 (an IRS confidentiality statute) also covering any IRS tax return information provided as part of an ongoing computer matching program.

56. Where VA determines that there is good cause to question the legality or ethical propriety of the conduct of a person or organization representing a person in a matter before VA, a record from this system may be disclosed, on VA's initiative, to any or all of the following: (1) applicable civil or criminal law enforcement authorities and (2) a person or entity responsible for the licensing, supervision, or professional discipline of the person or organization acting as a representative. Name and home addresses of Veterans and their dependents will be released on VA's initiative under this routine use only to Federal entities.

57. The name and address of a VA beneficiary, and other information as is reasonably necessary to identify such a beneficiary, who has been adjudicated as incompetent under 38 CFR 3.353, may be provided to the Attorney General of the United States or his/her designee, for use by the DOJ in the National Instant Criminal Background Check System mandated by the Brady Handgun Violence Prevention Act, Public Law 103-159.

58. Disclosure may be made to the National Archives and Records Administration (NARA) and General Services Administration in record management inspections and such other activities conducted under Authority of Title 44 U.S.C.

59. VA may disclose information from this system of records to the DOJ, either on VA's initiative or in response to DOJ's request for the information, after either VA or DOJ determines that such information is relevant to DOJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DOJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

60. Disclosure of relevant information may be made to individuals, organizations, public or private agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

61. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud, waste, overpayment, or abuse by individuals in their operations and programs as well as identifying areas where legislative and regulatory amendments directed toward preventing overpayments. These records may also be disclosed as part of an ongoing computer-matching program to accomplish this purpose.

62. VA may on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to the economic or property interests, identity theft or fraud, or harm to the programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

63. VA may disclose information to other Federal Agencies including, but not limited to, identifying information, payment information, and vocational objectives about a Veteran or servicemember who is receiving or has received benefits under the Vocational Rehabilitation program to be used in data analysis and development of performance measures.

64. Any information contained in this system may be disclosed by VA, as deemed necessary, to DoD for use for determinations required by DoD. VA will routinely use the information to conduct medical evaluations needed to produce VA disability ratings and to promulgate subsequent claims for benefits under Title 38 U.S.C.

65. Information in this system (excluding date of birth, social security number, and address) relating to the use of transferred educational assistance benefits may be coequally disclosed to the transferor, i.e., the individual from whom eligibility was derived, and to each transferee, i.e., the individual receiving the transferred benefit. The information disclosed is limited to the two parties in each transferor-transferee relationship, as the transferor may have multiple transferred relationships.

Storage:

The BDN, Virtual VA, Corporate WINRS, VETSNET, and the VBMS are data telecommunication terminal systems. Records (or information contained in records) are maintained on paper documents in claims folders (C-folders), vocational rehabilitation folders, electronic file folders (e.g., VBMS and TIMS Files), and on automated storage media (e.g., microfilm, microfiche, magnetic tape and disks). Such information may be accessed through BDN, Virtual VA, VBMS, Corporate WINRS, and VETSNET terminals. BDN, Virtual VA, Corporate WINRS, VETSNET, and VBMS terminal locations include VA Central Office, regional offices, VA health care facilities, Veterans Integrated Service Network offices, DoD Finance and Accounting Service Centers and the U.S. Coast Guard Pay and Personnel Center. Remote on-line access is also made available to authorized remote sites, representatives of claimants and to attorneys of record for claimants. A VA claimant must execute a prior written consent or a power of attorney authorizing access to his or her claims records before VA will allow the representative or attorney to have access to the claimant's automated claims records. Access by representatives and attorneys of record is to be used solely for the purpose of assisting an individual claimant whose records are accessed in a claim for benefits administered by VA. Information relating to receivable accounts owed to VA, designated the Centralized Accounts Receivable System (CARS), is maintained on magnetic tape, microfiche and microfilm. CARS is accessed through a data telecommunications terminal system at St. Paul, Minnesota.

File folders, whether paper or electronic, are indexed by name of the individual and VA file number. Automated records are indexed by name, VA file number, payee name and type of benefit. Automated records of employee productivity cannot be accessed. At the conclusion of a monthly reporting period, the generated listing is indexed by employee BDN identification number. Records in CAIVRS may only be retrieved by social security number.

1. Physical Security:

(a) Access to working spaces and claims folder file storage areas in VA regional offices and centers is restricted to VA employees on a need-to-know basis. Generally, file areas are locked after normal duty hours and the offices and centers are protected from outside access by the Federal Protective Service or other security personnel. Employee claims file records and claims file records of public figures are stored in separate locked files. Strict control measures are enforced to ensure that access to and disclosure from these claims file records are limited to a need-to-know basis.

(b) Access to BDN, Virtual VA, Corporate WINRS, VETSNET and VBMS data telecommunication networks are by authorization controlled by the site security officer who is responsible for authorizing access to the BDN, Virtual VA, VBMS and VETSNET by a claimant's representative or attorney approved for access in accordance with VA regulations. The site security officer is responsible for ensuring that the hardware, software and security practices of a representative or attorney satisfy VA security requirements before granting access. The security requirements applicable to the access of automated claims files by VA employees also apply to the access of automated claims files by claimants' representatives or attorneys. The security officer is assigned responsibility for privacy-security measures, especially for review of violation logs, information logs and control of password distribution, including password distribution for claimants' representatives.

(c) Access to data processing centers is generally restricted to center employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons provided access to computer rooms are escorted.

(d) Employee production records are identified by the confidential BDN and VETSNET employee identification number, and are protected by management/supervisory personnel from unauthorized disclosure in the same manner as other confidential records maintained by supervisors.

2. BDN, Virtual VA, VETSNET, and VBMS System Security:

(a) Usage of the BDN, Virtual VA, Corporate WINRS, VETSNET, and VBMS systems is protected by the usage of "login" identification passwords and authorized function passwords. The passwords are changed periodically. These same protections apply to remote access users.

(b) At the data processing centers, identification of magnetic tapes and disks containing data is rigidly enforced using labeling techniques. Automated storage media, which are not in use, are stored in tape libraries, which are secured in locked rooms. Access to programs is controlled at three levels: programming, auditing and operations. Access to the data processing centers where HUD maintains CAIVRS is generally restricted to center employees and authorized subcontractors. Access to computer rooms is restricted to center employees and authorized operational personnel through electronic locking devices. All other persons granted access to computer rooms are escorted. Files in CAIVRS use social security numbers as identifiers. Access to information files is restricted to authorized employees of participating agencies and authorized employees of lenders who participate in the agencies' programs. Access is controlled by agency distribution of passwords. Information in the system may be accessed by use of a touch-tone telephone by authorized agency and lender employees on a "need-to-know" basis.

Compensation, pension, and vocational rehabilitation claims file are retained at the servicing regional office until they are inactive for three years, after which they are transferred to the VA RMC in St. Louis, MO, for the life of the Veteran. At the death of the Veteran, these records are sent to a Federal Records Center (FRC), and maintained by the FRC for 60 years, and thereafter become the permanent possession of the NARA to be retained indefinitely as historical documents. Some claims files folders are electronically imaged, in which case the electronic file folder is maintained in the same manner as the claims file folder. Once a file is electronically imaged and established by VA as the official copy of record, its paper contents (with the exception of official legal documents, and service treatment records and other documents that are the property of DoD), are destroyed in accordance with Records Control Schedule VB-1 Part 1 Section XIII, as authorized by NARA.

Vocational Rehabilitation counseling records are maintained until the exhaustion of a Veteran's maximum entitlement or upon the exceeding of a Veteran's delimiting date of eligibility (generally, ten or twelve years from discharge or release from active duty), whichever occurs first, and then destroyed. Automated storage media containing temporary working information are retained until a claim is decided, and then destroyed. All other automated storage media are retained and disposed of in accordance with disposition authorization approved by NARA.

Education electronic file folders are retained at the servicing Regional Processing Office. Education folders may be destroyed in accordance with the times set forth in the VBA Records Management, Records Control Schedule VB-1, Part 1, Section VII, as authorized by NARA.

Employee productivity records are maintained for two years after which they are destroyed by shredding or burning. File information for CAIVRS is provided to HUD by VA on magnetic tape. After information from the tapes has been read into the computer the tapes are returned to VA for updating. HUD does not keep separate copies of the tapes.

Director, Compensation Service (21), 810 Vermont Avenue NW., VA Central Office, Washington, DC 20420.

Director, Pension and Fiduciary Service, 810 Vermont Avenue NW., VA Central Office, Washington, DC 20420.

Director, Education Service (22), 810 Vermont Avenue NW., VA Central Office, Washington, DC 20420.

Director, Vocational Rehabilitation and Employment Service (28), 810 Vermont Avenue NW., VA Central Office, Washington, DC 20420.

An individual, who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the nearest VA regional office or center. Address locations are listed in VA Appendix 1 at the end of this document. VA employees wishing to inquire whether the system of records contains employee productivity information about themselves should contact their supervisor at the regional office or center of employment.

Individuals seeking information regarding access to and contesting of VA records may write, call or visit the nearest VA regional office. Address locations are listed in VA Appendix 1.

(See Record access procedures above.)

Veterans, Servicemembers, reservists, spouses, surviving spouses, dependents and other beneficiaries of the Veteran, accredited service organizations, VA-supervised fiduciaries (i.e., VA Federal fiduciaries, court-appointed fiduciaries), military service departments, VA medical facilities and physicians, private medical facilities and physicians, education and rehabilitation training establishments, State and local agencies, other Federal agencies, State, local, and county courts and clerks, Federal, State, and local penal institutions and correctional facilities, other third parties and other VA records.

Records are maintained at the Department of Veterans Affairs (VA) regional offices, VA Medical Centers, the VA Records Management Center, St. Louis, Missouri, and at the Corporate Franchise Data Center in Austin, Texas. Address locations are listed in the VA Appendix I, located at the end of this document.

Individuals who are repatriated prisoners of war, including but not limited to those of World War II; Korean Conflict; Vietnam Era; Pueblo Crisis; the members of the group known as Civilian Employees, Pacific Naval Air Bases, who actively participated in the defense of Wake Island and were determined to be eligible for veterans' benefits under Public Law 95-202; and those determined by the VA to have been held as prisoners of war during peacetime.

Personal identification information related to the POW experience and identifying data, e.g., name, social security number, file number, service number, date of birth, date of death (if applicable), period of service, branch of service, entitlement code, aid and attendance or household status, number of service-connected disabilities, number of days interned as a POW, place of internment and hospital discharge data.

Title 38, United States Code, Chapter 3, section 501(a), (b) and Chapters 11, 13, 17, 19, 24, 34, 51, 71, and 72.

Purpose:

Maintain records and provide benefits to repatriated prisoners of war who file claims for a wide variety of Federal veteran's benefits administered by VA at VA facilities located throughout the nation. See the statutory provisions cited in "Authority for maintenance of the system ". VA gathers or creates these records in order to enable it to administer these statutory benefits programs.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for member when the member or staff person requests the record on behalf of and at the written request of the individual.

2. Any information in this system relevant to a veteran's claim such as the name, military service information and the number of days interned as a POW may be disclosed at the request of the veteran to accredited service organizations, VA-approved claims agents and attorneys acting under a declaration of representation so that these individuals can aid veterans in the preparation, presentation and prosecution of claims under the laws administered by the VA. The name of a veteran will not, however, be disclosed to these individuals under this routine use if the veteran has not requested the assistance of an accredited service organization, claims agent or an attorney.

3. Any information in this system may be disclosed to the Office of the Secretary of Defense, International Security Affairs (POW/MIA), upon their official request, in order to aid the Department in verifying the status of individuals who were prisoners of war or missing in action and/or in determining their most recent location.

4. Any information in this system (excluding the name of a veteran unless the name is furnished by the requestor) may be disclosed to epidemiological and other research facilities approved by the Chief Medical Director to obtain data from those facilities necessary to assist in medical studies on veterans for the Veterans Administration or for any research purposes determined to be necessary and proper by the Chief Medical Director.

5. The name(s) of a veteran may be disclosed to another Federal agency or to a contractor of that agency at the written request of the head of that agency for the purpose of conducting government research necessary to accomplish a statutory purpose of that agency.

6. Disclosure may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of chapter 29 of title 44, United States Code.

7. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its on initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

8. Disclosure of relevant information may be made to individuals, organizations, public or private agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

9. VA may disclose on its own initiative any information in this system, except the names and mailing addresses of veterans and their dependents, that is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation or order.

10. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

11. VA may on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to the economic or property interests, identity theft or fraud, or harm to the programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

12. The name and mailing address of a VA beneficiary, and other information as is reasonably necessary to identify such a beneficiary, who has been adjudicated as incompetent under 38 CFR 3.353, may be provided to the Attorney General of the United States or his/her designee, for use by the Department of Justice in the National Instant Criminal Background Check System (NICS) mandated by the Brady Handgun Violence Prevention Act, Public Law 103-159.

Storage:

Records (or information contained in records) are maintained on paper documents in claims folders (C-folders), vocational rehabilitation folders, electronic file folders (e.g., Virtual VA and TIMS File), and on automated storage media (e.g., microfilm, microfiche, magnetic tape and disks). Such information may be accessed through data telecommunication terminal systems designated the Benefits Delivery Network (BDN), Virtual VA and Veterans Service Network (VETSNET). BDN, Virtual VA and VETSNET terminal locations include VA Central Office, regional offices, VA health care facilities, and Veterans Integrated Service Network (VISN) offices. Remote on-line access is also made available to authorized remote sites, representatives of claimants and to attorneys of record for claimants. A VA claimant must execute a prior written consent or a power of attorney authorizing access to his or her claims records before VA will allow the representative or attorney to have access to the claimant's automated claims records. Access by representatives and attorneys of record is to be used solely for the purpose of assisting an individual claimant whose records are accessed in a claim for benefits administered by VA.

File folders, whether paper or electronic, are indexed by name of the individual, social security number, payee number, and type of benefit.

Access to the basic file in the Corporate Franchise Data Center in Austin, Texas is restricted to authorized VA employees and vendors. Access to working spaces and claims folder file storage areas in VA regional offices and centers is restricted to VA employees on a need-to-know basis. Generally, file areas are locked after normal duty hours and the offices and centers are protected from outside access by the Federal Protective Service or other security personnel. Employee claims file records and claims file records of public figures are stored in separate locked files. Strict control measures are enforced to ensure that access to and disclosure from these claims file records are limited to a need-to-know basis.

Access to BDN, Virtual VA, and VETSNET data telecommunication networks are by authorization controlled by the site security officer who is responsible for authorizing access to BDN, Virtual VA, and VETSNET by a claimant's representative or attorney approved for access in accordance with VA regulations. The site security officer is responsible for ensuring that the hardware, software, and security practices of a representative or attorney satisfy VA security requirements before granting access. The security requirements applicable to the access of automated claims files by VA employees also apply to the access of automated claims files by claimants' representatives or attorneys. The security officer is assigned responsibility for privacy-security measures, especially for review of violation logs, information logs, and control of password distribution, including password distribution for claimants' representatives.

Access to data processing centers is generally restricted to center employees, custodial personnel, Federal Protective Service, and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons provided access to computer rooms are escorted.

Records are maintained on magnetic tape, disks, and microfiche and are retained and disposed of in accordance with disposition and authorization approved by the National Archives and Records Administration. Once a file is electronically imaged and accepted by VA, its paper contents (with the exception of service treatment records and official legal documents), are destroyed in accordance with Records Control Schedule VB-1 Part 1 Section XIII, as authorized by the National Archives and Records Administration (NARA) of the United States.

Director, Compensation and Pension Service (21), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record should submit a written request or apply in person to the nearest VA regional office or medical center. Addresses for these offices may be found in VA Appendix 1 at the end of this document. Inquiries should include as much of the following information as possible: The veteran's full name, VA file number, service number, and social security number. The magnetic tape is indexed by the veteran's service, VA file or social security number. The microfiche is indexed by the veteran's name with secondary verification by the veteran's service, VA file, or social security number.

Individuals seeking information regarding access to and contesting of VA records may write, call, or visit the nearest VA regional office. Address locations are listed in VA Appendix 1.

See Record access procedures above.

The Department of Defense, National Archives and Records Administration, Veterans, service members, reservists, spouses, surviving spouses, dependents and other beneficiaries of the veteran, accredited service organizations, VA-supervised fiduciaries (i.e., VA Federal fiduciaries, court-appointed fiduciaries), military service departments, VA medical facilities and physicians, private medical facilities and physicians, education and rehabilitation training establishments, State and local agencies, other Federal agencies, State, local, and county courts and clerks, Federal, State, and local penal institutions and correctional facilities, other third parties and other VA records.

Appendix 1: Department of Veterans Affairs Regional Offices and Centers

Alabama AL

VA Regional Office, 345 Perry Hill Rd., Montgomery, Alabama 36109.

Alaska AK

VA Regional Office, 1201 N Muldoon Rd., Anchorage 99504.

Arizona AZ

VA Regional Office, 3333 North Central Ave., Phoenix, Arizona 85012.

Arkansas AR

VA Regional Office, 2200 Fort Roots Dr., Bldg.65, North Little Rock, Arkansas 72144.

California CA

VA Regional Office, Federal Bldg., 11000 Wilshire Blvd., Los Angeles, California 90024.

VA Regional Office, 1301 Clay St., Rm. 1300 North, Oakland, California 94612.

VA Regional Office, 8810 Rio San Diego Dr., San Diego, California 92108.

Colorado CO

VA Regional Office, 155 Van Gordon St., Lakewood, Colorado 80228.

Connecticut CT

VA Regional Office, 555 Willard Ave., Newington, Connecticut 06111.

Delaware DE

VA Regional Office, 1601 Kirkwood Hwy., Wilmington, Delaware 19805.

District of Columbia DC

VA Regional Office, 1722 I St., NW., Washington, DC 20421.

VA Central Office, 810 Vermont Ave., NW., Washington, DC 20420.

Florida FL

VA Regional Office, 9500 Bay Pines Blvd., St. Petersburg, Florida 33708.

Georgia GA

VA Regional Office, 1700 Clairmont Rd., Decatur, Georgia 30033.

Hawaii HI

VA Regional Office, 459 Patterson Rd., E-Wing, Honolulu, Hawaii 96819.

Idaho ID

VA Regional Office, 444 W. Fort St., Boise, Idaho 83702.

Illinois IL

VA Regional Office, 2122 W. Taylor St., Chicago, Illinois 60612.

Indiana IN

VA Regional Office, 575 N. Pennsylvania St., Indianapolis, Indiana 46204.

Iowa IA

VA Regional Office, 210 Walnut St., Des Moines, Iowa 50309.

Kansas KS

VA Regional Office, 5500 E. Kellogg Ave., Wichita, Kansas 67128.

Kentucky KY

VA Regional Office, 321 W. Main St., Ste. 390, Louisville, Kentucky 40202.

Louisiana LA

VA Regional Office, 1250 Poydras St., New Orleans, Louisiana 70056.

Maine ME

VA Regional Office, One VA Center, Augusta, Maine 04330.

Maryland MD

VA Regional Office, Federal Bldg., 31 Hopkins Plaza, Baltimore, Maryland 21201.

Massachusetts MA

VA Regional Office, John Fitzgerald Kennedy Federal Bldg., Government Center, Boston, Massachusetts 02203.

Michigan MI

VA Regional Office, Patrick V. McNamara Federal Bldg., 477 Michigan Ave., Rm. 1400, Detroit, Michigan 48226.

Minnesota MN

VA Regional Office, Bishop Henry Whipple Federal Bldg., 1 Federal Dr., Fort Snelling, St. Paul, Minnesota 55111.

Mississippi MS

VA Regional Office, 1600 East Woodrow Wilson Ave., Jackson, Mississippi 39216.

Missouri MO

VA Regional Office, 400 South 18th St., St. Louis, Missouri 63103.

Montana MT

VA Regional Office, 3633 Veterans Dr., Fort Harrison, Montana 59636.

Nebraska NE

VA Regional Office, 5631 S. 48th St., Lincoln, Nebraska 68516.

Nevada NV

VA Regional Office, 5460 Reno Corporate Dr., Reno, Nevada 89511.

VA Benefits Office, 4800 Alpine Pl., Suite 12, Las Vegas, Nevada 89107.

New Hampshire NH

VA Regional Office, Norris Cotton Federal Bldg., 275 Chestnut St., Manchester, New Hampshire 03101.

New Jersey NJ

VA Regional Office, 20 Washington Place, Newark, New Jersey 07120.

New Mexico NM

VA Regional Office, Dennis Chavez Federal Bldg., 500 Gold Ave., SW., Albuquerque, New Mexico 87102.

New York NY

VA Regional Office, 245 W. Houston St., New York, New York 10014.

VA Regional Office, Niagra Center, 130 S. Elmwood Ave., Buffalo, New York 14202.

North Carolina NC

VA Regional Office, Federal Office Building, 251 North Main Street, Winston-Salem, North Carolina 27155.

North Dakota ND

VA Regional Office, 2101 Elm St., Fargo, North Dakota 58102.

Ohio OH

VA Regional Office, Anthony J. Celebreeze Federal Office Bldg., 1240 East Ninth St., Cleveland, Ohio 44199.

Oklahoma OK

VA Regional Office, 125 South Main St., Muskogee, Oklahoma 74401.

Oregon OR

VA Regional Office, Edith Green/Wendell Wyatt Federal Building, 1220 S.W. Third Ave., Portland, Oregon 97204.

Pennsylvania PA

VA Regional Office, 1000 Liberty Ave., Pittsburgh, Pennsylvania 15222.

VA Regional Office and Insurance Center, 5000 Wissahickon Ave., Philadelphia, Pennsylvania 19101.

Philippines

VA Regional Office and Outpatient Clinic, 1131 Roxas Blvd., Manila, Philippines; MAILING ADDRESS from U.S.: VA Regional Office, PSC 501, DPO AP 96515-1100.

Puerto Rico, Commonwealth of (including the Virgin Islands)

VA Regional Office, 150 Carlos Chardon Ave., Suite 300, San Juan, Puerto Rico 00918.

Rhode Island RI

VA Regional Office, 380 Westminster Street, Providence, Rhode Island 02903.

South Carolina SC

VA Regional Office, 6437 Garners Ferry Rd., Columbia, South Carolina 29201.

South Dakota SD

VA Regional Office, P.O. Box 5046, 2501 W. 22nd St., Sioux Falls, South Dakota 57105.

Tennessee TN

VA Regional Office, 110 9th Ave. South, Nashville, Tennessee 37203.

Texas TX

VA Regional Office, 6900 Almeda Rd., Houston, Texas 77030.

VA Regional Office, One Veterans Plaza, 701 Clay Ave., Waco, Texas 76799.

Utah UT

VA Regional Office, 550 Foothill Drive, Salt Lake City, Utah 84148.

Vermont VT

VA Regional Office, 215 North Main Street, White River Junction, Vermont 05001.

Virginia VA

VA Regional Office, 210 Franklin Rd., SW, Roanoke, Virginia 24011.

Washington WA

VA Regional Office, Federal Bldg., 915 Second Ave., Seattle, Washington 98174.

West Virginia WV

VA Regional Office, 640 4th Ave., Huntington, West Virginia 25701.

Wisconsin WI

VA Regional Office, 5400 W. National Ave., Milwaukee, Wisconsin 53214.

Wyoming WY

VA Regional Office and Medical Center, 2360 East Pershing Blvd., Cheyenne, Wyoming 82001.

These records are located in personnel or designated offices in the Veterans Administration (VA) in which the grievances were filed.

Current or former VA employees who have submitted grievances with the agency in accordance with part 771 of OPM Regulations (5 CFR part 771); VA Personnel Manual MP-5, Part I, Chapter 771, and Part II, Chapter 8; or a negotiated procedure.

The system contains records relating to grievances filed by agency employees under Part 771 of OPM Regulations and VA Personnel Manual MP-5, Part I, Chapter 771, and Part II, Chapter 8. These case files contain all documents related to the grievance, including statements of witnesses, reports of interviews and hearings, examiner's findings and recommendations, a copy of the original and final decision, and related correspondence and exhibits. This system includes files and records of internal grievance and arbitration systems that may be established through negotiations with recognized labor organizations.

5 U.S.C. 1302, 3301, 3302, E.O. 10577, 3 CFR 1954-1958 Comp. p218, E.O. 10987, 3 CFR 1959-1963 Comp. p519, 38 U.S.C. 4108 and 4115, agency employees, for personal relief in a matter of concern or dissatisfaction which is subject to the control of agency management.

These records and information in these records may be used:

1. To disclose pertinent information to the appropriate Federal, State, or local agency responsible for investigating, prosecuting, enforcing, or implementing a statute, rule, regulation, or order, where the disclosing agency becomes aware of an indication of a violation or potential violation of civil or criminal law or regulation.

2. To disclose information to any source from which additional information is requested in the course of processing a grievance, to the extent necessary to identify the individual, inform the source of the purpose(s) of the request and identify the type of information requested.

3. To disclose information to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the classifying of jobs, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to requesting the agency's decision on the matter.

4. To provide information to a congressional office from the record of an individual in response to an inquiry from that congressional office made at the request of that individual.

5. To disclose information to another Federal agency or to a court when the Government is party to a judicial proceeding before the court.

6. By the National Archives and Records Administration (General Services Administration) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

7. By the agency maintaining the records or the OPM in the production of summary descriptive statistics and analytical studies in support of the function for which the records are collected and maintained, or for related work force studies. While published statistics and studies do not contain individual identifiers, in some instances, the selection of elements of data included in the study may be structured in such a way as to make the data individually identifiable by inference.

8. To disclose information to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, the Federal Labor Relations Authority and its General Counsel, or the Equal Employment Opportunity Commission when requested in performance of their authorized duties.

9. To disclose in response to a request for discovery or for appearance of a witness, information that is relevant to the subject matter involved in a pending judicial or administrative proceeding.

10. To provide information to officials of labor organizations reorganized under the Civil Service Reform Act when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting work conditions.

13. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

12. Identifying information in this system, including name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA hiring, privileging/reprivileging, retention or termination of the applicant or employee.

13. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank or to a State or local government licensing board which maintains records concerning the issuance, retention or revocation of licenses, certifications, or registrations necessary to practice an occupation, profession or specialty when under the following circumstances, through a peer review process that is undertaken pursuant to VA policy, negligence, professional incompetence, responsibility for improper care, and/or professional misconduct has been assigned to a physician or licensed or certified health care practitioner: (1) On any payment in settlement (or partial settlement) of, or in satisfaction of a judgment in, a medica1 malpractice action or claim; or, (2) on any final decision that adversely affects the clinical privileges of a physician or practitioner for a period of more than 30 days. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

Storage:

These records are maintained in file folders.

These records are retrieved by the names of the individuals on whom they are maintained.

These records are maintained in lockable metal filing cabinets to which only authorized personnel have access.

These records are disposed of three years after closing of the case. Disposal is by shredding or burning.

Officials maintaining the system--Personnel Officer at station where employed (see Appendix 1 for local addresses). Official responsible for policies and procedures--Assistant Administrator for Personnel (05), VA Central Office, 810 Vermont Avenue, NW, Washington, DC 20420.

It is required that individuals submitting grievances be provided a copy of the record under the grievance process. They may, however, contact the agency personnel or designated office where the action was processed regarding the existence of such records on them. They must furnish the following information for their records to be located and identified:

a. Name.

b. Date of birth.

c. Approximate date of closing of the case and kind of action taken.

d. Organizational component involved.

It is required that individuals submitting grievances be provided a copy of the record under the grievance process. However, after the action has been closed, an individual may request access to the official copy of the grievance file by contacting the agency personnel or designated office where the action was processed.

Individuals must provide the following information for their records to be located and identified:

a. Name.

b. Date of birth.

c. Approximate date of closing of the case and kind of action taken.

d. Organizational component involved.

Individuals requesting access must also follow the VA's Privacy Act regulations regarding access to records and verification of identity (38 CFR 1.577).

Review of requests from individuals seeking amendment of their records which have been the subject of a judicial or quasi-judicial action will be limited in scope. Review of amendment requests of these records will be restricted to determining if the record accurately documents the action of the agency ruling on the case, and will not include a review of the merits of the action, determination, or finding.

Individuals wishing to request amendment to their records to correct factual errors should contact the agency personnel or designated office where the grievance was processed. Individuals must furnish the following information for their records to be located and identified:

a. Name.

b. Date of birth.

c. Approximate date of closing of the case and kind of action taken.

d. Organizational component involved.

Individuals requesting amendment must also follow the VA Privacy Act regulations regarding amendment to records and verification of identity (38 CFR 1.577).

Information in this system of records is provided:

a. By the individual on whom the record is maintained.

b. By testimony of witnesses.

c. By agency officials.

d. From related correspondence from organizations or persons.

(a) Counseling Folder: Maintained at each individual Vet Center providing readjustment counseling throughout the country. The locations of all Vet Centers providing readjustment counseling are listed in VA Appendix 2 of the Biennial Privacy Act Issuances publication.

(b) Client Information File: Certain information extracted from the counseling folder is stored on stand-alone personal computers at each Vet Center, each of the seven RCS regional managers' offices, and the RCS national data support center.

Eligible veterans who request and/or are provided readjustment counseling, including veterans' family members and/or other persons of significant relationship to the veteran who are eligible. Eligibility for readjustment counseling at Vet Centers includes any veteran who served in the military in a theater of combat operations during any period of war, or in any area during a period in which armed hostilities occurred. Family members are also eligible for readjustment counseling to the extent necessary to assist the veteran.

(a) Counseling Folder: All written intake forms, applications, progress notes and demographic and clinical documentation deemed necessary to provide quality counseling and continuity of care by the counselors and/or program officials. This would include all information collected for the computerized database. (b) Client Information File: Unique veteran identification number; social security number; Vet Center team number; marital status; gender; birth date; service dates; branch of service; veteran eligibility information; theater of operation; service-connection; discharge; referral source; visit information and treatment; and other statistical information about services provided to that veteran.

Title 38, United States Code, section 1712A.

The purpose of this system of records is to collect and maintain all demographic and clinical information required to conduct a psychological assessment, to include a military history, and provide quality readjustment counseling to assist veterans resolve war trauma and improve their level of post-war functioning.

1. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the member, when the member or staff person requests the record on behalf of and at the written request of the individual.

2. Disclosure may be made to the National Archives and Records Administration and the General Services Administration in records management inspections conducted under authority of Title 44, Chapter 29, of the United States Code (U.S.C.).

3. Records from a system of records may be disclosed to the Department of Justice (DOJ) (including U.S. Attorneys) or in a proceeding before a court, adjudicative body, or other administrative body when litigation or the adjudicative or administrative process is likely to affect VA, its employees, or any of its components is a party to the litigation or process, or has an interest in the litigation or process, and the use of such records is deemed by VA to be relevant and necessary to the litigation or process, provided that the disclosure is compatible with the purpose for which the records were collected.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. Disclosure of information may be made when (1) It is suspected or confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is to agencies, entities, and persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosure by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

(a) Counseling Folder: Paper documents stored in file folders.

(b) Client Information File: Stored on stand-alone personal computer hard drives and any backup media.

(a) Counseling Folder: Filed or indexed alphabetically by last name or unique Client Number.

(b) Client Information File: Indexed by Vet Center Number in conjunction with unique Client Number and social security number.

(a) Counseling Folder: Access to records at Vet Centers will be controlled by Vet Center staff during working hours. During other hours, records will be maintained in locked file cabinets. In high crime areas, Vet Center offices are equipped with alarm systems. (b) Client Information File: The computerized file is in a stand-alone personal computer and access to records is for authorized Vet Center personnel. Access is achieved on a need-to-know basis with a password. Computer security is in compliance with RCS and VA computer security policy and protocol. All computers are password protected and stored inside the locked Vet Center.

(a) Counseling Folder: The records will be retained at the Vet Center for 50 years after the date of last activity. Destruction of counseling folders will be by shredding.

(b) Client Information File: Maintained for the duration of the program. Destruction will be by deleting all information on all Vet Center, RCS regional manager's office, and the RCS national data support center stand-alone personal computers containing the program database.

Chief Readjustment Counseling Officer (15), VA Central Office, 810 Vermont Ave, NW., Washington, DC 20420.

A veteran who wishes to determine whether a record is being maintained by the Readjustment Counseling Service Vet Center Program under his or her name or other personal identifier or wishes to determine the contents of such records should submit a written request or apply in person to: (1) The Team Leader of the Vet Center, or the RCS Regional Manager having supervisory responsibility for the Vet Center, with whom he or she had contact, or (2) the Chief Readjustment Counseling Officer (15), VA Central Office, 810 Vermont Ave, NW., Washington, DC 20420. Inquiries should include the individual's full name and social security number.

An individual (or duly authorized representative of such individual) who seeks access to or wishes to contest records maintained under his or her name or other personal identifier may write, call or visit the above named individuals.

(See Record Access Procedures above.)

(1) Relevant forms to be filled out by Vet Center team members on first contact and each contact thereafter; counseling sessions with veterans and other eligible counselees. (2) Other VA and Federal agency systems.

(a) Counseling Folder: Maintained at each individual center (called Vet Centers) and at VA medical centers providing readjustment counseling throughout the country. The locations of all Vet Centers and VA medical centers providing readjustment counseling are listed in VA Appendix 2 . Certain information extracted from the counseling folder is maintained at the St. Paul, Minnesota, VA Data Processing Center (DPC).

(b) Client Information File: Certain information extracted from the counseling folder is maintained at the St. Paul, Minnesota, VA Data Processing Center (DPC).

Individuals who request Vietnam veterans readjustment counseling, and/or receive readjustment counseling, including veterans, family members, or other counselees who are eligible.

(a) Counseling Folder: All written notes, forms, applications, and documentation deemed necessary to provide continuity of care by the counselors and/or program officials. This would include all information collected for the computerized data base.

(b) Client Information File: Unique veteran identification number, team or medical center number, marital status, birth date, service dates, branch of service, whether served in Vietnam, service connection, types of problems, severity of problems, actions to be taken, source of action, status of action, number of contacts that day, and other statistical information about services provided that veteran.

Title 38, United States Code, Section 612A.

None.

Storage:

(a) Counseling Folder: Paper documents stored in file folders.

(b) Client Information File: Stored on magnetic tapes.

(a) Counseling Folder: Filed or indexed alphabetically by last name or unique Client Number.

(b) Client Information File: Indexed by Vet Center or Station Number in conjunction with unique Client Number.

(a) Counseling Folder: Access to records at Vet Centers will be controlled by Vet Center staff during working hours. During other hours, records will be maintained in locked file cabinets. In high crime areas, Vet Center offices are equipped with alarm systems. Access to readjustment counseling records at VA medical centers will be restricted to the Outreach counseling staff on a need-to-know basis.

(b) Client Information File: The file area at the DPC is locked after duty hours and the building is protected from unauthorized access by the Federal Protective Service.

(a) Counseling Folder: The records will be retained at the Outreach Center or medical center of origin and VA Central Office for approximately three years after the date of last activity and/or after termination of the Outreach program, whichever is later. Destruction will be by shredding.

(b) Client Information File: Maintained for the duration of the program. Destruction will be by erasing the tapes.

Director, Readjustment Counseling Service (147), VA Central Office, Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained by the Veterans Readjustment Program under his or her name or other person identifier or wishes to determine the contents of such records should submit a written request or apply in person to: (1)The team leader of the Vet Center or the Readjustment counselor at the VA medical center with whom he or she had contact, or (2) Director, Readjustment Counseling Service (147), VA Centrak Office, Washington, DC 20420.

Inquiries should include the individual's full name and social security number.

An individual (or duly authorized representative of such individual) who seeks access to or wishes to contest records maintained under his or her name or other personal identifier may write, call or visit the above named individuals.

(See Record access procedures above.)

(1) Relevant forms to be filled out by Vet Center team members on first contact and each contact thereafter; counseling sessions with veterans and other eligible counselees. (2) Other VA and Federal agency systems.

Records are maintained at each VA health care facility; the VA Data Processing Center (DPC), 1615 East Woodward Street, Austin, Texas 78772; and at VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420. Addresses for the VA health care system are listed in VA Appendix I at the end of this document.

Individuals who operate a Community Placement facility approved for placement of VA beneficiaries; VA beneficiaries in Community Placement facilities.

The record, or information contained in the record, may include personal identification information with data on the Community Placement facility, name of operator, address, phone number, name of veterans receiving care in these homes, a statement as to whether the veterans' medical conditions have been rated as service-connected or nonservice-connected, the veterans' social security number and the names, addresses and phone numbers of the veterans' next-of-kin; overall data regarding diagnoses of veterans in the facility, date the facility was last approved for participation, statement regarding whether or not the home is required to be licensed by the State and/or local government, copies of correspondence exchange between the VA and the persons interested in applying for participation in the Community Placement Program.

Title 38, U.S.C. 210(c), 610 and 4101.

Purpose:

Records is to provide administrative documentation of State and/or local active licensed Department of Veterans Affairs (VA) Community Placement Program agencies.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding the hiring, retention or transfer of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans, will only be made with the veteran's prior written consent.

3. Any information in this system may be disclosed to a State or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision on the hiring, transfer or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by that agency; provided that, if the information requested pertains to a veteran, the name and/or address of the veteran will not be disclosed unless the name and/or address is provided first by the requesting State or local agency.

4. Any information in this system may be disclosed to a Federal, State or local governmental agency maintaining civil or criminal violation records, or other pertinent information such as prior employment history, prior Federal employment background investigations, and personal or educational background at the request of the veteran in order for the VA to obtain information relevant to the hiring, transfer or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit.

5. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto, in response to its official request.

7. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided or a purpose authorized by law.

8. Any information in this system including the name and address of a veteran may be disclosed to any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38 U.S.C. (such disclosures include computerized lists of names and addresses.)

9. Any information in this system may be disclosed to a Federal agency, except for the name and address of a veteran, in order for the VA to obtain information relevant to the issuance of a benefit under Title 38 U.S.C. The name and address of a veteran may be disclosed to a Federal agency under this routine use if they are required by the Federal agency to respond to the VA inquiry.

10. Disclosure may be made to the National Archives and Records Administration (and the General Services Administration in records management inspections conducted under authority of Title 44 U.S.C.

11. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

12. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

13. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

14. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are maintained on magnetic tapes which are stored at the Austin DPC, and paper documents (printouts) are maintained at VA Central Office and the health care facilities.

Information can be retrieved by the use of veteran's name, social security number and by facility operator's name and location.

Access to the basic file in the Austin DPC is restricted to authorized VA employees and vendors. Access to the computer room where the basic file is maintained within the DPC is further restricted to authorized VA employees and vendor personnel on a "need to know" basis and is protected from unauthorized access by an alarm system, the Federal Protective Service and VA security personnel. Access to paper documents at Central Office and VA health care facilities is restricted to authorized VA employees.

Working magnetic tapes at the DPC are disposed of as soon as the purpose for which they were established has been served. Paper documents are to be retained and disposed of in accordance with authorization approved by the Archivist of the United States.

Director, Social Work Service (141A10), VA Central Office, Washington, DC 20420.

Any individual who wishes to determine whether a record is being maintained in this system under his/her or other personal identifier, or wants to determine the contents of such record should submit a written request or apply in person to the Chief, Social Work Service (122) at the appropriate VA health care facility. Addresses for these offices may be found in VA Appendix I at the end of this document. Inquiries should include the individual's full name and identification number (social security number).

Individuals seeking information regarding access to and contesting of VA records in this system may write, call or visit the nearest appropriate health care facility.

(See Record Access Procedures above.)

Information contained in the records is obtained from individuals requesting participation in the Community Placement Program; the patient, family members or accredited representative, and friends, employers or other third parties when otherwise unobtainable from the patient or his family; various automated clinical and managerial systems providing support at selected VA health care facilities; and the patient Consolidated Medical Records sections of the VA Medical Records System.

Department of Veterans Affairs (VA), Office of Inspector General (OIG), Office of Assistant Inspector General for Management and Administration (53), Washington, DC 20420.

The following categories of individuals will be covered by the system: individuals who are the subjects of complaints and complainants. Subjects and complainants may be VA employees or third parties (e.g., a veteran, VA beneficiary, contractor, or private citizen). Complaints and information about OIG employees are also covered in this system. Subjects of Hotline complaints are those alleged to have engaged in wrongdoing or impropriety, either criminal, civil, or administrative, either in the performance of their official VA duties or related to the programs and operations of VA. The allegations are made to the OIG Hotline by complainants, who are individuals who have reported the possible existence of an activity constituting a violation of law, rule or regulation, or mismanagement, gross waste of funds, abuse of authority or a substantial and specific danger to the public health and safety. Complaints also may be made anonymously.

Records (or information contained in records) in this system may include: (1) The name, home and work address, e-mail address, and home, work and cellular phone numbers of the complainant; (2) the name, title, date of birth, Social Security Number and home and work address of the subject of the complaint; and (3) the location and nature of the alleged wrongdoing. The records maintained in this system may also include: (1) documentation and other evidence from the complainant; (2) correspondence between the VA OIG Office of Management and Administration (53) and other components of the Office of Inspector General, agency departments, and the complainant; and (3) restricted reports based on the investigation of the alleged wrongdoing or impropriety.

Title 5, United States Code, Appendix 3.

Records and information in this system are used to record information related to official complaints made to the VA OIG. The Hotline Division is the OIG's complaint center and serves as the recipient of all types of complaints about impropriety and wrongdoing related to VA programs and operations. The specific information about each complaint, including name of complainant, name of subject, and the allegations of improper conduct, is recorded and then forwarded to the appropriate entity for investigation, review, or resolution. The information is used to provide prompt, responsive, and accurate information regarding the status of Hotline complaints. The information is also used to provide a record of the complaint disposition and statistical information about complaints.

1. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office that is made at the request of that individual.

2. Disclosure may be made to the National Archives and Records Administration (NARA) in records management activities and inspections conducted under authority of Title 44, United States Code.

3. Disclosure may be made to the Department of Justice including United States Attorneys, or in a proceeding before a court, adjudicative body, or other administrative body when the litigation or adjudicative or administrative process is likely to affect VA, its employees, or any of its components, or when VA, its employees, or any of its components is a party to the litigation process, or has an interest in the litigation or process and the use of these records is deemed by VA to be relevant and necessary to the litigation or process, provided that the disclosure is compatible with the purpose for which the records were collected.

4. Any information in this system, except the name and address of a veteran, may be disclosed to a Federal, state, or local agency maintaining civil or criminal violation records or other pertinent information such as prior employment history, prior Federal employment background investigations, and/or personal or educational background in order for VA to obtain information relevant to the hiring, transfer, or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

5. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and dependents to a Federal or state agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

6. To assist attorneys in representing their clients, any information in this system may be disclosed to attorneys representing subjects of investigations, including veterans, Federal government employees, retirees, volunteers, contractors, subcontractors, or private citizens, except where VA has decided release is inappropriate under Title 5, United States Code, Section 552a(j) and (k).

7. Disclosure of information to Federal Labor Relations Authority (FLRA), including its General Counsel, when requested in connection with the investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised, in connection with matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

8. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

9. Information may be disclosed to officials of the Merit Systems Protection Board, and the Office of Special Counsel, when properly requested in connection with appeals, special studies of the civil service and other merit systems, reviews of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in Title 5, United States Code, Sections 1205 and 1206, or as may be authorized by law.

10. Any information in this system of records may be disclosed, in the course of presenting evidence in or to a court, magistrate, administrative tribunal, or grand jury, including disclosures to opposing counsel in the course of such proceedings or in settlement negotiations.

11. Any information in this system may be disclosed to any source or person, either private or governmental, to the extent necessary to secure from such source or person information relevant to, and sought in furtherance of, a legitimate investigation, review, or inspection.

12. Any information in this system, except the name and address of a veteran, may be disclosed to Federal, state, or local professional, regulatory, or disciplinary organizations or associations, including but not limited to bar associations, state licensing boards, and similar professional entities, for use in disciplinary proceedings and inquiries preparatory thereto, where VA determines that there is good cause to question the legality or ethical propriety of the conduct of a person employed by VA or a person representing a person in a matter before VA. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

13. VA may disclose information to individuals, organizations, private or public agencies, or other entities with which VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

14. Disclosure of any information within this system may be made when it is suspected or confirmed that the security or confidentiality of information in the system or records has been compromised and VA has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interest, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the compromised information; and the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

Records and information are stored electronically in the VA OIG's MCI (Master Case Index) databases and servers at the OIG's headquarters office at 801 I Street, NW., Washington, DC 20420, in the office of the OIG's Information Technology Division. Backup records are stored on magnetic disc, tape and CD-ROM and may also be retained in hard copy format in secure file folders. The VA OIG Hotline Division is responsible for electronically inputting records and information received from complainants, referrals and correspondence related to the initiation of a Hotline case, and final reports. Information inputted electronically includes all correspondence to and from the complainant, correspondence (including e-mail messages) to and among VA OIG organizational elements about the complaint, and correspondence to and from any VA component to which the Hotline case was referred. Complaints and information about OIG employees, including all investigative reports and work papers, are maintained in electronic files with restricted access limited to those with a need to know the information in the performance of their official duties in the VA OIG Office of Investigations, VA OIG Human Resources Management Division, VA OIG attorneys, and VA OIG management officials responsible for supervising the VA OIG employee who is the subject of the internal investigation.

Hard copies of records and information are discussed in the storage section below.

Storage:

Hard copies of documents and information are maintained by the OIG organization that conducts the review, inspection, or investigation. For example, the Administrative Investigations Division, at VA OIG headquarters, maintains hard copies of an investigative file which contains the case referral from Hotline, the final report, all documentation supporting the final report, draft reports, correspondence, and all information collected as part of the investigation. Similarly, the VA OIG Office of Healthcare Inspections (OHI) maintains hard copies of its Hotline investigations (final reports and supporting documentation) related to individuals at VA OIG headquarters. Other records and information (i.e., work papers) about investigations related to individuals compiled by OHI are maintained in the OHI field office that conducted the investigation. Any internal VA OIG investigations conducted prior to the implementation of electronic files, on VA OIG employees who are the subject of a Hotline complaint, are maintained in hard copy only and are secured in the Office of Investigations, Analysis and Oversight Division (51X). Access to those files is highly restricted.

OIG Hotline cases are assigned a Hotline case number in the MCI system. Records are retrieved by the Hotline case numbers. In addition, electronic records may be retrieved by the names of the complainants and names of the subjects of the complaints, retrieved by such persons' title, or by their Social Security number, if entered. It is important to note that scanned documents, reports and other uploaded information that are made part of the Hotline file are not searched or retrieved from the MCI database as part of a general search. Hard copy paper Hotline files are retrieved by the Hotline case number only.

Information in the system is protected from unauthorized access through administrative, physical, and technical safeguards. Access to the hard copy and computerized information is restricted to authorized OIG personnel on a need-to-know basis. Hard copy records are maintained in offices that are restricted during work hours, or are locked after duty hours. The headquarters building is protected by security guards and access is restricted during non-duty hours. Access to the computerized information is limited to VA OIG employees by means of passwords and authorized user identification codes. Computer system documentation is maintained in a secure environment in the Office of Inspector General, VA Central Office.

Records will be maintained and disposed of in accordance with a records disposition authority approved by the Archivist of the United States.

Assistant Inspector General for Management and Administration (53), Department of Veterans Affairs, Office of Inspector General, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained by the VA OIG Hotline, under his or her name in this system or wishes to determine the contents of such records should submit a written request to the Assistant Inspector General for Management and Administration (53). However, a majority of records in this system are exempt from the notification requirements under 5 U.S.C. 552a (j) and (k). To the extent that records in this system of records are not subject to exemption, they are subject to notification. A determination as to whether an exemption applies shall be made at the time a request for notification is received.

An individual who seeks access to or wishes to contest records maintained under his or her name in this system must submit a written request to the Assistant Inspector General for Management and Administration (53). However, a majority of records in this system are exempt from the records access and contesting requirements under 5 U.S.C. 552a (j) and (k). To the extent that records in this system of records are not subject to exemption, they are subject to access and contest. A determination as to whether an exemption applies shall be made at the time a request for access or contest is received.

(See records access procedures above.)

Information is obtained from VA employees, third parties (e.g., a veteran, VA beneficiary, VA contractor, or private party), the Government Accountability Office, Department of Veterans Affairs records, congressional, Federal, state, and local offices or agencies.

Under 5 U.S.C. 552a(j)(2), the head of any agency may exempt any system of records within the agency from certain provisions of the Privacy Act, if the agency or component that maintains the system performs as its principal function any activities pertaining to the enforcement of criminal laws. The Inspector General Act of 1978, Public Law 95-452 (IG Act), mandates that the Inspector General recommend policies for and to conduct, supervise, and coordinate activities in the Department of Veterans Affairs and between VA and other Federal, State and local governmental agencies with respect to: (1) The prevention and detection of fraud in programs and operations administered or financed by VA and (2) the identification and prosecution of participants in such fraud. Under the IG Act, whenever the Inspector General has reasonable grounds to believe there has been a violation of Federal criminal law, the Inspector General must report the matter expeditiously to the Attorney General. This system of records has been created in major part to support the criminal law-related activities assigned by the Inspector General to the Assistant Inspector General for Investigations. These activities constitute a principal function of the Inspector General's Hotline/Complaint Center staff.

In addition to principal functions pertaining to the enforcement of criminal laws, the Inspector General may receive and investigate complaints and allegations from various sources concerning the possible existence of activities constituting noncriminal violations of law, rules or regulations; mismanagement; gross waste of funds; abuses of authority or substantial and specific danger to the public health and safety. This system of records also exists to support inquiries by the Assistant Inspectors General for Auditing, for Management and Administration and for Healthcare Inspections into these non-criminal violations. Based upon the foregoing, the Secretary of Veterans Affairs has exempted this system of records, to the extent that it encompasses information pertaining to criminal law-related activities, from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(j)(2):

5 U.S.C. 552a(c) (3) and (4)

5 U.S.C. 552a(d)

5 U.S.C. 552a(e) (1), (2) and (3)

5 U.S.C. 552a(e)(4) (G), and (H) and (I)

5 U.S.C. 552a(e) (5) and (8)

5 U.S.C. 552a(f)

5 U.S.C. 552a(g)

The Secretary of Veterans Affairs has also exempted this system of records to the extent that it does not encompass information pertaining to criminal law-related activities under 5 U.S.C. 552a(j) (2) from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(k)(2):

5 U.S.C. 552a(c)(3)

5 U.S.C. 552a(d)

5 U.S.C. 552a(e)(1)

5 U.S.C. 552a(e)(4) (G), (H) and (I)

5 U.S.C. 552a(f)

REASONS FOR EXEMPTIONS:

The exemption of information and material in this system of records is necessary in order to accomplish the law enforcement functions of the Office of Inspector General, e.g., to prevent subjects of investigations from frustrating the investigatory process by discovering the scope and progress of an investigation, to prevent the disclosure of investigative techniques, to fulfill commitments made to protect the confidentiality of sources, to maintain access to sources of information and to avoid endangering these sources and law enforcement personnel.

These records are located at VA facilities (See Appendix 1) and at other Federal, State, or local government or private sector agencies or institutions which have agreements with the VA to provide counseling to VA employees or family members with alcohol, drug or emotional or personal health problems.

Categories of individuals who may be covered by the system include current or former VA employees or immediate family members of VA employees who have been counseled or otherwise treated regarding alcohol or drug abuse or for personal or emotional health problems.

The records (or information contained in records) may include records and documents related to employee visits to counselors, diagnosis, recommended treatment, prognosis, results of treatment, and other notes or records of discussions held by a program counselor with the employee, employee's family members or supervisors. Records in this system may also contain documentation of treatment at a Federal, State, local government, private agencies, or institutions which have agreements with the VA to provide counseling to VA employees or family members with alcohol, drug or personal or emotional health problems.

5 U.S.C. 7901, 21 U.S.C. 1101, 42 U.S.C. 4541 and 4561 and 44 U.S.C. 3101.

1. Any information in this system may be disclosed to approved third parties for the purpose of conducting scientific research, management audits, financial audits, or program evaluations; however, such third parties may not identify, directly or indirectly, any individual patient or subject in any report of such research, audit or evaluation, or otherwise disclose patient or subject identities in any manner.

2. Any information in this system may be disclosed to the Department of Justice, or, when appropriate, to other Federal agencies, in order for the VA or another Federal agency to defend any claims against the United States arising from the treatment or counseling of an employee or family member with alcohol, drug, emotional or personal health problems.

Storage:

These records are maintained on paper documents in file folders.

These records are retrieved by the names of the individuals on whom they are maintained.

These records are maintained in locked file cabinets with access limited to the program Counselor or Coordinator.

Records are maintained for three years after the employee's last contact with the Counselor, or for three years after the employee's separation or transfer, whichever comes first. Records are destroyed by shredding or burning.

Assistant Deputy Administrator for Personnel Labor Relations (05), 810 Vermont Avenue, NW, Washington, DC 20420.

VA employees or family members wishing to inquire whether this system of records contains information about them should contact the VA Employee Alcoholism and Drug Abuse or Counseling Services Program Counselor or Coordinator who arranged for counseling or treatment. Individuals must furnish their name and date of birth for their records to be located and identified.

VA employees or family members wishing to request access to records pertaining to them should contact the VA Employee Alcoholism and Drug Abuse or Counseling Services Program Counselor or Coordinator who arranged for counseling or treatment. Individuals must furnish their name and date of birth for their records to be located and identified.

An individual must also follow the VA's Privacy Act regulations and procedures regarding verification of identity and amendment of records.

VA employees or family members wishing to request amendment to these records should contact the Program Counselor or Coordinator who arranged for counseling or treatment. Individuals must furnish their name and date of birth for their records to be located and identified.

An individual must also follow the VA's Privacy Act regulations and procedures regarding verification of identity and amendment of records.

Information in this system of records comes from the individual to whom it applies, the supervisor of the employee, if the employee was referred by a supervisor for counseling, the Program Counselors or Coordinators who recorded counseling sessions, and therapists or institutions providing treatment.

Character-based data from Ionizing Radiation Code Sheets are maintained in a registry data set at the Austin Automation Center (AAC), 1615 Woodward Street, Austin, Texas 78772. Since the data set at the AAC is not all-inclusive, i.e., narratives, signatures, etc., noted on the code sheets are not entered into this system, images of the code sheets are maintained at the Department of Veterans Affairs, Environmental Agents Service (131), 810 Vermont Avenue, NW., Washington, DC 20420. These are electronic images of paper records, i.e., code sheets, medical records, questionnaires and correspondence that are stored on optical disks.

The secure web-based data entry system is maintained by the AAC and provides retrievable images to users. The optical disk system is currently being utilized where there is no access to the secure web-based system. However, the optical disk system is scheduled to be discontinued in 2004 and all access to the Ionizing Radiation Registry (IRR) system will be through the secure web-based data entry system.

Veterans who may have been exposed to ionizing radiation while on active military duty and have had an IRR examination at a Department of Veterans Affairs (VA) medical facility under conditions described in Title 38 United States Code (U.S.C.) 1710(e)(1)(B) and 1720E. These conditions include:

1. On-site participation in a test involving the atmospheric detonation of a nuclear device at a nuclear device testing site--the Pacific Island, e.g., Bikini, New Mexico, Nevada, etc. (whether or not the testing nation was the United States);

2. Participation in the occupation of Hiroshima or Nagasaki, Japan, from August 6, 1945, through July 1, 1946;

(a) Internment as a POW in Japan during World War II which the Secretary of Veterans Affairs determines resulted in an opportunity for exposure to ionizing radiation comparable to that of veterans involved in the occupation of Hiroshima or Nagasaki, Japan;

3. Treatment with nasopharyngeal (NP) radium irradiation while in the active military, naval or air service; and

4. Participated in radiation-risk activities at the:

(a) Department of Energy gaseous diffusion plants at Paducah, KY, Portsmouth, OH, or K25 area at Oak Ridge, TN, for at least 250 days before February 1, 1992;

(b) Underground nuclear tests at Amchitka Island, AK, before January 1, 1974.

These records consist of code sheet records containing VA facility code identifier where the veteran was examined or treated; veteran's name; address; social security number; military service serial number; claim number; date of birth; telephone number; sex; report of birth defects among veteran's children or grandchildren; dates of medical examinations; consultations; radiogenic related diseases; and name and signature of examiner/physician coordinator.

In addition, there may be medical records with information relating to the examination and/or treatment, including laboratory findings on vision, hearing, blood tests, electrocardiograms, chest x-rays, urinalysis, laboratory report displays, medical certificates to support diagnosis; progress notes; military unit assignments; questionnaires; correspondence relating to veteran's exposure history; personal history, e.g., education, marital status, occupational history, family history, complaints/symptoms; personal medical history, habits, recreation, reproductive and family history, physical measurements; military discharge records; and VA claims for compensation.

Title 38, United States Code (U.S.C.) 1710(e)(1)(B) and 1720E.

The records will be used for the purpose of providing information about veterans who have had an IRR examination at a VA facility; assisting in generating hypotheses for research studies; providing management with the capability to track patient demographics, and radiogenic related diseases; and planning and delivery of health care services and associated costs. The records are used to assist in generating hypotheses for research studies. Because of the self-selected nature of the registry participants, i.e., the individuals decide themselves to be part of the registry rather than being "chosen" in a scientific manner, this group cannot be used for scientific research. However, the IRR may assist researchers by providing clues or suggestions of specific health problems that then form the basis for the design and conduct of specific scientific studies.

VA may disclose protected health information pursuant to the following routine uses where required by law, or required or permitted by 45 CFR parts 160 and 164.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of, and at the written request of, that individual.

2. Disclosure of records covered by this system, as deemed necessary and proper to named individuals serving as accredited service organization representatives, and other individuals named as approved agents or attorneys for a documented purpose and period of time, to aid beneficiaries in the preparation and presentation of their cases during the verification and/or due process procedures, and in the presentation and prosecution of claims under laws administered by VA.

3. A record containing the name(s) and address(es) of present or former members of the armed services and/or their dependents may be released from this system of records under certain circumstances:

(a) To any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, and

(b) To any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a standing written request that such name(s) or address(es) be provided for a purpose authorized by law; provided, further, that the record(s) will not be used for any purpose other than that stated in the request and that the organization, agency or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

4. Disclosure may be made to the National Archives and Records Administration (NARA) in records management inspections conducted under authority of Title 44 U.S.C.

5. Disclosure of information, excluding name and address (unless name and address is furnished by the requestor) for research purposes determined to be necessary and proper, to epidemiological and other research facilities approved by the Under Secretary for Health.

6. In order to conduct Federal research necessary to accomplish a statutory purpose of an agency, at the written request of the head of the agency, or designee of the head of that agency, the name(s) and address(es) of present or former personnel or the Armed Services and/or their dependents may be disclosed

(a) To a Federal department or agency or

(b) Directly to a contractor of a Federal department or agency. When a disclosure of this information is to be made directly to the contractor, VA may impose applicable conditions on the department, agency, and/or contractor to insure the appropriateness of the disclosure to the contractor.

7. Any information in this system may be disclosed to a Federal grand jury, a Federal court or a party in litigation, or a Federal agency or party to an administrative proceeding being conducted by a Federal agency, in order for VA to respond to and comply with the issuance of a Federal subpoena.

8. Any information in this system may be disclosed to a state or municipal grand jury, a state or municipal court or a party in a litigation, or to a state or municipal administrative agency functioning in a quasi-judicial capacity or a party to a proceeding being conducted by such agency, in order for VA to respond to and comply with the issuance of a state or municipal subpoena; provided, that any disclosure or claimant information made under this routine use must comply with the provisions of 38 CFR 1.511.

9. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

10. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission on Accreditation of Healthcare Organizations (JCAHO), College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

11. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

12. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

13. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

In 2003, the data collection process moved to a secure web-based system. Data previously recorded manually and converted to electronic format is now input through the secure VA Intranet system. Data is stored on a web server hosted by the AAC and is retrievable by the facility. Three levels of access are provided for the data that is input, using password security linked to the AAC Top Secret Security system, with mandated changes every 90 days. Data from individual facilities is uploaded nightly and stored on Direct Access Storage Devices at the AAC, Austin, Texas, and on optical disks at VA Central Office, Washington, DC. AAC stores registry tapes for disaster back up at an off-site location. VA Central Office also has back-up optical disks stored off-site. In addition to electronic data, registry reports are maintained on paper documents and microfiche.

The optical disk system is currently being utilized where there is no access to the secure web- based system. The optical disk system is scheduled to be discontinued in 2004 and all access to the IRR system will be through the secure web-based data entry system. Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Documents are retrieved by name of veteran, social security number and service serial number.

Access to records at VA Central Office is only authorized to VA personnel on a "need to know" basis. Records are maintained in manned rooms during working hours. During non-working hours, there is limited access to the building with visitor control by security personnel. Registry data maintained at the AAC can only be updated by authorized AAC personnel.

Data is securely located behind the VA firewall and only accessible from the VA Local Area Network (LAN) through the VA Intranet. Read access to the data is granted through a telecommunications network to authorized VA Central Office personnel. AAC reports are also accessible through a telecommunications network on a read-only basis to the owner (VA facility) of the data. Access is limited to authorized employees by individually unique access codes which are changed periodically.

Physical access to the AAC is generally restricted to AAC staff, VA Central Office, custodial personnel, Federal Protective Service and authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted. Backup records stored off-site for both the AAC and VA Central Office are safeguarded in secured storage areas. A disaster recovery plan is in place and system recovery is tested at an off-site facility in accordance with established schedules.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Program Chief for Clinical Matters, Office of Public Health and Environmental Hazards (13) (for clinical issues) and Management/Program Analyst, Environmental Agents Service (131) (for administrative issues), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA facility where medical care was provided or submit a written request to the Program Chief for Clinical Matters, Office of Public Health and Environmental Hazards (13) or the Management/Program Analyst, Environmental Agents Service (131), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420. Inquiries should include the veteran's name, social security number, service serial number, and return address.

An individual who seeks access to records maintained under his or her name may write or visit the nearest VA facility or write to the Program Chief for Clinical Matters, Office of Public Health and Environmental Hazards (13) or the Management/Program Analyst, Environmental Agents Service (131), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420.

Refer to previous item "Record Access Procedures."

VA patient medical records, various automated record systems providing clinical and managerial support to VA health care facilities, the veteran, family members, and records from Veterans Benefits Administration, Department of Defense, Department of the Army, Department of the Air Force, Department of the Navy and other Federal agencies.

Office of Inspector General (53C), Information Technology Division, Department of Veterans Affairs, 801 I Street, NW., Washington, DC 20420.

The following category of individuals will be covered by the system: All personnel assigned to Office of Inspector General (OIG).

The Management Information System contains the following categories of records: Time and Attendance, Phone Directory, Awards, Training, Travel, and Personnel (which may include personnel suitability records and pre-employment inquiry records).

Records (or information contained in records) may include: (1) Individual's name, address and telephone contact information; (2) social security number; (3) date of birth; (4) service computation date; (5) career status; (6) assigned station; (7) job series; (8) education; (9) grade; (10) type of case; (11) work assignments; (12) travel; (13) experience; (14) training; and (15) audit, hotline, health care inspections and investigation case tracking data (e.g., case number, budgeted and actual staff days, target and completion dates, findings and results).

Personnel suitability records may contain investigative information about an individual's character, conduct and behavior in the community where he or she lives or lived; arrests and convictions for violations of law; reports of interviews with the subject and with present and former supervisors; co-workers, associates, neighbors, educators, etc., reports about the qualifications of an individual for a specific position and correspondence relating to adjudication matters; reports of inquiries with law enforcement agencies, employers, educational institutions attended, and credit reporting agencies; reports of action after Office of Personnel Management (OPM) or Federal Bureau of Investigation (FBI) full field investigations; and other information developed from the above.

Pre-Employment Inquiry Records: These records may contain information relating to an applicant's qualifications for employment in terms of character, reputation, and fitness; including letters of reference, responses to pre-employment inquiries, qualifications and character information; reports of inquiries with law enforcement agencies, employers, educational institutions attended, and credit reporting agencies; and other information which may relate to the specific selection factors associated with the position sought.

Title 5, United States Code, Appendix 3.

The records and information about individual OIG employees are used for various management and human resources objectives. Case tracking data is used to measure employee productivity. Employee contact information is maintained to allow employees to be contacted in emergency situations. Training records are used to make certain the employees complete required training assignments and to maintain a record of each employee's training activities for career development and continuing professional education requirements.

1. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office that is made at the request of that individual.

2. Disclosure may be made to the National Archives and Records Administration (NARA) in records management activities and inspections conducted under authority of Title 44, United States Code.

3. Disclosure may be made to the Department of Justice including United States Attorneys, or in a proceeding before a court, adjudicative body, or other administrative body when the litigation or adjudicative or administrative process is likely to affect VA, its employees, or any of its components, or when VA, its employees, or any of its components is a party to the litigation process, or has an interest in the litigation or process and the use of these records is deemed by VA to be relevant and necessary to the litigation or process, provided that the disclosure is compatible with the purpose for which the records were collected.

4. Any information in this system, may be disclosed to a Federal, state, or local agency maintaining civil or criminal violation records or other pertinent information such as prior employment history, prior Federal employment background investigations, and/or personal or educational background in order for VA to obtain information relevant to the hiring, transfer, or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

5. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and dependents to a Federal or state agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, rule or order issued pursuant thereto.

6. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

7. Information may be disclosed to officials of the Merit Systems Protection Board, and the Office of Special Counsel, when properly requested in connection with appeals, special studies of the civil service and other merit systems, reviews of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in Title 5, United States Code, Sections 1205 and 1206, or as may be authorized by law.

8. Disclosure of any information within this system may be made when it is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised and VA has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interest, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the compromised information; and the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

9. VA may disclose information to individuals, organizations, private or public agencies, or other entities with which VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

Records and information are stored electronically in the VA OIG's MCI (Master Case Index) databases and servers at the OIG's office at 801 I Street, NW., Washington, DC, in the office of the Information Technology Division. Backup records are stored on magnetic disc, tape, and CD-ROM and may also be retained in hard copy format in secure file folders. Information can be retrieved based on computer searches of various data elements, including, but not limited to, MCI case numbers, transaction numbers, key words, and names of individual OIG employees. Electronic data is maintained indefinitely as described above. Policy for the disposal of records as well as a retention schedule is being developed by the OIG's Office of Management and Administration. Information on awards and travel is maintained so that OIG managers have readily available relevant information about their employees in these areas.

Storage:

Records and information are stored electronically in databases and servers at VA OIG headquarters in Washington, DC. Backup records are stored on magnetic disc, tape, and CD-ROM and are also retained in hard copy format in secure file folders by the OIG component with responsibility for the specific category of records. All records about OIG personnel are maintained by the OIG's Human Resources Management Division.

Records are retrieved by Social Security Number, case number, work assignment, or name.

Information in the system is protected from unauthorized access through administrative, physical, and technical safeguards. Categories of records are restricted to those with an official need to know the information. Only VA OIG supervisors, for example, can access the Awards data, and only for employees within their supervisory chain. Access to data is also limited by means of features such as "read-only access," i.e., where the person with access can read but not enter or change the information in the system. Safeguards also include password protection features and cipher locks securing the physical area. Some information in the system is restricted to employees of the Human Resources Management Division.

Records will be maintained and disposed of in accordance with a records disposition authority approved by the Archivist of the United States.

Mailing address: Director, Information Technology Division (53C), Department of Veterans Affairs, Office of Inspector General, 810 Vermont Avenue, NW., Washington, DC 20420. Physical address: Director, Information Technology Division (53C), Department of Veterans Affairs, Office of Inspector General, 801 I Street, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained under his or her name in this system must furnish a written request or apply in person to the Assistant Inspector General for Management and Administration (53), Department of Veteran Affairs, Office of Inspector General, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who seeks access to, wishes to determine the contents of such records, or wishes to contest records maintained under his or her name in this system, must submit a written request to the Assistant Inspector General for Management and Administration (53), Department of Veterans Affairs, Office of Inspector General, 810 Vermont Ave., NW., Washington, DC 20420.

(See records access procedures above).

Individual employees, supervisors, official personnel folder, other personnel documents, individual applications, and forms.

Active records will be maintained at HTM, Scholarships and Nursing Education Office, Veterans Health Administration, Department of Veterans Affairs, 1250 Poydras Street, Suite #1000, New Orleans, LA, 70113. Complete records will be maintained only at this address.

Individuals who apply for and are awarded scholarships under the provisions of the Veterans Health Administration Health Professional Scholarship Program (HPSP) in a field leading to an appointment under paragraph (1) or (3) of section 7401 of Title 38, and individuals who apply for and are awarded scholarships under the provisions of the Veterans Health Administration Visual Impairment and Orientation and Mobility Professional Scholarship Program (VIOMPSP) in a program of study leading to an appointment as a qualified blind rehabilitation specialist.

Records (or information contained in records) in this system may include: personal identification information related to the application material, to award processes, to employment, to obligated service, and to requests for waivers or suspensions of obligated service or financial indebtedness to VA. The application for an HPSP or VIOMPSP award includes the applicant's full name, mailing and email addresses, employing facility number (if applicable), home and work telephone numbers, Social Security number, an alternative person of contact, job title, current education level, degree sought, description of the academic program covered by the scholarship, name and address of the academic institution, the starting and completion dates of the employee's academic program, awards and activities. Records may include memoranda submitted by the employees, calculations for the service obligations, copies of letters and memoranda from employees making the requests and in correspondence to employees and appropriate local program officials delineating the decisions on such requests. Records for applicants selected will also include the award amount, the name of the participant's financial institution, account number and routing number, the obligated service incurred, and the location, start, and end dates of the service obligation period.

38 U.S.C. §§ 7611-7619, 7635-7636.

These records support the HPSP and VIOMPSP. The HPSP was established by Public Law 96-330, and awarded scholarships to 3,330 students between 1982 through 1995 earning baccalaureate and master's degrees in nursing and other health professions. Public Law 111-163, signed on May 5, 2010, reauthorized the HPSP through December 31, 2014, and established the VIOMPSP. The records and information may be used for determining and documenting individual applicant eligibility for scholarship awards, selecting applicants to receive awards, calculating the service commitments for program participants, ensuring program financial accountability, monitoring educational progress of participants, monitoring the employment status of scholarship participants during their periods of obligated service, terminating the employee from the program (upon completion or breach), and evaluating and reporting program results and effectiveness. The information would also be used to determine the financial liability of participants who breach their HPSP or VIOMPSP agreement.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the request of that individual.

2. Any information in this system may be disclosed to a Federal, state, or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision on: the hiring, transfer or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by that agency.

3. Any information in this system may be disclosed to a Federal, state, or local agency maintaining civil or criminal violation records, or other pertinent information such as prior employment history, prior Federal employment background investigations, and personal or educational background in order for VA to obtain information relevant to the hiring, transfer or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit.

4. Any information in this system may be disclosed to a Federal agency in order to determine if an applicant has an obligation for service under another Federal program, thus rendering the applicant ineligible for a VA scholarship (38 U.S.C. 4142(a)(4)).

5. Any information in this system pertaining to individuals eligible for scholarships may be disclosed to educational institutions in order to assist in the administration of this program.

6. Award payment information may be disclosed to the Department of Treasury to permit delivery of scholarship-related checks to students and to educational institutions.

7. Any information in this system, including available identifying information regarding the debtor, such as name, place of birth, and date of birth of the debtor may be disclosed under this routine use to Federal, state, or consumer reporting agencies in order to obtain current name, address, locator, and credit report in connection with any proceeding for the collection of an amount owed to the United States by virtue of an individual's participation in the VA Health Professional Scholarship Program and Visual Impairment and Orientation and Mobility Professional Scholarship Program.

8. Any information in this system may be disclosed to the Department of Justice (DOJ), including U.S. Attorneys, in order for VA to respond to pleadings, interrogatories, orders or inquiries from DOJ, and to supply DOJ with information in any phase of litigation or in any case or controversy involving VA.

9. Any information in this system may be disclosed to educational institutions, previous employers or individuals providing references to verify the authenticity of the application.

10. Records from this system of records may be disclosed to a Federal Agency or to a state or local government licensing board and to the Federation of State Medical Boards or a similar non-government entity which maintains records concerning individuals' employment histories or concerning the issuance, retention, or revocation of licenses, certifications, or registration necessary to practice an occupation, profession, or specialty, in order for the Agency to obtain information relevant to an Agency decision concerning the hiring, retention, or termination of an employee or to inform a Federal Agency, licensing boards, or the appropriate nongovernment entities about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

11. Identifying information in this system, including name, address, Social Security number, and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring privileging/reprivileging, retention, or termination of the applicant or employee.

12. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank or State Licensing Board in the state(s) in which a practitioner is licensed, in which the VA facility is located, or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence, or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

13. Disclosure may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of Title 44 U.S.C.

14. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement, or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

15. VA may disclose on its own initiative any information in the system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

16. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

17. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when: (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Records are maintained on paper, electronic media, and computer printouts by HTM. Records stored on electronic media are maintained on a VA-approved and managed, password protected, secure local area network (LAN) located within HTM office spaces and safeguarded as described above.

Records are retrievable by use of the award number, or an equivalent participant account number assigned by HTM, Social Security number, and the name of the individual.

Access to the basic file in HTM is restricted to authorized VA employees and vendors. Access to the office spaces where electronic media is maintained within HTM is further restricted to specifically authorized employees and is protected by contracted building security services. Records (typically computer printouts) at HTM will be kept in locked files and made available only to authorized personnel on a need to-know basis. During non-working hours the file is locked and the building is protected by contracted building security services. Records stored on electronic media are maintained on a VA-approved and managed, password protected, secure LAN located within HTM office spaces and safeguarded as described above.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Director, Healthcare Talent Management (10A2A8), Veterans Health Administration, Department of Veterans Affairs, 1250 Poydras Street, Suite #1000, New Orleans, Louisiana 70113.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such records, should submit a written request or apply in person to the Director, Healthcare Talent Management (10A2A8), Veterans Health Administration, Department of Veterans Affairs, 1250 Poydras Street, Suite #1000, New Orleans, Louisiana 70113.

Individuals seeking information regarding access to and contesting of VA records in this system may write, call, or visit the Director, Healthcare Talent Management (10A2A8), Veterans Health Administration, Department of Veterans Affairs, 1250 Poydras Street, Suite #1000, New Orleans, Louisiana 70113. The telephone number is (504) 565-4900.

(See Record Access Procedures above.)

Information contained in the records is obtained from the individual, references given in application material, educational institutions, VA medical facilities, other Federal agencies, state agencies, and consumer reporting agencies.

Paper records are maintained in the Office of the Executive Secretary (001B), Office of the Secretary, Department of Veterans Affairs (VA) Central Office (VACO), 810 Vermont Avenue, NW., Washington, DC 20420. Copies of some documents may be located in other offices throughout VACO and occasionally at field facilities, i.e. Veterans Health Administration VA medical centers and Veterans Integrated Service Network offices; Veterans Benefits Administration regional offices and Area Offices; National Cemetery Administration national cemeteries and Memorial Service Network offices; etc. Address locations for VA field facilities are listed in Appendix 1 of the biennial publication of the VA Privacy Act Issuances.

Individuals who voluntarily provide personal contact information when submitting correspondence or other documents to the Department, including, but not limited to: Members of Congress and their staff, officials and representatives of other Federal agencies, State, local and tribal governments, foreign governments, and veterans service organizations; representatives of private or commercial entities; veterans and other VA beneficiaries; VA employees; and other individuals who correspond with the VA Secretary and Deputy Secretary and other VA officials.

Full name, postal address, e-mail address, phone and fax numbers of individuals corresponding with the Department, the name of the organization or individual being represented, as well as supporting documents. Information provided may include personal information.

Title 38, United States Code, section 501.

Purpose:

To permit VA to identify individuals and/or organizations who have submitted correspondence or documents to VA. The System of Records also contains documents generated within VA which may contain the names, addresses and other identifying information of individuals who conduct business with VA.

1. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the records on behalf of and at the written request of the individual.

2. Disclosure may be made to the National Archives and Records Administration in records management inspections conducted under authority of title 44 U.S.C.

3. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm (have already determined this does not make sense; see my possible solution in the preamble). This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

(a) Storage:

Records are maintained on paper in the Office of the Executive Secretary (001B), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Records are maintained by subject and unique number generated by an automated system. In addition, records for Members of Congress are maintained in alphabetical order by last name.

Hard copy records are maintained in a controlled facility, where physical entry is restricted by the use of locks, guards, and/or administrative procedures. Access to records is limited to those employees who require the records to perform their official duties consistent with the purpose for which the information was collected. All personnel whose official duties require access to the information are trained in the proper safeguarding and use of the information.

Records will be maintained and disposed of, in accordance with records disposition authority, approved by the Archivist of the United States.

Gemma Button, Deputy Executive Secretary, Office of the Executive Secretary (001B), Office of the Secretary, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals seeking to determine whether this System of Records contains information about them should address written inquiries to the Office of the Executive Secretary (001B), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals seeking access to or contesting the contents of records about themselves contained in this System of Records should address a written request, including full name, address and telephone number to the Office of the Executive Secretary (001B), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

(See record access procedures above.)

Records in this system are derived from processing replies to correspondence, and other inquiries that originate from Members of Congress; other Federal agencies; State, local and tribal governments; foreign governments, veterans service organizations; representatives of private or commercial entities; veterans and their beneficiaries; VA employees; and other individuals who correspond with VA or one of its components. Records maintained include material received, background information compiled and/or response sent.

There are no exemptions being claimed for this system.

Active records are maintained at the Department of Veterans Affairs (VA) Central Office, 810 Vermont Avenue, NW., Washington, DC 20420; VA field facilities; VA Austin Automation Center, 1615 East Woodward Street, Austin, Texas 78772; VA Shared Service Center, 3401 SW 21st Street, Topeka, Kansas 66604; and offices of contractors or subcontractors who may maintain these records. When VA determines that portions of these records need to be maintained at different locations or that copies of these records need to be maintained at more than one location, e.g., at the Shared Service Center and administrative offices closer to where employees actually work, such records are covered by this system. Inactive records are retired to the National Personnel Records Center, 111 Winnebago Street, St. Louis, Missouri 63118. Records not considered long-term records, but which may be retained in this system or elsewhere during employment, and which are also included in this system, may be retained for a period of time after the employee leaves service. However, such records will be disposed of in accordance with the procedures for retention and disposal outlined below. The phrase "long-term" record describes records that are filed on the right side of the Merged Records Personnel Folder (MRPF) (Standard Form 66-C).

Note 1: It is not VA's intent to limit this system of records to those records physically within the MRPF. Records may be filed in other folders located in offices other than where the MRPF is located, e.g., working files that supervisors or other agency officials use that are derived from 76VA05 may be kept in a more convenient location.

Current and former employees appointed under 38 U.S.C. 7306, 7401(1), 7401(3), and 38 U.S.C. 7405 except those appointed on a fee or without compensation basis, and residents appointed under 38 U.S.C. 7406 whose stipends and fringe benefits are not centrally administered under the provisions of 38 U.S.C. 7406(c). This includes employees such as physicians, dentists, podiatrists, optometrists, nurses, nurse anesthetists, physician assistants, expanded-function dental auxiliaries, certified respiratory therapy technicians, registered respiratory therapists, licensed physical therapists, licensed practical or vocational nurses, occupational therapists, and pharmacists. Current and former employees appointed under 38 U.S.C. Chapter 78 to positions in the Veterans Canteen Service are covered by this system.

All categories of records may include identifying information, such as names(s), date of birth, home address, mailing address, Social Security number, and telephone number(s). Records in this system are:

a. Records reflecting work experience, licensure, credentials, educational level achieved, and specialized education or training occurring outside of Federal service.

b. Records reflecting Federal service and documenting work experience, education, training, and/or awards received while employed. Such records contain information about past and present positions held; grades; salaries; duty station locations; and notices of all personnel actions, such as appointments, transfers, reassignments, details, promotions, demotions, staffing adjustments or reductions-in-force, resignations, separations, suspensions, removals, retirements, and approval of disability retirement applications.

c. Records relating to an Intergovernmental Personnel Act assignment or Federal-private sector exchange program.

d. Records regarding Government-sponsored training or participation in employee development programs designed to broaden an employee's work experiences or for the purposes of advancement.

e. Printouts of information from automated personnel systems, e.g., information from the Personnel and Accounting Pay System-VA (27VA047).

f. Records reflecting enrollment or declination of enrollment in the Federal Employees' Group Life Insurance Program and Federal Employees' Health Benefits Program as well as forms showing designations of beneficiary.

g. Elections to participate in the Thrift Savings Plan, Notices that Thrift Savings Plan Contributions cannot be made because a financial hardship withdrawal has been issued and transcripts of Thrift Savings Plan changes approved for use by the Federal Retirement Thrift Investment Board.

h. Records relating to designations for lump-sum leave benefits.

i. Records relating to access to classified information and other nondisclosure agreements.

j. Records related to certification of outside professional activities prior to enactment of the Veterans Health Care Eligibility Reform Act of 1996, Pub. L. 104-262, dated October 9, 1996.

38 U.S.C. 501(a), 7304, 7406(c)(1), and 7802.

The personnel records in these files are the official repository of the records, reports of personnel actions and the documents and papers associated with these actions. The personnel action reports and other documents give legal force and effect to personnel transactions and establish employee rights and benefits under pertinent laws and regulations governing Federal employment. They provide the basic source of factual data about a person's Federal employment while in the service and after his or her separation. Records in this system have various uses, including screening qualifications of employees; determining status, eligibility, and rights and benefits under pertinent laws and regulations governing Federal employment; computing length of service; and other information needed to provide personnel services.

1. To disclose information to Government training facilities (Federal, State, and local) and to non-Government training facilities (private vendors of training courses or programs, private schools, etc.) for training purposes.

2. To disclose information to educational institutions about the appointment of their recent graduates to VA positions. These disclosures are made to enhance recruiting relationships between VA and these institutions.

3. To provide college and university officials with information about students who are working at VA to receive academic credit for the experience.

4. To disclose to the following agencies information needed to adjudicate retirement, insurance or health benefits claims: Department of Labor, Social Security Administration, Department of Defense, Federal agencies having special civilian employee retirement programs, and state, county, municipal, or other publicly recognized charitable or income security administration agencies (e.g., State unemployment compensation agencies), when necessary to adjudicate a claim under the retirement, insurance or health benefits programs of the Office of Personnel Management or an agency cited above. Information may also be disclosed to agencies to conduct an analytical study or audit of benefits being paid under such programs.

5. To disclose to the Office of Federal Employees' Group Life Insurance information necessary to verify election, declination, or waiver of regular and/or optional life insurance coverage or eligibility for payment of a claim for life insurance.

6. To disclose to health insurance carriers contracting with the Office of Personnel Management to provide a health benefits plan under the Federal Health Benefits Program, information necessary to identify enrollment in a plan, to verify eligibility for payment of a claim for health benefits, or to carry out the coordination or audit of benefits provisions of such contracts.

7. To disclose information to a Federal, State, or local agency for determination of an individual's entitlement to benefits in connection with Federal Housing Administration programs.

8. To disclose relevant information to third parties considering VA employees for awards or recognition and to publicize information about such awards or recognition. This may include disclosures to public and private organizations, including news media, which grant or publicize employee awards or honors.

9. To disclose information about incentive awards and other awards or honors granted by VA. This may include disclosure to public and private organizations, including news media, which publicize such recognition.

10. To disclose the information listed in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

11. VA may, on its own initiative, disclose relevant information to a Federal agency (including Offices of the Inspector General), State, or local agency responsible for investigating, prosecuting, enforcing, or implementing a statute, rule, regulation if there is reason to believe that a violation may have occurred. This routine use does not authorize disclosures in response to requests for information for civil or criminal law enforcement activity purposes, nor does it authorize disclosure of information in response to court orders. Such requests must meet the requirements of 5 U.S.C. 552a(b)(7) or (b)(11), as applicable.

12. To disclose pertinent information to any source when necessary to obtain information relevant to a conflict-of-interest investigation or determination.

13. To disclose information to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of the purposes(s) of the request, and to identify the type of information requested), when necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, or the issuance of a license, grant, or other benefit.

14. To disclose to an agency in the executive, legislative, or judicial branch, or the District of Columbia's Government in response to its request, or at the initiation of VA, information in connection with the hiring of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, the issuance of a license, grant or other benefit by the requesting agency, or the lawful statutory or administrative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's decision.

15. To disclose relevant information to Federal and non-Federal agencies (i.e., State or local governments), and private sector organizations, boards, bureaus, or commissions (e.g., the Joint Commission on Accreditation of Healthcare Organizations) when such disclosures are required to obtain accreditation or other approval ratings.

16. To disclose information to the Office of Management and Budget at any stage in the legislative coordination and clearance process in connection with private relief legislation as set forth in OMB Circular No. A-19.

17. To provide information to a congressional office from the records of an individual in response to an inquiry from the congressional office made at the request of the individual.

18. VA may, on its own initiative, disclose information to another Federal agency, court, or party in litigation before a court or other administrative proceeding conducted by a Federal agency, if VA is a party to the proceeding and VA needs to disclose such information to protect its interests.

19. To disclose information to the National Archives and Records Administration (NARA) for records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

20. To disclose to persons engaged in research and survey projects information necessary to locate individuals for personnel research or survey response, and to produce summary descriptive statistics and analytical studies in support of the function for which the records are collected and maintained, or for related workforce studies. While published statistics and studies do not contain individual identifiers, in some instances, the selection of elements of data included in the study may be structured in such a way as to make the data individually identifiable by inference.

21. To provide an official of another Federal agency information needed in the performance of official duties related to reconciling or reconstructing data files in support of the functions for which the records were collected and maintained.

22. When an individual to whom records pertain is mentally incompetent or under other legal disability, information in the individual's records may be disclosed to any person or entity responsible for managing the individual finances to the extent necessary to ensure payment of benefits to which the individual is entitled.

23. To disclose to the Department of Defense specific civil service employment information required under law on individuals identified as members of the Ready Reserve, to ensure continuous mobilization readiness of Ready Reserve units and members, and to identify characteristics of civil service retirees for national mobilization purposes.

24. To disclose information to officials of the Department of Defense, National Oceanic and Atmospheric Administration, U.S. Public Health Service, and the U.S. Coast Guard needed to effect any adjustments in retired or retainer pay required by the dual compensation provisions of 5 U.S.C. 5532.

25. To disclose information to officials of the Merit Systems Protection Board, or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

26. To disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

27. To disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

28. To disclose to prospective non-Federal employers, the following information about a specifically identified current or former employee: Tenure of employment; civil service status; length of service in VA and the Government; and when separated, the date and nature of action as shown on the Notification of Personnel Action-Standard Form 50 (or authorized exception).

29. Records from this system of records may be disclosed to a Federal, State, or local government agency or licensing board and/or to the Federation of State Medical Boards or a similar non- government entity. These entities maintain records concerning an individual's employment or practice histories or concerning the issuance, retention or revocation of licenses or registration necessary to practice an occupation, profession or specialty. Disclosures may be made for the Agency to obtain information determined relevant to an Agency's decision concerning the hiring, retention, or termination of an employee. Disclosures may also be made to inform licensing boards or the appropriate non-governmental entities about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional practice as to raise reasonable concern for the health and safety of patients.

30. To disclose relevant information to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

31. To disclose hiring, performance, or other personnel-related information to any facility with which there is, or there is proposed to be, an affiliation, sharing agreement, contract, or similar arrangement, for purposes of establishing, maintaining, or expanding any such relationship.

32. Identifying information in this system, including name, address, Social Security number, and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention, or termination of the applicant or employee.

33. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank or to a State or local government licensing board which maintains records concerning the issuance, retention, or revocation of licenses, certifications, or registrations necessary to practice an occupation, profession or specialty when under the following circumstances, through peer review process that is undertaken pursuant to VA policy, negligence, professional incompetence, responsibility for improper care, and/or professional misconduct has been assigned to a physician or licensed or certified health care practitioner: (1) On any payment in settlement (or partial settlement of, or in satisfaction of a judgement) in a medical malpractice action or claim; or, (2) on any final decision that adversely affects the clinical privileges of a physician or practitioner for a period of more than 30 days.

34. Relevant information from this system of records concerning the departure of a former VA employee, who is subject to garnishment pursuant to a legal process as defined in 5 U.S.C. 5520a, as well as the name and address of the designated agent for the new employing agency or the name and address of any new private employer, may be disclosed to the garnishing party (garnisher). Information from this system of records may be disclosed in response to legal processes, including interrogatories, served on the agency in connection with garnishment proceedings against current or former VA employees under 5 U.S.C. 5520a.

35. To disclose information to contractors, subcontractors, grantees, or others performing or working on a contract, grant or cooperative agreement for the Federal government, provided disclosure is in the interest of the Government and the information to be disclosed is relevant and necessary for accomplishing the intended uses of the information and necessary to perform services under the contract, grant or cooperative agreement.

36. To disclose to a spouse or dependent child (or court-appointed guardian thereof) of a VA employee enrolled in the Federal Employees Health Benefits Program, upon request, whether the employee has changed from a self-and-family to a self-only health benefits enrollment.

37. To disclose to the Federal Retirement Thrift Investment Board information concerning an employee's election to participate in the Thrift Savings Plan, the employee's ineligibility to make contributions to the Thrift Savings Plan because a financial hardship in-service withdrawal has been issued, or information from a transcript of thrift savings plan changes that has been approved by the Federal Retirement Thrift Investment Board.

38. Information from this system of records will be disclosed to the Healthcare Integrity and Protection Data Base as required by section 1122E of the Social Security Act (as added by Sec. 221(a) of Pub. L. 104-191) and the associated implementing regulations issued by the Department of Health and Human Services, 45 CFR Part 61. For example, VA is required to report adjudicated adverse personnel actions based on acts or omissions that either affected or could have affected the delivery of health care services.

39. VA may disclose information from this system of records to a court, administrative entity, or custodial parent of a child in order to provide documentation of payroll deductions for child healthcare insurance carriers in order to enroll employees and their children in healthcare insurance plans in accordance with Public Law 106-394.

Storage:

These records may be maintained in file folders, on lists and forms, on microfilm or microfiche, and in computer processable storage media.

These records may be retrieved using various combinations of name, birth date, Social Security number, or identification number of the individual on whom they are maintained.

Access to areas where these records are maintained is restricted to VA employees, contractors, or subcontractors on a "need to know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. File areas are locked after normal duty hours and are protected from outside access by the Federal Protective Service or other types of alarm systems.

Access to the VA Austin Automation Center and VA Shared Service Center are restricted to authorized VA employees and authorized representatives of vendors. Access to computer rooms within these facilities is further restricted to especially authorized VA personnel and vendor personnel.

Access to computerized records is limited through the use of access codes and entry logs. Additional protection is provided by electronic locking devices, alarm systems, and guard services.

Electronic data is made available to VA field facilities via VA's Intranet. Strict control measures are enforced to ensure that disclosure is limited to the individual on whom the record is being maintained or on a "need to know" basis. Security devices (e.g. passwords, firewalls) are used to control access by VA users to Internet services, and to shield VA networks and systems from outside the firewall.

The Merged Personnel Records Folder (MPRF) is maintained for the period of the employee's service in VA and is then transferred to the National Personnel Records Center (NPRC) for storage, or, as appropriate, to the next employing Federal agency. Other records are either retained at VA for various lengths of time in accordance with the National Archives and Records Administration records schedules or destroyed when they have served their purpose or the employee leaves VA.

a. VA maintains the MPRF as long as VA employs the individual. Within 90 days after the individual separates from VA's employment, the MPRF is sent to the NPRC for long-term storage. The MPRF of a retired employee or an employee who dies in service is sent to the Records Center within 120 days of the retirement or death.

b. Records in this system must be maintained and disposed of in accordance with General Records Schedule 1, and VA Records Control Schedule 10-1, the Office of Personnel Management Guide to Federal Recordkeeping, and the Memorandum of Understanding concerning this subject between VA, the Office of Personnel Management, and the National Archives and Records Administration.

Deputy Assistant Secretary for Human Resources Management (05), Department of Veterans Affairs, 810 Vermont Avenue, NW, Washington, DC 20420.

Individuals wishing to inquire whether this system of records contains information about them should contact the appropriate office as follows:

a. Federal employees should contact the responsible official (as designated by their agency) regarding records in this system.

b. Former Federal employees should contact the National Personnel Records Center (Civilian), 111 Winnebago Street, St. Louis, Missouri 63118, regarding the records in this system. Individuals must furnish the following information so their records can be located and identified: full name(s), date of birth, Social Security number, last employing agency (including duty station, when applicable), and approximate dates of employment. All requests must be signed.

(See Notification Procedure.)

Current and former VA employees wishing to request amendment of their records should contact the Director, Department of Veterans Affairs Shared Service Center (00), 3401 SW 21st Street, Topeka, Kansas 66604. Individuals must furnish the following information for their records to be located and identified: Full name(s), date of birth, Social Security number, and signature. To facilitate identification of records, former employees must also provide the name of their last Department of Veterans Affairs facility and approximate dates of employment.

Information in this system of records is provided by the individual employee, examining physicians, educational institutions, VA officials, and other individuals or entities; e.g., job references and supporting statements; testimony of witnesses; and correspondence from organizations or persons, e.g., licensing boards.

Records are maintained at each Department of Veterans Affairs (VA) health care facility. Address locations for VA facilities are listed in VA Appendix 1 biennial publication of VA system of records. In addition, information from these records or copies of records may be maintained at the Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420 and/or Veterans Integrated Service Network (VISN) Offices. Records for those health care providers who are contractors in a VA health care facility, or to VA for the delivery of health care to veterans and are credentialed by the contractor in accordance with Veterans Health Administration (VHA) policy, where credentialing information is received by VHA facilities, it will be maintained in accordance with this notice and VHA policy. Electronic copies of records may be maintained by VHA Office of Quality, Safety and Value (OQSV), a component thereof, or a contractor or subcontractor of VHA/OQSVOQP. Back-up copies of the electronic data warehouse are maintained at off-site locations.

The records include information concerning health care providers currently or formerly employed or otherwise utilized by VHA and individuals who apply to VHA for employment and are considered for employment or appointment as health care providers. These records will include information concerning individuals who through a contractual or other agreement may be, or are, providing health care to VA patients. This may include, but is not limited to, audiologists, dentists, dietitians, expanded-function dental auxiliaries, licensed practical or vocational nurses, nuclear medicine technologists, nurse anesthetists, nurse practitioners, registered nurses, occupational therapists, optometrists, clinical pharmacists, licensed physical therapists, registered kinesiotherapists, physician assistants, physicians, podiatrists, psychologists, registered respiratory therapists, certified respiratory therapy technicians, diagnostic and therapeutic radiology technologists, social workers, and speech pathologists.

The records in the system consist of

information related to:

(1) The credentialing (the review and verification of an individual's qualifications for employment or utilization, which includes licensure, registration or certification, professional education and training, employment history, experience, appraisals of past performance, health status, etc.) of applicants who are considered for employment and/or appointment, for providing health services under a contract or other agreement, and/or for appointment to the professional staff at a VHA health care facility.

(2) The privileging (the process of reviewing and granting or denying a provider's request for clinical privileges to provide medical or other patient care services, within well-defined limits, which are based on an individual's professional license, registration or certification, experience, training, competence, health status, ability, and clinical judgment) health care providers who are permitted by law and by the medical facility to provide patient care independently and individuals whose duties and responsibilities are determined to be beyond the normal scope of activities for their profession;

(3) The periodic reappraisal of health care providers' professional credentials and the reevaluation of the clinical competence of providers who have been granted clinical privileges; and/or

(4) Records generated as part or result of accessing and reporting to the National Practitioner Data Bank (NPDB), the Health Integrity and Protection Data Bank, and the Federation of State Medical Boards (FSMB).

The records may include individually identifiable information (e.g., name, date of birth, gender, Social Security number, national provider number and associated taxonomy codes, and/or other personal identification number), address information (e.g., home and/or mailing address, home telephone number, e-mail address, facsimile number), biometric data, information related to education and training (e.g., name of medical or professional school attended and date of graduation, name of training program, type of training, dates attended, and date of completion). The records may also include information related to: the individual's license, registration or certification by a State licensing board and/or national certifying body (e.g., number, expiration date, name and address of issuing office, status including any actions taken by the issuing office or any disciplinary board to include previous or current restrictions, suspensions, limitations, or revocations); citizenship; honors and awards; type of appointment or utilization; service/product line; professional society membership; professional performance, experience, and judgment (e.g., documents reflecting work experience, appraisals of past and current performance and potential); educational qualifications (e.g., name and address of institution, level achieved, transcript, information related to continuing education); Drug Enforcement Administration and/or State controlled dangerous substance certification (e.g., current status, any revocations, suspensions, limitations, restrictions); information about mental and physical status; evaluation of clinical and/or technical skills; involvement in any administrative, professional or judicial proceedings, whether involving VA or not, in which professional malpractice on the individual's part is or was alleged; any actions, whether involving VA or not, which result in the limitation, reduction, revocation, or acceptance of surrender or restriction of the individual's clinical privileges; and, clinical performance information that is collected and used to support a determination of an individual's request for clinical privileges. Some information that is included in the record may be duplicated in an employee's official personnel folder.

Title 38 U.S.C. section 501(a)

and section 7304(a)(2).

The information may be used for: Verifying the individual's credentials and qualifications for employment or utilization, appointment to the professional staff, and/or clinical privileges; advising prospective health care entity employers, health care professional licensing or monitoring bodies, the NPDB, or similar entities or activities of individuals covered by this system; accreditation of a facility by an entity such as the Joint Commission; audits, reviews and investigations conducted by staff of the health care facility, the Veterans Integrated Service Network (VISN) Directors and Division Offices, VA Central Office, VHA program offices, and the VA Office of Inspector General; law enforcement investigations; quality assurance audits, reviews and investigations; personnel management and evaluations; employee ratings and performance evaluations; and, employee disciplinary or other adverse action, including discharge. The records and information may be used for statistical analysis, to produce various management reports, evaluate services, collection, distribution and utilization of resources, and provide clinical and administrative support to patient medical care.

1. A record from this system of records may be disclosed to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of the purpose(s) of the request, and to identify the type of information requested), when necessary to obtain information relevant to a Department decision concerning the hiring or retention of an employee, the issuance or reappraisal of clinical privileges, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, the issuance of a license, grant, or other benefits; or in response to scarce or emergency needs of the Department or other entities when specific skills are required.

2. A record from this system of records may be disclosed to an agency in the executive, legislative, or judicial branch, or the District of Columbia's Government in response to its request, or at the initiation of VA, information in connection with the hiring of an employee, appointment to the professional staff, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, the issuance of a license, grant, or other benefit by the agency, or the lawful statutory or administrative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's decision; or at the initiative of VA, to the extent the information is relevant and necessary to an investigative purpose of the agency.

3. Disclosure may be made to a Congressional office from the record or an individual in response to an inquiry from the Congressional office made at the request of that individual.

4. Disclosure may be made to NARA (National Archives and Records Administration) in records management inspections conducted under authority of title 44 United States Code.

5. Information from this system of records may be disclosed to a Federal agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar non-government entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty, in order for the Department to obtain information relevant to a Department decision concerning the hiring, utilization, appointment, retention or termination of individuals covered by this system or to inform a Federal agency or licensing boards or the appropriate non-government entities about the health care practices of a currently employed, appointed, otherwise utilized, terminated, resigned, or retired health care employee or other individuals covered by this system whose professional health care activity so significantly failed to meet generally accepted standards of clinical practice as to raise reasonable concern for the safety of patients. These records may also be disclosed as part of an ongoing computer-matching program to accomplish these purposes.

6. Information may be disclosed to non-Federal sector (i.e., State, or local governments) agencies, academic affiliates, organizations, boards, bureaus, or commissions (e.g., the Joint Commission). Such disclosures may be made only when: (1) The records are properly constituted in accordance with VA requirements; (2) the records are accurate, relevant, timely, and complete; and (3) the disclosure is in the best interest of the Government (e.g., to obtain accreditation or other approval rating). When cooperation with the non-Federal sector entity, through the exchange of individual records, directly benefits VA's completion of its mission, enhances personnel management functions, or increases the public confidence in VA's or the Federal Government's role in the community, then the Government's best interests are served. Further, only such information that is clearly relevant and necessary for accomplishing the intended uses of the information as certified by the receiving entity is to be furnished.

7. Information may be disclosed to a State or national certifying body which has the authority to make decisions concerning the issuance, retention or revocation of licenses, certifications or registrations required to practice a health care profession, when requested in writing by an investigator or supervisory official of the licensing entity or national certifying body for the purpose of making a decision concerning the issuance, retention or revocation of the license, certification or registration of a named health care professional.

8. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

9. Hiring, appointment, performance, or other personnel credentialing related information may be disclosed to any facility or agent with which there is, or there is proposed to be, an affiliation, sharing agreement, partnership, contract, or similar arrangement, where required for establishing, maintaining, or expanding any such relationship.

10. Information concerning a health care provider's professional qualifications and clinical privileges may be disclosed to a VA patient, or the representative or guardian of a patient who due to physical or mental incapacity lacks sufficient understanding and/or legal capacity to make decisions concerning his/her medical care, who is receiving or contemplating receiving medical or other patient care services from the provider when the information is needed by the patient or the patient's representative or guardian in order to make a decision related to the initiation of treatment, continuation or discontinuation of treatment, or receiving a specific treatment that is proposed or planned by the provider. Disclosure will be limited to information concerning the health care provider's professional qualifications (professional education, training and current licensure/certification status), professional employment history, and current clinical privileges.

11. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a State, local or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

12. To disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

13. To disclose to the VA-appointed representative of an employee all notices, determinations, decision, or other written communications issued to the employee in connection with an examination ordered by VA under fitness-for-duty examination procedures or Agency-filed disability retirement procedures.

14. To disclose information to officials of the Merit Systems Protection Board, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

15. To disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or the other functions of the Commission as authorized by law or regulation.

16. To disclose the information listed in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C., chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

17. Identifying information in this system, including name, address, Social Security number and other information as is reasonably necessary to identify such individual, may be disclosed to the NPDB at the time of hiring, appointment, utilization, and/or clinical privileging/reprivileging of physicians, dentists and other health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, appointment, utilization, privileging/reprivileging, retention or termination of the individual.

18. Relevant information from this system of records may be disclosed to the NPDB and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer-matching program to accomplish these purposes.

19. In response to a request about a specifically identified individual covered by this system from a prospective Federal or non-Federal health care entity employer, the following information may be disclosed: (a) Relevant information concerning the individual's professional employment history including the clinical privileges held by the individual; (b) relevant information concerning a final decision that results in a voluntary or involuntary limitation, reduction or loss of clinical privileges; and (c) relevant information concerning any payment that is made in settlement (or partial settlement) of, or in satisfaction of a judgment in, a medical malpractice action or claim and, when through a peer review process that is undertaken pursuant to VA policy, negligence, professional incompetence, responsibility for improper care, and/or professional misconduct has been assigned to the individual.

20. Disclosure may be made to any Federal, State, local, tribal or private entity in response to a request concerning a specific provider for the purposes of credentialing providers who provide health care at multiple sites or move between sites. Such disclosures may be made only when: (1) The records are properly constituted in accordance with VA requirements; (2) the records are accurate, relevant, timely, and complete; and (3) disclosure is in the best interests of the Government (i.e., to meet the requirements of contracts, sharing agreements, partnerships, etc.). When exchange of credentialing information through the exchange of individual records, directly benefits VA's completion of its mission, enhances public confidence in VA's or Federal Government's role in the delivery of health care, then the best interests of the Government are served.

21. Disclosure may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

22. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

23. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

24. VA may disclose information concerning a health care provider's professional qualifications which may be published on publicly facing VA owned or managed internet web sites. Information to be displayed include the name of provider, gender, name of professional school, post-graduate training program, State of licensure, and board certification.

Storage:

Records are maintained on paper documents or in electronic format. Information included in the record may be stored on microfilm, magnetic tape or disk. Records are maintained at the employing VHA health care facility. If the individual transfers to another VHA health care facility, the record is transferred to the new location, if appropriate.

Records are retrieved by the names and Social Security number or other assigned identifiers, e.g., the National Provider Identifier (NPI), of the individuals on whom they are maintained.

1. Access to VA working and storage areas in VA health care facilities is restricted to VA employees on a "need to know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the health care facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to computer room within the health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automated data processing peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Information in the Veterans Information Systems Technology Architecture (VistA) system may be accessed by authorized VA employees. Access to file information is controlled at two levels; the system recognizes authorized employees by a series of individually unique passwords/codes as a part of each data message, and the employees are limited to only that information in the file that is needed in the performance of their official duties.

3. Access to records in VA Central Office and the VISN directors and division offices is only authorized to VA personnel on a "need-to-know" basis. There is limited access to the building with visitor control by security personnel.

4. The automated system is Internet enabled and will conform to all applicable Federal Regulations concerning information security. The automated system is protected by a generalized security facility and by specific security techniques used within the application that accesses the data file and may include individually unique passwords/codes and may utilize Public Key Infrastructure (PKI) personal certificates. Both physical and system security measures will meet or exceed those required to provide an adequate level of protection for host systems. Access to file information is limited to only that information in the file that is needed in the performance of official duties. Access to computer rooms is restricted generally by appropriate locking devices to authorized operational personnel. Information submitted to the automated electronic system is afforded the same protections as the data that are maintained in the original files. Remote on-line access from other agencies to the data storage site is controlled in the same manner. Access to the electronic data is supported by encryption and the Internet server is insulated by a firewall.

Paper records are retired to the VA Records Center and Vault (VA RC&V) 3 years after the individual separates from VA employment or when no longer utilized by VA (in some cases, records may be maintained at the facility for a longer period of time) and are destroyed 30 years after separation. Paper records for applicants who are not selected for VA employment or appointment are destroyed 2 years after non-selection or when no longer needed for reference, whichever is sooner. Electronic records are transferred to the Director, Credentialing and Privileging Program, Office of Quality and Performance, VA Central Office, when the provider leaves the facility. Information stored on electronic storage media is maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Official responsible for policies and procedures: Director, Credentialing and Privileging Program, Office of Quality, Safety and Value (OQSV), Veterans Health Administration, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Officials maintaining the system: (1) The chief of staff at the VA health care facility where the provider made application, is employed, or otherwise utilized; (2) the credentialing coordinator of the VA health care facility for individuals who made application for employment or other utilization, or providers currently or previously employed or otherwise utilized at; (3) human resources management offices of the VA health care facility for individuals who made application for employment or other utilization, or providers currently or previously employed or otherwise utilized; (4) VA Central Office or at a VISN location; The electronic data will be maintained by VHA/OQSV, a component thereof, or a contractor or subcontractor of VHA/OQSV.

Individuals who wish to determine whether this system of records contains information about them should contact the VA facility location at which they made application for employment or appointment, or are or were employed. Inquiries should include the employee's full name, Social Security number, date of application for employment or appointment or dates of employment or appointment, and return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where they made application for employment or appointment, or are or were employed.

(See Record Access Procedures).

Information in this system of records is provided by the applicant/employee, or obtained from State licensing boards, Federation of State Medical Boards, National Council of State Boards of Nursing, National Practitioner Data Bank, Health Integrity and Protection Data Bank, professional societies, national certifying bodies, current or previous employers, other health care facilities and staff, references, educational institutions, medical schools, VA staff, patient, visitors, and VA patient medical records.

Records are maintained at VA health care facilities, Regional Data Processing Centers and (in most cases), archival storage of the VistA data to back up tapes are maintained at off-site locations. Address locations for VA facilities are listed in VA Appendix 1. In addition, information from these records or copies of records may be maintained at the Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC, VA Data Processing Centers, VA Office of Information & Technology (OI&T) Field Offices, Veterans Integrated Service Network (VISN) Offices, and Employee Education Systems.

The records include information concerning current and former employees, applicants for employment, trainees, contractors, sub-contractors, contract personnel, students, providers and consultants, patients and members of their immediate family, volunteers, maintenance personnel, as well as individuals working collaboratively with VA.

The records may include information related to:

1. Workload such as orders entered, verified, and edited (e.g., engineering work orders, doctors' orders for patient care including nursing care, the scheduling and delivery of medications, consultations, radiology, laboratory and other diagnostic and therapeutic examinations); results entered; items checked out and items in use (e.g., library books, keys, x-rays, patient medical records, equipment, supplies, reference materials); work plans entered and the subsequent tracking (e.g., construction projects, engineering work orders and equipment maintenance and repairs assigned to employees and status, duty schedules, work assignments, work requirements); reports of contact with individuals or groups; employees' (including volunteers) work performance information (e.g., duties and responsibilities assigned and completed, amount of supplies used, time used, quantity and quality of output, productivity reports, schedules of patients assigned and treatment to be provided);

2. Administrative procedures, duties, and assignments of certain personnel;

3. Computer access authorizations, computer applications available and used, information access attempts, frequency and time of use; identification of the person responsible for, currently assigned, or otherwise engaged in various categories of patient care or support of health care delivery; vehicle registration (motor vehicles and bicycles) and parking space assignments; community and special project participants and attendees (e.g., sports events, concerts, National Wheelchair Games); employee work-related accidents. The record may include identifying information (e.g., name, date of birth, age, sex, social security number, taxpayer identification number); address information (e.g., home and mailing address, home telephone number, emergency contact information such as name, address, telephone number, and relationship); information related to training (e.g., security, safety, in-service), education and continuing education (e.g., name and address of schools and dates of attendance, courses attended and scheduled to attend, type of degree, certificate, grades etc.); information related to military service and status; qualifications for employment (e.g., license, degree, registration or certification, experience); vehicle information (e.g., type make, model, license and registration number); evaluation of clinical and technical skills; services or products purchased (e.g., vendor name and address, details about evaluation of service or product, price, fee, cost, dates purchased and delivered, employee workload and productivity data); employee work-related injuries (cause, severity, type of injury, body part affected);

4. Financial information, such as service line and clinic budgets, projected and actual costs;

5. Supply information, such as services, materials and equipment ordered;

6. Abstract information (e.g., data warehouses, environmental and epidemiological registries, etc.) is maintained in auxiliary paper and automated records;

7. Electronic messages;

8. The social security number and universal personal identification number of health care providers;

9. Practitioner DEA registration numbers; and

10. The Integration Control Number or Veterans Administration Person Identifier.

Title 38, United States Code, section 7301(a).

The records and information may be used for statistical analysis to produce various management, workload tracking and follow-up reports; to track and evaluate the ordering and delivery of equipment, services and patient care; the planning, distribution and utilization of resources; the possession and use of equipment or supplies; the performance of vendors, equipment, and employees; and to provide clinical and administrative support to patient medical care. The data may be used for research purposes. The data may be used also for such purposes as assisting in the scheduling of tours of duties and job assignments of employees; the scheduling of patient treatment services, including nursing care, clinic appointments, surgery, diagnostic and therapeutic procedures; the repair and maintenance of equipment and for follow-up activities to determine that the actions were accomplished and to evaluate the results; the registration of vehicles and the assignment and utilization of parking spaces; to plan, schedule, and maintain rosters of patients, employees and others attending or participating in sports, recreational or other events (e.g., National Wheelchair Games, concerts, picnics); for audits, reviews and investigations conducted by staff of the health care facility, the Network Directors Office, VA Central Office, and the VA Office of Inspector General (OIG); for quality assurance audits, reviews, investigations and inspections; for law enforcement investigations; and for personnel management, evaluation and employee ratings, and performance evaluations.

To the extent that records contained in the system include information protected by 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority permitting disclosure. VA may disclose protected health information pursuant to the following routine uses where required by law, or permitted by 45 CFR parts 160 and 164.

1. In the event that a record maintained by VA to carry out its functions indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, information may be disclosed to the appropriate agency whether Federal, state, local or foreign, charged with the responsibility of investigating or prosecuting such violation or charged with enforcing or implementing the statute or rule, regulation or order issued pursuant thereto.

2. Disclosure may be made to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of the purpose(s) of the request, and to identify the type of information requested), when necessary to obtain information relevant to a Department decision concerning the hiring or retention of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, or the issuance of a license, grant, or other benefits.

3. Disclosure may be made to an agency in the executive, legislative, or judicial branch, or the District of Columbia government in response to its request or at the initiation of VA, in connection with the hiring of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, the issuance of a license, grant, or other benefits by the requesting agency, or the lawful statutory, administrative, or investigative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's decision.

4. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

5. Disclosure may be made to National Archives and Records Administration (NARA) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

6. Disclosure may be made to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

7. Hiring, performance, or other personnel-related information may be disclosed to any facility with which there is or there is proposed to be an affiliation, sharing agreement, contract, or similar arrangement for purposes of establishing, maintaining, or expanding any such relationship.

8. Disclosure may be made to a Federal, State or local government licensing board and to the Federation of State Medical Boards or a similar non-government entity which maintains records concerning individual employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty; in order for the Department to obtain information relevant to a Department decision concerning the hiring, retention or termination of an employee; or to inform a Federal agency, licensing boards or the appropriate non-government entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients receiving medical care in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

9. For program review purposes, and the seeking of accreditation and/or certification, disclosure may be made to survey teams of The Joint Commission, College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

10. Disclosure may be made to a State or local government entity or national certifying body which has the authority to make decisions concerning the issuance, retention or revocation of licenses, certifications or registrations required to practice a health care profession, when requested in writing by an investigator or supervisory official of the licensing entity or national certifying body for the purpose of making a decision concerning the issuance, retention or revocation of the license, certification or registration of a named health care professional.

11. Any information which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal, State, local or foreign agency charged with the responsibility of investigating or prosecuting such violation, rule or order issued pursuant thereto.

12. Disclosure may be made to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

13. Disclosure may be made to the VA-appointed representative of an employee, including all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

14. Disclosure may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

15. Disclosure may be made to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

16. Disclosure may be made to the Federal Labor Relations Authority, including its General Counsel, when requested in connection with investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised and matters before the Federal Service Impasses Panel.

17. Disclosure may be made in consideration and selection of employees for incentive awards and other honors and to publicize those granted. This may include disclosure to other public and private organizations, including news media, which grant or publicize employee awards or honors.

18. Disclosure may be made to consider employees for recognition through administrative and quality step increases and to publicize those granted. This may include disclosure to other public and private organizations, including news media, which grant or publicize employee recognition.

19. Identifying information such as name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring or clinical privileging/reprivileging of health care practitioners, and at other times as deemed necessary by VA in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention or termination of the applicant or employee.

20. Disclosure of relevant information may be made to the National Practitioner Data Bank or to a State or local government licensing board which maintains records concerning the issuance, retention or revocation of licenses, certifications, or registrations necessary to practice an occupation, profession or specialty when under the following circumstances, through a peer review process that is undertaken pursuant to VA policy, negligence, professional incompetence, responsibility for improper care, or professional misconduct has been assigned to a physician or licensed or certified health care practitioner: (1) On any payment in settlement (or partial settlement) of, or in satisfaction of a judgment in a medical malpractice action or claim; or, (2) on any final decision that adversely affects the clinical privileges of a physician or practitioner for a period of more than 30 days. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

21. Disclosure of medical record data, excluding name and address, unless name and address is furnished by the requester, may be made to epidemiological and other research facilities for research purposes determined to be necessary and proper and approved by the Under Secretary for Health.

22. Disclosure of names and addresses of present or former personnel of the Armed Services, and their dependents, may be made to: (a) A Federal department or agency, at the written request of the head or designee of that agency; or (b) directly to a contractor or subcontractor of a Federal department or agency, for the purpose of conducting Federal research necessary to accomplish a statutory purpose of an agency. When disclosure of this information is made directly to a contractor, VA may impose applicable conditions on the department, agency, or contractor to insure the appropriateness of the disclosure to the contractor.

23. The social security number, universal personal identification number and other identifying information of a health care provider may be disclosed to a third party where the third party requires the agency to provide that information before it will pay for medical care provided by VA.

24. Relevant information may be disclosed to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practical for the purposes of laws administered by VA, in order for the contractor to perform the services of the contract or agreement.

25. Disclosure of relevant health care information may be made to individuals or organizations (private or public) with whom VA has a contract or sharing agreement for the provision of health care or administrative or financial services.

26. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

27. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

28. VA may disclose relevant provider information to a state prescription drug monitoring program, or similar program, for the purpose of submitting to or receiving from the program information regarding prescriptions to an individual for controlled substances, as required under the applicable state law.

Storage:

Records are maintained on paper, microfilm, magnetic tape, disk, or laser optical media. In most cases, archival storage of the VistA data to backup tapes are maintained at off-site locations.

Records are retrieved by name, social security number or other assigned identifiers of the individuals on whom they are maintained.

1. Access to VA working and storage areas is restricted to VA employees on a "need-to- know" basis. Strict physical security control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to computer rooms at health care facilities and regional data processing centers is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automated Data Processing (ADP) peripheral devices are placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Information in VistA may be accessed by authorized VA employees. Access to file information is controlled at two levels. The systems recognize authorized employees by series of individually unique passwords/codes as a part of each data message, and the employees are limited to only that information in the file which is needed in the performance of their official duties. Information that is downloaded from VistA and maintained on laptops and other approved government equipment is afforded similar storage and access protections as the data that is maintained in the original files. Access to information stored on automated storage media at other VA locations is controlled by individually unique passwords/codes. Access by Office of Inspector General (OIG) staff conducting an audit, investigation, or inspection at the health care facility, or an OIG office location remote from the health care facility, is controlled in the same manner.

3. Information downloaded from VistA and maintained by the OIG headquarters and Field Offices on automated storage media is secured in storage areas for facilities to which only OIG staff have access. Paper documents are similarly secured. Access to paper documents and information on automated storage media is limited to OIG employees who have a need for the information in the performance of their official duties. Access to information stored on automated storage media is controlled by individually unique passwords/codes.

Paper records and information stored on electronic storage media are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States, and VA policies and procedures for media sanitization.

The official responsible for policies and procedures is the Director, Health Data and Informatics (HDI) (19F), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals who wish to determine whether this system of records contains information about them should contact the VA facility location at which they are or were employed or made contact. Inquiries should include the person's full name, social security number, dates of employment, date(s) of contact, and return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where they are or were employed or made contact.

(See Record Access Procedures above.)

Information in this system of records is provided by the individual, supervisors, other employees, personnel records, or obtained from their interaction with the system.

VA Law Enforcement Training Center, VA Medical Center, 2200 Fort Roots Drive, Bldg 104, North Little Rock, AR 72114.

VA Police Officers who have attended the Basic VA Police Training Course and supplemental professional training held at the VA Law Enforcement Training Center.

This system of records contains each VA police officer's name, social security number, badge number, date of birth, sex, examination scores and class standing, entry-on-duty date, and their duty station.

38 U.S.C. 501 and 902

The records and information contained in this system of records are necessary for the effective administration and management of the Department's nationwide Security and Law Enforcement Program. The collection and use of accurate, up-to-date data are necessary for the purpose of enforcing the law and protecting persons and property on VA property and at VA Central Office.

1. The record of an individual who is covered by this system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

2. Disclosure may be made to the National Archives and Records Administration in records management inspections conducted under the authority of Title 44 U.S.C.

3. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or sub-contractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in Title 38 U.S.C. 5724, as the terms are defined in Title 38 U.S.C. 5727.

8. Disclosure may be made to the DoJ and United States attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, Title 28 United States Code, Section 2672.

9. Any information in this system, except the name and address of a veteran, may be disclosed to a Federal, State, or local agency maintaining civil or criminal violation records or other pertinent information such as prior employment history, prior Federal employment background investigations, and/or personal or educational background in order for VA to obtain information relevant to the hiring, transfer, or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

10. Information in this system regarding traffic accidents may be disclosed to private insurance companies for use in determining payment of a claim under a policy.

11. To assist attorneys in representing their clients, any information in this system may be disclosed to attorneys representing veterans, U.S. government employees, retirees, volunteers, contractors, subcontractors, or private citizens being investigated and prosecuted for violating the law, except where VA has decided release is inappropriate under Title 5 United States Code, Section 552a(j) and (k).

12. Disclosure of information to the Federal Labor Relations Authority (including its General Counsel) when requested in connection with the investigation and resolution of allegations of unfair labor practices; in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised; in connection with matters before the Federal Service Impasses Panel; and to investigate representation petitions and conduct or supervise representation elections.

13. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

14. Information may be disclosed to officials of the Merit Systems Protection Board, and the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in Title 5 United States Code, Sections 1205 and 1206, or as may be authorized by law.

15. Disclosure may be made to the VA-appointed representative of an employee of all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

16. To the Office of Management and Budget when necessary to the review of private relief legislation pursuant to OMB Circular No. A-19.

Storage:

The VA Law Enforcement Training Center maintains the information on the mainframe Information Resources Management System which will subsequently be transferred to hard disk.

Information is retrieved by the VA police officer's name, badge number or class number.

Information is under the control of the Deputy Assistant Secretary for Security and Law Enforcement and staff members who have a legitimate need to know the contents of the system of records in order to perform their duties. Computer records are stored in a computer network to which only these individuals have access. No personal identifiers are used in statistical and management reports.

These records are retained and disposed of in accordance with General Records Schedule 18, item 22a, approved by the National Archives and Records Administration (NARA). Records are destroyed upon notification of death or not later than five years after separation or transfer of employee, whichever is applicable. The records are disposed of by electronic erasure, shredding, or burning.

Director, Law Enforcement Training Center, 2200 Fort Roots Drive, North Little Rock, AR 72214.

Individuals desiring to know whether this system of records contains a record pertaining to him or her, how he or she may gain access to such a record, and how he or she may contest the content of such a record may write to the following address: Director, Law Enforcement Training Center, 2200 Fort Roots Drive, North Little Rock, AR 72214. The following information, or as much as is available, should be furnished in order to identify the record: Name of individual, class number, or badge number in order to identify the record.

Same as notification procedures. Requesters should also reasonably specify the record contents being sought. Rules regarding access to Privacy Act records appear in Title 5 CFR part 552d. If additional information or assistance is required, contact the Director, Law Enforcement Training Center, 2200 Fort Roots Drive, North Little Rock, AR 72114, 501-257-4160.

Same as notification procedures. Requesters should also reasonably identify the record, specify the information they are contesting, state the corrective action sought and the reasons for the correction along with supporting justification showing why the record is not accurate, timely, relevant, or complete. Rules regarding amendment of Privacy Act records appear in Title 5 CFR part 552d. If additional information or assistance is required, contact the Director, Law Enforcement Training Center, 2200 Fort Roots Drive, North Little Rock, AR 72114, 501-257-4160.

Personal information is furnished by medical center personnel submitting names of newly hired VA police officers for training and may be furnished or corrected subsequently by trainees themselves. Assigned badge numbers for police officers are assigned by the VA Law Enforcement Training Center and entered into the record.

Appendix 1: Addresses of Veterans Administration Facilities

Alabama AL

VA Medical Center, 700 South 19th St., Birmingham, Alabama 35233

Mobile National Cemetery, 1202 Virginia St., Mobile, Alabama 36604

VA Outpatient Clinic Substation, 2451 Fillingim St., Mobile, Alabama 36617 (MAIL: VAMC, Biloxi, MS 39531)

The data base will reside on its own micro-computers at the National VA Chaplain Center (301/111K) at the Department of Veterans Affairs (VA) Medical Center (VAMC) located at 100 Emancipation Road, Hampton, Virginia 23667.

The personal data collected will be limited to VA Chaplains, other VA Chaplain Service staff, applicants for VA chaplain positions (VA employees and individuals seeking VA employment), and selected providers of services to the VA chaplaincy.

1. The following data will be collected on individuals who are VA chaplains or chaplain candidates: Name, date of birth, Social Security Number, educational data (e.g., college degrees), membership in religious bodies and related religious experience, employment history relevant to the chaplaincy, name, location and dates of significant professional events (e.g., ordination), continuing education data (e.g., name, location and type of continuing education course), psychological and related survey data relevant to personal and professional development activities in support of chaplain development and research in the Chaplain Service (e.g., Myers-Briggs, 16PF Survey, leadership style surveys, etc.), data to verify and validate the effectiveness of affirmative action programs, work-related performance data, and performance data appropriate for national aggregation and management applications (e.g., bedside visits, number of chapel services, office visits, etc.), and 2. The following additional data may be maintained for resource providers who have or may assist in the work of the chaplaincy; names of consultants or providers, their organization, type of services provided, effectiveness and performance on contracts, special characteristics related to nature of their service (e.g., techniques or manner of teaching bereavement counseling, resources used, etc.), and nature of correspondence and related administrative matters.

Title 38, United States Code, Sec. 7304(a).

The information will be used as part of a comprehensive program in Total Quality Improvement (TQI) in order to facilitate: (1) More meaningful and effective management of the functions and performance of Chaplain Services, (2) staff development to enhance and improve the work related activities of chaplains nationally, (3) the personal growth and spiritual development of all chaplains over and above improving the performance of their duties, (4) the documentation and tracking of credentialing and privileging for all chaplains providing patient care in the system, and (5) personnel related decisions.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. A record from this system of records may be disclosed to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of purpose(s) of the request, and to identify the type of information requested), when necessary to obtain information relevant to a Department decision concerning the hiring or retention of any employee, the issuance or reappraisal of clinical privileges, the conducting of a security or suitability investigation of an individual, the letting of a contract, or the issuance of a license, grant, or other benefit.

2. A record from this system of records may be disclosed to an agency in executive, legislative, or judicial branch, in response to its request, or at the initiation of VA, information in connection with the hiring of an employee, the issuance of security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, the issuance of a license, grant or other benefits by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision.

3. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

4. Disclosure may be made to National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

5. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

6. Hiring, performance, or other personnel related information may be disclosed to any facility with which there is, or there is proposed to be, an affiliation, sharing agreement, contract, or similar arrangement, for purposes of establishing, maintaining, or expanding any such relationship.

7. Information may be disclosed to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

8. Disclosure may be made to the VA-appointed representative of an employee of all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

9. Information may be disclosed to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

10. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

11. Information may be disclosed to the Federal Labor Relations Authority (including its General Counsel) when requested in connection with investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised and matters before the Federal Service Impasses Panel.

12. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

13. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

14. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

15. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are maintained on micro-computers.

Records are retrieved by the names. Social Security Numbers, or other assigned identifiers of the individuals on whom they are maintained.

1. Access to VA working and storage areas is restricted to VA employees on a "need-to- know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. All chaplains and other VA employees who enter or use data in the data base will do so by direct access into the system, or by means of the national VA communications network (VADATS/IDCU). All users must have access and verify codes maintained by the National Chaplain Center. All staff access to the system data will be restricted to only that data required on a "need-to-know " basis consistent with the routine performance of their duties. Access to individual work stations will be protected under security protocols established at the user's facility. Computers will be maintained in the locked environment in the main computer room of the VA Medical Center, Hampton, Virginia.

Paper records and information stored on electronic storage media are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Director, Chaplain Service (301/111K), National VA Chaplain Center, VA Medical Center, 100 Emancipation Road, Hampton, Virginia 23667.

Individuals who wish to determine whether this system of records contains information about them should write to the System Manager at the above address. Inquiries should include the individual's name, address, and social security number.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the System Manager at the above address.

(See Record Access Procedures above.)

Information in this system of records is provided by the applicant/employee, or obtained from current or previous employers, references, educational institutions, religious bodies and/or their representatives and VA staff.

Department of Veterans Affairs (VA) Austin Information Technology Center, Austin, Texas, and information in the database can be viewed and downloaded by employees with workers' compensation case management and safety responsibilities at VA employing facilities.

All VA and former VA employees who have incurred a job-related injury/disease and have an active claim file with the Office of Workers' Compensation Programs (OWCP).

Records in the system include the OWCP quarterly injury/disease chargeback reports, weekly Case Management File (CMF) Reports, weekly Automated Compensation Payment System (ACPS) Reports, weekly Bill Payment System (BPS) Reports, data on VA's continuation of pay (COP) costs, and some elements from the Personnel and Accounting Integrated Data System--VA. The computer data base records include the claimant's name, address, Social Security number, date of birth, grade, salary, telephone number, OWCP's case adjudication status (approved or denied, waiting adjudication, file sent to Hearings and Review for decision), accepted medical condition(s), compensation paid (amount and time period covered), medical bills paid (name of physician, hospital or health facility, type of treatment, date of treatment, amount paid, amount paid for medical equipment, and rehabilitation expenses), COP authorized or denied, dates COP is paid, number of days of COP, and total amount paid.

Public Law 91-596; 5 U.S.C. 8101 et seq.; and Federal Regulations 20 CFR part 10, 29 CFR part 1960, and 5 CFR ch. 1, part 353.

The information contained in this system of records is used to case manage each worker's compensation claim, to produce statistical management reports, monitor the case management performance of each VA employing facility, and produce statistical reports on the source and type of injuries occurring at each facility.

1. Disclosure may be made to any third-party or representative acting on claimant's behalf until the claim is adjudicated, all appeal rights are resolved, and the case file is closed.

2. In the event that records in this system of records indicate a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, the relevant records may be referred, as a routine use, to the appropriate agency, whether Federal, state, local or foreign, charged with the responsibility for investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation or order issued pursuant thereto.

3. VA may disclose information from this system of records to the Department of Justice (DOJ), either on VA's initiative or in response to DOJ's request for the information, after either VA or DOJ determines that such information is relevant to DOJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DOJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

5. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

6. Disclosure may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of Title 44, Chapter 29 of the U.S. Code.

7. Disclosure may be made to any source from which additional information is needed in order to properly make case management decisions. Disclosure of statistical data may be made to other VA facilities and Federal agencies.

8. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has a contract or agreement to perform the services of the contract or agreement.

9. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

10. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

11. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

Storage:

Paper documents and computer storage media.

Information is retrievable by the name of VA claimant, Social Security number, and OWCP case file number.

Access to the WC-OSH/MIS database is restricted to OWCP Case Managers and Safety Officials. Paper records are maintained in a secured area with limited access. Access to data is by means of online (query) database or downloading with a personal computer and is restricted to authorized employees by means of unique user identification and passwords.

Records are destroyed 30 years after OWCP closes the claimant's case file. Records are destroyed by shredding or burning paper documents, or by erasing the magnetic media.

Deputy Assistant Secretary for Administration (03), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Employees desiring to know whether this system of records contains a record pertaining to them must submit a written request to VA's Human Resources Management Office of employment or to the office of last employment for former employees.

Employees seeking information regarding access to and contesting of VA records may write, call, or visit VA's Human Resources Management Office of Employment.

See record access procedures above.

Data tapes furnished by OWCP, data elements from the Personnel and Accounting Integrated Data System--VA, VA COP data, and VA employees.

The automated records are maintained by the VA Automation Center, 1615 Woodward Street, Austin, TX 78772. The paper records will be maintained at each VA field station that has a responsibility for ACRS input.

All Department of Veterans Affairs employees, employees of other Government agencies and authorized contractor personnel who have requested and have been granted access to the automated resources of the VA's Austin Automation Center (AAC).

The records in this system, in both paper and electronic form, will include the names and social security numbers of all personnel who have requested and been granted access to the automated resources at the AAC. The records will also include business address and telephone number, job title and information relating to data file and computer system access permissions granted to that individual.

Title 38, U.S.C. 501.

The purpose of this system of records is to allow the VA Austin Automation Center (AAC) in Austin, TX, to maintain a current list of all VA employees, employees of other Government agencies and authorized contractor personnel who require access to the computer resources of the AAC, in accordance with Federal computer security requirements.

1. At the initiative of VA, pertinent information may be disclosed to appropriate Federal, State or local agencies responsible for investigating, prosecuting, enforcing or implementing statutes, rules, regulations or orders, where VA becomes aware of an indication of a violation or potential violation of civil or criminal law or regulation.

2. Disclosure of specific information may be made to a Federal agency, in response to its request, to the extent that the information requested is relevant and necessary to the requesting agency's decision in connection with hiring or retaining an employee, issuing a security clearance, conducting a security or suitability investigation on an individual, classifying jobs, awarding a contract or issuing a license, grant or other benefit.

3. Information may be provided to a congressional office in response to an inquiry from that congressional office made at the request of the individual and concerning that individual's record in this system.

4. Disclosure of information may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, the Federal Labor Relations Authority and its General Counsel or the Equal Employment Opportunity Commission, when requested in performance of their authorized duties, and the request is not in connection with a law enforcement investigation.

5. The Department of Veterans Affairs (VA) may disclose records in this system or records in proceedings before a court or adjudicative body before which VA is authorized to appear when VA, a VA official or employee, the United States, or an individual or entity for whom the United States is providing representation is a party to litigation or has an interest in such litigation, and VA determines that the use of such records is relevant and necessary to the litigation, provided, however, that in each case, the agency determines that disclosure of the records is a use of the information contained in the records that is compatible with the purpose for which the records were collected.

6. The Department of Veterans Affairs (VA) may disclose records in this system of records to the Department of Justice when VA, a VA official or employee, the United States, or an individual or entity for whom the United States is providing representation is a party to litigation or has an interest in such litigation, and the use of such records by the Department of Justice is deemed by VA to be relevant and necessary to the litigation, provided, however, that in each case, the agency determines that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which the records were collected.

7. Disclosure may be made during reviews by the National Archives and Records Administration in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

Storage:

Each field station responsible for inputting records into the system will retain the original signed paper copies of requests for system access in locked containers. Data files supporting the automated system are stored in a secure area located at the Austin Automation Center. Data files are stored on magnetic disk and, for archival purposes, on magnetic tape.

Paper records are maintained in alphabetical order by last name of the requester. Automated records are retrieved by individual name or by a specific automated resource.

Paper records in progress are maintained in a manned room during working hours. Paper records maintained for archival purposes are stored in locked containers until needed. During non- working hours, the paper records are kept in a locked container in a secured area. Access to the records is on a need-to-know basis only.

Access to the automated system is via computer terminal; standard security procedures, including a unique customer identification code and password combination, are used to limit access to authorized personnel only. Specifically, in order to obtain access to the automated records contained in this system of records, an individual must:

(1) Have access to the automated resources of the AAC. An individual may not self-register for this access. Formal documentation of the request for access, signed by the employee's supervisor, is required before an individual may obtain such access. Authorized customers are issued a customer identification code and one-time password.

(2) Be an authorized official of the ACRS system. Only two individuals per field station may be designated ACRS officials with access to add, modify or delete records from the system. These individuals require a specific functional task code in their customer profile; this functional task can only be assigned by the AAC. A limited number of supervisory or managerial employees throughout VA will have read-only access for the purpose of monitoring ACRS activities.

Records will be maintained and disposed of in accordance with the records disposal authority approved by the Archivist of the United States, the National Archives and Records Administration and published in Agency Records Control Schedules. Paper records will be destroyed by shredding or other appropriate means for destroying sensitive information. Automated storage records are retained and destroyed in accordance with a disposition authorization approved by the Archivist of the United States.

Director, VA Austin Automation Center, 1615 Woodward Street, Austin, TX 78772. The phone number is (512) 326-6000.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier or who wants to determine the contents of such records should submit a written request or apply in person to the Director, VA Austin Automation Center, 1615 Woodward Street, Austin, TX 78772.

An individual who seeks access or wishes to contest records maintained under his or her name or other personal identifier may write, call or visit the System Manager.

See record access procedures above.

Individuals who have applied for and been granted access permission to the resources of the Austin Automation Center (AAC).

The automated records are maintained by the Corporate Data Center Operations, 1615 Woodward Street, Austin, TX 78772. The paper records will be maintained at each VA field station that has a responsibility for CUPS input.

All Department of Veterans Affairs employees, employees of other government agencies, and authorized contractor personnel who have requested and have been granted access to the automated resources of the VA Corporate Data Center Operations (CDCO).

The records in this system, in both paper and electronic form, will include the names and network user-ID of all personnel who have requested and been granted access to the automated resources at the CDCO. The records will also include business address and telephone number, job title, and information relating to data file and computer system access permissions granted to that individual.

Title 38, United States Code, Section 501.

The purpose of this system of records is to allow the CDCO in Austin, Texas, to maintain a current list of all VA employees, employees of other government agencies, and authorized contractor personnel who require access to the computer resources of the CDCO, in accordance with Federal computer security requirements.

1. At the initiative of VA, pertinent information may be disclosed to appropriate Federal, State or local agencies responsible for investigating, prosecuting, enforcing or implementing statutes, rules, regulations or orders, where VA becomes aware of an indication of a violation or potential violation of civil or criminal law or regulation.

2. Disclosure of specific information may be made to a Federal agency, in response to its request, to the extent that the information requested is relevant and necessary to the requesting agency's decision in connection with hiring or retaining an employee, issuing a security clearance, conducting a security or suitability investigation on an individual, classifying jobs, awarding a contract or issuing a license, grant or other benefit.

3. Disclosure of information may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, the Federal Labor Relations Authority and its General Counsel or the Equal Employment Opportunity Commission, when requested in performance of their authorized duties, and the request is not in connection with a law enforcement investigation.

4. The record of an individual who is covered by this system or records may be disclosed to a member of Congress, or staff person acting for the member when the member or staff person requests the record on behalf of and at the written request of that individual.

5. Disclosure may be made to the National Archives and Records Administration and General Services Administration for record management inspections conducted under Authority of Title 44 U.S.C.

6. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

7. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

8. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, rule, regulation or order. VA may also disclose on its own initiative the names and addresses of veterans with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations if law, or charged with enforcing or implementing the statute regulation, or order issued pursuant thereto.

9. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

10. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to the economic or property interests, identity theft or fraud, or harm to security, confidentially, or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Each field station responsible for inputting records into the system will retain the original signed paper copies of requests for system access in locked containers. Data files supporting the automated system are stored in a secure area located at the CDCO. Data files are stored on magnetic disk and, for archival purposes, on magnetic tape.

Paper records are maintained in alphabetical order by last name of the requester. Automated records are retrieved by individual name or by a specific automated resource.

Paper records in progress are maintained in a manned room during working hours. Paper records maintained for archival purposes are stored in locked containers until needed. During non- working hours, the paper records are kept in a locked container in a secured area. Access to the records is on a need-to-know basis only. Access to the automated system is via computer terminal; standard security procedures, including a unique customer identification code and password combination, are used to limit access to authorized personnel only. Specifically, in order to obtain access to the automated records contained in this system of records, an individual must: 1. Have access to the automated resources of the CDCO. An individual may not self-register for this access. Formal documentation of the request for access, signed by the employee's supervisor, is required before an individual may obtain such access. Authorized customers are issued a customer identification code and one-time password.

2. Be an authorized official of the CUPS system. Only two individuals per field station may be designated CUPS officials with access to add, modify or delete records from the system. These individuals require a specific functional task code in their customer profile; this functional task can only be assigned by the CDCO. A limited number of supervisory or managerial employees throughout VA will have read-only access for the purpose of monitoring CUPS activities.

Records will be maintained and disposed of in accordance with the records disposal authority approved by the Archivist of the United States, the National Archives and Records Administration, and published in Agency Records Control Schedules. Paper records will be destroyed by shredding or other appropriate means for destroying sensitive information. Automated storage records are retained and destroyed in accordance with a disposition authorization approved by the Archivist of the United States.

Officials responsible for policies and procedures; Executive Director, Corporate Data Center Operations, 1615 Woodward Street, Austin, Texas 78772. The telephone number is (512) 326-6000.

Individuals who wish to determine whether this system of records contains information about them should contact the Executive Director, Corporate Data Center Operations, 1615 Woodward Street, Austin, Texas 78772.

An individual who seeks access or wishes to contest records maintained under his or her name or other personal identifier may write, call or visit the system manager.

(See Record Access Procedures above.)

Individuals who have applied for and been granted access permission to the resources of the CDCO.

Automated indebtedness records for first-party medical billing, compensation, pension, educational assistance, survivors' and dependents' educational assistance and most home loan debts are maintained at the VA's Austin Automation/Systems Development Center in Austin, Texas. Extracts of benefit and home loan debt automated records are maintained in the Benefits Delivery Network for accounting and adjudication purposes. The Benefits Delivery Network is administered by the Benefit Delivery Center (BDC), Hines, Illinois. First-party medical billing information is extracted from records maintained at VA medical facilities and in automated media as more fully described in the Privacy Act system of records, 24VA136, "Patient Medical Records--VA" (56 FR 1054, Jan. 10, 1991). Automated and paper indebtedness records for the Civilian Health and Medical Program of the Department of Veterans Affairs (CHAMPVA) are maintained at the CHAMPVA Center in Denver, Colorado and are more fully described in the Privacy Act system of records, 54VA136, "Veteran's Spouse or Dependent Civilian Health and Medical Care Records--VA" 40 FR 38095 (Aug. 26, 1975), as amended at 53 FR 23845 (Jun. 24, 1988), 53 FR 25238 (Jul. 5, 1988) and 56 FR 26186 (Jun. 6, 1991). Certain paper records, microfilm and microfiche are maintained at the VA Debt Management Center (DMC), Ft. Snelling, Minnesota. Education loan and miscellaneous home loan automated, paper, microfilm and microfiche records are maintained at DMC. Automated and paper indebtedness records related to the All-Volunteer Force Educational Assistance Program are also maintained at DMC. Paper records related to benefit and home loan accounts receivable may be maintained in individual file folders located at the VA regional office having jurisdiction over the domicile of the claimant or the geographic area in which a property securing a VA guaranteed, insured or direct loan is located. Similarly, paper and automated records related to first-party medical billing and CHAMPVA are also maintained in individual patient medical records at VA health care facilities and CHAMPVA Center. Generally and with the exception of claims against third-party insurers and certain first-party medical debts, automated records and papers maintained at regional offices, health care facilities and CHAMPVA Center are not used directly in the debt collection process unless they are forwarded by conventional mail, electronic mail or facsimile to DMC. Records provided to the Department of Housing and Urban Development (HUD) for inclusion in the Credit Alert Interactive Voice Response System (CAIVRS) are located at the HUD Data Processing Center in Lanham, Maryland.

Persons indebted to the United States Government as a result of their participation in benefit programs (including health care programs) administered by VA under title 38, United States Code, chapters 11, 13, 15, 17, 21, 30, 31, 34, 35, 36 and 37, including persons indebted to the United States Government by virtue of their ownership, contractual obligation or rental of property owned by the Government or encumbered by a VA-guaranteed, insured, direct or vendee loan. Persons indebted to the United States Government as a result of their participation in a benefit program administered by VA under 10 U.S.C. or 10 U.S.C. ch. 1606. Persons who received benefits or services under 38 U.S.C. or 10 U.S.C. ch. 1606, but who did not meet the requirements for receipts of such benefits or services.

Information varies depending on the benefit type (including health care and home loan) from which the debt arose. Identifying information, including VA claim number, Social Security number, name and address and, when appropriate, loan reference number obtained from the following Privacy Act systems of records: "Compensation, Pension, Education and Rehabilitation Records--VA" (58VA21/22); "Loan Guaranty Home, Condominium and Manufactured Home Loan Applicant Records, Specially Adapted Housing Applicant Records, and Vendee Loan Applicant Records--VA" (55VA26); "Patient Medical Records--VA" (24VA136); and, "Veteran's Spouse or Dependent Civilian Health and Medical Care Records--VA" (54VA136). Initial indebtedness amount, dates of treatment, amounts claimed for reimbursement type of benefit from which the debt arose, identifying number of the VA regional office with jurisdiction over the underlying benefit claim or property subject to default or foreclosure, station number of the VA health care facility rendering services, name of co-obligor and property address of the defaulted home loan from 58VA21/22, 55VA26, 24VA136 and 54VA136. History of debt collection activity on the individual, including correspondence, telephone calls, referrals to other Government agencies, VA district counsel, private collection and credit reporting agencies. Payments received, refunds made, interest amount, current balance of debt and indication of status or current VA benefit payments. Federal employment status obtained by computer matching with Government agencies and the United States Postal Service. No personal medical information concerning the nature of disease, injury or disability is transmitted to or maintained in this system of records.

Title 38, United States Code, sections 501(a), 5314 and 5315. Federal Claims Collection Act of 1996 (Pub. L. 89-508), 31 U.S.C. Chapter 37, Subchapter I (General) and Subchapter II (Claims of the United States Government), 31 U.S.C. 3711, Collection and Compromise, 31 U.S.C. 3716, Administrative Offset; Debt Collection Act of 1982 (Pub. L. 97-365), 5 U.S.C. 5514, Installment Deduction for Indebtedness.

For purposes of the following routine uses:

(a) The term "veteran", includes present, former or retired members of the United States Armed Forces, the reserve forces or national guard;

(b) The term, "debtor", means any person falling within the categories of individuals covered by this system, as set forth above. A "debtor" may be a veteran, as defined above, a veteran's dependent entitled to VA benefits (including health care) in his or her own right or a person who is neither a veteran nor a veteran's dependent for benefit purposes; and,

(c) The terms "benefit", "benefit program" and "VA program" include any gratuitous benefit, home loan (including miscellaneous home loan) or health care (including CHAMPVA) program administered by the Secretary.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the written request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: The hiring, retention or transfer of an employee; the issuance of a security clearance; the letting of a contract or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans will only be made with the veteran's prior written consent.

3. Any information in this system may be disclosed, by computer matching or otherwise, in connection with any proceeding for the collection of an amount owed the United States by virtue of a person's participation in any benefit program administered by VA when in the judgment of the Secretary, or official generally delegated such authority under standard agency delegation of authority rules (38 CFR 2.6), such disclosure is deemed necessary and proper in accordance with 38 U.S.C. 5701(b)(6).

4. The name and address of a veteran or the dependent of a veteran and other information as is reasonably necessary to identify such veteran or dependent may be disclosed to a consumer reporting agency for the purpose of locating the veteran or dependent indebted to the United States under a VA benefit program or to obtain a consumer report in order to assess the ability of a veteran or dependent to repay an indebtedness, provided the disclosure is consistent with 38 U.S.C. 5701(g)(2).

5. The name and address of a veteran or dependent, other information as is reasonably necessary to identify such persons, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the person's indebtedness to the United States by virtue of the person's participation in a VA benefit program may be disclosed to a consumer reporting agency for purposes of making such information available for inclusion in consumer reports regarding that person and for purposes of locating that person, provided that the provisions of 38 U.S.C. 5701(g)(4) have been met.

6. Any information in this system, including available identifying information regarding a person, such as the person's name, address, Social Security number, VA insurance number, VA claim number, VA loan number, date of birth and employment information, may be disclosed, except to consumer reporting agencies, to a third party in order to obtain current name, address and credit report in connection with any proceeding for the collection of an amount owed the United States by virtue of the person's participation in a VA benefit program. Such disclosure may be made in the course of computer matching having the purpose of obtaining the information indicated above. Third parties may include other Federal agencies, State probate courts, State drivers' license bureaus, State automobile title and license bureaus and private commercial concerns in the business of providing the information sought.

7. Identifying information, including the debtor's name, Social Security number and VA claim number, along with the amount of indebtedness, may be disclosed to any Federal agency, including the U.S. Postal Service, in the course of conducting computer matching to identify and locate delinquent debtors employed by or receiving retirement benefits from those agencies. Such debtors may be subject to offset of their pay or retirement benefits under the provisions of 5 U.S.C. 5514.

8. Any information in this system, including the nature and amount of a financial obligation as well as the history of debt collection activity against a debtor, may be disclosed to the Federal agency administering salary or retirement benefits to the debtor to assist that agency in initiating offset of salary or retirement benefits to collect delinquent debts owed the United States under VA benefit programs.

9. The name(s) and address(es) of a veteran or beneficiary may be disclosed to another Federal agency or to a contractor of that agency, at the written request of the head of that agency or designee of the head of that agency for the purpose of conducting Government research of oversight necessary to accomplish a statutory purpose of that agency.

10. Any information in the system, including the amount of debt, may be disclosed at the request of a debtor to accredited service organizations, VA-approved claims agents and attorneys acting under a declaration of representation so that these individuals can aid persons indebted to VA in the preparation, presentation and prosecution of debt-related matters under the laws administered by VA. The name and address of a debtor will not, however, be disclosed to these individuals under this routine use if the debtor has not requested the assistance of an accredited service organization, claims agent or an attorney.

11. Any information in this system such as the amount of indebtedness and collection history may be disclosed in the course of presenting evidence to a court, magistrate or administrative authority in matters of guardianship, inquests and commitments, to private attorneys representing debtors rated incompetent in conjunction with issuance of Certificates of Incompetence and to probation and parole officers in connection with court-required duties.

12. Any information in this system, including the amount of indebtedness and history of collection activity, may be disclosed to a VA or court-appointed fiduciary or a guardian ad litem in relation to his or her representation of a debtor only to the extent necessary to fulfill the duties of the fiduciary or guardian ad litem.

13. Any relevant information in this system may be disclosed to the Department of Justice and United States Attorneys in the defense or prosecution of litigation involving or pertaining to the United States. Any relevant information in this system may also be disclosed to other Federal agencies upon their request in connection with review of administrative tort claims and potential tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672, the Military Claims Act, 10 U.S.C. 2733 and other similar claims statutes.

14. Any information concerning a person's indebtedness to the United States by virtue of that person's participation in a benefit program administered by VA, including personal information obtained from other Federal agencies through computer matching programs, may be disclosed to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of any amount owed to the United States. Purposes of these disclosures may be to (a) assist VA in collection of title 38 and 10 U.S.C. ch. 1606 program debts and/or costs of services, and (b) initiate legal actions for prosecuting individuals who willfully or fraudulently obtain title 38 or 10 U.S.C. ch. 1606 benefits without entitlement.

15. The debtor's name, address, Social Security number and the amount (excluding interest) of any indebtedness waived, compromised or written off may be disclosed to the Treasury Department, Internal Revenue Service, as a report of income under 26 U.S.C. 61(a)(12).

16. The name of a debtor, any other information reasonably necessary to identify such individual and any other information concerning the individual's indebtedness under a VA program, may be disclosed to the Treasury Department, Internal Revenue Service, for the collection of that indebtedness by offset of Federal income tax refunds pursuant to 31 U.S.C. 3720A.

17. Debtors' social security numbers, VA claim numbers, loan account numbers and other information as is reasonably necessary to identify individual VA indebtedness accounts may be disclosed to the Department of Housing and Urban Development for inclusion in the Credit Alert Interactive Voice Response System (CAIVRS). Information in CAIVRS may be disclosed to all participating agencies and lenders who participate in the agencies' programs to enable them to verify information provided by new loan applicants and evaluate the creditworthiness of applicants. Records are disclosed to participating agencies and private-sector lenders by an ongoing computer matching program.

18. Name, Social Security numbers and any other information reasonably necessary to ensure accurate identification may be disclosed to the Department of the Treasury, Internal Revenue Service, to obtain the mailing address of taxpayers who are debtors under this system of records. Disclosure is made by computer matching and pursuant to 26 U.S.C. 6103(m)(2).

19. Any information in a record under this system of records may be disclosed to the United States General Accounting Office (GAO) to enabling GAO to pursue collection activities authorized to that office or any other activities within their statutory authority.

Disclosure to consumer reporting agencies:

Disclosures pursuant to 5 U.S.C. 552a(b)(12) may be made from this record system to consumer reporting agencies as defined in the Fair Credit Reporting Act 15 U.S.C. 1681a(f) or the Federal Claims Collection Act of 1966 31 U.S.C. 3701(a)(3). The disclosure is limited to information necessary to establish the identity of the individual, including name, address, and taxpayer identification number (Social Security number), the amount, status and history of the claim; and the agency or program under which the claim arose for the sole purpose of allowing the consumer reporting agency to prepare a commercial credit report. 38 U.S.C. 5701(g) governs the release of names and addresses of any person who is a present or former member of the Armed Forces, or who is a dependent of such a person, to consumer reporting agencies under certain circumstances. Routine uses, above, provide for disclosure under those circumstances.

Storage:

Records are maintained on magnetic tape and disk, microfilm, microfiche, optical disk and paper documents. DMC does not routinely maintain paper records of individual debtors in file folders with the exception of correspondence, and replies thereto, from Congress, the White House, members of the Cabinet and other similar sources. Paper records related to accounts receivable may be maintained in individual file folders located at VA regional offices, health care facilities and CHAMPVA Center. Generally and with the exception of claims against third-party insurers and certain first-party medical debts, such papers maintained outside of DMC are not used directly in the debt collection process unless they are first forwarded to DMC. Information stored on magnetic media for most benefit debts, including first-party medical, may be accessed through a data telecommunications terminal system designated as CAROLS (Centralized Accounts Receivable On-Line System). Most CAROLS terminals are located in DMC; however, VA regional offices generally each have one terminal for inquiry purposes. Information stored on magnetic media and related to the All-Volunteer Force Educational Assistance, education loan, miscellaneous home loan or CHAMPVA debt collection programs may be accessed through personal computers. Records provided to the Department of Housing and Urban Development for inclusion in the Credit Alert Interactive Voice Response System (CAIVRS) are maintained on magnetic media at the HUD Data Processing Center in Lanham, Maryland. For benefit debts other than miscellaneous home loan, first-party medical and CHAMPVA, identifying information, the amount of the debt and benefit source of the debt may be stored on magnetic media in records that serve as the data base for the VA Benefits Delivery Network (BDN). The BDN is operated for the adjudication of claims and the entry of certain fiscal transactions. The identifying information, the amount of the debt and benefit source of the debt are transmitted to the Centralized Accounts Receivable System (CARS) or a personal computer local area network system before collection activity commences. When a debtor is awarded gratuitous benefits under VA programs, the BDN may operate to offset all or part of retroactive funds awarded, if any, to reduce the balance of the indebtedness. The Decentralized Hospital Computer Program (DHCP), through its various modules, is used to create and store first-party medical charges and debts associated with the provision of health care benefits. The identifying information about the person, the amount of the debt and program source of the debt may be transmitted to CARS as part of the collection process. When a person receives care under the auspices of VA, a VA medical facility may collect all or part of a charge or debt.

Paper documents, microfilm and microfiche are indexed by VA file number or date of receipt. Automated records are indexed by VA claim number, Social Security account number, name and loan account number in appropriate circumstances. Records in CAIVRS may only be retrieved by Social Security number.

1. Physical Security: (a) Access to working spaces and document storage areas in DMC is restricted by cipher locks and to VA employees on a need-to-know basis. Generally, document storage areas in VA offices other than DMC are restricted to VA employees on a need-to-know basis. VA offices are generally protected from outside access by the Federal Protective Service or other security personnel. Strict control measures are enforced to ensure that access to and disclosure from documents, microfilm and microfiche are limited to a need-to-know basis. (b) Access to CAROLS data telecommunications terminals is by authorization controlled by the site security officer. The security officer is assigned responsibility for privacy-security measures, especially for review of violation logs, information logs and control of password distribution. (c) Access to data processing centers is generally restricted to center employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other personnel gaining access to computer rooms are escorted.

2. CAROLS and Personal Computer Local Area Network (LAN) Security: (a) Usage of CAROLS and LAN terminal equipment is protected by password access. Electronic keyboard locks are activated on security errors.

(b) At the data processing centers, identification of magnetic media containing data is rigidly enforced using labeling techniques. Automated storage media which are not in use are stored in tape libraries which are secured in locked rooms. Access to programs is controlled at three levels: programming, auditing and operations.

3. CAIVRS Security: Access to the HUD data processing center from which CAIVRS is operated is generally restricted to center employees and authorized contact employees. Access to computer rooms is restricted to authorized operational personnel through locking devices. All other persons gaining access to computer rooms are escorted.

Records in CAIVRS use Social Security numbers as identifiers. Access to information files is restricted to authorized employees of participating agencies and authorized employees of lenders who participate in the agencies' programs. Access is controlled by agency distribution of passwords. Information in the system may be accessed by use of a touch-tone telephone by authorized agency and lender employees on a need-to-know basis.

Microfilm and microfiche are retained in metal cabinets in DMC for 25 years. CARS records are retained until termination of debt collection (payment in full, write off, compromise or waiver). All other automated storage media are retained and disposed of in accordance with disposition authorization approved by the Archivist of the United States. DMC generally forwards all substantive paper documents to VA regional offices, health care facilities and CHAMPVA Center for storage in claims files, patient treatment files, imaging systems or loan files. Those documents are retained and disposed of in accordance with the appropriate system of records. Information provided to HUD for CAIVRS is stored on magnetic tape. The tapes are returned to VA for updating each month. HUD does not keep separate copies of the tapes.

Director, Debt Management Center (389/00), U.S. Department of Veterans Affairs, Bishop Henry Whipple Federal Building, 1 Federal Drive, Ft. Snelling, MN 55111.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the system manager indicated above.

Individuals seeking information regarding access to and contesting of VA records may write, call or visit the nearest VA regional office. Address locations are listed in VA Appendix 1.

See record access procedures, above.

The records in this system are derived from four other systems of records as set forth in "Categories of records in the system", above, persons indebted to the United States by virtue of their participation in programs administered by Va, dependents of those persons, fiduciaries for those persons (VA or court appointed), other Federal agencies, State and local agencies, private collection agencies, consumer reporting agencies, State, local and county courts and clerks, other third parties and other VA records.

Automated indebtedness records for first-party medical billing, pay administration, compensation, pension, educational assistance, survivors' and dependents' educational assistance and most home loan debts are maintained at the VA's Financial Services Center and Automation/Systems Development Center (AA/SDC) in Austin, Texas. Automated records of debts referred to the Department of Veterans Affairs for Government-wide cross-servicing authorized under 31 U.S.C. 3711(g)(4) are maintained at VA's AA/SDC in Austin, Texas. Extracts of benefit and home loan debt automated records are maintained in the Benefits Delivery Network for accounting and adjudication purposes. The Benefits Delivery Network Is administered by the Benefit Delivery Center (BDC). Hines, Illinois. first-party medical billing information is extracted from records maintained at VA medical facilities and in automated media as more fully described in the Privacy Act system of records, 24VA136, "Patient Medical Records-VA" as published at 40 FR 38095 (Aug. 26, 1975), and amended as follows: 40 FR 52125 (Nov. 7, 1975); 41 FR 2881 (Jan. 20, 1976); 41 FR 11631 (Mar. 19, 1976); 42 FR 30557 (Jun. 15, 1977); 44 FR 31058 (May 30, 1979); 45 FR 77220 (Nov. 21, 1980); 46 FR 2766 (Jan. 12, 1981); 47 FR 28522 (Jun. 30, 1982); 47 FR 51841 (Nov. 17, 1982); 50 FR 11610 (Mar. 22, 1985); 51 FR 25968 (Jul. 17, 1986); 51 FR 44406 (Dec. 9, 1986); 52 FR 381 (Jan. 5, 1987); 53 FR 49818 (Dec. 9, 1988); 55 FR 5112 (Feb. 13, 1990); 55 FR 37604 (Sept. 12, 1990); 55 FR 42534 (Oct. 19, 1990); 56 FR 1054 (Jan. 10, 1991); 57 FR 28003 (Jun. 23, 1992); 57 FR 4519 (Oct. 1, 1992); 58 FR 29853 (May 24, 1993); 58 FR 40852 (Jul. 30, 1993); and, 58 FR 57674 (Oct. 26, 1993). Automated and paper indebtedness records for the Civilian Health and Medical Program of the Department of Veterans Affairs (CHAMPVA) are maintained at the Health Administration Center (HAC) in Denver, Colorado and are more fully described in the Privacy Act system of records, 54VA136, "Veteran's Spouse or Dependent Civilian Health and Medical Care Records-VA", as published at 40 FR 38095 (Aug. 26, 1975) and amended at 53 FR 23845 (Jun. 24, 1998), 53 FR 25238 (Jul. 5, 1988) and 56 FR 26186 (Jun. 6, 1992). Pay administration indebtedness records are extracted from other automated and paper records maintained at all VA facilities and the Austin Finance Center and are more fully described in the Privacy Act system of records, 27VA047, "Personnel and Accounting Pay System--VA", as published at 40 FR 38095 (Aug. 26, 1975), and amended as follows: 48 FR 16372 (April 15, 1983); 50 FR 23100 (May 30, 1985); 51 FR 6858 (Feb. 26, 1986); 51 FR 25968 (Jul. 17, 1986); 55 FR 42534 (Oct. 19, 1990); 56 FR 23952 (May 24, 1991); 58 FR 39088 (Jul. 21, 1993); 58 40852 (Jul. 30, 1993); and, 60 FR 35448 (Jul. 7, 1995); 62 FR 41483 (Aug. 1, 1997); and, 62 FR 68362 (Dec. 31, 1997). Certain paper records, microfilm and microfiche are maintained at the VA Debt Management Center (DMC), Ft. Snelling, Minnesota. Education loan, miscellaneous home loan and spina bifida monthly allowance automated, paper, microfilm and microfiche records are maintained at DMC. Automated and paper indebtedness records related to the All-Volunteer Force Educational Assistance Program are also maintained at DMC. Paper records related to benefit and home loan accounts receivable may be maintained in individual file folders located at the VA regional office having jurisdiction over the domicile of the claimant or the geographic area in which a property securing a VA guaranteed, insured or direct loan is located. Similarly, paper and automated records related to first-party medical billing and CHAMPVA are also maintained in individual patient medical records at VA health care facilities and HAC. Generally and with the exception of claims against third-party insurers and certain first-party medical debts, automated records and papers maintained at regional offices, health care facilities and HAC are not used directly in the debt collection process unless they are forwarded by conventional mail, electronic mail or facsimile to DMC. Records provided to the Department of Housing and Urban Development (HUD) for inclusion in the Credit Alert Interactive Voice Response System (CAIVRS) are located at the HUD Data Processing Center in Lanham, Maryland. Records referred to the Department of the Treasury for inclusion in the Treasury Offset Program (TOP) are located at the Financial Management Service Debt Collection Operations System in Hyattsville, Maryland.

Persons indebted to the United States Government as a result of their participation in benefit programs (including health care programs) administered by VA under title 38, United States Code, chapters 11, 13, 15, 17, 18, 21, 30, 31, 34, 35, 36 and 37, including persons indebted to the United States Government by virtue of their ownership, contractual obligation or rental of property owned by the Government or encumbered by a VA-guaranteed, insured, direct or vendee loan. Persons indebted to the United States Government as a result of their participation in a benefit program administered by VA under 10 U.S.C. ch. 1606. Persons who received benefits or services under 38 U.S.C. or 10 U.S.C. ch. 1606, but who did not meet the requirements for receipt of such benefits or services. Persons indebted to the United States, a State or local government whose debts are referred to the Department of Veterans Affairs for Government-wide cross-servicing under 31 U.S.C. 3711(g)(4) or any valid interagency agreement. Persons indebted to the United States as the result of erroneous payment of pay or allowances or as the result of erroneous payment of travel, transportation or relocation expenses and allowances (previously and hereinafter referred to as "pay administration") under the provisions of title 5, United States Code, part III, subpart D.

Information varies depending on the source of the debt. Identifying information including VA claim number, Social Security number, Tax Identification Number (TIN), name and address and, when appropriate, loan reference number, obtained from, among other sources, indebtedness records of Federal agencies other than VA and the following Privacy Act systems of records: "Debt Collection Operations System--Treasury/Financial Management Service" (Treasury/FMS .014); "Compensation, Pension, Education and Rehabilitation Records-VA" (58VA21/22); "Loan Guaranty Home, Condominium and Manufactured Home Loan Applicant Records, Specially Adapted Housing Applicant Records, and Vendee Loan Applicant Records-VA" (55VA26); "Patent Medical Records-VA" (24VA136); and, "Veteran's Spouse or Dependent Civilian Heath and Medical Care Records-VA" (54V136). Initial indebtedness amount, dates of treatment, amounts claimed for reimbursement type of benefit from which the debt arose, identifying number of the VA regional office with jurisdiction over the underlying benefit claim or property subject to default or foreclosure, station number of the VA health care facility rendering services, name of co-obligor and property address of the defaulted home loan from 58VA21/22, 55VA26, 24VA136 and 54VA136. History of debt collection activity on the person, organization or entity including correspondence, telephone calls, referrals to other Federal, State or local agencies, VA regional counsel, private collection and credit reporting agencies. Payments received, refunds made, interest amount, current balance of debt and indication of status of current VA benefit payments. Federal employment status obtained by computer matching with Government agencies and the United States Postal Service. No personal medical information concerning the nature of disease, injury or disability is transmitted to or maintained in this system of records.

Government records are maintained and managed under the authority set forth in 31 U.S.C. 3101 and 31 U.S.C. 3102. The purpose of the system is consistent with the financial management provisions of title 31, United States Code, chapter 37, the pay administration provisions of title 5, United States Code, chapter 55, and special provisions relating to VA benefits in title 38, United States Code, chapter 53.

The purpose of this system is to maintain records of individuals, organizations and other entities: (1) Indebted to the United States as a result of their participation in benefit and health care programs administered by VA; (2) indebted as a result of erroneous pay administration; (3) indebted under any other program administered by any agency of the United States Government and whose indebtedness record has been referred to VA for Government-wide cross-servicing under 31 U.S.C. 3711(g)(4); and (4) indebted under any Federal, State or local government program and whose debt was referred to VA for collection under any valid interagency agreement. Information in this system of records is used for the administrative management and collection of debts owed the United States and any State or local government and for which records are maintained in accordance with the preceding sentence.

For purposes of the following routine uses:

(a) The term, "veteran", includes present, former or retired members of the United States Armed Forces, the reserve forces or national guard;

(b) The term, "debtor", means any person falling within the categories of individuals covered by this system, as set forth above. A "debtor" may be a veteran, as defined above, a veteran's dependent entitled to VA benefits (including health care) in his or her own right or a person who is neither a veteran nor a veteran's dependent for benefit purposes; and,

(c) The terms, "benefit", "benefit program" and "VA program" include any gratuitous benefit, home loan (including miscellaneous home loan) or health care (including CHAMPVA) program administered by the Secretary of Veterans Affairs.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of and at the written request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: the hiring, retention or transfer of an employee; the issuance of a security clearance; the letting of a contract or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement between the Department of Veterans Affairs and the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans will only be made with the veteran's prior written consent.

3. Any information in this system may be disclosed, by computer matching or otherwise, in connection with any proceeding for the collection of an amount owed the United States when, in the judgment of the Secretary, or official generally delegated such authority under standard agency delegation of authority rules (38 CFR 2.6), such disclosure is deemed necessary and proper in accordance with 38 U.S.C. 5701(b)(6) for debts resulting from participation in VA benefit programs or pay administration, with 31 U.S.C. 3711(g)(5) for other debts referred to VA in its capacity as a Government-wide cross-servicing facility or with a valid interagency agreement for collection services independent of the cross-servicing provisions of section 3711(g)(4) and (g)(5).

4. The name and address of a person indebted to the United States and other information as is reasonably necessary to identify such person may be disclosed to a consumer reporting agency for the purpose of locating that person or to obtain a consumer report in order to assess the ability of that person to repay an indebtedness, provided the disclosure is consistent with 38 U.S.C. 5701(g) (2) for purposes of debts owed veterans and their dependents as a result of participation in VA benefit programs and 31 U.S.C. 3711(h)(1) for purposes of all other debts to the United States.

5. The name and address of a person indebted to the United States, other information as is reasonably necessary to identify such person, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the person's indebtedness to the United States may be disclosed to a consumer reporting agency for purposes of making such information available for inclusion in consumer reports regarding that person, provided that the provisions of 38 U.S.C. 5701(g)(4) have been met for purposes of indebtedness incurred as the result of participation in VA benefit programs and 31 U.S.C. 3711(f)(1) for purposes of all other types of indebtedness.

6. Any information in this system, including available identifying information regarding a person, such as the person's name, address, Social Security number, VA insurance number, VA claim number, VA loan number, date of birth, employment information or identification number assigned by any Government component, may be disclosed, except to consumer reporting agencies, to a third party in order to obtain current name, address and credit report in connection with any proceeding for the collection of an amount owed the United States. Such disclosure may be made in the course of computer matching having the purpose of obtaining the information indicated above. Third parties may include other Federal agencies, State probate courts, State drivers' license bureaus, State automobile title and license bureaus and private commercial concerns in the business of providing the information sought.

7. Identifying information, including the debtor's name, Social Security number and VA claim number, along with the amount of indebtedness, may be disclosed to any Federal agency, including the U.S. Postal Service, in the course of conducting computer matching to identify and locate delinquent debtors employed by or receiving retirement benefits from those agencies. Such debtors may be subject to offset of their pay or retirement benefits under the provisions of 5 U.S.C. 5514.

8. Any information in this system, including the nature and amount of a financial obligation as well as the history of debt collection activity against a debtor, may be disclosed to the Federal agency administering salary or retirement benefits to the debtor to assist that agency in initiating offset of salary or retirement benefits to collect delinquent debts owed the United States.

9. The name(s) and address(es) of a debtor(s) may be disclosed to another Federal agency or to a contractor of that agency, at the written request of the head of that agency or designee of the head of that agency for the purpose of conducting Government research or oversight necessary to accomplish a statutory purpose of that agency.

10. Information in this system specifically related to debts resulting from participation in VA programs or pay administration, including the amount of debt, may be disclosed at the request of the subject debtor to accredited service organizations, VA-approved claims agents and attorneys acting under a declaration of representation so that these individuals can aid persons indebted to VA in the preparation, presentation and prosecution of debt-related matters under the laws administered by VA. The name and address of a debtor will not, however, be disclosed to these individuals under this routine use if the debtor has not requested the assistance of an accredited service organization, claims agent or an attorney.

11. Information in this system specifically related to debts incurred as a result of participation in VA benefit programs such as the amount of indebtedness and collection history may be disclosed in the course of presenting evidence to a court, magistrate or administrative authority in matters of guardianship, inquests and commitments, to private attorneys representing debtors rated incompetent in conjunction with issuance of Certificates of Incompetence and to probation and parole officers in connection with court-required duties.

12. Information in this system related to debts incurred as a result of participation in VA benefit programs, including the amount of indebtedness and history of collection activity, may be disclosed to a VA or court-appointed fiduciary or a guardian ad litem in relation to his or her representation of the subject debtor only to the extent necessary to fulfill the duties of the fiduciary or guardian ad litem.

13. Any relevant information in this system may be disclosed to the Department of Justice and United States Attorneys in the defense or prosecution of litigation involving or pertaining to the United States. Any relevant information in this system may also be disclosed to other Federal agencies upon their request in connection with review of administrative tort claims and potential tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672, the Military Claims Act, 10 U.S.C. 2733 and other similar claims statutes.

14. Any information concerning a person's indebtedness to the United States, including personal information obtained from other Federal agencies through computer matching programs, may be disclosed to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of any amount owed to the United States. Purposes of these disclosures include, but are not limited to (a) assisting the Government in collection of debts resulting from participation in Government programs of all categories and pay administration, and (b) initiating legal actions for prosecuting individuals who willfully or fraudulently obtain Government benefits, pay or allowances without entitlement. Third parties may include, but are not limited to, persons, organizations or other entities with contracts for collection services with the Government.

15. The debtor's name, address, Social Security number and the amount (excluding interest) of any indebtedness waived, compromised or written off may be disclosed to the Treasury Department, Internal Revenue Service, as a report of income under 26 U.S.C. 61(a)(12).

16. The name of a debtor, any other information reasonably necessary to identify such individual and any other information concerning the individual's indebtedness under a VA benefit or pay administration program or an individual's indebtedness referred to VA for Government-wide cross servicing under 31 U.S.C. 3711(g)(4), may be disclosed to the Treasury Department, Internal Revenue Service, for the collection of that indebtedness by offset of Federal income tax refunds pursuant to 31 U.S.C. 3720A.

17. Debtors' social security numbers, VA claim numbers, loan account numbers and other information as is reasonably necessary to identify individual indebtedness accounts may be disclosed to the Department of Housing and Urban Development for inclusion in the Credit Alert Interactive Voice Response System (CAIVRS). Information in CAIVRS may be disclosed to all participating agencies and lenders who participate in the agencies' programs to enable them to verify information provided by new loan applicants and evaluate the creditworthiness of applicants. Records are disclosed to participating agencies and private-sector lenders by an ongoing computer matching program.

18. Name, Social Security numbers and any other information reasonably necessary to ensure accurate identification may be disclosed to the Department of the Treasury, Internal Revenue Service, to obtain the mailing address of taxpayers who are debtors under this system of records. Disclosure is made by computer matching and pursuant to 26 U.S.C. 6103(m)(2).

19. Any information in a record under this system of records may be disclosed to the United States General Accounting Office (GAO) to enable GAO to pursue collection activities authorized to that office or any other activities within their statutory authority.

20. Any information in this system concerning a debt over 180 days delinquent may be disclosed, by computer matching or otherwise, to the Secretary of the Treasury or to any designated Government disbursing official for purposes of conducting administrative offset of any eligible Federal payments under the authority set forth in 31 U.S.C. 3716. Payments subject to offset include those payments disbursed by the Department of the Treasury, the Department of Defense, the United States Postal Service, any Government corporation or any disbursing official of the United States designated by the Secretary of the Treasury. Subject to certain exemptions, Social Security, Black Lung, Railroad Retirement benefits and tax refunds may be included in those Federal payments eligible for administrative offset.

21. Any information in this system of records concerning a debt over 180 days delinquent may be disclosed, by computer matching or otherwise, to the Secretary of the Treasury for appropriate collection or termination action, including the transfer of the indebtedness for collection or termination, in accordance with 31 U.S.C. 3711(g)(4), to a debt collection center designated by the Secretary of the Treasury, to a private collection agency or to the Department of Justice. The Secretary of the Treasury, through the Department of the Treasury, a designated debt collection center, a private collection agency or the Department of Justice, may take any appropriate action on a debt in accordance with the existing laws under which the debt arose.

22. The name and address of a debtor, other information as is reasonably necessary to identify such person, including personal information obtained from other Federal, state or local agencies as well as private sources through computer matching, and other information concerning the person's indebtedness to the United States, may be disclosed to third parties, including Federal, State and local government agencies to determine the debtor's employer. Such information may be used to initiate garnishment of disposable pay in accordance with the provisions of 31 U.S.C. 3720D.

23. The name and address of a debtor, and such other information as may be necessary for identification of that debtor, may be disclosed to a debtor's employer for purposes of initialing garnishment of the disposable pay of that debtor under the provisions of 31 U.S.C. 3720D.

24. The names and addresses of delinquent debtors, along with the amounts of their debts, may be published or otherwise publicly disseminated subject to the provisions of 31 U.S.C. 3720E.

25. Any information in this system may be disclosed to a third-party purchaser of debt more than 90 days delinquent and for which the sale of such debt was conducted pursuant to the provisions of 31 U.S.C. 3711(i).

Disclosure to consumer reporting agencies:

Disclosures pursuant to 5 U.S.C. 552a(b)(12) may be made from this record system to consumer reporting agencies as defined in the Fair Credit Reporting Act 15 U.S.C. 1681a(f) or the Federal Claims Collection Act of 1966 31 U.S.C. 3701(a)(3). The disclosure is limited to information necessary to establish the identity of the individual, including name, address, and taxpayer identification number (Social Security number), the amount, status and history of the claim; and the agency or program under which the claim arose for the sole purpose of allowing the consumer reporting agency to prepare a commercial credit report. 38 U.S.C. 5701(g) governs the release of names and addresses of any person who is a present or former member of the Armed Forces, or who is a dependent of such a person, to consumer reporting agencies under certain circumstances. Routine uses, above, provide for disclosure under those circumstances.

Storage:

Records are maintained on magnetic tape and disk, microfilm, microfiche, optical disk and paper documents. DMC does not routinely maintain paper records of individual debtors in file folders with the exception of correspondence, and replies thereto, from Congress, the White House, members of the Cabinet and other similar sources. Paper records related to accounts receivable may be maintained in individual file folders located at VA regional offices, health care facilities, HAC and other agencies referring debts to VA in its capacity as a Government-wide cross-servicing debt collection center. Generally and with the exception of claims against third-party insurers and certain first-party medical debts, such papers maintained outside of DMC are not used directly in the debt collection process unless they are first forwarded to DMC. Information stored on magnetic media for most VA benefit debts, including first-party medical, may be accessed through a data telecommunications terminal system designated as CAROLS (Centralized Accounts Receivable On-Line System). Most CAROLS terminals are located in DMC; however, VA regional offices generally each have one terminal for inquiry purposes. Records of debts referred to VA in its capacity as a Government- wide cross servicing debt collection center will be accessible only to employees of DMC. Information stored on magnetic media and related to the All-Volunteer Force Educational Assistance, education loan, miscellaneous home loan or HAC debt collection programs may be accessed through personal computers. Records provided to the Department of Housing and Urban Development for inclusion in the Credit Alert Interactive Voice Response System (CAIVRS) are maintained on magnetic media at the HUD Data Processing Center in Lanham, Maryland. Records provided to the Department of the Treasury for administrative offset or referral to a designated debt collection center, private collection agency or the Department of Justice are maintained on magnetic media at the Financial Management Service Debt Collection Operations System in Hyattsville, Maryland. For VA benefit debts other than miscellaneous home loan, first-party medical and CHAMPVA, identifying information, the amount of the debt are benefit source of the debt may be stored on magnetic media in records that serve as the database for the VA Benefits Delivery Network (BDN). The BDN is operated for the adjudication of VA claims and the entry of certain fiscal transactions. The identifying information, the amount of the debt and benefit source of the debt are transmitted to the Centralized Accounts Receivable System (CARS) or a personal computer local area network system before collection activity commences. When a debtor is awarded gratuitous benefits under VA programs, the BDN may operate to offset all or part of retroactive funds awarded, if any, to reduce the balance of the indebtedness. The Veterans Health Information Systems and Technology Architecture (VISTA), through its various modules, is used to create and store first-party medical charges and debts associated with the provision of health care benefits. The identifying information about the person, the amount of the debt and program source of the debt may be transmitted to CARS as part of the collection process. When a person receives care under the auspices of VA, a VA medical facility may collect all or part of a charge or debt.

Paper documents, microfilm and microfiche related to VA claims and debts are indexed by VA file number or date of receipt. Automated records of VA claims and debts are indexed by VA claim number, Social Security account number, name and loan account number in appropriate circumstances. Paper documents, microfilm, microfiche and automated records of pay administration debts and debts referred to VA for cross servicing are indexed by Social Security account number or Taxpayer Identification Number. Records in CAIVRS may only be retrieved by Social Security number.

1. Physical Security: (a) Access to working spaces and document storage areas in DMC is restricted by cipher locks and to VA employees on a need-to-know basis. Generally, document storage areas in VA offices other than DMC are restricted to VA employees on a need-to-know basis. VA offices are generally protected from outside access by the Federal Protective Service or other security personnel. Strict control measures are enforced to ensure that access to and disclosure from documents, microfilm and microfiche are limited to a need-to-know basis. (b) Access to CAROLS data telecommunications terminals is by authorization controlled by the site security officer. The security officer is assigned responsibility for privacy-security measures, especially for review of violation logs, information logs and control of password distribution. (c) Access to data processing centers is generally restricted to center employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other personnel gaining access to computer rooms are escorted.

2. CAROLS and Personal Computer Local Area Network (LAN) Security: (a) Usage of CAROLS and LAN terminal equipment is protected by password access. Electronic keyboard locks are activated on security errors. (b) At the data processing centers, identification of magnetic media containing data is rigidly enforced using labeling techniques. Automated storage media which are not in use are stored in tape libraries which are secured in locked rooms. Access to programs is controlled at three levels: programming, auditing and operations.

3. CAIVRS Security: Access to the HUD data processing center from which CAIVRS is operated is generally restricted to center employees and authorized contact employees. Access to computer rooms is restricted to authorized operational personnel through locking devices. All other persons gaining access to computer rooms are escorted.

Records in CAIVRS use Social Security numbers as identifiers. Access to information files is restricted to authorized employees of participating agencies and authorized employees of lenders who participate in the agencies' programs. Access is controlled by agency distribution of passwords. Information in the system may be accessed by use of a touch-tone telephone by authorized agency and lender employees on a need-to-know basis.

4. Department of the Treasury Security: Access to the system is on a need-to-know basis, only, as authorized by the system manager. Procedural and physical safeguards are utilized to include accountability, receipt records and specialized communications security. The data system has an internal mechanism to restrict access to authorized officials. The building is patrolled by uniformed security guards.

Microfilm and microfiche are retained in metal cabinets in DMC for 25 years. CARS records are retained until termination of debt collection (payment in full, write off, compromise or waiver). All other automated storage media are retained and disposed of in accordance with disposition authorization approved by the Archivist of the United States. DMC generally forwards all substantive paper documents to VA regional offices, health care facilities and CHAMPVA Center for storage in claims files, patient treatment files, imaging systems or loan files. Those documents are retained and disposed of in accordance with the appropriate system of records. Information provided to HUD for CAIVRS is stored on magnetic tape. The tapes are returned to VA for updating each month. HUD does not keep separate copies of the tapes. Information provided to the Department of the Treasury for the Treasury Offset Program is transferred electronically and stored by Treasury on magnetic media.

Director, Debt Management Center (389/00), U.S. Department of Veterans Affairs, Bishop Henry Whipple Federal Building, 1 Federal Drive, Ft. Snelling, MN 55111.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the system manager indicated above.

Individuals seeking information regarding access to and contesting of records maintained by VA may write, call or visit the nearest VA regional office. Address locations are listed in VA Appendix 1.

See record access procedures, above.

The records in this system are derived from five other systems of records as set forth in "Categories of records in the system", above, persons indebted to the United States by virtue of their participation in programs administered by VA or other Government agencies, dependents of those persons, fiduciaries for those persons (VA or court appointed), other Federal agencies, State and local agencies, private collection agencies, consumer reporting agencies, State, local and county courts and clerks, other third parties and other VA records.

Records are maintained at VA's Health Eligibility Center (HEC) in Atlanta, Georgia, and the Austin Information Technology Center (AITC) in Austin, Texas. Records are also stored at contracted locations in McLean, Virginia, and Atlanta, Georgia.

Veterans who have applied for or have received VA health care benefits under Title 38, United States Code, Chapter 17; Veterans' spouses and other dependents as provided for in other provisions of Title 38, United States Code.

The category of records in the system includes:

Federal Tax Information (FTI) and social security information generated as a result of computer matching activity with records from the IRS and SSA. The records may also include, but are not limited to, correspondence between HEC, Veterans, their family members, and Veterans' representatives such as Veterans Service Officers (VSO); copies of death certificates; Notice of Separation; disability award letters; IRS documents (e.g., Form 1040s, Form 1099s, W-2s); workers compensation forms; and various annual earnings statements, as well as pay stubs and miscellaneous receipts.

Note:

VA may not disclose to any person in any manner any document that contains FTI received from IRS or SSA in accordance with the Internal Revenue Code (IRC) 26 U.S.C. 6103(l)(7). In addition, VA may not allow access to FTI by any contractor or subcontractor.

Title 38, United States Code, Sections 501(a), 1705, 1710, 1722, and 5317.

Information in this system of records is used to verify the household income of certain Veterans and, if relevant, their spouses or dependents receiving VA health care benefits. The information in this system of records is also used to validate Veterans' and their spouses' social security numbers; provide educational materials related to income verification; respond to Veteran and non-Veteran inquiries related to income verification; and compile management reports.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, (i.e., individually identifiable health information and 38 U.S.C. 7332), (i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus), that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. VA may disclose the record of an individual who is covered by this system to a member of Congress or staff person acting for the member in response to an inquiry made at the request of that individual.

2. VA may disclose any information in this system of records, except FTI, as deemed necessary and proper to named individuals serving as accredited service organization representatives and other individuals named as approved agents or attorneys for a documented purpose, period of time, or specific income year, to aid beneficiaries in the preparation and presentation of their cases during the verification and/or due process procedures and in the presentation and prosecution of claims under laws administered by VA.

3. VA may disclose, on its own initiative, any information in this system, except the names, home addresses, or FTI of Veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. Additionally, VA may also disclose the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

4. VA may disclose relevant information in this system, except FTI, in the course of presenting evidence to a court, magistrate, or administrative tribunal; in matters of guardianship, inquests, and commitments; to private attorneys representing Veterans rated incompetent in conjunction with issuance of Certificates of Incompetency; and to probation and parole officers in connection with court-required duties.

5. VA may disclose information in this system, except FTI, to a VA Federal fiduciary or a guardian ad litem in relation to his or her representation of a Veteran in any legal proceeding, but only to the extent necessary to fulfill the duties of the fiduciary or the guardian ad litem.

6. VA may disclose relevant information in this system, except FTI, to attorneys, insurance companies, employers, third parties liable or potentially liable under health plan contracts, and to courts, boards, or commissions, but only to the extent necessary to aid VA in the preparation, presentation, and prosecution of claims authorized under Federal, State, or local laws, and regulations promulgated there under.

7. VA may disclose information in this system of records to the Department of Justice (DOJ), either on VA's initiative or in response to DOJ's request for the information, after either VA or DOJ determines that such information is relevant to DOJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to DOJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

8. VA may disclose any information in this system, except FTI, to National Archives and Records Administration (NARA) and General Services Administration in records management inspections conducted under Title 44 of United States Code.

9. VA may disclose information in this system, except FTI, to a third party, except consumer reporting agencies, in connection with any proceeding for the collection of an amount owed to the United States by virtue of a person's participation in any benefit program administered by VA, but only to the extent that it is reasonably necessary to (a) assist VA in the collection of costs of services provided individuals not entitled to such services; and (b) initiate civil or criminal legal actions for collecting amounts owed to the United States and/or for prosecuting individuals who willfully or fraudulently obtained or seek to obtain Title 38 medical benefits. This disclosure is consistent with 38 U.S.C. 5701(b)(6).

10. VA may disclose the names and addresses of Veterans or their dependents and other information as is reasonably necessary to identify such individuals concerning that those individuals' indebtedness to the United States by virtue of their participation in a benefits program administered by VA to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the provisions of 38 U.S.C. 5701(g)(4) have been met.

11. VA may disclose information from this system, except FTI, or information security review purposes to other source Federal agencies who are parties to computer matching agreements involving the information maintained in this system, but only to the extent that the information is necessary and relevant to the review.

12. VA may disclose the name and other identifying information of Veterans and their spouses to reported payers of earned or unearned income in order to verify the identifier address, income paid, period of employment, and health insurance information provided on the means test, and to confirm income and demographic data provided by other Federal agencies during income verification computer matching.

13. VA may disclose identifying information other than FTI, such as Veterans' and their dependents' social security numbers, to other Federal agencies for purposes of conducting computer matches to obtain valid identifying, demographic, and income information and to verify eligibility of certain Veterans who are receiving VA medical benefits under Title 38, United States Code, or for the purpose of conducting a computer match to obtain information to validate social security numbers maintained in VA records.

14. VA may disclose the name and social security number of a Veteran, spouse, and dependents, and other identifying information as is reasonably necessary to the SSA and the Department of Health and Human Services, for the purpose of conducting a computer match to obtain information to validate the social security numbers maintained in VA records.

15. VA may disclose relevant information from this system to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA in order for the contractor or subcontractor to perform the services of the contract or agreement.

Note:

This routine use does not authorize disclosure of FTI received from the IRS or the SSA to contractors or subcontractors.

16. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out VA efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

17. VA may disclose information to officials of the Merit Systems Protection Board, or the Office of Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

18. VA may disclose information to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

19. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

Storage:

Records are currently maintained on magnetic tape, magnetic disk, optical disk, and paper at secure off-site facilities in Atlanta, Georgia, and Austin, Texas. In January 2013, VA implemented a new electronic data transmission process called Direct Connect, which is a secure VPN tunnel to transmit and receive Veterans' household income from IRS. It only affects the means in which the data is transmitted; it does not affect the storage of the data.

Records (or information contained in records) maintained on paper documents are indexed and accessed by the applicant's name, social security number or case number and filed in case order number. Automated records are indexed and retrieved by the Veteran's name, social security number, Internal Control Number, or case number. The spouse's name or social security number may be retrieved from the automated income verification record.

1. In accordance with national and locally established data security procedures, access to the HEC Legacy system and the Enrollment Database is controlled by unique entry codes (access and verification codes). The user's verification code is set to be changed automatically every 90 days. User access to data is controlled by role-based access as determined necessary by supervisory and information security staff as well as by management of option menus available to the employee. Determination of such access is based upon the role or position of the employee and functionality necessary to perform the employee's assigned duties.

2. On an annual basis, employees are required to sign a computer access agreement acknowledging their understanding of confidentiality requirements. In addition, all employees receive annual privacy awareness and information security training. Access to electronic records is deactivated when no longer required for official duties. Recurring monitors are in place to ensure compliance with nationally and locally established security measures.

3. Access to the AITC is generally restricted to AITC staff, VA Headquarters employees, custodial personnel, Federal Protective Service, and authorized operational personnel through electronic locking devices.

4. Specific key staffs are authorized access to HEC computer room and all other persons gaining access to the computer rooms are escorted. Programmer access to the information systems is restricted only to staff whose official duties require that level of access.

1. Electronic data transmissions between VA health care facilities, HEC, and AITC are safeguarded by using VA's secure wide area network. The transmission of electronic data between SSA and AITC is safeguarded through the use of a secured, encrypted connection. Back-up of magnetic media containing FTI is transported between AITC and the off-site location in a locked storage container by an off-site vendor. Vendor personnel do not have key access to the locked container. The locked storage container is stored in a safe in a secured room at the off-site storage location. Access to the secured room and the safe is limited to authorized VA Information Technology staff only.

2. The software programs at HEC, AITC, and VA health care facilities automatically flag records or events for transmission via electronic messages based upon functionality requirements. The recipients of the messages are controlled and/or assigned to the mail group based on their role or position. Server jobs at each facility run continuously to check for incoming and outgoing data to be transmitted which needs to be parsed to files on the receiving end. All messages containing data transmissions include header information that is used for validation purposes. Consistency checks in the software are used to validate the transmission, and electronic acknowledgment messages are returned to the sending application. The VA Office of Cyber Security has oversight responsibility for planning and implementing computer security.

3. Working spaces and record storage areas at the HEC are secured during all business hours, as well as during non-business hours. All entrance doors require an electronic pass card, issued by the HEC Personal Card Issuer, for entry when unlocked, and entry doors are locked outside normal business hours. The card has restricted access capability, which allows restriction of unauthorized personnel to secured areas. Visitors are required to present identification and sign-in at a specified location. Visitors are issued a pass card which allows access to non-sensitive areas and are escorted by staff through restricted areas. At the end of the visit, visitors are required to turn in their card. The building is equipped with an intrusion alarm system which is activated during non-business hours. This alarm system is monitored by a private security service vendor. The HEC office space occupied by employees with access to Veteran records is secured with an electronic locking system, which requires a card for entry and exit of that office space. Access to the AITC is generally restricted to AITC staff, VA Headquarters employees, custodial personnel, Federal Protective Service, and authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted.

4. A number of other security measures are implemented to enhance security and safeguard of electronic records such as automatic timeout after a short period of inactivity and device locking after a pre-set number of invalid logon attempts, for example.

5. Electronic data, except FTI, is transmitted from HEC and AITC to VA health care facilities over VA secure wide area network.

6. Employees at the health care facility level do not have access to FTI, nor do they have the ability to edit or view income tests received from HEC as a result of the income match with IRS.

7. Only specific key staff and the ISO are authorized access to the computer room. Programmer access to AITC and HEC databases, which contain FTI, is restricted only to staff whose official duties require that level of access. Contractor staff are not authorized access to the production database.

8. On-line data, including FTI, reside on magnetic media in AITC computer room which are highly secured. Backup media are stored in a combination lock safe in a secured room within the same building and access to the safe is restricted to the IT staff. Backup media are stored by an off-site media storage vendor who picks up the media on a weekly basis from HEC and AITC and returns the media to the off-site storage via a locked storage container. Vendor personnel do not have key access to the locked container.

9. Any sensitive information that may be downloaded to a personal computer or printed to hard copy format is provided the same level of security as the electronic records. All paper documents and informal notations containing sensitive data are shredded prior to disposal. All magnetic media (primary computer system) and personal computer disks are degaussed prior to disposal or released off site for repair.

10. HEC and AITC fully comply with the Tax Information Security Guidelines for Federal, State and Local Agencies (Department of Treasury IRS Publication 1075) as it relates to access and protection of such data. These guidelines define the management of magnetic media, paper and electronic records, and physical and electronic security of the data.

11. All new HEC employees receive initial information security and privacy training and refresher training are provided to all employees on an annual basis. HEC's ISO performs an Annual Information Security (AIS) audit. This annual audit includes the primary computer information system, the telecommunication system, and local area networks. Additionally, the IRS performs periodic on-site inspections to ensure the appropriate level of security is maintained for FTI. HEC and AITC's ISO and AIS administrator additionally perform periodic reviews to ensure security of the system and databases.

12. Identification codes and codes used to access HEC automated communications systems and records systems, as well as security profiles and possible security violations, are maintained on magnetic media in a secure environment by the HEC ISO. For contingency purposes, database back-ups on removable magnetic media are stored off-site by a licensed and bonded media storage vendor.

13. VA field facilities do not receive FTI from AITC or HEC.

14. Contractors and subcontractors are required to adhere to HEC's safeguard and security requirements.

Depending on the record medium, records are destroyed by either shredding or degaussing. Paper records are destroyed after they have been accurately scanned on optical disks. Optical disks or other electronic medium are deleted when all phases of the Veteran's appeal rights have ended (10 years after the income year for which the means test verification was conducted). Electronic data and magnetic media received at AITC from SSA and IRS are destroyed 30 days after the data have been validated as being a true copy of the original data. Summary reports and other output reports are destroyed when no longer needed for current operation. Records are disposed of in accordance with the records retention standards approved by the Archivist of the United States, NARA, and published in the Veterans Health Administration Records Control Schedule 10-1. Regardless of the record medium, no records will be retired to a Federal records center.Vet

Official responsible for policies and procedures: Chief Business Office (10NB2A), VA Central Office, 810 Vermont Avenue NW., Washington, DC 20420. Official maintaining the system: Director, Health Eligibility Center, 2957 Clairmont Road, Atlanta, Georgia 30329.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier or wants to determine the contents of such record should submit a written request or apply in person to the Health Eligibility Center. All inquiries must reasonably identify the records requested. Inquiries should include the individual's full name, social security number, and return address.

Individuals seeking information regarding access to and contesting of income verification records may write to the Director, Health Eligibility Center, 2957 Clairmont Road, Suite 200, Atlanta, Georgia 30329.

(See Record Access Procedures above.)

Information in this systems of records may be provided by the applicant, applicant's spouse or other family members; accredited representatives or friends; employers and other payers of earned income; financial institutions and other payers of unearned income; health insurance carriers; other Federal agencies; the "Patient Medical Records--VA" (24VA10P2) and the "Enrollment and Eligibility Records--VA" (147VA16) systems of records; and Veterans Benefits Administration (VBA) automated record systems (including the "Veterans and Beneficiaries Identification and Records Location Subsystem--VA" (38VA23) and the "VA Compensation, Pension, Education, and Vocational Rehabilitation and Employment Records--VA"(58VA21/22/28)).

Records are maintained at Veterans Health Administration (VHA) facilities. Address locations for Department of Veterans Affairs (VA) facilities are listed in VA Appendix 1 of the biennial publication of VA's systems of records.

Individuals who are assigned VHA telephone numbers or are authorized to use VHA telephone services, and individuals who receive or make calls billed to VHA.

Call detail records consist of information on Federal Telecommunication System (FTS) telephone calls placed from VHA telephones or otherwise billed to VHA including the originating and destination telephone numbers; States and cities called; date and time of call; duration of each call; cost of call; name and title of caller; request number; account code; deactivation code; authorization code records indicating the assignment of telephone numbers to organizations and individuals; and the organizational location of telephones.

Title 38, United States Code, section 501.

The records are used to generate call detail records; to verify telephone usage; to allocate costs of telephone services to individual users; to identify unofficial telephone calls; and to justify action when individuals misuse or abuse VA telephone services.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, (i.e., individually identifiable health information, and 38 U.S.C. 7332), (i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus), that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. Disclosure may be made to individuals to determine their responsibility for telephone calls.

2. Disclosure may be made to another Federal agency or a telecommunications company providing telephone services to permit maintenance and repair of the account.

3. Information from this system of records may be disclosed to a congressional office from the record of an individual in response to an inquiry from the congressional office made on behalf of that individual.

4. Disclosure may be made to the National Archives and Records Administration (NARA) or to the General Services Administration (GSA) for records management inspections under Title 44 of United States Code.

5. Disclosure may be made at VA's initiative to the appropriate Federal, State, or local agency responsible for investigating, prosecuting, enforcing, or implementing a statute, rule, regulation, or order, where the agency becomes aware of an indication of a violation or potential violation of civil or criminal law or regulation.

6. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the reporting of an investigation, the letting of a grant or other benefit, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

7. Records from this system of records may be disclosed in a proceeding before a court, adjudicative body, or other administrative body when the Agency, or any Agency component or employee (in his or her official capacity as a VA employee), is a party to litigation; when the Agency determines that litigation is likely to affect the Agency, any of its components or employees, or the United States has an interest in the litigation, and such records are deemed to be relevant and necessary to the legal proceedings; provided that the disclosure is compatible with the purpose for which the records were collected.

8. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

9. Disclosure may be made to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

10. Disclosure may be made to the VA-appointed representative of an employee, including all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

11. Disclosure may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

12. Disclosure may be made to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

13. Disclosure may be made to the Federal Labor Relations Authority, including its General Counsel, when requested in connection with investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised and matters before the Federal Service Impasses Panel.

14. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

15. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

16. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

17. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

Disclosure to consumer reporting agencies:

Pursuant to 5 U.S.C. 552a(b)(12), VA may disclose records from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f)) or the Federal Claims Collection Act of 1966 (31 U.S.C. 3701(a)(3)).

Storage:

Records are maintained on electronic media (hard disk and floppy disks) and paper.

Records may be retrieved by name, authorization code, VA organizational unit, originating telephone number, destination telephone number, location code, date, time, cost, and/or duration of call.

1. Access to telecommunication areas at health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Generally, VA telecommunication areas are locked at all times and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to file information or the user database is controlled by access codes. The system recognizes authorized VA employees by individually unique passwords or access codes. Contractors accessing the database remotely use encryption and access codes.

Records are maintained and disposed of in accordance with record disposition authority approved by the Archivist of the United States. Destruction of hard copy (paper) records is by shredding or burning or some other method that will macerate the record content. Working disks are erased as soon as the purpose for which they have been established has been served.

Director, Implementation and Training Services, Communications Services Office (194D), Office of Information, State Route 9, Building 307A, Martinsburg, West Virginia 25401.

Individuals wishing to inquire whether this system of records contains information about themselves should contact the designated individual at the VHA facility where the records are maintained. Individuals must furnish the following information for their records to be located and identified: a. Full name; b. VA assigned telephone number or telephone service authorization number; and c. Description of information being sought, including the time frame of information being sought.

Individuals wishing to request access to records about themselves should contact the designated individual at the VHA facility where the records are maintained. Individuals must furnish the following information for their records to be located and identified: a. Full name; b. VA assigned telephone number or telephone authorization number, and; c. Description of information being sought, including the time frame of information being sought. Individuals requesting access must also follow VA's Privacy Act regulations regarding verification of identify and access to records (38 CFR part 1).

(See Record Access Procedures above.)

The information in this system of records is obtained from the following sources: a. Local VA telephone directories and other telephone assignment records; b. call detail records provided by suppliers of telephone services; and c. the individual on whom the record is maintained.

Automated records are maintained within the Electronic Document Management System (EDMS) at the Department of Veterans Affairs Central Office, 810 Vermont Avenue, NW, Washington, DC 20420. Paper correspondence records are maintained in file cabinets under the control of the office responsible for processing the correspondence item.

Members of Congress and their staff, officials and representatives of other Federal agencies, state, local and tribal governments, Foreign governments, and veterans service organizations; representatives of private or commercial entities; veterans and their beneficiaries; other private citizens; and VA employees.

Records are maintained in electronic and paper form depending on the nature of the materials received, background information compiled, and/or response sent. Each may include the names, social security numbers, mailing addresses, telephone numbers, and other personal identifiers routinely required to identify a correspondent or subject. Other record items maintained may include personal facts about medical, financial, or memorial benefits related to the correspondent, veteran or beneficiary. Internal VA records may include (but are not limited to) VA administrative, financial and personnel information. Records may include scanned document, letter, e-mail, fax, Internet document, tracking sheet, note, documentation of a telephone call and/or of a meeting with an individual.

Title 38, United States Code, 501(c).

EDMS is used to process replies to correspondence and other inquiries that originate from members of Congress; other Federal agencies; state, local, and tribal governments; Foreign governments; veterans service organizations; representatives of private or commercial entities; veterans and their beneficiaries; private citizens; and VA employees. EDMS is also used for some categories of correspondence and records internal to VA.

1. VA may disclose the records in this system, except for the name and address of a veteran, that it determines are relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation or order issued pursuant thereto.

2. VA may disclose the name and address of a veteran that it determines are relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation or order issued pursuant thereto.

3. VA may disclose the records in proceedings before a court or adjudicative body before which VA is authorized to appear when VA, a VA official or employee, the United States, or an individual or entity for whom the United States is providing representation is a party to litigation or has an interest in such litigation, and VA determines that the use of such records is relevant and necessary to the litigation, provided, however, that in each case, the agency determines that disclosure of the records is a use of the information contained in the records that is compatible with the purpose for which the records were collected.

4. Information may be provided to Members of Congress or staff persons in response to an inquiry from an individual to Members of Congress, made at the request of the individual and concerning that individual's VA records. Such information will be provided as authorized by law.

5. Information may be provided to a third party acting on an individual's behalf, such as agencies of Federal, state, local and tribal governments, Foreign governments; veterans service organizations; representatives of private or commercial entities in response to a request made by the individual to the third party and concerning that individual's VA records. Such information will be provided as authorized by law.

6. VA may compile statistical information using records contained in EDMS, except for identification information of a veteran such as name, address or social security number. This information may be disclosed to other VA facilities, Members of Congress; other Federal agencies; state, local and tribal governments. VA will determine that the use of such statistical information is relevant and necessary, that disclosure of the information contained in the records is compatible with the purpose for which the records were collected.

7. Disclosure may be made during reviews by the National Archives and Records Administration in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

8. To disclose relevant information to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States.

Storage:

EDMS employs rotational magnetic disk and Write Once-Read Many (WORM) optical disk media for storage of electronic records. Electronic records are regularly copied and moved to a separate physical location to assure a fail-safe records recovery capability. Paper records are maintained in file cabinets under the control of the office responsible for processing the record.

Key identification information is established for each record in EDMS. This information is in relation to the nature of materials received, background information compiled and/or response sent. Retrieval is by searching for specific key information (e.g., record identification number, author, correspondent name, subject matter, initial date record established, etc.).

Access to EDMS is via personal computer terminal. Necessary and sufficient application security functionality (i.e., unique customer user identification code/password and user-specific administrative control levels) are used to limit access to authorized VA staff, and to limit operations they may perform. To obtain access to EDMS' electronic records, VA staff must comply with the following procedures:

1. VA staff may not self-register in the system for access. A request for a user identification code and password is reviewed and approved by the designated EDMS Office Coordinator, and entered into the system by the system administrator. Approved staff are issued a user identification code and a temporary password, which they are required to change when they first sign onto the system.

2. Electronic records are protected by classifications, specified when the records are created. The owner of the record or authorized security personnel are the only ones who can modify the classification. A user's rights to inspect or modify records will depend on the user's assigned administrative control level as compared to the record's classification. The EDMS System Administrator manages the records classifications and user administration control levels.

Records will be maintained and disposed of in accordance with the records disposal authority approved by the Archivist of the United States, the National Archives and Records Administration. Paper records will be destroyed by shredding or other appropriate means for destroying sensitive information. Automated storage records are retained and destroyed in accordance with disposition authorization approved by the Archivist of the United States.

Associate Deputy Assistant Secretary for Policy and Program Assistance (045A), Department of Veterans Affairs, 810 Vermont Ave., NW, Washington, DC 20420. The phone number is (202) 273- 8127.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier or who wants to determine the contents of such records should submit a written request to the System Manager at the address above.

An individual who seeks access or wishes to contest records maintained under his or her name or other personal identifier may write, call or visit the System Manager.

See record access procedures above.

Records in this system are derived from processing replies to correspondence, and other inquiries that originate from Members of Congress; other Federal agencies; state, local and tribal governments; Foreign governments, veterans service organizations; representatives of private or commercial entities; veterans and their beneficiaries; other private citizens; and VA employees. Records maintained include material received, background information compiled and/or response sent. EDMS is also used for some categories of correspondence and records internal to VA. Internal VA records may include (but are not limited to) VA administrative, financial and personnel information.

Character-based data from Gulf War Registry Code Sheets are maintained in a registry dataset at the Austin Automation Center (AAC), 1615 Woodward Street, Austin, Texas 78772. Since the dataset at the AAC is not all-inclusive, i.e., narratives, signatures, noted on the code sheets are not entered into this system, images of the code sheets are maintained at the Department of Veterans Affairs (VA), Environmental Agents Service (131), 810 Vermont Avenue, NW., Washington, DC 20420. These are electronic images of paper records, i.e., code sheets and questionnaires that are stored on optical disks. With the transition to a web-based data entry system, this optical disk system will be discontinued in 2004. Images of code sheets are accessible in the web-based data entry system.

Veterans who may have been exposed to toxic substances or environmental hazard while serving in the Southwest theatre of operations during the Gulf War from August 2, 1990, until such time as Congress by law ends the Gulf War, and have had a Gulf War Registry (GWR) examination at a VA medical facility. Also, a spouse or child suffering from an illness or disorder (including birth defects, miscarriages, or stillbirth), which cannot be disassociated from the veteran's service in the Southwest Asia theatre of operations and who has had a GWR examination performed by a VA or non- VA clinician.

These records consist of code sheet records recording VA facility code identifier where veteran was examined or treated; veteran's name; address; social security number; date of birth; race/ethnicity; marital status; sex; branch of service; periods of service; hospital status, i.e., inpatient; outpatient; areas of service in the Gulf War theatre of operations; list of military units where veteran served; military occupation specialty; names of units in which veteran served; veteran's reported exposure to environmental factors; any traumatic experiences while in the Gulf War; veteran's self-assessment of health; veteran's functional impairment; report of birth defects and infant death(s) among veteran's children and/or problems with pregnancy and infertility; date of registry examination; veteran's complaints/symptoms; consultations; diagnoses; disposition (hospitalized, referred for outpatient treatment, etc.); whether veteran had an unexplained illness and had further tests and consultations and diagnoses as part of a Phase II, Uniform Case Assessment Examination; and name and signature of examiner/clinician coordinator, when provided. Similar responses for spouse and children of Gulf War veterans examined by non-VA physicians are contained in the records.

Another category of data entries is obtained from depleted uranium (DU) questionnaires, a supplement to the Gulf War code sheet. The data entries may contain the facility identifier where the information was completed; demographic information (name and social security number); daytime and evening phone numbers; date of questionnaire completion; date of arrival in and departure from the Gulf War theatre of operations; source of referral to VA medical center for evaluation; where veteran served (i.e., Iraq, Kuwait, Saudi Arabia, the neutral zone [between Iraq and Saudi Arabia], Bahrain, Qatar, the United Arab Emirates, Oman, Gulf of Aden, Gulf of Oman and the Waters of the Persian Gulf, Arabian Sea and Red Sea); capacity in which veteran served; questions relating to potential inhalation exposures to DU including those on, in, or near vehicles hit with friendly fire or enemy fire, entering burning vehicles, individuals near fires involving DU munitions, individuals salvaging damaged vehicles, and those near burning vehicles; whether veteran was wounded, retained DU fragments in veteran's body, handled DU penetrator rounds or any other exposures to DU; whether a 24-hour urine collection for uranium was performed; name, title and signature of examiner/environmental health clinician, when provided, and results of urine uranium tests, expressed per microgram per gram creatinine.

Title 38, United States Code (U.S.C.) 1710(e)(1)(B) and 1720E.

The records will be used for the purpose of providing information about: Veterans who have had a GWR examination at a VA facility and their spouses and/or children who have had examinations by VA or non-VA clinicians to assist in generating hypotheses for research studies; providing management with the capability to track patient demographics; reporting birth defects among veterans' children and grandchildren; planning the delivery of health care services and associated cost; and assisting in the adjudication of claims possibly related to exposure to a toxic substance or environmental hazard.

VA may disclose protected health information pursuant to the following routine uses where required by law, or required or permitted by 45 CFR parts 160 and 164.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of, and at the written request of, that individual.

2. Disclosure of records covered by this system, as deemed necessary and proper to named individuals serving as accredited service organization representatives, and other individuals named as approved agents or attorneys for a documented purpose and period of time, to aid beneficiaries in the preparation and presentation of their cases during the verification and/or due process procedures, and in the presentation and prosecution of claims under laws administered by VA.

3. A record containing the name(s) and address(es) of present or former members of the armed services and/or their dependents may be released from this system of records under certain circumstances:

a. To any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, and

b. To any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name(s) or address(es) be provided for a purpose authorized by law; provided, further, that the record(s) will not be used for any purpose other than that stated in the request and that the organization, agency or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

4. Disclosure may be made to the National Archives and Record Administration (NARA) in records management inspections conducted under authority of Title 44 United States Code.

5. Disclosure of information, excluding name and address (unless name and address is furnished by the requestor) for research purposes determined to be necessary and proper, to epidemiological and other research facilities approved by the Under Secretary for Health.

6. In order to conduct Federal research necessary to accomplish a statutory purpose of an agency, at the written request of the head of the agency, or designee of the head of that agency, the name(s) and address(es) of present or former personnel or the Armed Services and/or their dependents may be disclosed

a. to a Federal department or agency, or

b. directly to a contractor of a Federal department or agency. When a disclosure of this information is to be made directly to the contractor, VA may impose applicable conditions on the department, agency, and/or contractor to ensure the appropriateness of the disclosure to the contractor.

7. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

8. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission on Accreditation of Healthcare Organizations (JCAHO), College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews but only to the extent that the information is necessary and relevant to the review.

9. Records from this system of records may be disclosed to the Department of Justice (DOJ) or in a proceeding before a court, adjudicative body, or other administrative body before which the Department is authorized to appear when: (a) The Department, or any component thereof; or (b) any employee of the Department in his or her official capacity where the DOJ or the Department has agreed to represent the employee; or (c) the U.S., when the Department determines that litigation is likely to affect the Department or any of its components; is a party to litigation, and has an interest in such litigation, and the use of such records by the DOJ or the Department is deemed by the Department to be relevant and necessary to the litigation provided, however, that the disclosure is compatible with the purpose for which the records were collected.

10. Relevant information may be disclosed to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practical for the purposes of laws administered by VA, in order for the contractor to perform the services of the contract or agreement.

11. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

12. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

In 2003, the data collection process moved to a secure web-based system. Data previously recorded manually and converted to electronic format is now input through the secure VA Intranet system. Data is stored on a web server hosted by the AAC and is retrievable by the facility. Three levels of access are provided for the data that is input, using password security linked to the AAC Top Secret Security system, with mandated changes every 90 days. Data from individual facilities is uploaded nightly and stored on Direct Access Storage Devices at the AAC, Austin, Texas, and on optical disks at VA Central Office, Washington, DC. AAC stores registry tapes for disaster back up at an off-site location. VA Central Office also has back-up optical disks stored off-site. In addition to electronic data, registry reports are maintained on paper documents and microfiche.

The optical disk system is currently being utilized where there is no access to the secure web- based system. The optical disk system is scheduled to be discontinued in 2004 and all access to the GWR system will be through the secure web-based data entry system. Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Records are indexed by name of veteran and social security number.

Access to records at VA Central Office is only authorized to VA personnel on a "need to know" basis. Records are maintained in manned rooms during working hours. During non-working hours, there is limited access to the building with visitor control by security personnel. Registry data maintained at the AAC can only be updated by authorized AAC personnel.

Data is securely located behind the VA firewall and only accessible from the VA Local Area Network (LAN) through the VA Intranet. Read access to the data is granted through a telecommunications network to authorized VA Central Office staff. AAC reports are also accessible through a telecommunications network on a read-only basis to the owner (VA facility) of the data. Access is limited to authorized employees by individually unique access codes which are changed periodically.

Physical access to the AAC is generally restricted to AAC staff, VA Central Office staff, custodial personnel, Federal Protective Service and authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted. Backup records stored off-site for both the AAC and VA Central Office are safeguarded in secured storage areas. A disaster recovery plan is in place and system recovery is tested at an off-site facility in accordance with established schedules.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Director, Environmental Agents Service (131), Office of Public Health and Environmental Hazards, (clinical issues) and Management/Program Analyst, Environmental Agents Service (131) (administrative issues), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA facility where medical care was provided or submit a written request to the Director, Environmental Agents Service (131), Office of Public Health and Environmental Hazards or the Management/Program Analyst, Environmental Agents Service (131), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420. Inquiries should include the veteran's name, social security number, and return address.

An individual who seeks access to records maintained under his or her name may write or visit the nearest VA facility or write to the Director, Environmental Agents Service (131) or the Management/Program Analyst, Environmental Agents Service (131), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420.

(See "Record Access Procedures.")

VA patient medical records, various automated record systems providing clinical and managerial support to VA health care facilities, the veteran, family members, and records from the Veterans Benefits Administration, Department of Defense, Department of the Army, Department of the Air Force, Department of the Navy and other Federal agencies.

Records will be maintained at Department of Veteran Affairs (VA) Veterans Health Administration (VHA) sites for the Centers for Medicare & Medicaid Services (CMS) data (see VA Appendix 5).

Records include information concerning veterans, their spouses and their dependents, family members, active duty military personnel, and individuals who are not VA beneficiaries, but who receive health care services from VHA.

Categories of records in the system will include veterans' names, addresses, dates of birth, VA claim numbers, social security numbers (SSNs), and military service information, medical benefit application and eligibility information, code sheets and follow-up notes, sociological, diagnostic, counseling, rehabilitation, drug and alcohol, dietetic, medical, surgical, dental, psychological, and/or psychiatric medical information, prosthetic, pharmacy, nuclear medicine, social work, clinical laboratory and radiology information, patient scheduling information, family information such as next of kin, spouse and dependents" names, addresses, social security numbers and dates of birth, family medical history, employment information, financial information, third-party health plan information, information related to registry systems, date of death, VA claim and insurance file numbers, travel benefits information, military decorations, disability or pension payment information, amount of indebtedness arising from 38 U.S.C. benefits, applications for compensation, pension, education and rehabilitation benefits, information related to incarceration in a penal institution, medication profile such as name, quantity, prescriber, dosage, manufacturer, lot number, cost and administration instruction, pharmacy dispensing information such as pharmacy name and address.

The records will include information on Medicare beneficiaries from CMS databases including: health care usage, demographic, enrollment, and survey/assessment files including veteran and non- veteran data.

The records include information on Medicaid beneficiaries" utilization and enrollment from state databases.

The records include information on veterans enrolled for VA health care who have participated in the periodic "VHA Survey of Veteran Enrollees" Health and Reliance Upon VA."

The records also include information on: Civilian Health and Medical Program of the Department of Veterans Affairs (CHAMPVA), VA/DOD Identity Repository (VADIR), as well as the OEF/OIF roster (Defense Manpower Data Center), and United States Renal Data System (USRDS).

Section 527 of 38 U.S.C. and the Government Performance and Results Act of 1993, Public Law 103-62.

The purpose of this system of records is to conduct statistical studies and analyses which will support the formulation of Departmental policies and plans by identifying the total current health care usage of the VA patient population. The records and information may be used by VA in evaluation of Department programs. The information may be used to conduct research.

VA may disclose protected health information pursuant to the following routine uses where required by law, or required or permitted by 45 CFR parts 160 and 164.

1. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

2. Disclosure may be made, excluding name and address (unless name and address are furnished by the requestor) for research purposes determined to be necessary and proper to epidemiological and other research facilities approved by the System Manager or the Under Secretary for Health, or designee.

3. Any record in the system of records may be disclosed to a Federal agency for the conduct of research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and VHA Medicare and Medicaid Analysis Center (MAC) has determined prior to the disclosure that VA data handling requirements are satisfied. MAC may disclose limited individual identification information to another Federal agency for the purpose of matching and acquiring information held by that agency for MAC to use for the purposes stated for this system of records.

4. Disclosure may be made to National Archives and Records Administration (NARA), General Services Administration (GSA) in records management inspections conducted under authority of 44 U.S.C.

5. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

6. Disclosure may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

7. Any records may be disclosed to appropriate agencies, entities, and persons under the following circumstances: when (1) it is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

8. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the member, when the member or staff person requests the record on behalf of and at the written request of the individual.

9. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

10. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examinations of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions of the Commission as authorized by law or regulation.

11. VA may disclose information to a former VA employee or contractor, as well as the authorized representative of a current or former employee or contractor of VA, in proceedings before the Merit Systems Protection Board or the Office of the Special Counsel in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1206, or as otherwise authorized by law.

12. VA may disclose to the Federal Labor Relations Authority, including its General Counsel, information related to the establishment of jurisdiction, investigation, and resolution of allegations of unfair labor practices, or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised in matters before the Federal Service Impasses Panel.

Storage:

Data are maintained on magnetic tape, disk, or laser optical media.

Records may be retrieved by name, name and one or more criteria (e.g., dates of birth, death and service), SSN or VA claim number.

1. Access to and use of these records is limited to those persons whose official duties require such access. Personnel screening is employed to prevent unauthorized disclosure.

2. Access to Automated Data Processing files is controlled at two levels: (1) Terminals, central processing units, and peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected; and (2) the system recognizes authorized users by means of an individually unique password entered in combination with an individually unique user identification code.

3. Access to automated records concerning identification codes and codes used to access various VA automated communications systems and records systems, as well as security profiles and possible security violations is limited to designated automated systems security personnel who need to know the information in order to maintain and monitor the security of VA's automated communications and veterans' claim records systems. Access to these records in automated form is controlled by individually unique passwords and codes. Agency personnel may have access to the information on a need to know basis when necessary to advise agency security personnel or for use to suspend or revoke access privileges or to make disclosures authorized by a routine use.

4. Access to VA facilities where identification codes, passwords, security profiles and possible security violations are maintained is controlled at all hours by the Federal Protective Service, VA or other security personnel and security access control devices.

Copies of back-up computer files will be maintained at primary and secondary VA recipient sites for CMS data (see Appendix 5). Records will be maintained and disposed of in accordance with the records disposal authority approved by the Archivist of the United States, the National Archives and Records Administration, and published in Agency Records Control Schedules.

Manager, Medicare and Medicaid Analysis Center, 100 Grandview Rd., Suite 114, Braintree, MA 02184.

Individuals wishing to inquire whether this system of records contains information about them should submit a signed written request to the Manager, Medicare and Medicaid Analysis Center, 100 Grandview Rd., Suite 114, Braintree, MA 02184.

An individual who seeks access to records maintained under his or her name or other personal identifier may write the System Manager named above and specify the information being contested.

(See Records Access Procedures above).

Information may be obtained from the Patient Medical Records System (24VA136), Patient Fee Basis Medical and Pharmacy Records (23VA136), Veterans and Beneficiaries Identification and Records Location Subsystem (38VA23), Compensation, Pension, Education and Rehabilitation Records (58VA21/22), all other potential VA and non-VA sources of veteran demographic information, and CMS databases. The records also include information from: Civilian Health and Medical Program of the Department of Veterans Affairs (CHAMPVA), VA/DOD Identity Repository (VADIR), as well as the OEF/OIF roster (Defense Manpower Data Center), and United States Renal Data System (USRDS).

Records are maintained at each of the Department of Veterans Affairs (VA) health care facilities. The address locations for VA facilities were listed in VA Appendix I of the biennial publication of the VA systems of record. Information from these records or copies of records may be maintained at the Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420; Network Directors' Offices; Emergency Management Strategic Healthcare Group Headquarters, VA Medical Center, Martinsburg, WV 25401; or with the Area Emergency Managers located at VA facilities.

VA employees who make application to VA and are considered for deployment as health care providers primarily in times of national emergencies in response to domestic disasters resulting from natural and technological hazards, terrorist attacks, and the employment of nuclear, biological, and chemical weapons of mass destruction. These individuals may include audiologists, dentists, dietitians, expanded-function dental auxiliaries, licensed practical vocational nurses, nuclear medicine technologists, nurse anesthetists, nurse practitioners, nurses, occupational therapists, optometrists, clinical pharmacists, licensed physical therapists, physician assistants, physicians, podiatrists, psychologists, registered respiratory therapists, certified respiratory therapy technicians, diagnostic and therapeutic radiology technologists, social workers, speech pathologists, contracting specialists, building maintenance, engineering, housekeeping, and other personnel associated with emergency management.

Information on VA employees who make application to be deployed as health care providers primarily in times of national emergencies. This source document provides personal and demographic information initiated, provided and authenticated by the employee, and contains the necessary approvals and signatures of officials in the supervisory chain for the employee's inclusion in the database. Information is provided on a voluntary basis. Information related to identifying and selecting individuals by the Emergency Management Strategic Healthcare Group, networks and medical centers eligible to support specific job tasking and assignments during either disasters internal to the VHA health care system, or external to VHA for which the VA is tasked to provide support under applicable authorities. Requests for issuance of travel orders and necessary reimbursement to VA for subsequent allocation of funds to home stations of deployed personnel are required to cover costs of travel, overtime and other expenses associated with individual deployments. This information is necessary to account for personnel deployed to support disasters, to identify personnel with specific job skills and experience that may be required to support contingency missions tasked to VA under the VA/Department of Defense (DoD) Contingency Plan, and for the development of plans at the corporate, network and medical center level for utilization of VHA personnel in support of VA internal and external disasters.

Authority for maintenance of this system of records is Executive Order 12656 dated November 18, 1988.

The records may be used for such purpose as to provide information on sufficient health care medical personnel to respond to disasters, to provide information to the Emergency Management Strategic Healthcare Group primarily in times of national emergencies caused by catastrophic events, and to respond to internal emergencies occurring within the Veterans Integrated Service Networks.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. Selected information (such as name, station and telephone numbers) may be disclosed to other Federal departments and agencies that have an interest in or obligation to track or otherwise audit transfer of funds to VA for reimbursement of tasks.

2. Statistical information and other data may be disclosed to Federal, State and local government agencies to assist in disaster planning and after-action reports.

3. When a record on its face, or in conjunction with other records, indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule or order issued pursuant thereto, disclosure may be made to the appropriate agency, whether Federal, foreign, State, local, or tribal, or other public authority responsible for enforcing, investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation, or order issued pursuant thereto, if the information disclosed is relevant to any enforcement, regulatory, investigative or prosecutive responsibility of the receiving entity.

4. Disclosure may be made to any source, such as a police department or the Federal Bureau of Investigation, from which additional information is requested to the extent necessary to identify the individual, inform the source of the purpose(s) of the request, and to identify the type of information requested such as DEMPS personnel present at a crime scene caused by terrorists.

5. Disclosure may be made to an agency in the executive, legislative, or judicial branch, or the District of Columbia Government in response to its request, or at the initiation of VA, for information in connection with the selection of an employee for the deployment and future training of an individual, the letting of a contract, the issuance of a license, grant, or other benefits by the requesting agency, or the lawful statutory, administrative, or investigative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's deployment/Federal Response Framework needs.

6. Disclosure may be made to a Member of Congress or to a congressional staff member in response to an inquiry of the congressional office made at the written request of the constituent about whom the record is maintained.

7. Disclosure may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

8. Disclosure may be made to a Federal agency or to a State or local government licensing board, or to the Federation of State Medical Boards, or a similar non-government entity, provided the entity maintains records concerning individuals' employment histories, is engaged in the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty. The disclosure is for the Department to obtain information relevant to a Department decision concerning the hiring, retention or termination of an employee, or to inform a Federal agency, licensing boards or to the appropriate non-government entities about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients receiving medical care in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

9. Information may be disclosed to private sector (i.e., non-Federal, State, or local governments) agencies, organizations, boards, bureaus, or commissions (e.g., The Joint Commission) when the disclosure is in the best interest of the government (e.g., to obtain accreditation or other approval rating). When cooperation with the private sector entity, through the exchange of individual records, directly benefits VA's completion of its mission, enhances personnel management functions, or increases the public confidence in VA's or the Federal government's role in the community, then the government's best interests are served. Further, only such information that is clearly relevant and necessary for accomplishing the intended uses of the information as certified by the receiving private sector entity is to be furnished.

10. Information may be disclosed to a State or local government entity or national certifying body that has the authority to make decisions concerning the issuance, retention or revocation of licenses.

11. Information may be disclosed to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

12. Information on deployment to Federal/VHA emergencies, performance, or other personnel-related material may be disclosed to any facility with which there is, or there is proposed to be, an affiliation, sharing agreement, contract, or similar arrangement, for purposes of establishing, maintaining, or expanding any such relationship.

13. Information concerning a health care provider's professional qualifications and clinical privileges may be disclosed to a VA/emergency disaster-served client patient, or the representative or guardian of a patient who, due to physical or mental incapacity, lacks sufficient understanding or legal capacity to make decisions concerning his or her medical care, who is receiving or contemplating receiving medical or other patient care services from the provider when the information is needed by the patient or the patient's representative or guardian in order to make a decision related to the initiation of treatment, continuation or discontinuation of treatment, or receiving a specific treatment that is proposed or planned by the provider. Disclosure will be limited to information concerning the health care provider's professional qualifications (professional education, training and current licensure/certification status), professional employment history, and current clinical privileges.

14. Information may be disclosed to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

15. Information may be disclosed to the VA-appointed representative of an employee of all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

16. Information may be disclosed to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

17. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

18. Information may be disclosed to the Federal Labor Relations Authority (including its General Counsel) when requested in connection with investigation and resolution of allegations of unfair labor practices, and in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised.

19. Disclosure may be made to agency contractors, grantees, or volunteers who have been engaged to assist the agency in the performance of a contract service, grant, cooperative agreement, or other activity related to this system of records and who need to have access to the records in order to perform the activity. Recipients shall be required to comply with the requirement of the Privacy Act of 1974, as amended, 5 U.S.C. 552a.

20. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

21. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Disclosure to consumer reporting agencies:

Reports of all transactions dealing with data will be used within VA and will not be provided to any consumer-reporting agency.

Storage:

Automated records are maintained at all levels of management outlined in system location. Automated information may be stored on microfilm, magnetic tape, disk, or databases.

Records are retrieved from the system by the name, professional title, VISN, home station, professional specialty, job position title, etc., of the individuals on whom they are maintained.

1. Access to VA working and storage areas in VA health care facilities is restricted to VA employees on a need-to-know basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours, and the health care facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to the Veterans Health Information Systems Technology Architecture (VistA) computer room within the health care facilities is generally limited by appropriate security devices and restricted to authorized VA employees and vendor personnel. Automatic Data Processing (ADP) peripheral devices are generally placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Authorized VA employees may access information in the VistA system. Access to file information is controlled at two levels: The system recognizes authorized employees by a series of individually unique passwords/codes as a part of each data message, and the employees are limited to only that information in the file which is needed in the performance of their official duties.

An automated database of DEMPS personnel will be maintained at the employing VA facility. If the individual transfers to another VA facility location, the name will be added to the database at the new location. Information stored on electronic storage media is maintained and disposed of in accordance with the records disposition authority approved by the Archivist of the United States.

Official responsible for maintaining the system: Director, Emergency Management Strategic Healthcare Group (EMSHG) (13C), VA Medical Center, Martinsburg, West Virginia, 25401.

Individuals who wish to determine whether this system of records contains information about them should contact the VA facility location at which they made application as a deployment volunteer, or are or were employed. Inquiries should include the employee's full name, date of application for employment or dates of employment, and return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where they made application for employment or are or were employed.

(See Record Access Procedures above.)

The information will be provided by the individual VA employee and the VA medical facility (home station) or other VA location at which the employee was employed. EMSHG Headquarters will also provide information for updates of deployment status and availability.

None.

Records are maintained at each Department of Veterans Affairs (VA) health care facility with back-up computer tape information being stored at off-site locations in most cases. The national database where ASISTS resides is located at the Austin Automation Center. Address locations for VA facilities are listed in VA Appendix 1 of the biennial publication of the VA system of records. In addition, records may be maintained at the Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC; VA Data Processing Centers; VA OI Field Offices; Veterans Integrated Service Network Offices; and Employee Education Systems.

The records include information concerning current and former employees, trainees, contractors, subcontractors, volunteers, and other individuals working with or performing services for VA. For the purpose of this system of records, these individuals are characterized collectively as employees.

The records in this system include:

1. Personal identifiers, including the injured or ill employee's name, date of birth, age, sex, and social security number;

2. Residential and professional contact data, including home and/or mailing address, home telephone number, emergency contact information, personnel status, and duty station;

3. Employment information, including personnel status, occupation, grade and step, date of hire, and station number;

4. Information about injuries and illnesses attributed to work, including the location of injury, cause, severity, type of injury, body parts affected, risk, and contributing factors;

5. Information from reviews and investigation of incidents conducted by the employee's supervisor and the safety personnel of that facility, including any corrective actions taken by the supervisor and the findings of the health and safety officer;

6. Abstract information, including environmental and epidemiological registries, studies of effectiveness health and safety systems, and further research in the area of occupational medicine.

7. Information required for reporting to the Occupational Safety and Health Administration (OSHA) of the Department of Labor (DoL), including the name of the treating physician or other health care professional, hospitalization, medical treatment, medication, safety device; and

8. Information required for filing a workers' compensation claim with the DoL Office of Workers' Compensation Programs (OWCP) under the Federal Employee Compensation Act (FECA), 5 U.S.C. 8101 et seq.

ASISTS does not contain, in whole or in part, workers' compensation claim forms filed under the FECA, any duplicates or copies of such documents, or any information that is derived from claim records.

5 U.S.C. Chapters 11, 31, 33, 43, 61, 63, and 83; 38 U.S.C. 501; 38 U.S.C. Chapter 74.

The records will be used to identify specific cases of work-related injuries and illnesses; track and evaluate medical care of and services provided to injured or ill workers, and determine emerging causes, clusters of incidents, and outbreaks. The records will also be used to identify system-wide problems and opportunities for focused education and intervention; evaluate the effectiveness of health and safety systems performance, especially after interventions, through statistical analysis; to develop and manage the planning, distribution, and utilization of resources; and support further research in the area of occupational medicine. The data may also be used for the review of root causes of injuries and for audits, reviews, and investigations of incidents involving workplace injuries and illnesses. Data may be accessed locally and at the VISN level through ASISTS directly or through presentation modes on the VISN Support Service Center (in anonymized form such as through a Proclarity Data Cube), Users include the following: Nationally data may be accessed through the rolled-up master file and data use agreements with the System of Records owner that address confidentiality requirements under the Privacy Act.

At the facility level: safety and industrial hygiene, engineering, human resources and workers compensation, occupational health, union, supervisory, and management staff.

At the VISN level: VISN safety and workers compensation staff and human resources staff.

At the national level: occupational health, safety, workers compensation, human resources, and engineering staff.

Where an injured or ill employee chooses to file a workers' compensation claim under the Federal Employee Compensation Act (FECA), 5 U.S.C. § 8101 et seq., ASISTS provides a mechanism for electronic transmission of claims to DoL. Certain information in the system, including the employee's own description of the injury or illness, populates the claim form. The completed claim form, which is not a part of ASISTS, is then submitted to OWCP.

Although certain information in ASISTS populates workers' compensation claim forms, the official workers' compensation claim file is part of OWCP's government-wide system of records entitled Office of Workers' Compensation Programs, Federal Employees' Compensation Act Files (DOL/GOVT-1) and is not covered by this system. Any data in ASISTS that is used solely to populate FECA claim forms, such as the employee's own description of the incident, will be treated as DOL/GOVT-1 records and disclosed only in accordance with DOL's interpretation of the DOL/GOVT-1 routine uses.

1. VA may disclose on its own initiative any information in this system, except the names and addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, a Federal, state, local, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order.

2. VA may disclose information to a Congressional office from the record of an individual in response to an inquiry from the Congressional office on behalf of and at the request of that individual.

3. VA may disclose information to the National Archives and Records Administration (NARA) in records disposition and management inspections conducted under authority of Title 44 of United States Code.

4. VA may disclose information in this system of records to the Department of Justice (DOJ), either on VA's initiative or in response to DOJ's request for the information, after either VA or DOJ determines that such information is relevant to DOJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

5. VA may disclose information for program review purposes and the seeking of accreditation and/or certification to survey teams of the Joint Commission on Accreditation of Healthcare Organizations (JCAHO), College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with which VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

6. VA may disclose information to officials of the Merit Systems Protection Board (MSPB) and the Office of the Special Counsel when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. §§ 1205 and 1206, or as may be authorized by law.

7. VA may disclose information to the Equal Employment Opportunity Commission (EEOC) when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

8. VA may disclose to the Federal Labor Relations Authority (FLRA), including its General Counsel, information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised, in matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

9. VA may disclose information to individuals, organizations, private or public agencies, or other entities with which VA has a contract or agreement, or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

10. VA may disclose information to labor unions operating at the facility level as members of institutional review boards, also known as accident review boards, to review root causes of injuries.

11. VA may disclose information to the Department of Labor for the electronic filing of workers compensation claims, as provided by 5 U.S.C. 8121.

12. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

13. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

Storage:

Records are maintained electronically on magnetic tape, disk, or laser optical media with copies of back-up computer files maintained at off-site locations in most cases.

Records are retrieved by name, Social Security number, or other assigned identifiers of the individuals on whom they are maintained.

1. Access to VA working and storage areas is restricted to VA personnel on a "need-to- know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours, and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to computer rooms at health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Automated Data Processing (ADP) peripheral devices are placed in secure areas, which are locked, with limited access, or are otherwise protected. Records may be accessed by authorized VA employees, and access is controlled at two levels; the systems recognize authorized users by series of individually unique passwords/codes as a part of each data message, and access is limited to only those who need the information in the performance of their official duties. Information downloaded from ASISTS and maintained on personal computers is afforded similar storage and access protections as data maintained in the original files. Access to information stored on automated storage media at other VA locations is controlled by individually unique passwords/codes.

3. Access to information that populates workers' compensation claim forms submitted to DoL is accessible to only the employee filing the claim, his or her supervisor, and the workers' compensation personnel of the facility.

Records are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

At the current time, VA does not have records disposition authority for these records that has been approved by the Archivist of the United States. The System Manager has initiated action to seek and obtain such disposition authority in accordance with VA Handbook 6300.1, Records Management Procedures. The records will not be destroyed until VA obtains a NARA-approved records disposition authority. Once VA has obtained NARA-approved records disposition authority, the agency will amend this notice to reflect that authority, and any destruction of electronic records will occur when no longer needed for administrative, legal, audit, or other operational purposes.

Official responsible for policies and procedures: Office of Public Health and Environmental Hazards (13), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Officials maintaining the system: Director at the facility where the employee was associated.

Individuals seeking information on the existence and content of a record pertaining to them should contact the VA facility location at which they are or were employed, or performed work. Inquiries should include the person's full name, social security number, dates of employment or work, and return address.

(See Notification Procedure above.)

(See Notification Procedure above.)

Information in this system of records is provided by employees, trainees, contractors, subcontractors, volunteers, and other affected individuals; supervisors; health and safety professionals at facilities; clinical personnel; workers' compensation personnel; and human resources staff.

PATS application is installed on a centrally located system at Falling Waters. The backup system in case of disaster recovery scenario is located at Hines. The data entered into the application also resides on this central system. A limited set of information is transferred from this central system in Falling Waters to Austin Automation Center. This limited set of information transferred to Austin Automation Center is utilized to run specific reports for central business office.

Patient contacts are coded in order to facilitate tracking of these contacts to show where system improvements might be made. Aggregate data are maintained at the Network and Headquarters levels for the development of reports to make system wide changes. Records are collected and stored electronically for ease of retrieval by individual patient names and ease in compiling aggregate data.

The records include information concerning individual patients, veterans who have applied for care, their friends, their families, VA healthcare providers and members of the community. Members of the community include congressional liaisons, veterans service organizations and attorneys.

The records may include information maintained in paper records, and entered into a centralized Web based system, Patient Advocate Tracking System (PATS) related to concerns and complaints regarding an individual's medical care, VA benefits, and/or encounters with healthcare facility personnel. The records include information that is compiled to review, investigate, and resolve these issues.

Title 38, United States Code, chapter 73, section 7301 (b).

The records may be used for such purposes as producing various management and patient follow-up reports; responding to patient and other inquiries; conducting healthcare-related studies, statistical analysis, and resource allocation planning; providing clinical and administrative support to patient medical care; audits, reviews and investigations conducted by the staff of the healthcare facility, VISN, VHA Headquarters, and VA's Office of Inspector General (OIG); law enforcement investigations; quality improvement reviews and investigations; personnel management and evaluation; employee ratings and performance evaluations; employee disciplinary or other adverse action, including discharge; advising healthcare professional licensing or monitoring bodies or similar entities or activities of VA and former VA healthcare personnel; accreditation of a facility by an entity such as the Joint Commission; and, notifying medical schools of medical students' performance. The information is integrated into the overall quality improvement plans and activities of the facility and used to improve services and communications, as well as, to track categories of complaints and the locations of complaints in order to improve the delivery of healthcare.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

2. Disclosure may be made to the National Archives and Record Administration and the General Services Administration for records management inspections conducted under authority of Title 44, Chapter 29, of the United States Code (U.S.C.).

3. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the Information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

4. Disclosure may be made to any facility regarding the hiring, performance, or other personnel- related information with which there is, or there is proposed to be, an affiliation, sharing agreement, contract, or similar arrangement for purposes of establishing, maintaining, or expanding any such relationship.

5. Disclosure may be made to a Federal agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar non-government entity which maintains records concerning individual employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty, in order for the Department to obtain information relevant to a Department decision concerning the hiring, retention or termination of an employee or to inform Federal agencies, licensing boards or the appropriate non-government entities about the healthcare practices of employees who resigned, were terminated, or retired and whose professional healthcare activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients receiving medical care in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer-matching program to accomplish these purposes.

6. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission, College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

7. Disclosure may be made to a State or local government entity or national certifying body which has the authority to make decisions concerning the issuance, retention or revocation of licenses, certifications or registrations required to practice a healthcare profession, when requested in writing by an investigator or supervisory official of the licensing entity or national certifying body for the purpose of making a decision concerning the issuance, retention or revocation of the license, certification or registration of a named healthcare professional.

8. Disclosure of information to the Federal Labor Relations Authority (including its General Counsel) when requested in connection with the investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised, in connection with matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

9. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

10. Disclosure may be made to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

11. Disclosure may be made to a Federal, State or local agency maintaining civil, criminal or other relevant information such as current licenses, if necessary to obtain information relevant to any agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant or other health, educational or welfare benefit.

12. Disclosure of information may be made to the next-of-kin and/or the person(s) with whom the patient has a meaningful relationship to the extent necessary and on a need-to-know basis consistent with good medical-ethical practices.

13. A record containing the name(s) and address(es) of present or former members of the armed services and/or their dependents may be disclosed under certain circumstances to any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public's health or safety, if a qualified representative of such organization, agency or instrumentality has made a standing written request that such name(s) or address(es) be provided for a purpose authorized by law; provided that the record(s) will not be used for any purpose other than that stated in the request and that organization, agency or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

14. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, Tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

15. VA may disclose information from this system to the Equal Employment Opportunity Commission (EEOC) when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or other functions of the Commission as authorized by law or regulation.

16. VA may disclose information from this system to the Merit Systems Protection Board (MSPB), or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1205 and 1206, or as authorized by law.

17. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

18. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are maintained on paper, microfilm, magnetic tape, disk, or laser optical media. In most cases, copies of back-up computer files are maintained at off-site locations.

Records are retrieved by name, social security number or other assigned identifiers of the individuals on whom they are maintained.

1. Access to VA working and storage areas is restricted to VA employees on a "need-to- know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Patient Advocate Tracking System (PATS) is a Web based application installed on central computer systems in a data center at Falling Waters, WV. The systems are maintained by authorized personnel. The end users access the application using the Web browser installed on their desktops. Additionally, access to computer rooms at health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. ADP peripheral devices are placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Information in VistA may be accessed by authorized VA employees. Access to PATS application and data in the application is controlled at two levels; the systems recognize authorized employees by series of individually unique passwords/codes as a part of each data message, and the employees are limited to only that information in the application which is needed in the performance of their official duties. Information that is downloaded from PATS and maintained on personal computers is afforded similar storage and access protections as the data that is maintained in the original files. Access to information stored on automated storage media at other VA locations is controlled by individually unique passwords/codes.

3. Access to the Austin VA Data Processing Center is generally restricted to Center employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted. Information stored in the computer may be accessed by authorized VA employees at remote locations including VA health care facilities, Information Systems Centers, VA Central Office, and Veteran Integrated Service Networks. Access is controlled by individually unique passwords/codes which must be changed periodically by the employee.

Paper records and information stored on electronic storage media are maintained and disposed of in accordance with Records Control Schedule 10-1, Section XLV, as authorized by the National Archives and Records Administration of the United States.

Official responsible for policies and procedures; Director, National Veteran Service and Advocacy Program, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Officials maintaining the system are the Director at the facility where the individual were associated.

Individuals who wish to determine whether this system of records contains information about them should contact the VA facility location at which they are or were employed or made or have contact. Inquiries should include the person's full name, social security number, dates of employment, date(s) of contact, and return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where they are or were employed or made contact.

(See Record Access Procedures above.)

The patient, family members, and friends, employers or other third parties when otherwise unobtainable from the patient or family; Patient Medical Records--VA (24VA136); private medical facilities and healthcare professionals; State and local agencies; other Federal agencies; VISNs, Veterans Benefits Administration automated record systems (including Veterans and Beneficiaries Identification and Records Location Subsystem--VA (38VA23) and the Compensation, Pension, Education and Rehabilitation Records--VA (58VA21/22); and various automated systems providing clinical and managerial support at VA healthcare facilities.

Active records are maintained at the Department of Veterans Affairs (VA) Central Office, 810 Vermont Avenue, NW, Washington, DC 20420 and VA field facilities. Inactive records are retired to the National Personnel Records Center, 111 Winnebago Street, St. Louis, MO 63118. When VA determines that all or a portion of these records need to be maintained in a different location, e.g., VA Central Office, such records are covered by this system.

Current and former employees appointed under 38 U.S.C. 7306, 7401(1), 7401(3), and 7405, except students, trainees, medical support personnel, and those appointed on a fee or without compensation basis. This includes employees such as physicians, dentists, podiatrists, optometrists, nurses, nurse anesthetists, physician assistants, expanded-function dental auxiliaries, certified respiratory therapy technicians, registered respiratory therapists, licensed physical therapists, licensed practical or vocational nurses, occupational therapists, and pharmacists. This system of records does not cover applicants for positions covered by this system of records. Such individuals are covered by the system of records entitled Applicants for Employment Under Title 38, USC-VA (02VA135). It also does not cover the performance appraisals of Title 38 employees appointed under 38 U.S.C. 7306, facility Directors appointed under 38 U.S.C. 7401(1), or "hybrid" title 38 employees appointed under 38 U.S.C. 7401(3) or 7405(a)(1)(B). The performance appraisals of these employees are covered under the Employee Performance File System of Records (OPM/GOVT-2).

All categories of records may include identifying information, such as name, date of birth, Social Security number, service computation date, facility number, current position title, and the employee's current grade, level, and step rate. Records in this system include:

a. Copies of the employee's employment application, curriculum vitae, and transcripts of higher education. The original documents are maintained in the General Personnel Records (Title 38)-- VA (76VA05).

b. Board Actions (VA Form 2543) and recommendations/documentation associated with those actions. The Title 38 personnel system utilizes a peer review process for making recommendations concerning appointments, advancements, awards, promotion reconsideration, conversions from one type of Title 38 appointment to another, and other personnel actions. After receiving input from an employee's supervisor, the appropriate Professional Standards Board (the employee's peers) makes recommendations for consideration by appropriate management officials. The recommendations and management action taken are recorded on the VA Form 2543. The VA Form 2543 documenting recommendations and management actions taken because of a probationary review, separation based on pre-employment suitability, or separation based on failure to meet required physical standards are also included in this system of records. However, all supporting documents associated with the actions in the preceding sentence are to be included in the records system 102VA05. This includes notices of proposed action, materials relied on by VA to support the reason(s) for the action, replies by employees, statements of witnesses, hearing notices, and other reports related to these actions.

c. Proficiency reports documenting the proficiency ratings of employees and any comments associated with those proficiency reports.

d. On-going, periodic assessments of an employee's education, experience, and training to ensure they can effectively meet the requirements of their position (i.e., competency assessments and associated documents).

38 U.S.C. 501(a), 7304 and 7406(c)(1).

This system is a repository for Professional Standards Board recommendations and the information needed to make those recommendations (e.g., employment applications, transcripts of higher education, and proficiency reports). It also contains a record of management actions taken with respect to Professional Standards Board recommendations. The actions taken give legal force and effect to personnel transactions and establish employee rights and benefits under pertinent laws and regulations governing Federal employment. They also provide a basic source of factual data about a person's VA employment. Records in this system assist Professional Standards Boards and others to determine whether a variety of personnel actions are appropriate. They are also used to obtain information needed to provide other personnel services.

1. To disclose information to government training facilities (Federal, State and local) and to non-government training facilities (private vendors of training course or programs, private schools, etc.) for training purposes.

2. To disclose relevant information to third parties considering VA employees for awards or recognition and to publicize information about such awards or recognition. This may include disclosures to public and private organizations, including news media, which grant or publicize employee awards or honors.

3. To disclose information about incentive awards and other awards or honors granted by VA. This may include disclosure to public and private organizations, including news media, which publicize such recognition.

4. To disclose the information listed in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

5. VA may, on its own initiative, disclose relevant information to a Federal agency (including Offices of the Inspector General), State, or local agency responsible for investigating, prosecuting, enforcing, or implementing a statute, rule, or regulation if there is reason to believe that a violation may have occurred. This routine use does not authorize disclosures in response to requests for information for civil or criminal law enforcement activity purposes, nor does it authorize disclosure of information in response to court orders. Such requests must meet the requirements of 5 U.S.C. 552a(b)(7) or (b)(11), as applicable.

6. To disclose pertinent information to any source when necessary to obtain information relevant to a conflict-of-interest investigation or determination.

7. To disclose information to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of the purposes(s) of the request, and to identify the type of information requested), when necessary to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, or the issuance of a license, grant, or other benefit.

8. To disclose to an agency in the executive, legislative, or judicial branch, or the District of Columbia's Government in response to its request, or at the initiation of VA, information in connection with the hiring of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, the issuance of a license, grant or other benefit by the requesting agency, or the lawful statutory or administrative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's decision.

9. To disclose relevant information to non-Federal agencies (i.e., State or local governments), and private sector organizations, boards, bureaus, or commissions (e.g., the Joint Commission on Accreditation of Healthcare Organizations) when such disclosures are required to obtain accreditation or other approval ratings.

10. To disclose information to the Office of Management and Budget at any stage in the legislative coordination and clearance process in connection with private relief legislation as set forth in OMB Circular No. A-19.

11. To provide information to a congressional office from the records of an individual in response to an inquiry from the congressional office made at the request of the individual.

12. VA may, on its own initiative, disclose information to another Federal agency, court, or party in litigation before a court or other administrative proceeding conducted by a Federal agency, if VA is a party to the proceeding and VA needs to disclose such information to protect its interests.

13. To disclose information to the National Archives and Records Administration (NARA) for records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

14. To disclose to persons engaged in research and survey projects information necessary to locate individuals for personnel research or survey response, and to produce summary descriptive statistics and analytical studies in support of the function for which the records are collected and maintained, or for related workforce studies. While published statistics and studies do not contain individual identifiers, in some instances, the selection of elements of data included in the study may be structured in such a way as to make the date individually identifiable by inference.

15. To provide an official of another Federal agency information needed in the performance of official duties related to reconciling or reconstructing data files in support of the functions for which the records were collected and maintained.

16. When an individual to whom records pertain is mentally incompetent or under other legal disability, information in the individual's records may be disclosed to any person or entity responsible for managing the individual finances to the extent necessary to ensure payment of benefits to which the individual is entitled.

17. To disclose information to officials of the Merit Systems Protection Board or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

18. To disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law.

19. To disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel.

20. Records from this system of records may be disclosed to a Federal, State, or local government agency or licensing board and/or to the Federation of State Medical Boards or a similar non- government entity. These entities maintain records concerning individuals' employment or practice histories or concerning the issuance, retention, or revocation of licenses or registration necessary to practice an occupation, profession, or specialty. Disclosures would be made for the Agency to obtain information determined relevant to an Agency decision concerning the hiring, retention, or termination of an employee. Disclosures may also be made to inform licensing boards or the appropriate non-governmental entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional practice as to raise reasonable concern for the health and safety of patients.

21. To disclose relevant information to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

22. To disclose relevant and necessary hiring, performance, or other personnel-related information to any facility with which there is, or there is proposed to be, an affiliation, sharing agreement, contract, or similar arrangement, for purposes of establishing, maintaining, or expanding any such relationship.

23. Identifying information in this system, including name, Social Security number, and other information as is reasonably necessary to identify such an individual, may be disclosed to the National Practitioner Data Bank (NPDB) at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention, or termination of the applicant or employee.

24. Relevant information from this system of records may be disclosed to the NPDB or to a State or local government licensing board which maintains records concerning the issuance, retention, or revocation of licenses, certifications, or registrations necessary to practice an occupation, profession, or specialty when under the following circumstances, through peer review process that is undertaken pursuant to VA policy, negligence, professional incompetence, responsibility for improper care, and/or professional misconduct has been assigned to a physician or licensed or certified health care practitioner: (1) On any payment in settlement of (or partial settlement of, or in satisfaction of) a judgement in a medical malpractice action or claim; or, (2) on any final decision that adversely affects the clinical privileges of a physician or practitioner for a period of more than 30 days.

25. To disclose information to contractors, subcontractors, grantees, or others performing or working on a contract, grant, or cooperative agreement for the Federal government, provided disclosure is in the interest of the Government and the information to be disclosed is relevant and necessary for accomplishing the intended uses of the information and necessary to perform services under the contract, grant, or cooperative agreement.

26. Information from this system of records will be disclosed to the Healthcare Integrity and Protection Data Base as required by section 1122E of the Social Security Act (as added by Sec. 221(a) of Pub. L. 104-191) and the associated implementing regulations issued by the Department of Health and Human Services, 45 CFR Part 61. For example, VA is required to report adjudicated adverse personnel actions based on acts or omissions that either affected or could have affected the delivery of health care services.

Storage:

These records may be maintained in file folders, on lists and forms, on microfilm or microfiche, and in computer processable storage media.

These records may be retrieved using various combinations of name, birth date, Social Security number, or identification number of the individual on whom they are maintained.

Access to areas where these records are maintained is restricted to VA employees, contractors, or subcontractors on a "need to know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. File areas are locked after normal duty hours and are protected from outside access by VA police officers or other types of alarm systems.

The Professional Standards Board Action and Proficiency Rating Folder is maintained for the period of the employee's service in VA and is then transferred with the Merged Records Personnel Folder to the National Personnel Records Center (NPRC) for storage, or, as appropriate, to the next employing Federal agency.

a. VA maintains the Professional Standards Board Action and Proficiency Rating Folder as long as VA employs the individual. Within 90 days after the individual separates from Federal employment, the record is sent with the Merged Records Personnel Folder to the NPRC for long-term storage. The records of retired employees or employees who die in service are sent to the Records Center within 120 days of the retirement or death.

b. Records in this system must be maintained and disposed of in accordance with General Records Schedule 1, VA Records Control Schedule 10-1, the Office of Personnel Management Guide to Federal Recordkeeping, and the Memorandum of Understanding concerning this subject between VA, the Office of Personnel Management, and National Archives and Records Administration.

Deputy Assistant Secretary for Human Resources Management (05), Department of Veterans Affairs, 810 Vermont Avenue, NW, Washington, DC 20420.

Individuals wishing to inquire whether this system of records contains information about them should contact the appropriate office as follows:

a. Non-VA Federal employees should contact the responsible office (as designated by their agency) regarding records in this system. VA employees should contact the office responsible for human resources management at their installation.

b. Former Federal employees should contact the National Personnel Records Center (Civilian), 111 Winnebago Street, St. Louis, Missouri 63118, regarding the records in this system. Individuals must furnish the following information so their records may be located and identified: full name(s), date of birth, Social Security number, last employing agency (including duty station), approximate dates of employment, and signature.

(See Notification Procedure).

Current employees wishing to request amendment of their records should contact the office responsible for human resources management at their current installation. Former employees should contact the Deputy Assistant Secretary for Human Resources Management. (See System Manager and Address.) Individuals must furnish the following information for their records to be located and identified: Full name(s); date of birth; Social Security number; and signature. To facilitate identification of records, former employees must also provide the name of their last Department of Veterans Affairs facility and approximate dates of employment.

Employees, supervisors, managers, members of Professional Standards Boards, and other VA officials provide the information in this system of records. Individuals or other entities outside of VA may also provide relevant and necessary information. For example, organizations where the subject previously worked may provide information.

All records related to Disciplinary Appeals Boards are maintained at VA Central Office, 810 Vermont Avenue, NW, Washington, DC 20420. All other records in this system are maintained at the Department of Veterans Affairs (VA) Central Office, 810 Vermont Avenue, NW, Washington, DC 20420 and/or VA field facilities.

Current and former employees appointed under 38 U.S.C. 7306, 7401(1), or 7405(a)(1)(A), except those appointed on a without compensation basis. This includes employees such as physicians, dentists, podiatrists, optometrists, nurses, nurse anesthetists, physician assistants and expanded- function dental auxiliaries.

All categories of records may include identifying information, such as name, address, Social Security number, current position title, employing facility, and the employee's current grade, level, or step rate. This system contains supporting documentation related to processing actions covered by this system of records. This includes, as appropriate, designations of board members and employee representative, copies of the notice of proposed action, materials relied on by the Agency to support the reasons in the notice, replies by the employee, statements of witnesses, hearing notices, reports, related correspondence, and Agency decisions.

37 U.S.C. 501(a), 7304, and 7406(c)(1).

These records document the processing of disciplinary and adverse actions, disqualification during probation, physical disqualification, agency-initiated disability retirements, and proposed separations based on pre-employment suitability.

1. To disclose the information listed in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

2. VA may, on its own initiative, disclose relevant information to a Federal agency (including Offices of the Inspector General), State, or local agency responsible for investigating, prosecuting, enforcing, or implementing a statute, rule, regulation if there is reason to believe that a violation may have occurred. This routine use does not authorize disclosures in response to requests for information for civil or criminal law enforcement activity purposes, nor does it authorize disclosure of information in response to court orders. Such requests must meet the requirements of 5 U.S.C. 552a(b)(7) or (b)(11), as applicable.

3. To disclose pertinent information when necessary to obtain information relevant to a conflict- of-interest investigation or determination.

4. To disclose information to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of the purposes(s) of the request, and to identify the type of information requested), when necessary to obtain information relevant to any agency decision concerning the hiring or retention of an employee, the issuance of security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, or the issuance of a license, grant, or other benefit.

5. To disclose to an agency in the executive, legislative, or judicial branch, or the District of Columbia's Government in response to its request, or at the initiation of VA, information in connection with the hiring of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the letting of a contract, the issuance of license, grant or other benefit by the requesting agency, or the lawful statutory or administrative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's decision.

6. To disclose relevant information to Federal and non-Federal agencies (i.e., State or local governments), and private sector organizations, boards, bureaus, or commissions (e.g., the Joint Commission on Accreditation of Healthcare Organizations) when such disclosures are required to obtain accreditation or other approval ratings.

7. To provide information to a congressional office from the records of an individual in response to an inquiry from the congressional office made at the request of the individual.

8. VA may, on its own initiative, disclose information to another Federal agency, court, or party in litigation before a court or other administrative proceeding conducted by a Federal agency, if VA is a party to the proceeding and VA needs to disclose such information to protect its interests.

9. To disclose information to the National Archives and Records Administration (NARA) for records management inspections conducted under authority of 44 U.S.C. 2904 and 2906.

10. To disclose to persons engaged in research and survey projects information necessary to locate individuals for personnel research or survey response, and to produces summary descriptive statistics and analytical studies in support to the function for which the records are collected and maintained, or for related workforce studies. While published statistics and studies do not contain individual identifiers, in some instances, the selection of elements of data included in the study may be structured in such a way as to make the date individually identifiable by inference.

11. To provide an official of another Federal agency information needed in the performance of official duties related to reconciling or reconstructing data files in support of the functions for which the records were collected and maintained.

12. When an individual to whom records pertain is mentally incompetent or under other legal disability, information in the individual's records may be disclosed to any person of entity responsible for managing the individual finances to the extent necessary to ensure payment of benefits to which the individual is entitled.

13. To disclose to the VA-appointed representative of an employee all notices, determination, decisions, or other written communications issues to the employee in connection with an examination ordered by the VA under fitness-for-duty examination procedures or Agency-filed disability retirement procedures.

14. To disclose information to officials of the Merit Systems Protection Board or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

15. To disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law.

16. To disclose information to the Federal Labor Relations Authority (including its General Counsel) when appropriate jurisdiction has been established and the information has been requested in connection with the investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Service Impasses Panel.

17. Records from this system or records may be disclosed to a Federal, State, or local government agency or licensing board and/or to the Federation of State Medical Boards or a similar non- government entity which maintains records concerning individuals' employment or practice histories or concerning the issuance, retention, or revocation of licenses or registration necessary to practice and occupation, profession or specialty, in order for the Agency to obtain information determined relevant to an Agency decision concerning the hiring, retention or termination of an employee or to inform licensing boards or the appropriate non-governmental entities about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional practice as to raise reasonable concern for the health and safety of private section patients.

18. To disclose relevant information to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

19. To disclose hiring, performance, or other personnel-related information to any facility with which there is, or there is proposed to be, and affiliation, sharing agreement, contract, or similar arrangement, for purposes of establishing maintaining, or expanding any such relationship.

20. Identifying information in this system, including name, address, Social Security number, and other information as is reasonably necessary to identify such individual, may be disclosed to the Department of Health and Human Services or the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA, in order the VA to obtain information relevant to a Department decision concerning the hiring, privileging/reprivileging, retention, or termination of the applicant or employee.

21. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank or to a State or local government licensing board which maintains records concerning the issuance, retention, or revocation of licenses, certifications, or registrations necessary to practice an occupation, profession, or specialty when under the following circumstances, through peer review process that is undertaken pursuant to VA policy, negligence, professional incompetence, responsibility for improper care, and/or professional misconduct has been assigned to a physician or licenses or certified health care practitioner: (1) On any payment in settlement (or partial settlement of, or in satisfaction of a judgement) in a medical malpractice action or claim; or, (2) on any final decision that adversely affects the clinical privileges of a physician or practitioner for a period or more than 30 days.

22. To disclose information to contractors, subcontractors, grantees, or others performing or working on a contract, grant, or cooperative agreement for the Federal government, provided disclosure is in the interest of the Government and the information to be disclosed is relevant and necessary for accomplishing the intended uses of the information and necessary to perform services under the contract, grant or cooperative agreement.

23. Information from this system of records will be disclosed to the Healthcare Integrity and Protection Data Base as required by section 1122E of the Social Security Act (as addeded by Sec. 221(a) of Pub. L. 104-191) and the associated implementing regulations issued by the Department of Health and Human Services, 45 CFR part 61. For example, VA is required to report adjudicated adverse personnel actiosn based on acts or omissions that either affected or could have affected the delivery of healthcare services.

Storage:

These records may be maintained in file folders and computer processable storage media. The records may also be maintained on lists, forms, microfilm, microfiche, or audio-tape.

These records may be retrieved using various combinations of name, birth date, or identification number of the individual on whom they are maintained.

Access to areas where these records are maintained is restricted to VA employees, contractors, or subcontractors on a "need to know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on the same principle. File areas are locked after normal duty hours and are protected from outside access by VA police officers or other types of alarm systems.

Records in this system are disposed of no sooner than 6 years after the closing of the case. Disposal is by shredding and erasure of tapes or disks.

Deputy Assistant Secretary for Human Resources Management (05), Department of Veterans Affairs, 810 Vermont Avenue, NW, Washington, DC 20420.

Except as indicated below (see Record Access Procedures), individuals receiving notice of a proposed action must be provided access to all documents supporting the notice. At any time thereafter, individuals subject to the action will be provided access to the record (see Record Access Procedures). Individuals should contact the human resources manager for the location where the action was processed regarding the existence of such records on them. However, all inquiries related to Disciplinary Appeals Boards should be directed to the Deputy Assistant Secretary for Human Resources Management (see System Manager). Individuals must furnish the following information for their records to be located and identified:

a. Name.

b. Date of birth.

c. Approximate date of closing of the case and kind of action taken.

d. If not the employee's current organization, the organizational component involved.

Requests for access must be consistent with the Privacy act and VA regulations concerning the release of information from Department of Veterans Affairs records other than claimant records. See 38 CFR 1.550, et seq.

Individuals against whom such actions are taken must be provided access to the record. However, after the action has been closed, individuals may request access to the official file by contacting the human resources manager for the location where the action was processed. If the action relates to a Disciplinary Appeals Board, the individual must request access from the Deputy Assistant Secretary for Human Resources Management (see System Manager). Individuals must furnish the following information for their records to be located and identified:

a. Name.

b. Date of birth.

c. Approximate date of closing of the case and kind of action taken.

d. If not the employee's current organization, the organizational component involved.

Requests for access must be consistent with the Privacy Act and VA regulations concerning the release of information from Department of Veterans Affairs records other than claimant records. See 38 CFR 1.550, et seq.

Note 1: When a request for access involves medical or psychological records that the responsible individual believes require special handling, the requester should be advised that the material will be provided only to a physician designated by the data subject. Upon receipt of the designation and upon verification of the physician's identity, the records will be made available to the physician, who will have full authority to disclose those records to the data subject when appropriate.

Review of requests from individuals seeking amendment of their records that have or could have been the subject of a judicial, quasi-judicial, or administrative action will be limited in scope. Review of amendment request of these records will be restricted to determining if the records accurately document the action on the case and will not include a review of the merits of the action, determination, or finding. Individuals wishing to request amendment of their records to correct factual errors should contact the human resources manager for the VA office where the action was processed. In cases concerning Disciplinary Appeals Boards, individuals should contact the Deputy Assistant Secretary for Human Resources Management (see System Manager) to request the amendment. Individuals must furnish the following information for their records to be located and identified:

a. Name.

b. Date of birth.

c. Approximate date of closing of the case and kind of action taken.

d. If not the individual's current organization, the organizational component involved.

Information in this system of records is provided:

a. By supervisors and managers.

b. By individual on whom the record is maintained.

c. By Professional Standards Boards and Disciplinary Appeals Boards.

d. By testimony of witnesses.

e. By other agency officials.

f. By other agency records.

g. From related correspondence or persons.

VA Police personnel maintain electronic and paper records at VA field facilities and VA Central Office, 810 Vermont Ave, NW., Washington, DC 20420. Address locations for VA facilities can be found at http://www.va.gov.

Veterans, VA Police officers, U.S. government employees, retirees, contractors, subcontractors, volunteers, and other individuals, including private citizens, who:

1. Have been a complainant, a witness, a victim, or a subject of an investigation of a violation or of an alleged violation of a law on VA property;

2. Have been a witness or a victim when there has been a VA police response to a report of a missing patient;

3. Have been witness to, or involved in, a motor vehicle accident on VA property;

4. Have been a witness, victim, or subject when there has been a VA police response to provide assistance to VA employees;

5. Have registered a motor vehicle with VA police;

6. Have had property confiscated by VA police or whose property has been given to VA police for safekeeping; or

7. For whom a VA identification card has been prepared.

Police and law enforcement records, containing specific identification of persons, can be found in electronic and/or paper medium:

1. Master Name Index contains demographic information (i.e., name, address, date of birth, sex) and descriptive information such as height, weight, hair color, eye color, and scars or marks.

2. Quick Name Check allows for the immediate retrieval of information based on a name from files contained within the law enforcement records subject to this system of records notice.

3. VA Police Uniform Offense Reports, Investigative Notes, Case Log, and other documentation assembled during an investigation. Uniform Offense Reports contain information of all types of offenses and incidents, criminal and non-criminal, that occur at a facility and to which VA Police respond (e.g., criminal investigations, investigative stops, patient and staff assistance calls, missing patient searches, and motor vehicle accidents).

4. All violation information and copies of U.S. District Court Violation Notices and Courtesy Warnings issued by VA Police.

5. On-station vehicle registration records used for identifying vehicle owners at a facility.

6. Records pertaining to individuals with outstanding warrants, summons, court commitments, or other types of legal process.

7. Daily Operations Journal records include names and other personal identifying information of persons with whom VA police have had official, duty-related contact.

8. VA Police officer training records.

9. Photographs of any and all persons and/or scenes pertinent to an incident or investigation;

10. Motor vehicle registrations;

11. Identification cards with photographic images for veterans, U.S. government employees, retirees, volunteers, contractors, subcontractors, or private citizens;

12. Records of evidence, confiscated property, or property being held for safekeeping.

Title 38 United States Code (U.S.C), Section 501 and Sections 901-905.

The records and information contained in this system of records are necessary for the effective administration and management of the Department's nationwide Security and Law Enforcement Program. The collection and use of accurate, up-to-date data is necessary for the purpose of enforcing the law and protecting persons and property on VA property. Examples: ID cards are used to visibly identify employees, contractors, students, and other designated individuals from the general public. ID cards also serve as a means of access control to a facility. Motor vehicle registration records serve to accurately identify the owner of a vehicle and the suitability of its presence on VA grounds. These records are also used for a VA facility's ride sharing program. Evidence or confiscated property records are used to accurately track and record the chain of custody maintained by the VA police.

1. The record of an individual who is covered by this system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

2. Disclosure may be made to the National Archives and Records Administration in records management inspections conducted under the authority of Title 44 U.S.C.

3. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or sub-contractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in Title 38 U.S.C. 5724, as the terms are defined in Title 38 U.S.C. 5727.

8. Disclosure may be made to the DoJ and United States attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, Title 28 United States Code, Section 2672.

9. Any information in this system, except the name and address of a veteran, may be disclosed to a Federal, State, or local agency maintaining civil or criminal violation records or other pertinent information such as prior employment history, prior Federal employment background investigations, and/or personal or educational background in order for VA to obtain information relevant to the hiring, transfer, or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

10. Information in this system regarding traffic accidents may be disclosed to private insurance companies for use in determining payment of a claim under a policy.

11. To assist attorneys in representing their clients, any information in this system may be disclosed to attorneys representing veterans, U.S. government employees, retirees, volunteers, contractors, subcontractors, or private citizens being investigated and prosecuted for violating the law, except where VA has decided release is inappropriate under Title 5 United States Code, Section 552a(j) and (k).

12. Disclosure of information to the Federal Labor Relations Authority (including its General Counsel) when requested in connection with the investigation and resolution of allegations of unfair labor practices; in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised; in connection with matters before the Federal Service Impasses Panel; and to investigate representation petitions and conduct or supervise representation elections.

13. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

14. Information may be disclosed to officials of the Merit Systems Protection Board, and the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in Title 5 United States Code, Sections 1205 and 1206, or as may be authorized by law.

15. Disclosure may be made to the VA-appointed representative of an employee of all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

Storage:

VA Police Services maintain electronic and paper records at each VA facility and VA Central Office.

Information is retrieved by name or personal identifier of partial or full social security number.

Access to working areas where information is maintained in VA facilities and VA Central Office is controlled and restricted to VA employees and VA contractors on a need-to-know basis. Paper document files are locked in a secure container when files are not being used and when work area is not occupied. VA facilities are protected from outside access after normal duty hours by police or security personnel. Access to information on electronic media is controlled by individually unique passwords and codes. Computer access authorizations, computer applications available and used, information access attempts, frequency and time of use are recorded and monitored.

Records will be maintained and disposed of in accordance with the records disposition authority approved by the Archivist of the United States.

Director, Police Service (07B), 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained under his or her name in this system or wishes to determine the contents of such records should submit a written request or apply in person to the VA facility where the records are located. Addresses of VA facilities may be found at http://www.va.gov. A majority of records in this system are exempt from record access and amendment provisions of Title 5 U.S.C., Sections 552a(j) and (k). To the extent that records in this system are not subject to exemption, individuals may request access and/or amendment. A determination as to whether an exemption applies shall be made at the time a request for access or contest is received.

Individuals seeking information regarding access to and amendment of records in this system may write, call or visit the VA facility where the records are maintained.

(See Record Access Procedure above)

Information is obtained from veterans, VA police officers, U.S. government employees, retirees, volunteers, contractors, subcontractors, other law enforcement agencies, and private citizens.

Under Title 5 U.S.C., Section 552a(j)(2), the head of any agency may exempt any system of records within the agency from certain provisions of the Privacy Act, if the agency or component that maintains the system performs as its principal function any activities pertaining to the enforcement of criminal laws. The function of the Police Service is to provide for the maintenance of law and order and the protection of persons and property on Department property. This system of records has been created, in major part, to support the law enforcement related activities assigned by the Department under the authority of Title 38 U.S.C., Section 901 to the Police Service. These activities constitute the principal function of this staff.

In addition to principal functions pertaining to the enforcement of criminal laws, the Police Service may receive and investigate complaints or information from various sources concerning the possible existence of activities constituting noncriminal violations of law, rules, or regulations or substantial and specific danger to the public and safety.

Based upon the foregoing, the Secretary of Veterans Affairs (VA) has exempted this system of records, to the extent that it encompasses information pertaining to criminal law enforcement related activities from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(j)(2):

5 U.S.C. 552a(c)(3) and (4).

5 U.S.C. 552a(d)(1) through (4).

5 U.S.C. 552a(e)(1), (2) and (3).

5 U.S.C. 552a(e)(4)(G), (H) and (I).

5 U.S.C. 552a(e)(5) and (8).

5 U.S.C. 552a(f).

5 U.S.C. 552a(g).

The Secretary of Veterans Affairs has exempted this system of records, to the extent that it does not encompass information pertaining to criminal law enforcement related activities under 5 U.S.C. 552a(j)(2), from the following provisions of the Privacy Act of 1974, as permitted by 5 U.S.C. 552a(k)(2):

5 U.S.C. 552a(c)(3).

5 U.S.C. 552a(d)(1) through (4).

5 U.S.C. 552a(e)(1).

5 U.S.C. 552a(e)(4)(G), (H) and (I).

5 U.S.C. 552a(f).

Reasons for exemptions: The exemption of information and material in this system of records is necessary in order to accomplish the law enforcement functions of the Police Service, to prevent subjects of investigations from frustrating the investigatory process, to prevent the disclosure of investigative techniques, to fulfill commitments made to protect the confidentiality of sources, to maintain access to sources of information, and to avoid endangering these sources and Police personnel.

Character-based data from Agent Orange Registry (AOR) Code Sheets are maintained in a registry dataset at the Austin Automation Center (AAC), 1615 Woodward Street, Austin, Texas 78772. Since the data set at the AAC is not all-inclusive, i.e., narratives, signatures, etc., noted on the code sheets are not entered into this system, images of the code sheets are maintained at the Department of Veterans Affairs, Environmental Agents Service (131), 810 Vermont Avenue, NW., Washington, DC 20420. These are electronic images of paper records, i.e., code sheets, medical records, questionnaires and correspondence that are stored on optical disks.

The secure web-based data entry system is maintained by the AAC and provides retrievable images to users. The optical disk system is currently being utilized where there is no access to the secure web-based system. However, the optical disk system is scheduled to be discontinued in 2004 and all access to the AOR system will be through the secure web-based data entry system.

Veterans who may have been exposed to dioxin or other toxic substance in a herbicide or defoliant during:

1. Active military service in the Republic of Vietnam between 1962 and 1975,

2. The Republic of Korea between 1968 and 1969,

3. The conduct of or as a result of testing, transporting or spraying herbicides for military purposes, and

4. Have had an AOR examination at a Department of Veterans Affairs (VA) medical facility.

These records may contain the following information: Code sheet records recording VA facility code identifier where the veteran was examined or treated; veteran's name; address; social security number; military service serial number; claim number; date of birth; race/ethnicity; marital status; sex; branch of service; periods of service; areas of service in Vietnam; list of military units where veteran served; method of exposure to herbicides; veteran's self-assessment of health; date of registry examination; veteran's complaints/symptoms; reported birth defects among veteran's children; consultations; diagnoses; disposition (hospitalized, referred for outpatient treatment, etc.) and name and signature of examiner/clinician coordinator, when available.

Title 38, United States Code (U.S.C.) 1710(e)(1)(B) and 1720E.

The purpose of this AOR system of records is to provide information about: Veterans who have had an AOR examination at a VA facility; to assist in generating hypotheses for research studies; provide management with the capability to track patient demographics; reported birth defects among veterans' children; dioxin-related diseases; planning and delivery of health care services and associated costs; and with relation to claims for compensation which may assist in the adjudication of claims possibly related to herbicide exposure although more comprehensive medical records are required for evaluation of subject claims.

VA may disclose protected health information pursuant to the following routine uses where required by law, or required or permitted by 45 CFR parts 160 and 164.

1. The record of an individual who is covered by this system may be disclosed to a member of Congress or staff person acting for the member when the member or staff person requests the record on behalf of, and at the written request of, that individual.

2. Disclosure of records covered by this system, as deemed necessary and proper to named individuals serving as accredited service organization representatives, and other individuals named as approved agents or attorneys for a documented purpose and period of time, to aid beneficiaries in the preparation and presentation of their cases during the verification and/or due process procedures, and in the presentation and prosecution of claims under laws administered by VA.

3. A record containing the name(s) and address(es) of present or former members of the armed services and/or their dependents may be released from this system of records under certain circumstances:

(a) To any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, and

(b) To any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name(s) or address(es) be provided for a purpose authorized by law; provided, further, that the record(s) will not be used for any purpose other than that stated in the request and that the organization, agency or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

4. Disclosure may be made to the National Archives and Record Administration (NARA) in records management inspections conducted under authority of 44 U.S.C.

5. Disclosure of information, excluding name and address (unless name and address is furnished by the requestor) for research purposes determined to be necessary and proper, to epidemiological and other research facilities approved by the Under Secretary for Health.

6. In order to conduct Federal research necessary to accomplish a statutory purpose of an agency, at the written request of the head of the agency, or designee of the head of that agency, the name(s) and address(es) of present or former personnel or the Armed Services and/or their dependents may be disclosed

(a) To a Federal department or agency, or

(b) Directly to a contractor of a Federal department or agency. When a disclosure of this information is to be made directly to the contractor, VA may impose applicable conditions on the department, agency, and/or contractor to insure the appropriateness of the disclosure to the contractor.

7. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

8. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission on Accreditation of Healthcare Organizations (JCAHO), College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

9. Records from this system of records may be disclosed to the Department of Justice (DOJ) or in a proceeding before a court, adjudicative body, or other administrative body before which the Department is authorized to appear when: (a) The Department, or any component thereof; or (b) any employee of the Department in his or her official capacity where the DOJ or the Department has agreed to represent the employee; or (c) the U.S., when the Department determines that litigation is likely to affect the Department or any of its components; is a party to litigation, and has an interest in such litigation, and the use of such records by the DOJ or the Department is deemed by the Department to be relevant and necessary to the litigation provided, however, that the disclosure is compatible with the purpose for which the records were collected.

10. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

11. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

In 2003, the data collection process moved to a secure web-based system. Data previously recorded manually and converted to electronic format is now input through the secure VA Intranet system. Data is stored on a web server hosted by the AAC and is retrievable by the facility. Three levels of access are provided for the data that is input, using password security linked to the AAC Top Secret Security system, with mandated changes every 90 days. Data from individual facilities is uploaded nightly and stored on Direct Access Storage Devices at the AAC, Austin, Texas, and on optical disks at VA Central Office, Washington, DC. AAC stores registry tapes for disaster back up at an off-site location. VA Central Office also has back-up optical disks stored off-site. In addition to electronic data, registry reports are maintained on paper documents and microfiche.

The optical disk system is currently being utilized where there is no access to the secure web- based system. The optical disk system is scheduled to be discontinued in 2004 and all access to the AOR system will be through the secure web-based data entry system. Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Records are retrieved by name of veteran and social security number.

Access to records at VA Central Office is only authorized to VA personnel on a "need to know" basis. Records are maintained in manned rooms during working hours. During non-working hours, there is limited access to the building with visitor control by security personnel. Registry data maintained at the AAC can only be updated by authorized AAC personnel.

Data is securely located behind the VA firewall and only accessible from the VA Local Area Network (LAN) through the VA Intranet. Read access to the data is granted through a telecommunications network to authorized VA Central Office staff. AAC reports are also accessible through a telecommunications network on a read-only basis to the owner (VA facility) of the data. Access is limited to authorized employees by individually unique access codes which are changed periodically.

Physical access to the AAC is generally restricted to AAC staff, VA Central Office staff, custodial personnel, Federal Protective Service and authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted. Backup records stored off-site for both the AAC and VA Central Office are safeguarded in secured storage areas. A disaster recovery plan is in place and system recovery is tested at an off-site facility in accordance with established schedules.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Director, Environmental Agents Service (131), Office of Public Health and Environmental Hazards, (clinical issues) and Management/Program Analyst, Environmental Agents Service (131) (administrative issues), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA facility where medical care was provided or submit a written request to the Director, Environmental Agents Service (131), Office of Public Health and Environmental Hazards or the Management/Program Analyst, Environmental Agents Service (131), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420. Inquiries should include the veteran's name, social security number and return address.

An individual who seeks access to records maintained under his or her name may write or visit the nearest VA facility or write to the Director, Environmental Agents Service (131) or the Management/Program Analyst, Environmental Agents Service (131), VA Central Office, 810 Vermont Avenue, NW., Washington, DC 20420.

Refer to previous item "Record Access Procedures."

VA patient medical records, various automated record systems providing clinical and managerial support to VA health care facilities, the veteran, family members, and records from the Veterans Benefits Administration, Department of Defense, Department of the Army, Department of the Air Force, Department of the Navy and other Federal agencies.

All computerized and paper records are located at: Department of Veterans Affairs (VA) Headquarters, 810 Vermont Avenue, NW, Washington, DC 20420; Veterans Integrated Services Networks (VISN); and, VA health care facilities. Address locations for VA facilities are listed in VA Appendix 1 of the biennial publication of the Privacy Act Issuances.

The following categories of individuals will be covered by the system: (1) Employees, (2) veterans, (3) third parties such as contractors who conduct official business with the Veterans Health Administration (VHA), and (4) subjects of complaints and complainants. Complainants are individuals who have reported a possible violation of law, rules, policies, regulations, or external program requirements, such as third-party payor billing guidelines.

Records (or information contained in records) in this system include allegations made by individuals calling VHA's Compliance Line, or through another source, to report a possible violation of law, rules, policies, regulations, or external program requirements such as third-party payor billing guidelines. Records also may contain reports of the reviews or investigations conducted at the medical center, VISN, or Headquarters level to verify the reported allegations and take remedial action as needed. The VHA Compliance Office will maintain a copy of these reports. Information in this system regarding reports of suspected non-compliance may include: (1) The name, home and work address and phone number of the complainant; (2) the name of the subject of the complaint; (3) the name and/or patient number of veteran patient who received services associated with the complaint; (4) the date when the allegation was reported; (5) the date, location and nature of the alleged wrongdoing; and (6) the Compliance Office's identification number assigned to the case. The records may also include correspondence between the Compliance Office and the Compliance Line contractor as to the status of each case (open or closed).

Information in the investigation records may include: (1) The name of the subject of an investigation; (2) the names of individuals whose work was reviewed as part of the investigation; (3) the names and/or patient numbers of veteran patients whose medical records were reviewed in order to investigate the allegation; (4) the station at which an investigation took place; (5) the time period when the investigation took place; (6) the nature of the allegation; (7) the outcome of the investigation; (8) the recommended action; and, (9) the Compliance Office's identification number assigned to the case. Information may be in the form of a narrative summary or synopsis, exhibits, or internal documentation and memoranda.

Records in the system will be a combination of computerized files and paper files. Both paper and electronic records may contain the information listed above, and may relate to complainants and subjects of complaints.

Title 38 United States Code, section 501.

The purpose is to establish a process to receive reports of suspected compliance violations, and to maintain a system to respond to such allegations.

1. The record of an individual who is covered by this system may be disclosed to a Member of Congress or staff person acting for the member when the member or staff person requests the records on behalf of and at the request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: the hiring, retention or transfer of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans will only be made with the veteran's prior written consent.

3. Any information in this system may be disclosed to a State or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision on: The hiring, transfer or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by the agency; provided, that if the information pertains to a veteran, the name and address of the veteran will not be disclosed unless the name and address is provided first by the requesting State or local agency.

4. Any information in this system, except the name and address of a veteran, may be disclosed to a Federal, State or local agency maintaining civil or criminal violation records, or other pertinent information such as prior employment history, prior Federal employment background investigations, and/or personal or educational background in order for VA to obtain information relevant to the hiring, transfer or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit. The name and address of a veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

5. Any information in this system, except the name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal, State, local or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

6. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto, in response to its official request.

7. The name and address of a veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law.

8. Any information in this system may be disclosed to the U.S. Office of Special Counsel, upon its official request, when required for the Special Counsel's review of the complainant's allegations of prohibited personnel practices.

9. The name, address, and other identifying data, including title, date and place of birth, social security number, and summary information concerning an individual who, for fraudulent or deceitful conduct either as an employee or while conducting or seeking to conduct business with the Agency, has been convicted of violating Federal or State law or has been debarred or suspended from doing business with VA, may be furnished to other Federal agencies to assist such agencies in preventing and detecting possible fraud or abuse by such individual in their operations and programs. This routine use applies to all information in this system of records which can be retrieved by name or by some identifier assigned to an individual, regardless of whether the information concerns the individual in a personal or in an entrepreneurial capacity.

10. Records from this system of records may be disclosed to a Federal agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar non- government entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty, in order for the agency to obtain information relevant to an agency decision concerning the hiring, retention or termination of an employee or to inform a Federal agency or licensing boards or the appropriate non-government entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

11. Relevant information from this system of records related to final adverse actions taken against a health care provider, supplier, or practitioner may be disclosed to the Health Integrity and Protection Data Bank (HIPDB) (45 CFR part 61). The information to be reported includes: (1) The name and Taxpayer Identification Number (as defined in section 7701 (a)(41) of the Internal Revenue Code of 1986) of any health care provider, supplier, or practitioner who is the subject of a final adverse action; (2) the name of any health care entity, if known, with which a health care provider, supplier, or practitioner, who is the subject of a final adverse action, is affiliated or associated; (3) the nature of the final adverse action and whether such action is on appeal; and (4) a description of the acts or omissions and injuries upon which the final adverse action was based, and such other information as the Secretary, Department of Health and Human Services, determines by regulation is required for appropriate interpretation of information reported. Information reported will be considered confidential and shall not be disclosed except as specified in the HIPDB regulations.

12. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

13. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission on Accreditation of Healthcare Organizations (JCAHO), College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with which VA has a contract or agreement to conduct such reviews but only to the extent that the information is necessary and relevant to the review.

14. Disclosure may be made to the National Archives and Records Administration (NARA) in records management inspections conducted under authority of Title 44 United States Code.

Storage:

All reports of suspected noncompliance will be documented in a computerized database and assigned a unique identification number. Paper files may also be maintained which contain documents collected in association with reviewing the case, such as memoranda, policies, or examples of work produced as a result of the complaint.

Both electronic and paper case files will be stored and individually retrieved by the unique identification number, not by name.

Access to computerized information in the database is restricted to authorized personnel on a need-to-know basis by means of passwords and authorized user identification codes. Computer system documentation will be maintained in a secure environment in the VHA Office of the Chief Financial Officer (CFO) Compliance Office, and in the Compliance Offices at the network and medical center locations. Physical access to printouts and data terminals will be limited to authorized personnel in the Compliance Program.

Access to file folders is restricted to authorized personnel on a need-to-know basis. Paper files are maintained in file cabinets or closets and are locked after duty hours. These files are under the control of the Compliance Officer or his/her designees. Buildings are protected from unauthorized access by a protective service.

Computerized records will be retained indefinitely. Periodic system back-ups will be employed for record protection. If disk space is limited, the records will be archived to tape or disk in accordance with established practice. Paper records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

VHA Chief Financial Officer (17), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to know if a record is being maintained by the VHA CFO Compliance Office under his or her name in this system or wants to determine the contents of such records should submit a written request or apply in person to the VHA CFO (17).

An individual who seeks access to or wishes to contest records maintained under his or her name in this system may write, call or visit the VHA CFO (17).

(See Record Access Procedures above.)

The information in this system will be obtained from calls that are received on the Compliance Line and reports received through other sources. Information is obtained from VHA employees, veterans, third parties such as contractors, and VHA records which may include billing data, patient medical records, policies and procedures, and memoranda.

The system of records is located in office of the Director, Office of Data Development and Analysis, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Records are stored on a secured server computer at the VA Austin Automation Center, 1615 Woodward Street, Austin, Texas 78722. Records not stored at the VA Austin Automation Center are stored on electronic media or laser optical media in a combination-protected safe which is secured inside a key-accessed room at the U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC, 20420. Records necessary for a contractor to perform analyses under a contract are located at the respective contractor's secure facility.

1. Veterans who have applied for healthcare services or benefits under Title 38, United States Code.

2. Veterans' spouse, surviving spouse, previous spouse, children, and parents who have applied for healthcare services or benefits under Title 38, United States Code.

3. Beneficiaries of other Federal agencies or other governmental entities.

4. Individuals examined or treated under contract or resource sharing agreements.

5. Individuals examined or treated for research or donor purposes.

6. Individuals who have applied for Title 38 benefits but who do not meet the requirements under Title 38 to receive such benefits.

7. Individual who were provided medical care under emergency conditions for humanitarian reasons.

8. Pensioned members of allied forces provided healthcare services under Title 38, United States Code.

Records include identification numbers, contact and location information, demographic information, military service descriptions, residency characteristics, economic information, healthcare visit descriptions, patient assessments, medical test descriptions and results, diagnoses, disability assessments, treatments, pharmaceutical information, service utilization and associated medical staffing and resource costs, entitlements or benefits, patient survey results, and health status. The records include information created or collected during the course of normal clinical operations work and is provided by patients, employers, students, volunteers, contactors, subcontractors, and consultants. In addition, records also include social security numbers, military service numbers, claim or file numbers, and DoD's identification numbers.

38 U.S.C 527.

Health-related qualitative, quantitative, and actuarial analyses and projections to support policy analyses and recommendations to improve VA services for veterans and their families. Analysis and review of policy and long-term planning issues affecting veterans programs to support legislative, regulatory and policy recommendations and initiatives.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, or both, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. Any system records disclosure may be made to a Member of Congress or to a Congressional staff member in response to an inquiry of the Congressional office made at the written request of the constituent about whom the record is maintained.

2. Any system records disclosure may be made to the National Archives and Records Administration as required in records management inspections under title 44 U.S.C.

3. Any system records may be disclosed to a Federal agency for the conduct of research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and OPP has determined prior to the disclosure that OPP data handling requirements are satisfied. OPP may disclose limited individual identification information to another Federal agency for the purpose of matching and acquiring information held by that agency for OPP to use for the purposes stated for this system of records.

4. Any system records may be disclosed to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

5. Any system records may be disclosed to the Office of Management and Budget in order for them to perform their statutory responsibilities of evaluating Federal programs.

6. Any records may be disclosed to appropriate agencies, entities, and persons under the following circumstances: When (1) it is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

7. VA may disclose information in this system of records to the Department of Justice, either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

In determining whether to disclose records under this routine use, VA will comply with the guidance promulgated by the Office of Management and Budget in a May 24, 1985, memorandum entitled ldquo;Privacy Act Guidancemdash;Updaterdquo;, currently posted at http://www.whitehouse.gov/omb/inforeg/guidance1985.pdf.

8. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

Storage:

VA sensitive information, including individually identifiable health information, is stored on electronic media, laser optical media, on a segregated secure server or in paper form. Data stored on a secure server are located at the Austin Automation Center. Electronic media, or laser optical media data are kept locked in a safe when not in immediate use. The safe is secured inside a key-accessed room at OPP. Information stored on paper is kept locked in file cabinets when not in immediate use. Databases are temporarily placed on a secured server inside a restricted network area for data match purposes only. Information that resides on a segregated server is kept behind locked doors with limited access. Requestors of OPP stored health information within VA, or from external individuals, contractors, organizations, and/or agencies with whom VA has a contract or agreement, must provide an equivalent level of security protection and comply with all applicable VA policies and procedures for storage and transmission as codified in VA directives such as but not limited to VA Directive 6504.

Individually-identified health care information is kept in two forms. The first form is the original data file containing the names and social security numbers of the record subjects. OPP assigns unique codes derived from social security numbers to these individual records prior to conducting analyses on the data. The encryption key for social security numbers and other numerical identifiers of the individuals is stored in a safe in OPP. The original records may be retrieved using social security numbers, military service number, claim or file number, DoD's identification numbers, or other personal numerical identifiers. The records containing the encrypted identifiers may be retrieved only by those identifiers.

This list of safeguards furnished in this System of Record is a general statement of measures taken to protect health information. For example, HIPAA guidelines for protecting health information will be followed and OPP will adopt evolving health care industry best practices in order to provide adequate safeguards. Further, VA policy directives that specify the standards that will be applied to protect health information will be provided to VA staff and contractors through mandatory data privacy and security training.

Access to data storage areas is restricted to authorized VA employee or contract staff who have been cleared to work by the VA Office of Security and Law Enforcement. Health information file areas are locked after normal duty hours. VA facilities are protected from outside access by the Federal Protective Service and/or other security personnel.

Access to health information provided by the Veterans Health Administration (VHA) pursuant to a Business Associate Agreement (BAA) is restricted to those OPP employees and contractors who have a need for the information in the performance of their official duties related to the terms of the BAA. As a general rule, full sets of health care information are not provided for use unless authorized by the OPP Assistant Secretary. File extracts provided for specific official uses will be limited to the minimum necessary amount and contain only the information fields needed for the analysis. Data used for analyses will have individual identifying characteristics removed whenever possible.

Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Health information files containing unique identifiers such as social security numbers are encrypted to NIST-verified FIPS 140ndash;2 standard or higher for storage, transport, or transmission. All files stored or transmitted on laptops, workstations, data storage devices and media are encrypted. Files are kept encrypted at all times except when data is in immediate use, per specifications by VA Office of Information Technology. NIST publications were consulted in development of security for this system of records.

Contractors and their subcontractors are required to maintain the same level of security as VA staff for health care information that has been disclosed to them. Any data disclosed to a contractor or subcontractor to perform authorized analyses requires the use of Data Use Agreements, Non-Disclosure Statements and Business Associates Agreements to protect health information. Unless explicitly authorized in writing by the VA, sensitive or protected data made available to the contractor and subcontractors shall not be divulged or made known in any manner to any other person. Other federal or state agencies requesting health care information need to execute Data Use Agreements to protect data.

OPP's work area is accessed for business-only needs. For data that is not stored on a secure server, the data is stored in a combination-protected safe which is secured inside a limited access room. Direct access to the safe is controlled by select individuals who possess background security clearances. Only a few employees with strict business needs or ldquo;need-to-knowrdquo; access and completed background checks will ever handle the data once it is removed from the safe for data match purposes.

Records are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States. If the Archivist has not approved disposition authority for any records covered by the system notice, the System Manager will take immediate action to have the disposition of records in the system reviewed and paperwork initiated to obtain an approved records disposition authority in accordance with VA Handbook 6300.1, Records Management Procedures. OPP will publish an amendment to this notice upon issuance of NARA-approved disposition authority. The records may not be destroyed until VA obtains an approved records disposition authority. OPP destroys electronic files when no longer needed for administrative, legal, audit, or other operational purposes. In accordance with title 36 CFR 1234.34, Destruction of Electronic Records, ldquo;electronic records may be destroyed only in accordance with a records disposition schedule approved by the Archivist of the United States, including General Records Schedules.rdquo;

Director, Office of Data Development and Analysis, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the Director, Office of Data Development and Analysis, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Such requests must contain a reasonable description of the records requested. All inquiries must reasonably identify the health care information involved and the approximate date that medical care was provided. Inquiries should include the patient's full name, social security number, telephone number and return address.

Individuals seeking information regarding access to and contesting of VA health information maintained by the Office of Policy and Planning may send a request by mail to the Director, Data Development and Analysis Service, (008A3), Department of Veterans Affairs, 810 Vermont Ave., Washington, DC 20420

(See Notification procedure above.)

Information is obtained from VHA and other VA staff offices and Administrations, OPP's National Survey of Veterans, national surveys (e.g., National Long Term Care Survey, National Health Interview Survey), Federal agencies (e.g., Department of Defense, Department of Health and Human Services), state agencies, and other private and public health provider or insurance programs and plans.

All electronic and paper records are maintained at the Austin Information Technology Center (AITC), Department of Veterans Affairs (VA), 1615 Woodward Street, Austin, Texas 78772, and at VA health care facilities listed in VA Appendix 1 of the biennial publication of VA's Systems of Records. Each Spinal Cord Injury Center has a SCIDO application deployment. Data transmissions between the SCIDO application and the VA databases housed at the AITC are accomplished using the Department's wide area network.

Veterans identified with spinal cord injury and disorders that have applied for VA health care services are included in the system. Occasionally, non-veterans who have received VA health care or rehabilitation services under sharing agreements, contracted care, or humanitarian emergencies will also have information recorded in the Spinal Cord Injury and Disorders Outcomes (SCIDO) Repository.

These records contain identifying information including name, social security number, date of birth, and registration date in the SCIDO-R. SCIDO -Repository registration information may include information about whether individuals are receiving services from VA's spinal cord system of care, neurologic level of injury, etiology, date of onset, type of cause, completeness of injury, and annual evaluation dates offered and received. The SCIDO-R also stores outcome measures of impairment, activity, social role participation, and satisfaction with life. A registrant may have multiple outcome entries.

Title 38, United States Code, Sections 501 and 7304.

The SCIO-Repository provides a registry of Veterans with spinal cord injury and disorders (SCI&D). This registry contains pertinent information on Veterans with SCI&D and enables better coordination of care among VHA staff. The purpose of the repository is to assist clinicians, administrators, and researchers in identifying and tracking services for Veterans with spinal cord dysfunction resulting from trauma or diseases. The SCIDO-R can also facilitate clinical, administrative, and research reports for medical center use. Regional SCIDO Repositories provide data extracts to the National SCIDO-Repository database at the AITC. This centralized AITC repository is used to provide a VA-wide review of Veteran demographics and clinical aspects of injuries and disorders.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the member, when the member or staff person requests the record on behalf of and at the written request of the individual.

2. Disclosure of records covered by this system, as deemed necessary and proper to named individuals serving as accredited Veterans service organization representatives, and other individuals named as approved agents or attorneys for a documented purpose and period of time. These agents/attorneys must be aiding beneficiaries in the preparation/presentation of their cases during verification and/or due process procedures or in the presentation/prosecution of claims under laws administered by VA.

3. A record containing the name(s) and address(es) of present or former members of the armed services and/or their dependents may be released from this system of records under certain circumstances:

a. To any nonprofit organization if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, and

b. To any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name(s) or address(es) be provided for a purpose authorized by law; provided, further, that the record(s) will not be used for any purpose other than that stated in the request and that the organization, agency or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

4. Disclosure may be made to the National Archives and Records Administration and the General Services Administration in records management inspections conducted under authority of Title 44, Chapter 29, of the United States Code (U.S.C.).

5. Disclosure of information, excluding name and address (unless name and address is furnished by the requester) for research purposes determined to be necessary and proper, to epidemiological and other research facilities approved by the Under Secretary for Health.

6. In order to conduct Federal research necessary to accomplish a statutory purpose of an agency, at the written request of the head of the agency, or designee of the head of that agency, the name(s) and address(es) of present or former personnel or the armed services and/or their dependents may be disclosed;

a. To a Federal department or agency; or

b. Directly to a contractor of a Federal department or agency. When a disclosure of this information is to be made directly to the contractor, VA may impose applicable conditions on the department, agency, and/or contractor to ensure the appropriateness of the disclosure to the contractor.

7. VA may disclose on its own initiative any information in the system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

8. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Rehabilitation Accreditation Commission, The Joint Commission (JC), College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

9. Records from this system of records may be disclosed in a proceeding before a court, adjudicative body, or other administrative body when the Department, or any Department component or employee (in his or her official capacity as a VA employee), is a party to litigation; when the Department determines that litigation is likely to affect the Department, any of its components or employees, or the United States has an interest in the litigation, and such records are deemed to be relevant and necessary to the legal proceedings; provided, however, that the disclosure is compatible with the purpose for which the records were collected.

10. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

11. Records from a system of records may be disclosed to the Department of Justice (DOJ) (including U.S. Attorneys) or in a proceeding before a court, adjudicative body, or other administrative body when litigation or the adjudicative or administrative process is likely to affect VA, its employees, or any of its components is a party to the litigation or process, or has an interest in the litigation or process, and the use of such records is deemed by VA to be relevant and necessary to the litigation or process, provided that the disclosure is compatible with the purpose for which the records were collected.

12. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

13. Disclosure of information may be made when (1) it is suspected or confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is to agencies, entities, and persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosure by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

14. VA may disclose identifying information, including social security number, concerning veterans, spouses of veterans, and the beneficiaries of veterans to other federal agencies for the purpose of conducting computer matches to obtain information to determine or verify eligibility of veterans receiving VA medical care under Title 38, U.S.C.

15. VA may disclose patient identifying information to federal agencies and VA and government- wide third-party insurers responsible for payment of the cost of medical care for the identified patients, in order for VA to seek recovery of the medical care costs. These records may also be disclosed as part of a computer matching program to accomplish this purpose.

Storage:

Magnetic tapes/disks and optical discs. Electronic data are maintained on Direct Access Storage Devices at the AITC. The AITC stores registry tapes for disaster backup at a secure, off- site location. Electronic backup files for the regional SCIDO-R applications are stored at the Regional Data Processing Center (RDPC1) at Denver, CO also for disaster backup at a secure, off-site location.

Records are indexed by name of Veteran, social security number, and unique patient identifiers.

1. Data transmissions between VA health care facilities and the VA databases housed at the AITC are accomplished using the Department's wide area network. The SCIDO-Repository program and other programs at the respective facilities automatically flag records or events for transmission based upon functionality requirements. VA health care facilities control access to data by using VHA's VistA security modules. The Department's Telecommunications Support Service has oversight responsibility for planning, security, and management of the wide area network.

2. Access to records at VA health care facilities is only authorized to VA personnel on a " need-to-know" basis. Records are maintained in staffed rooms during working hours. During non- working hours, there is limited access to the building with visitor control by security personnel. Access to the AITC is generally restricted to AITC staff, VA Central Office employees, custodial personnel, Federal Protective Service, and authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted. Backup records stored off-site for both the AITC and VA Central Office are safeguarded in secured storage areas.

3. Strict control measures are enforced to ensure that access to and disclosure from all records including electronic files and Veteran-specific data elements are limited to VHA employees whose official duties warrant access to those files. The automated record system recognizes authorized users by keyboard entry of unique passwords, access, and verify codes.

Records will be maintained and disposed of in accordance with record disposition authority approved by the Archivist of the United States. Depending on the record medium, records are destroyed by either shredding or degaussing. Optical disks or other electronic media are deleted when no longer required for official duties.

VA has submitted a request for records disposition authority to the National Archives and Records Administration (NARA) for approval. Upon approval by NARA, VA will publish an amendment to this System of Records. In the interim, no records will be destroyed.

Official responsible for Spinal Cord Injury and Disorders Outcomes--Repository design, development, and maintenance: SCIDO Program Specialist (128N), 1660 South Columbian Way, Seattle, Washington 98108.

Official responsible for policies and procedures: Chief Consultant, Spinal Cord Injury and Disorders Services (128N), 1660 South Columbian Way, Seattle, Washington 98108.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA facility where medical care was provided or submit a written request to the Chief Consultant, Spinal Cord Injury and Disorders Services (128N), 1660 South Columbian Way, Seattle, Washington 98108. Inquiries should include the Veteran's name, social security number, and return address.

An individual who seeks access to records maintained under his or her name may write or visit the nearest VA facility or write to the Chief Consultant, Spinal Cord Injury and Disorders Services (128N), 1660 South Columbian Way, Seattle, Washington 98108.

(See Record Access Procedures above.)

Various automated record systems providing clinical and managerial support to VA health care facilities, the Veteran, family members, accredited representatives or friends, and "Patient Medical Records--VA" (24VA19) system of records.

Active records will be maintained at the Health Care Staff Development and Retention Office (HCSDRO/10A2D), Veterans Health Administration (VHA), Department of Veterans Affairs (VA), 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112; the Austin Automation Center (AAC), Department of Veterans Affairs, 1615 East Woodward Street, Austin, Texas 78772; and the VA health care facilities and VISN offices where scholarship recipients are employed. Address locations for VA health care facilities are listed in Appendix 1 of the Biennial Publication of Privacy Act Issuances. Complete records will be maintained only at the HCSDRO address.

VA employees who apply for and are denied or granted educational assistance awards under the provisions of VA. Employee Incentive Scholarship Program (EISP) in a field leading to appointment or retention in a position listed in 38 U.S.C., section 7401.

Records (or information contained in records) in this system may include personal identification information related to the application material, to award processes, to employment, to obligated service, and to requests for waivers or suspensions of obligated service or financial indebtedness to VA such as (1) name, (2) employing facility number, (3) telephone number(s), (4) Social Security number, (5) award amount, (6) obligated service incurred, and (7) name and address of the educational institution; or any amount if indebtedness (accounts receivable) arising from the scholarship and owed to VA. The application for an EISP award includes the applicant's full name, employing facility number, home and work telephone numbers, Social Security number, job title, current education level, degree sought, description of the academic program covered by the scholarship, the starting and completion dates of the employee's academic program, the name and address of the academic institution, the number of credits in the student's academic program plan and the cost of the education covered by the academic program plan. Records may include memoranda submitted by the employees, calculations for the service obligations, copies of letters and memoranda from employees making the requests and in correspondence to employees and appropriate local program officials delineating the decisions on such requests.

Title 38, U.S.C. Sections 501, 503, 7451, 7452, and 7431-7440.

The records and information may be used for determining and documenting individual applicant eligibility for scholarship awards, calculating the service commitments for scholarship recipients, ensuring program financial accountability, monitoring individual applicant educational progress, monitoring the employment status of scholarship recipients during their periods of obligated service, terminating the employee from the program, and evaluating and reporting program results and effectiveness. The information would be used to determine the financial liability of individuals who breach their EISP contracts.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Disclosure of any information in this system that is necessary to verify authenticity and completeness of the application may be made to educational institutions and other relevant organizations or individuals.

2. Disclosure of any information in this system may be made to a Federal agency in order to determine if an applicant has an obligation for service under another Federal program, thus rendering the applicant ineligible for a VA Employee Incentive Scholarship Program Award.

3. Disclosure of an information in this system may be made to the local supervisory officials and program coordinators to ensure that individual data in the system of records is up to date and that award recipients are in compliance with the terms of the scholarship program contract.

4. Any information in this system may be used to evaluate and report program results and effectiveness to appropriate officials including members of Congress on a routine and ad hoc basis.

5. Disclosure of information in this system may be made to a member of Congress or staff person acting for the member when the member or staff person requests the records on behalf of and at the request of that individual.

6. Disclosure of information may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of Title 44, United States Code.

7. Disclosure of information to the FLRA (including its General Counsel) when requested in connection with the investigation and resolution of allegations of unfair labor practices, in connection with matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

8. Disclosure may be made to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

9. Disclosure may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

10. Disclosure may be made to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

11. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

12. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

13. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

14. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

15. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Disclosure to consumer reporting agencies:

Pursuant to 5 U.S.C. 552a(b)(2), VA may disclose records from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f) or the Federal Claims Collection Act of 1966 (31 U.S.C. 3701(a)(3)).

Storage:

Records are maintained on paper, electronic media and computer printouts.

Records are retrieved by use of the award number or an equivalent participant account number assigned by HCSDRO, social security number and the name of the individual.

Access to the basic file in HCSDRO is restricted to authorized VA employees and vendors. Access to the office spaces where electronic media is maintained within HCSDRO is further restricted to specifically authorized employees and is protected by contracted building security services. Records (typically computer printouts) at HCSDRO will be kept in locked files and made available only to authorized personnel on a need-to-know basis. During non-working hours the file is locked and the building is protected by contracted building security services. Records stored on electronic media are maintained on a VA-approved and managed, password-protected, secure local area network (LAN) located within HCSDRO office spaces and safeguarded as described above. Records stored on electronic media at Veterans Integrated Service Network (VISN) Offices, VA health care facilities, and the Austin Automated Center in Austin, Texas are provided equivalent safeguards subject to local policies mandating protection of information subject to Federal safeguards.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Director, Health Care Staff Development and Retention Office (10A2D), Veterans Health Administration, Department of Veterans Affairs, 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such records, should submit a written request or apply in person to the Director, Health Care Staff Development and Retention Office, Veterans Health Administration, Department of Veterans Affairs, 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112.

Individuals seeking information regarding access to and contesting of VA records in this system may write, call or visit the Director, Health Care Staff Development and Retention Office (10A2D), Veterans Health Administration, Department of Veterans Affairs, 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112. The telephone number is (504) 589-5267.

(See Record Access Procedures above.)

Information contained in the records is obtained from the individual, references given in application material, educational institutions, VA medical facilities, the VA AAC, other Federal agencies, state agencies and consumer reporting agencies.

All computerized and paper records are located at: Department of Veterans Affairs (VA) Central Office, 810 Vermont Avenue, NW., Washington, DC 20420; Veterans Integrated Service Networks (VISNs); and, VA health care facilities. Address locations for VA facilities are listed in VA Appendix 1 of the biennial publication of the Privacy Act Issuances.

The following categories of individuals will be covered by the system: (1) Employees, (2) Veterans, (3) third parties such as contractors who conduct official business with the Veterans Health Administration (VHA), (4) family members or representatives of Veterans, and (5) subjects of complaints and complainants. Complainants are individuals who have reported a possible violation of law, rules, policies, regulations, or external program requirements, such as third-party payer billing guidelines.

Records (or information contained in records) in this system include allegations made by individuals calling the VHA Office of Compliance and Business Integrity Help Line, or through another source, to report a possible violation of law, rules, policies, procedures, regulations, or external program requirements such as third-party payer billing guidelines. Records also may contain reports of the reviews or investigations conducted at the medical center, VISN, or Central Office level to verify the reported allegations and take remedial action as needed. VHA Office of Compliance Office and Business Integrity will maintain a copy of these reports. Information in this system regarding reports of suspected non-compliance may include: (1) The name, home and work address and phone number of the complainant; (2) the name of the subject of the complaint; (3) the name or patient number of Veteran patient who received services associated with the complaint; (4) the date when the allegation was reported; (5) the date, location and nature of the alleged wrongdoing; and (6) the Compliance Office's identification number assigned to the case. The records will also include the status of each case (open or closed).

Information in the investigation records may include: (1) The name of the subject of an investigation; (2) the names of individuals whose work was reviewed as part of the investigation; (3) the names or patient numbers of Veteran patients whose medical records were reviewed in order to investigate the allegation; (4) the station at which an investigation took place; (5) the time period when the investigation took place; (6) the nature of the allegation; (7) the outcome of the investigation; (8) the recommended action; and, (9) the identification number assigned to the case. Information may be in the form of a narrative summary or synopsis, exhibits, or internal documentation and memoranda.

Records in the system will be a combination of computerized files and paper files. Both paper and electronic records may contain the information listed above, and may relate to complainants and subjects of complaints.

Title 38 United States Code, section 501.

The purpose is to establish a process to receive reports of suspected compliance violations, and to maintain a system to respond to such allegations.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. The record of an individual who is covered by this system may be disclosed to a Member of Congress or staff person acting for the member when the member or staff person requests the records on behalf of and at the request of that individual.

2. Any information in this system may be disclosed to a Federal agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: the hiring, retention or transfer of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of Veterans will only be made with the Veteran's prior written consent.

3. Any information in this system may be disclosed to a State or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision on: The hiring, transfer or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit by the agency; provided, that if the information pertains to a Veteran, the name and address of the Veteran will not be disclosed unless the name and address is provided first by the requesting State or local agency.

4. Any information in this system, except the name and address of a Veteran, may be disclosed to a Federal, State or local agency maintaining civil or criminal violation records, or other pertinent information such as prior employment history, prior Federal employment background investigations, or personal or educational background in order for VA to obtain information relevant to the hiring, transfer or retention of an employee, the letting of a contract, the granting of a security clearance, or the issuance of a grant or other benefit. The name and address of a Veteran may be disclosed to a Federal agency under this routine use if this information has been requested by the Federal agency in order to respond to the VA inquiry.

5. Any information in this system, except the name and address of a Veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal, State, local or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

6. The name and address of a Veteran, which is relevant to a suspected violation or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to a Federal agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto, in response to its official request.

7. The name and address of a Veteran, which is relevant to a suspected violation or reasonably imminent violation of law concerning public health or safety, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, may be disclosed to any foreign, State or local governmental agency or instrumentality charged under applicable law with the protection of the public health or safety if a qualified representative of such organization, agency or instrumentality has made a written request that such name and address be provided for a purpose authorized by law.

8. Any information in this system may be disclosed to the U.S. Office of Special Counsel, upon its official request, when required for the Special Counsel's review of the complainant's allegations of prohibited personnel practices.

9. The name, address, telephone number, and other identifying data, including title, date and place of birth, social security number, and summary information concerning an individual who, for fraudulent or deceitful conduct either as an employee or while conducting or seeking to conduct business with the Agency, has been convicted of violating Federal or State law or has been debarred or suspended from doing business with VA, may be furnished to other Federal agencies to assist such agencies in preventing and detecting possible fraud or abuse by such individual in their operations and programs. This routine use applies to all information in this system of records which can be retrieved by name or by some identifier assigned to an individual, regardless of whether the information concerns the individual in a personal or in an entrepreneurial capacity.

10. Records from this system of records may be disclosed to a Federal agency or to a State or local government licensing board or to the Federation of State Medical Boards or a similar non- government entity which maintains records concerning individuals' employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty, in order for the agency to obtain information relevant to an agency decision concerning the hiring, retention or termination of an employee or to inform a Federal agency or licensing boards or the appropriate non-government entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

11. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

12. For program review purposes and the seeking of accreditation or certification, disclosure may be made to survey teams of The Joint Commission, College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with which VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

13. Disclosure may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of Title 44, Chapter 29, of the United States Code.

14. VA may disclose information from this system of records to the DoJ, either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

15. Disclosure to other Federal agencies that may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

16. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when: (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

All reports of suspected noncompliance with VHA business practice will be documented in a computerized database and assigned a unique identification number. Paper files which contain documents collected in association with reviewing the case, such as memoranda, policies, or examples of work produced as a result of the complaint should be electronically file.

Both electronic and paper case files will be stored and individually retrieved by the same unique identification number, not by name.

Access to computerized information in the database is restricted to authorized personnel on a need-to-know basis. Documentation will be maintained in a secure environment in the VHA Office of Compliance and Business Integrity, the Compliance and Business Integrity Officers located at the network and medical center. Physical access to printouts and data terminals will be limited to authorized personnel.

Access to file folders is restricted to authorized personnel on a need-to-know basis. Paper files should be maintained in file cabinets or closets and are locked after duty hours. These files are under the control of the Compliance and Business Integrity Officer or his or her designees.

Computerized records will be retained indefinitely. Periodic system back-ups will be employed for record protection. If disk space is limited, the records will be archived to tape or disk in accordance with established practice. Paper records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

VHA Office of Compliance and Business Integrity (10B3), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to know if a record is being maintained by VHA Office of Compliance and Business Integrity under his or her name or wants to determine the contents of such records should submit a written request or apply in person to the local VA medical center.

An individual who seeks access to or wishes to contest records maintained under his or her name in this system may write, call or visit the VHA Office of Compliance and Business Integrity (10B3).

(See Record Access Procedures above.)

The information in this system will be obtained from calls that are received through the VHA Compliance and Business Integrity Help Line and reports received through other sources. Information is obtained from VHA employees, Veterans, third parties such as contractors, and VHA records which may include billing data, patient medical records, policies and procedures, and memoranda.

The system is maintained for the Department of Veterans Affairs (VA) under contract. Records are located at the contractor's facility, currently Meridian Knowledge Solutions, Inc., 4465 Brookfield Corporate Drive, Suite 201, Chantilly, VA 20151. In addition, information from these records or copies of the records may be maintained at the Department of Veterans Affairs, Office of Acquisition and Materiel Management, 810 Vermont Avenue, NW, Washington, DC 20420.

The records include information concerning VA employees who work in acquisition, contracting, and materiel management positions, including personnel in the 1100 occupational series, contracting officers, contracting officers' technical representatives, and other employees performing acquisition, contracting, procurement, and materiel management functions.

The system will contain information needed for enhancing training opportunities of VA employees in the Federal acquisition and materiel management work force. Records include, but are not limited to: (1) Biographical data such as name, social security number, and educational level; (2) work-related data such as duty station, occupational series and grade, supervisor's name, and contracting officer warrant information; (3) educational qualifications such as degrees from accredited universities or colleges and business credits completed; and (4) training information such as completed acquisition core courses and total continuing education hours for the previous and current fiscal year.

Title 38, United States Code (U.S.C.), section 501, and section 37 of the Office of Federal Procurement Policy Act (41 U.S.C. 433).

The records and information will be used to enhance training opportunities of VA employees in acquisition and materiel management occupations; to ensure that employees meet training requirements; and to document the training received. The system will provide management and employees up-to-date information on employee certification levels, qualification standards, academic degrees, mandatory and other pertinent training, and contracting officer warrant status.

1. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

2. Disclosure may be made to the National Archives and Records Administration (NARA) in records management inspections conducted under the authority of Title 44 U.S.C.

3. Records from this system of records may be disclosed to the Department of Justice (DOJ) or in a proceeding before a court, adjudicative body, or other administrative body before which the Agency is authorized to appear when: (1) The Agency, or any component thereof; (2) any employee of the Agency in his or her official capacity, where DOJ or the Agency has agreed to represent the employee; or (3) the United States, when the Agency determines that litigation is likely to affect the Agency or any of its components; is a party to litigation, and has an interest in such litigation, and the use of such records by DOJ or the Agency is deemed by the Agency to be relevant and necessary to the litigation, provided, however, that the disclosure is compatible with the purpose for which the records were collected.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in this system that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order.

6. Disclosure may be made to an appeal, grievance, hearing, or complaints examiner; an equal employment opportunity investigator, arbitrator, or mediator; and an exclusive representative or other person authorized to investigate or settle a grievance, complaint, or appeal filed by an individual who is the subject of the record.

7. Disclosure may be made to the Office of Personnel Management (OPM), the Office of Management and Budget (OMB), and the General Accounting Office (GAO) in order for them to perform their responsibilities for evaluating Federal programs.

8. Disclosure may be made to a requesting Federal agency for that agency's use in connection with the hiring, retaining or promotion of an employee where the information is relevant and necessary for the decision.

9. Information may be disclosed to officials of labor organizations recognized under 5 U.S.C. Chapter 71, when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

10. Information may be disclosed to officials of the Merit Systems Protection Board or the Office of the Special Counsel when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

11. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law.

12. Information may be disclosed to the Federal Labor Relations Authority (including its General Counsel) when appropriate jurisdiction has been established and the information has been requested in connection with the investigation and resolution of allegations of unfair labor practices or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; and to the Federal Service Impasses Panel in matters they are considering.

Storage:

Records are maintained on paper and electronic storage media, including magnetic tape and magnetic disk media.

Records are retrieved by name, social security number or other assigned identifiers of the individuals on whom the records are maintained.

1. Access to VA working and storage areas is restricted to VA employees on a "need-to-know" basis. Strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to computer rooms at VA Central Office and health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. ADP peripheral devices are placed in secure areas (areas that are locked or have limited access) or are otherwise protected.

3. Access to the contractor's computer rooms is restricted to authorized vendor employees through electronic locking devices. Information stored in the CAMEO system may be accessed by authorized VA employees at remote locations, including VA health care facilities and VA Central Office. Access is controlled by individually unique passwords/codes that must be changed periodically by the employee or the appropriate designated personnel. The database is maintained by the contractor behind a firewall that has been certified by the National Computer Security Association.

Paper records and electronic storage media are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Official responsible for policies and procedures: Chief, Acquisition Training and Career Development Division (95E), Office of Acquisition and Materiel Management (90), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals who wish to determine whether this system of records contains information about them should contact the System Manager at the above address. Inquiries should include the person's full name, social security number, dates of employment, date(s) of contact, and return address.

Individuals seeking information regarding access to and/or contesting the records in this system may write, call or visit the VA facility location where they are or were employed.

See Record Access Procedures above.

Information in this system of records is provided:

1. By individuals on whom the record is maintained.

2. By supervisors and managers.

3. By other agency officials.

4. By accredited colleges or universities.

5. By related correspondence.

6. By other agency records.

Records are located at each Call Center, which are operated at VA health care facilities or at contractor locations. Address locations for VA facilities are listed in VA Appendix 1 of the biennial publication of VA Privacy Act Issuances. In addition, information from clinical symptom calls is maintained in the patient's medical record at VA health care facilities and at the Department of Veterans Affairs (VA), 810 Vermont Avenue, NW., Washington, DC; Veterans Integrated Service Network Offices (VISNs); and Employee Education Systems.

The records include information concerning individual enrolled patients.

The records may include information related to:

1. Clinical care such as clinical symptoms, questions asked about symptoms, answers received, clinical protocol used and advice provided. It might include doctors' orders for patient care including nursing care, current medications, including their scheduling and delivery, consultations, radiology, laboratory and other diagnostic and therapeutic examinations and results; clinical protocol and other reference materials; education provided, including title of education material and reports of contact with individuals or groups. It includes information related to the patient's or family member's understanding of the advice given and their plan of action and, sometimes, the effectiveness of those actions.

2. Record of all calls made to the Call Center, including caller questions about medications, their uses and side effects; requests for renewals of prescriptions, appointment changes, benefits information and the actions taken related to each call, including the notification of providers and other staffs about the call.

3. Contact information from private sector medical facilities or clinicians contacting the VA about issues such as enrolled veterans' visits to an emergency department or admissions to a community medical center.

Title 38, United States Code, section 501.

The purpose of these records is to provide clinical and administrative support to patient care and provide medical and administrative documentation of the care and/or services provided in Call Centers. The records may be used for such purposes as improving Call Center staff's ability to provide telephone care services to veterans and the quality of the service by having immediate access to records of calls made previously by the veteran. Records may be used for purposes of notifying VA providers of the patient's condition and status, the criteria used to judge the status of the patient and/or the information given to the external provider on follow-up steps that they must take to receive authorization for the care. Records may be used to assess and improve the quality of the services provided through telephone care services and to produce various management and patient follow-up reports. Records may be used to respond to patient, family and other inquiries, including at times non-VA clinicians and Joint Commission for Accreditation of Healthcare Organizations (JCAHO) or the Utilization Review Accreditation Commission (URAC) for the accreditation of a Call Center or facility. Records may also be used to conduct health care related studies, statistical analysis, and resource allocation planning using data that has been stripped of individual patient identifiers. The clinical information is integrated into the patient's overall medical record, into quality improvement plans, and activities of the facility, such as utilization review and risk management. They are also used to improve Call Center services, such as patient education, the improved integration of clinical care, the provision of telephone care services, and communication.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Disclosure may be made to a member of Congress or staff person acting for the member when the member or staff person requests the records on behalf of and at the request of that individual.

2. Disclosure may be made to the Department of Justice and United States Attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

3. Disclosure may be made to a Federal agency or to a State or local government licensing board and/or to the Federation of State Medical Boards or a similar non-government entity which maintains records concerning individual's employment histories or concerning the issuance, retention or revocation of licenses, certifications, or registration necessary to practice an occupation, profession or specialty, in order for the Department to obtain information relevant to a Department decision concerning the hiring, retention or termination of an employee or to inform a Federal agency or licensing boards or the appropriate non-government entities about the health care practices of a terminated, resigned or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients receiving medical care in the private sector or from another Federal agency. These records may also be disclosed as part of an ongoing computer matching program to accomplish these purposes.

4. Disclosure may be made for program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission on Accreditation of Healthcare Organizations, College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews, but only to the extent that the information is necessary and relevant to the review.

5. Disclosure may be made to a State or local government entity or national certifying body which has the authority to make decisions concerning the issuance, retention or revocation of licenses, certifications or registrations required to practice a health care profession, when requested in writing by an investigator or supervisory official of the licensing entity or national certifying body for the purpose of making a decision concerning the issuance, retention or revocation of the license, certification or registration of a named health care professional.

6. Disclosure may be made to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/reprivileging of health care practitioners, and other times as deemed necessary by VA.

7. Disclosure may be made to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (1) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (2) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (3) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

8. Disclosure of information related to the performance of a health care student or provider may be made to a medical or nursing school or other health care related training institution or other facility with which there is an affiliation, sharing agreement, contract or similar arrangement when the student or provider is enrolled at or employed by the school or training institution or other facility and the information is needed for personnel management, rating and/or evaluation purposes.

9. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

10. Disclosure may be made to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, reporting of an investigation of an employee, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

11. Disclosure of information may be made to the next-of-kin and/or the person(s) with whom the patient has a meaningful relationship to the extent necessary and on a need-to-know basis consistent with good medical-ethical practices.

12. On its own initiative, VA may disclose information, except for the names and home addresses of veterans and their dependents, to a Federal, State, local, tribal or foreign agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

13. Disclosure of relevant information may be made to a non-VA physician or medical facility staff caring for a veteran for the purpose of providing relevant clinical information in an urgent or emergent situation.

14. Disclosure may be made to the National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of Title 44, Chapter 29, of the United States Code (U.S.C).

15. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

16. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are maintained in the electronic medical record and on an automated storage media, such as magnetic tape, disc or laser optical media.

Records are retrieved by name, social security number or other assigned identifier of the enrolled veteran who is calling or about whom the call is being made.

1. Access to patient-specific information located in Call Center databases and storage areas is restricted to VA employees and contract personnel on a "need-to-know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA Call Center areas are locked after normal duty hours or when the Call Center is closed, and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to VA and contracted Call Centers and computer rooms is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. Information in the Veterans Health Information Systems and Technology Architecture (VistA) may be accessed by authorized VA employees or authorized contract employees. Access to file information is controlled at two levels; the systems recognize authorized employees or contract employees by a series of individually unique passwords/codes as a part of each data message, and personnel are limited to only that information in the file which is needed in the performance of their official duties. Information that is downloaded from VistA and maintained on VA is afforded similar storage and access protections as the data that is maintained in the original files access to information stored on automated storage media at other VA and contract locations is controlled by individually unique passwords/codes.

3. Remote access to VHA information in VistA is provided to those Call Center employees, either VA or contract staff, that require access to information stored in the medical record. Access to this information is protected through hardened user access and is controlled by individual unique passwords. Additionally, contracted Call Centers, either VA or private sector, are required to have a separate computer security plan that meets national information security requirements.

Records are to be disposed of in accordance with the Veterans Health Administration Records Control Schedule; 10-1. Paper records and information stored on electronic storage media are maintained and disposed of in accordance with the records disposition authority approved by the Archivist of the United States.

Official responsible for policies and procedures: Chief Consultant for Primary Care (11PC) Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Officials maintaining the system: Network and/or facility director at the Network and/or facility where the individuals are associated.

Individuals who wish to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA health care facility where care was rendered. Addresses of VA health care facilities may be found at http://www2.va.gov/directory/guide/home.asp?isFlash=1. Inquiries should include the person's full name, social security number, dates of employment, date(s) of contact, and return address.

Individuals seeking information regarding access to and contesting of records in this system may write or visit the VA facility location where they normally receive their care.

(See Record Access Procedures above.)

Record sources include: enrolled patients, patients' families and friends, private medical facilities and their clinical and administrative staffs, health care professionals, Patient Medical Records--VA (24VA136), VistA (79VA19), VA health care providers, and Call Center nurses and administrative staff.

Records are maintained at each VA healthcare facility. In most cases, back-up computer tape information is stored at off-site locations. Address locations for VA facilities are listed in VA Appendix 1 of the biennial publication of VA Privacy Act Issuances. In addition, information from these records or copies of records may be maintained at the Department of Veterans Affairs (VA), 810 Vermont Avenue, NW, Washington, DC; the VA Austin Automation Center (AAC), Austin, Texas; Veterans Integrated Service Network (VISN) Offices; VA Allocation Resource Center (ARC), Boston, Massachusetts, and contractor facilities.

1. Veterans who have applied for healthcare services under Title 38, United States Code, Chapter 17, and in certain cases members of their immediate families.

2. Beneficiaries of other Federal agencies.

3. Individuals examined or treated under contract or resource sharing agreements.

4. Individuals examined or treated for research or donor purposes.

5. Individuals who have applied for Title 38 benefits but who do not meet the requirements under Title 38 to receive such benefits.

6. Individuals who were provided medical care under emergency conditions for humanitarian reasons.

7. Pensioned members of allied forces (Allied Beneficiaries) who are provided healthcare services under Title 38, United States Code, Chapter 1.

8. Healthcare professionals providing examination or treatment to any individuals within VA healthcare facilities.

9. Healthcare professionals providing examination or treatment to individuals under contract or resource sharing agreements.

The records may include information related to:

1. The social security number and insurance policy number of the veteran and/or veteran's spouse. The record may include other identifying information (e.g., name, date of birth, age, sex, marital status) and address information (e.g., home and/or mailing address, home telephone number).

2. Insurance company information specific to coverage of the veteran and/or spouse to include annual deductibles and benefits.

3. Diagnostic codes (ICD9-CM, CPT-4, and any other coding system) pertaining to the individual's medical, surgical, psychiatric, dental and/or psychological examination or treatment.

4. Charges claimed to a third party payer, including insurance companies, other Federal agencies, or foreign governments, based on treatment/services provided to the patient.

5. Charges billed to those veterans who are required to meet co-payment obligations for treatment/services rendered by VA.

6. The name, social security number, universal personal identification number, National Provider Identifier (NPI) and credentials including provider's degree, licensure, certification, registration or occupation of healthcare providers.

7. Records of charges related to patient care that are created in anticipation of litigation in which the United States is a party or has an interest in the litigation or potential litigation, including a third-party tortfeasor, workers compensation, or no-fault automobile insurance cases. Such records are not subject to disclosure under 5 U.S.C. 552a(d)(5).

Title 38, United States Code (U.S.C.), sections 1710 and 1729.

The records and information are used for the billing of, and collections from, a third party payer, including insurance companies, other Federal agencies, or foreign governments, for medical care or services received by a veteran for a nonservice-connected condition or from a first party veteran required to make co-payments. The records and information are also used for the billing of and collections from other Federal agencies for medical care or services received by an eligible beneficiary. The data may be used to identify or verify insurance coverage of a veteran or veteran's spouse prior to submitting claims for medical care or services. The data may be used to support appeals for non-reimbursement of claims for medical care or services provided to a veteran. The data may be used to enroll health care providers with health plans and VA's health care clearinghouse in order to electronically file third party claims. For the purposes of health care billing and payment activities to and from third party payers, VA will disclose information in accordance with the legislatively-mandated transaction standard and code sets promulgated by the United States Department of Health and Human Services (HHS) under the Health Insurance Portability and Accountability Act (HIPAA).

The data may be used to make application for a National Provider Identifier (NPI), as required by the HIPAA Administrative Simplification Rule on Standard Unique Health Identifier for Healthcare Providers, 45 CFR Part 162, for all health care professionals providing examination or treatment within VA health care facilities, including participation in pilot testing of NPI enumeration system by the Centers of Medicare and Medicaid Services (CMS). The records and information may be used for statistical analyses to produce various management, tracking and follow-up reports, to track and trend the reimbursement practices of insurance carriers, and to track billing and collection information. The data may be used to support, or in anticipation of supporting, reimbursement claims from non-VA health care providers or their agents. The data may be used to support, or in anticipation of supporting, reimbursement claims from academic affiliates with which VA maintains a business relationship.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually-identifiable health information, and 38 U.S.C. 7332; i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. On its own initiative, VA may disclose information, except for the names and home address of veterans and their dependents, to a Federal, state, local, tribal or foreign agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

2. Disclosure may be made to an agency in the executive, legislative, or judicial branch, or the District of Columbia government in response to its request or at the initiation of VA, in connection with the letting of a contract, other benefits by the requesting agency, or the lawful statutory, administrative, or investigative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's decision. However, names and addresses of veterans and their dependents will be released only to Federal entities.

3. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

4. Disclosure may be made to National Archives and Records Administration (NARA) in records management inspections conducted under authority of Title 44 U.S.C.

5. Disclosure may be made to the Department of Justice and United States attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

6. Any information in this system of records, including personal information obtained from other Federal agencies through computer-matching programs, may be disclosed for the purposes identified below to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of an amount owed to the United States by virtue of a person's participation in any benefit program administered by VA. Information may be disclosed under this routine use only to the extent that it is reasonably necessary for the following purposes: (a) To assist VA in collection of Title 38 overpayments, overdue indebtedness, and/or costs of services provided individuals not entitled to such services; and (b) to initiate civil or criminal legal actions for collecting amounts owed to the United States and/or for prosecuting individuals who willfully or fraudulently obtain Title 38 benefits without entitlement. This disclosure is consistent with 38 U.S.C. 5701(b) (6).

7. The name and address of a veteran, other information as is reasonably necessary to identify such veteran, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the veteran's indebtedness to the United States by virtue of the person's participation in a benefits program administered by VA may be disclosed to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the provisions of 38 U.S.C. 5701(g)(4) have been met.

8. The name of a veteran, or other beneficiary, other information as is reasonably necessary to identify such individual, and any information concerning the individual's indebtedness by virtue of a person's participation in a medical care and treatment program administered by VA, may be disclosed to the Treasury Department, Internal Revenue Service, for the collection of indebtedness arising from such program by the withholding of all or a portion of the person's Federal income tax refund. These records may be disclosed as part of a computer-matching program to accomplish these purposes.

9. Relevant information (excluding medical treatment information related to drug or alcohol abuse, infection with the human immunodeficiency virus or sickle cell anemia) may be disclosed to HHS for the purpose of identifying improper duplicate payments made by Medicare fiscal intermediaries where VA was authorized and was responsible for payment for medical services obtained at non-VA healthcare facilities.

10. The social security number, universal personal identification number, NPI, credentials, and other identifying information of a healthcare provider may be disclosed to a third party where the third party requires the Department provide that information before it will pay for medical care provided by VA.

11. Relevant information may be disclosed to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practical for the purposes of laws administered by VA, in order for the contractor and/or subcontractor to perform the services of the contract or agreement.

12. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (a) Any payment for the benefit of a physician, dentist, or other licensed healthcare practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (b) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician, dentist or other licensed healthcare practitioner for a period longer than 30 days; or, (c) the acceptance of the surrender of clinical privileges, or any restriction of such privileges by a physician, dentist, or other licensed healthcare practitioner either while under investigation by the healthcare entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer-matching program to accomplish these purposes.

13. Relevant information may be disclosed from this system of records to any third party or Federal agency such as the Department of Defense, Office of Personnel Management, HHS and government-wide third-party insurers responsible for payment of the cost of medical care for the identified patients, in order for VA to seek recovery of the medical care costs. These records may also be disclosed as part of a computer-matching program to accomplish these purposes.

14. Relevant information, including the nature and amount of a financial obligation, may be disclosed in order to assist VA in the collection of unpaid financial obligations owed VA, to a debtor's employing agency or commanding officer, so that the debtor-employee may be counseled by his or her Federal employer or commanding officer. This purpose is consistent with 5 U.S.C. 5514, 4 CFR 102.5, and section 206 of Executive Order 11222 of May 8, 1965 (30 FR 6469).

15. Identifying information such as name, address, social security number and other information as is reasonably necessary to identify such individual, may be disclosed to the National Practitioner Data Bank at the time of hiring and/or clinical privileging/re-privileging of healthcare practitioners, and at other times as deemed necessary by VA, in order for VA to obtain information relevant to a Department decision concerning the hiring, privileging/re-privileging, retention or termination of the applicant or employee.

16. Disclosure of individually-identifiable health information including billing information for the payment of care may be made by appropriate VA personnel, to the extent necessary and on a need- to-know basis consistent with good medical-ethical practices, to family members and/or the person(s) with whom the patient has a meaningful relationship.

17. Provider identifying information may be disclosed from this System of Records to CMS to test the enumeration system for the NPI and once the system is operational, to obtain an NPI for any eligible healthcare professional providing examination or treatment with VA healthcare facilities.

18. Relevant information may be disclosed to non-VA health care providers or their agents where the non-VA health care provider provides health care treatment to veterans and requires the Department provide that information in order for that entity or its agent to submit, or in anticipation of submission of, a health care reimbursement claim or, in the case of the NPI, for permissible purposes specified in the HIPAA legislation (45 CFR Part 162).

19. Relevant information may be disclosed to an academic affiliate with which VA maintains a business relationship, where the VA provider also maintains an appointment to that academic affiliate's medical staff. This disclosure is to support, or in anticipation of supporting, a health care reimbursement claim(s) or, in the case of the NPI, for permissible purposes specified in the HIPAA legislation (45 CFR Part 162).

20. Any records may be disclosed to appropriate agencies, entities, and persons under the following circumstances: When (1) it is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

21. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

22. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

Disclosure to consumer reporting agencies:

Pursuant to 5 U.S.C. 552a(b)(12), VA may disclose records from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f)) or the Federal Claims Collection Act of 1966 (31 U.S.C. 3701(a)(3)).

Storage:

Records are maintained on paper or electronic media.

Records are retrieved by name, social security number or other assigned identifier of the individuals on whom they are maintained, or by specific bill number assigned to the claim of the individuals on whom they are maintained.

1. Access to VA working and storage areas is restricted to VA employees on a "need-to-know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Information in VistA may only be accessed by authorized VA personnel. Access to file information is controlled at two levels. The systems recognize authorized personnel by series of individually unique passwords/codes as a part of each data message, and personnel are limited to only that information in the file, which is needed in the performance of their official duties. Information that is downloaded from VistA and maintained on personal computers is afforded similar storage and access protections as the data that is maintained in the original files. Access to information stored on automated storage media at other VA locations is controlled by individually unique passwords/codes. Access by Office of Inspector General (OIG) staff conducting an audit, investigation, or inspection at the healthcare facility, or an OIG office location remote from the healthcare facility, is controlled in the same manner.

3. Information downloaded from VistA and maintained by the OIG headquarters and Field Offices on automated storage media is secured in storage areas for facilities to which only OIG staff have access. Paper documents are similarly secured. Access to paper documents and information on automated storage media is limited to OIG employees who have a need for the information in the performance of their official duties. Access to information stored on automated storage media is controlled by individually unique passwords/codes.

4. Access to the VA Austin Automation Center (AAC) is generally restricted to AAC employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted. Information stored in the AAC databases may be accessed.

5. Access to records maintained at the VA Allocation Resource Center (ARC) and the VISN Offices is restricted to VA employees who have a need for the information in the performance of their official duties. Access to information stored in electronic format is controlled by individually unique passwords/codes. Records are maintained in manned rooms during working hours. The facilities are protected from outside access during non-working hours by the Federal Protective Service or other security personnel.

Paper records and information stored on electronic storage media are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

The official responsible for policies and procedures is the Chief Business Officer, Chief Business Office (16), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. The local officials responsible for maintaining the system are the Director of the facility where the individual is or was associated.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA healthcare facility where care was rendered. Addresses of VA healthcare facilities may be found in VA Appendix 1 of the biennial publication of VA Privacy Act Issuances. All inquiries must reasonably identify the place and approximate date that medical care was provided. Inquiries should include the patient's full name, social security number, insurance company information, policyholder and policy identification number as well as a return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where they were treated.

(See Record Access Procedures above.)

The patient, family members or guardian, and friends, employers or other third parties when otherwise unobtainable from the patient or family; health insurance carriers; private medical facilities and healthcare professionals; state and local agencies; other Federal agencies; VA regional offices; Veterans Benefits Administration automated record systems, including Veterans and Beneficiaries Identification and Records Location Subsystem-VA (38VA23) and the Compensation, Pension, Education and Rehabilitation Records-VA (58VA21/22); and various automated systems providing clinical and managerial support at VA healthcare facilities to include Health Care Provider Credentialing and Privileging Records-VA (77VA10Q) and Veterans Health Information Systems and Technology Architecture (VistA) (79VA19).

Records are maintained at each VA health care facility, (in most cases, back-up computer tape information is stored at off-site locations). Address locations for VA facilities are listed in VA Appendix 1 of the biennial publication of VA Privacy Act Issuances. In addition, information from these records or copies of records may be maintained at the Department of Veterans Affairs (VA), 810 Vermont Ave. NW., Washington, DC; the VA Austin Automation Center (AAC), Austin, Texas; Veterans Integrated Service Network (VISN) Offices; and the VA Allocation Resource Center (ARC), Boston, Massachusetts.

1. Veterans who have applied for health care services under Title 38, United States Code, Chapter 17, and in certain cases members of their immediate families.

2. Beneficiaries of other Federal agencies.

3. Individuals examined or treated under contract or resource sharing agreements.

4. Individuals examined or treated for research or donor purposes.

5. Individuals who have applied for title 38 benefits but who do not meet the requirements under title 38 to receive such benefits.

6. Individuals who were provided medical care under emergency conditions for humanitarian reasons.

7. International Government responsible for pensioned members of allied forces (Allied Beneficiaries) who are provided health care services under Title 38, United States Code, Chapter 1.

8. Health care professionals providing examination or treatment to any individuals within VA health care facilities.

9. Health care professionals providing examination or treatment to individuals under contract or resource sharing agreements.

The records may include information related to:

1. The social security number and insurance policy number of the veteran and/or veteran's spouse. The record may include other identifying information (e.g., name, date of birth, age, sex, marital status) and address information (e.g., home and/or mailing address, home telephone number).

2. Insurance information specific to the veteran and/or spouse to include annual deductibles and benefits.

3. Diagnostic codes (ICD9-CM, CPT-4, and any other coding system) pertaining to the individual's medical, surgical, psychiatric, dental and/or psychological examination or treatment.

4. Charges claimed to an insurance company based on treatment/services provided to the patient.

5. Charges billed to those veterans who are required to meet copayment obligations for treatment/services rendered by the VA.

6. The name, social security number and/or universal personal identification number of health care providers.

Title 38, United States Code, sections 1710 and 1729.

The records and information are used for the billing of, and collections from, a third party (insurance carriers) or other Federal agencies for medical care or services received by a veteran for a nonservice-connected condition or from a first party, veteran required to make copayments. The records and information are also used for the billing of and collections from other Federal agencies for medical care or services received by an eligible beneficiary. The data may be used to identify and/or verify insurance coverage of a veteran or veteran's spouse prior to submitting claims for medical care or services. The data may be used to support appeals for non-reimbursement of claims for medical care or services provided to a veteran. The data may be used to enroll health care providers with health plans and VA's health care clearinghouse in order to electronically file third party claims. The records and information may be used for statistical analyses to produce various management, tracking and follow-up reports, to track and trend the reimbursement practices of insurance carriers, and to track billing and collection information.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332; i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. On its own initiative, VA may disclose information, except for the names and home address of veterans and their dependents, to a Federal, State, local, tribal or foreign agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

2. Disclosure may be made to an agency in the executive, legislative, or judicial branch, or the District of Columbia's government in response to its request or at the initiation of VA, in connection with the letting of a contract, other benefits by the requesting agency, or the lawful statutory, administrative, or investigative purpose of the agency to the extent that the information is relevant and necessary to the requesting agency's decision. However, names and addresses of veterans and their dependents will be released only to Federal entities.

3. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

4. Disclosure may be made to National Archives and Records Administration (NARA) in records management inspections conducted under authority of Title 44 U.S.C.

5. Disclosure may be made to the Department of Justice and United States attorneys in defense or prosecution of litigation involving the United States, and to Federal agencies upon their request in connection with review of administrative tort claims filed under the Federal Tort Claims Act, 28 U.S.C. 2672.

6. Any information in this system of records, including personal information obtained from other Federal agencies through computer-matching programs, may be disclosed for the purposes identified below to any third party, except consumer reporting agencies, in connection with any proceeding for the collection of an amount owed to the United States by virtue of a person's participation in any benefit program administered by VA. Information may be disclosed under this routine use only to the extent that it is reasonably necessary for the following purposes: (a) To assist VA in collection of title 38 overpayments, overdue indebtedness, and/or costs of services provided individuals not entitled to such services; and (b) to initiate civil or criminal legal actions for collecting amounts owed to the United States and/or for prosecuting individuals who willfully or fraudulently obtain title 38 benefits without entitlement. This disclosure is consistent with 38 U.S.C. 5701(b) (6).

7. The name and address of a veteran, other information as is reasonably necessary to identify such veteran, including personal information obtained from other Federal agencies through computer matching programs, and any information concerning the veteran's indebtedness to the United States by virtue of the person's participation in a benefits program administered by VA may be disclosed to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the provisions of 38 U.S.C. 5701(g)(4) have been met.

8. The name of a veteran, or other beneficiary, other information as is reasonably necessary to identify such individual, and any information concerning the individual's indebtedness by virtue of a person's participation in a medical care and treatment program administered by VA, may be disclosed to the Treasury Department, Internal Revenue Service, for the collection of indebtedness arising from such program by the withholding of all or a portion of the person's Federal income tax refund. These records may be disclosed as part of a computer-matching program to accomplish these purposes.

9. Relevant information (excluding medical treatment information related to drug or alcohol abuse, infection with the human immunodeficiency virus or sickle cell anemia) may be disclosed to the Department of Health and Human Services (HHS) for the purpose of identifying improper duplicate payments made by Medicare fiscal intermediaries where VA authorized and was responsible for payment for medical services obtained at non-VA health care facilities.

10. The social security number, universal personal identification number and other identifying information of a health care provider may be disclosed to a third party where the third party requires the agency to provide that information before it will pay for medical care provided by VA.

11. Relevant information may be disclosed to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practical for the purposes of laws administered by VA, in order for the contractor to perform the services of the contract or agreement.

12. Relevant information from this system of records may be disclosed to the National Practitioner Data Bank and/or State Licensing Board in the State(s) in which a practitioner is licensed, in which the VA facility is located, and/or in which an act or omission occurred upon which a medical malpractice claim was based when VA reports information concerning: (a) Any payment for the benefit of a physician, dentist, or other licensed health care practitioner which was made as the result of a settlement or judgment of a claim of medical malpractice if an appropriate determination is made in accordance with agency policy that payment was related to substandard care, professional incompetence or professional misconduct on the part of the individual; (b) a final decision which relates to possible incompetence or improper professional conduct that adversely affects the clinical privileges of a physician or dentist for a period longer than 30 days; or, (c) the acceptance of the surrender of clinical privileges or any restriction of such privileges by a physician or dentist either while under investigation by the health care entity relating to possible incompetence or improper professional conduct, or in return for not conducting such an investigation or proceeding. These records may also be disclosed as part of a computer-matching program to accomplish these purposes.

13. Patient identifying information may be disclosed from this system or records to any third party or Federal agency such as the Department of Defense, Office of Personnel Management, HHS and government-wide third-party insurers responsible for payment of the cost of medical care for the identified patients in order for VA to seek recovery of the medical care costs. These records may also be disclosed as part of a computer-matching program to accomplish these purposes.

14. Relevant information, including the nature and amount of a financial obligation, may be disclosed, in order to assist VA in the collection of unpaid financial obligations owed the VA, to a debtor's employing agency or commanding officer so that the debtor-employee may be counseled by his or her Federal employer or commanding officer. This purpose is consistent with 5 U.S.C. 5514, 4 CFR 102.5, and section 206 of Executive Order 11222 of May 8, 1965 (30 FR 6469).

Disclosure to consumer reporting agencies:

Pursuant to 5 U.S.C. 552a(b)(12), VA may disclose records from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f)) or the Federal Claims Collection Act of 1966 (31 U.S.C. 3701(a)(3)).

Storage:

Records are maintained on paper or electronic media.

Records are retrieved by name, social security number or other assigned identifier of the individuals on whom they are maintained or by specific bill number assigned to the claim of the individuals on whom they are maintained.

1. Access to VA working and storage areas is restricted to VA employees on a "need-to-know" basis. Strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Information in VistA may only be accessed by authorized VA personnel. Access to file information is controlled at two levels. The systems recognize authorized personnel by series of individually unique passwords/codes as a part of each data message, and personnel are limited to only that information in the file, which is needed in the performance of their official duties. Information that is downloaded from VistA and maintained on personal computers is afforded similar storage and access protections as the data that is maintained in the original files. Access to information stored on automated storage media at other VA locations is controlled by individually unique passwords/codes. Access by Office of Inspector General (OIG) staff conducting an audit, investigation, or inspection at the health care facility, or an OIG office location remote from the health care facility, is controlled in the same manner.

3. Information downloaded from VistA and maintained by the OIG headquarters and Field Offices on automated storage media is secured in storage areas for facilities to which only OIG staff have access. Paper documents are similarly secured. Access to paper documents and information on automated storage media is limited to OIG employees who have a need for the information in the performance of their official duties. Access to information stored on automated storage media is controlled by individually unique passwords/codes.

4. Access to the VA Austin Automation Center (AAC) is generally restricted to AAC employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted. Information stored in the AAC databases may be accessed.

5. Access to records maintained at the VA Allocation Resource Center (ARC) and the VISN Offices is restricted to VA employees who have a need for the information in the performance of their official duties. Access to information stored in electronic format is controlled by individually unique passwords/codes. Records are maintained in manned rooms during working hours. The facilities are protected from outside access during non-working hours by the Federal Protective Service or other security personnel.

Paper records and information stored on electronic storage media are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

The official responsible for policies and procedures is the Director, Revenue Office (174), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. The local officials responsible for maintaining the system are the Director of the facility where the individual is or was associated.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA health care facility where care was rendered. Addresses of VA health care facilities may be found in VA Appendix 1 of the biennial publication of VA Privacy Act Issuances. All inquiries must reasonably identify the place and approximate date that medical care was provided. Inquiries should include the patient's full name, social security number, insurance company information, policyholder and policy identification number as well as a return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where they were treated.

(See Record Access Procedures above.)

The patient, family members or guardian, and friends, employers or other third parties when otherwise unobtainable from the patient or family; health insurance carriers; private medical facilities and health care professionals; State and local agencies; other Federal agencies; VA regional offices; Veterans Benefits Administration automated record systems, including Veterans and Beneficiaries Identification and Records Location Subsystem--VA (38VA23) and the Compensation, Pension, Education and Rehabilitation Records--VA (58VA21/22); and various automated systems providing clinical and managerial support at VA health care facilities to include Veterans Health Information Systems and Technology Architecture (VistA) (79VA19).

Records will be maintained at the Health Care Staff Development and

Retention Office (HCSDRO/10A2D), Veterans Health Administration, Department of Veterans Affairs (VA), 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112; the Austin Automation Center, Department of Veterans Affairs, 1615 East Woodward Street, Austin, Texas 78772; and the VA health care facilities and VISN offices where scholarship recipients are employed. Address locations for VA health care facilities are listed in VA Appendix 1 of the Biennial Publication of Privacy Act Issuances. Complete records will be maintained only at the HCSDRO address.

VA employees who apply for and are granted or denied educational assistance awards under the provisions of the VA Education Debt Reduction Program (EDRP) serving under an appointment under Title 38 U.S.C., Section 7402(b) in a position for which retention of qualified healthcare personnel is difficult.

Records (or information contained in records) in this system may include: Personal identification information related to the application material, award processes, employment, and EDRP service periods such as (1) name, (2) employing facility number, (3) telephone number(s), (4) social security number, (5) debt reduction payment amounts, (6) dates of service periods, (7) name and address of the lending institution, (8) academic degree obtained for which EDRP funding is requested, (9) name and address of academic institution, (10) original amount of loan, and (11) current loan balance. Most of this information is contained on the application for an EDRP award including the applicant's full name, employing facility number, home and work telephone numbers, social security number, job title, degree obtained for which funding is requested, name and address of the academic institution, and the amount and number of debt reduction payments requested. The EDRP Loan Verification Form contains the candidate's name and social security number, name and address of the lending institution, original loan amount, current loan amount, and the purpose of the loan as stated on the loan application. The EDRP Acceptance of Conditions contains the name of a candidate approved for an award and the authorized number of debt reduction payments and their related amounts.

Title 38, U.S.C., Sections 501, 503, 7451, 7452, and 7431-7440.

The records and information may be used for determining and documenting individual applicant eligibility for debt reduction awards; determining the debt reduction payment amounts and the related service periods for award recipients; ensuring that award amounts are consistent with applicable law, regulations and policy; monitoring the employment status of scholarship recipients during their service periods; terminating an employee's participation in the program; and evaluating and reporting program results and effectiveness.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Disclosure of any information in this system that is necessary to verify authenticity of the application may be made to lending institutions and other relevant organizations or individuals.

2. Disclosure of any information in this system may be made to a Federal agency in order to determine if an applicant has any obligation under another Federal program that would render the applicant ineligible to participate in the Education Debt Reduction Program.

3. Any information in the system may be used to evaluate and report program results and effectiveness to appropriate officials including members of Congress on a routine and ad hoc basis.

4. Disclosure of information in this system may be made to a member of Congress or staff person acting for the member when the member or staff person requests the records on behalf of and at the request of that individual.

5. Disclosure may be made to the National Archives and Record Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of Title 44 United States Code.

6. Disclosure of information to the Federal Labor Relations Authority (FLRA), including its General Counsel, when requested in connection with the investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised, in connection with matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

7. Disclosure may be made to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

8. Disclosure may be made to the VA-appointed representative of an employee, including all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for-duty) examination procedures or Department-filed disability retirement procedures.

9. Disclosure may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

10. Disclosure may be made to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions of the Commission as authorized by law or regulation.

11. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

12. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

13. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

14. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

15. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Disclosure to consumer reporting agencies:

Pursuant to 5 U.S.C. 552a(b)(12), VA may disclose records from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f)) or the Federal Claims Collection Act of 1966 (31 U.S.C. 3701(a)(3)).

Storage:

Records are maintained on paper, electronic media and computer printouts.

Records are retrieved by use of the award number or an equivalent participant account number assigned by HCSDRO, Social Security Number and the name of the individual.

Access to the basic file in HCSDRO is restricted to authorized VA employees and vendors. Access to the office spaces where electronic media is maintained within HCSDRO is further restricted to specifically authorized employees and is protected by contracted building security services. Records (typically computer printouts) at HCSDRO will be kept in locked files and made available only to authorized personnel on a need-to-know basis. During non-working hours the file is locked and the building is protected by contracted building security services. Records stored on electronic media are maintained on a VA-approved and managed, password-protected, secure local area network (LAN) located within HCSDRO office spaces and safeguarded as described above. Records stored on electronic media at Veterans Integrated Service Network (VISN) Offices, VA health care facilities and the Austin Automation Center (AAC) in Austin, Texas, are provided equivalent safeguards subject to local policies mandating protection of information subject to federal safeguards.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Director, Health Care Staff Development and Retention Office (10A2D), Veterans Health Administration, Department of Veterans Affairs, 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such records, should submit a written request or apply in person to the Director, Health Care Staff Development and Retention Office, Veterans Health Administration, Department of Veterans Affairs, 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112.

Individuals seeking information regarding access to and contesting of VA records in this system may write, call or visit the Director, Health Care Staff Development and Retention Office (10A2D), Veterans Health Administration, Department of Veterans Affairs, 1555 Poydras Street, Suite 1971, New Orleans, Louisiana 70112. The telephone number is (504) 589-5267.

(See Record Access Procedures above.)

Information contained in the records is obtained from the individual, references given in application material, educational institutions, VA medical facilities, the VA AAC, other Federal agencies, State agencies and consumer reporting agencies.

VA stores data from the System of Records at the Capital Region Data Center, 882 T J Jackson Drive, Falling Waters, WV 25419. The originals of related documents are maintained in the Office of the Assistant Secretary for Resolution Management, 810 Vermont Avenue NW., Washington, DC 20420, under lock and key.

The records contain information about VA employees and other individuals who have participated in a VA alternative dispute resolution program or dispute resolution.

The records may contain information related to the name, grade, and step of the ADR requesters and respondents; the type of ADR requested, e.g., mediation or arbitration; the type of ADR used; the source of the individual(s) conducting the ADR, e.g., another Federal agency; the grades and steps of the individuals conducting the ADR process; administrative data on the particular ADR case, e.g., date requested; date concluded and total hours spent on the ADR; the nature of the dispute, e.g., discrimination or harassment; the stage in the dispute in which ADR is inserted; the jurisdictional forum in which the dispute was located when ADR was requested; any waiver of rights under 29 CFR part 1614; the terms of any settlement agreement, e.g., damages, attorneys fees, reassignment; and the satisfaction of the parties with the ADR process and the source of the neutral third party who conducted the procedure, e.g., the facility's program, a local shared neutral's program, the national program, or a private, non governmental program.

Title 5, United States Code, sections 571-584; Federal Acquisition Regulation; Part 33, Protests, Disputes, and Appeals and/or VA Acquisition Regulation, Part 833, Protests, Disputes, and Appeals; and Title 29, Code of Federal Regulations, Part 1614.

VA will use the information to track and monitor agency dispute resolution activities at the local level. VA also intends to analyze the data to evaluate ADR utilization VA-wide, identify agency ADR best practices, and determine whether certain forms of ADR may be more appropriate in various types of cases.

1. Disclosure may be made to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

2. VA may disclose information from this system to the National Archives and Records Administration (NARA) and General Services Administration (GSA) in records management inspections conducted under the authority of title 44, U.S.C.

3. Records from this system of records may be disclosed to the Department of Justice (DOJ) or in a proceeding before a court, adjudicative body, or other administrative body before which the agency is authorized to appear when: (1) The agency, or any component thereof; (2) any employee of the agency in his or her official capacity, where DOJ or the agency has agreed to represent the employee; or (3) the United States, when the agency determines that litigation is likely to affect the agency or any of its components; is a party to litigation, and has an interest in such litigation, and the use of such records by DOJ or the agency is deemed by the agency to be relevant and necessary to the litigation, provided, however, that the disclosure is compatible with the purpose for which the records were collected.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in this system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and home addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. Disclosure may be made to an appeal, grievance, hearing, or complaints examiner; an equal employment opportunity investigator, arbitrator, or mediator; and an exclusive representative or other person authorized to investigate or settle a grievance, complaint, or appeal filed by an individual who is the subject of the record.

7. Disclosure may be made to the Office of Personnel Management (OPM), the Office of Management and Budget (OMB), and the Government Accountability Office (GAO) in order for them to perform their responsibilities for evaluating Federal programs.

8. Information may be disclosed to officials of labor organizations recognized under 5 U.S.C. chapter 71, when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

9. Information may be disclosed to officials of the Merit Systems Protection Board or the Office of the Special Counsel when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

10. Information may be disclosed to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law.

11. Information may be disclosed to the Federal Labor Relations Authority (including its General Counsel) when appropriate jurisdiction has been established and the information has been requested in connection with the investigation and resolution of allegations of unfair labor practices or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; and to the Federal Service Impasses Panel in matters they are considering.

12. VA may, on its own initiative, disclose information to other Federal agencies to assist them in preventing and detecting possible fraud or abuse by individuals in their operations or programs.

13. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, or persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protect services as provided in 38 U.S.C. 5724 as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are maintained on the VA's Office of Resolution Management Web Server System in the Citizens Disaster Response Center (CDRC) in Falling Waters, West Virginia.

Records are retrieved by employee name, VA ADR case number, VA EEO case number, or VA facility number of the parties who participate in the VA ADR process.

Access to and use of these records is limited to those persons whose official duties require such access. Access to the VA Historical Alternative Dispute Resolution Data system of records is controlled by using an individually unique user identification code. Physical access to the facility where the "VA Historical Alternative Dispute Resolution Data" is maintained and controlled at all hours by the Federal Protective Service, VA, or other security personnel and security access control devices. Public use files prepared for purposes of research and analysis are purged of personal identifiers.

Records are maintained during the employee participant's for a period of 20 calendar years and subsequently disposed of in accordance with records disposition authority processes established by the Archivist of the United States.

Official responsible for policies and procedures: Deputy Assistant Secretary for Resolution Management, also known as the Deputy Dispute Resolution Specialist for Workplace ADR (08), Department of Veterans Affairs, 810 Vermont Avenue NW., Washington, DC 20420.

Individuals who wish to determine whether this system of records contains information about them should address written inquiries to Deputy Dispute Resolution Specialist for Workplace ADR (08), Department of Veterans Affairs, 810 Vermont Avenue NW., Washington, DC 20420. Inquiries should include: (1) The individual's name and address; (2) VA ADR or EEO case number, if known; and VA facility or facility number where the individual was employed or applied for employment.

Individuals seeking information regarding access to and contesting of records in this system may write the Deputy Dispute Resolution Specialist for Workplace ADR (08), Department of Veterans Affairs, 810 Vermont Avenue NW., Washington, DC 20420.

(See Record Access Procedures above.)

Information in this system of records is provided by employees who serve as local ADR program coordinators who obtain information from the ADR program participants.

Individual purchase records are maintained in the VCS office at each Department of Veterans Affairs (VA) health care facility. Addresses for VA facilities are listed in VA Appendix 1. In addition, information from these records or copies of records are maintained in a centralized electronic database at the Austin Automation Center (AAC), 1615 East Woodward Street, Austin TX, 78772.

The individuals covered by the system encompass permanent VA employees, also known as customers, who participate in the VCS Payroll Deduction System, which permits them to pay for purchases in VCS canteens through deduction from their pay.

These records include the following information:

--Customer identification information such as last name, first name, middle initial, social security number;

--Customer purchases made under the program;

--Payroll payments, cash payments, refunds for returned merchandise, and refunds for overpayments;

--Customer account balances and amounts written-off as uncollectible;

--Customer pay status when customer is in a "without pay" status;

--Identification of VCS employees creating customer transactions is by manual or electronic data capture. Manual transactions can be traced by a user ID within the payroll deduction system that identifies the individual entering the manual transaction. Electronic transactions can be traced via cashier code of the cashier ringing the transaction into the cash register; and

--Customer station number and canteen of purchase.

Title 38, United States Code, Part V, Chapter 78.

The records and information will be used to track customer purchases, payment and balances due to VCS. Records may also be used to identify and submit to a customer for the purpose of debt collection. The records and information may be used for management and analysis reports of VCS programs.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. VA may disclose information from this system of records to a private debt collection agent for the purpose of collecting unpaid balances from customers who have left VA employment without making full payment for purchases made under the program.

2. VA may disclose information from this system of records to the U.S. Treasury Offset Program (TOPS) for the purpose of collecting unpaid balances from customers who have left VA employment without making full payment for purchases made under the program. VA needs to be able to collect unpaid balances from customers who have left VA employment without making full payment to VCS for purchases made under the program.

3. Disclosure may be made to the Federal Labor Relations Authority (FLRA), including its General Counsel, when requested in connection with investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised, and in connection with matters before the Federal Service Impasses Panel. The release of information to FLRA from this Privacy Act system of records is necessary to comply with the statutory mandate under which FLRA operates.

4. Disclosure may be made to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

5. Disclosure may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

6. Disclosure may be made to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

7. Disclosure may be made to the National Archives and Record Administration (NARA) and the General Services Administration records management inspections conducted under authority of Title 44 United States Code. NARA is responsible for archiving old records no longer actively used but which may be appropriate for preservation; they are responsible in general for the physical maintenance of the Federal government's records. VA must be able to turn records over to these agencies in order to determine the proper disposition of such records.

8. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement. VA occasionally contracts out certain functions when this would contribute to effective and efficient operations. VA must be able to give a contractor whatever information is necessary for the contractor to fulfill its duties. In these situations, safeguards are provided in the contract prohibiting the contractor from using or disclosing the information for any purpose other than that described in the contract.

9. Disclosure may be made to a member of Congress or staff person acting for the member when the member or staff person requests the records on behalf of and at the request of an individual. Individuals sometimes request the help of a member of Congress in resolving some issues relating to a matter before VA. The member of Congress then writes VA, and VA must be able to give sufficient information to be responsive to the inquiry.

10. Disclosure may be made to a Federal, State or local agency, upon its official request, to the extent that it is relevant and necessary to that agency's decision regarding: the hiring, retention or transfer of an employee, the issuance of a security clearance, the letting of a contract, or the issuance or continuance of a license, grant or other benefit given by that agency. However, in accordance with an agreement with the U.S. Postal Service, disclosures to the U.S. Postal Service for decisions concerning the employment of veterans will only be made with the Veteran's prior written consent. VA must be able to provide information to agencies conducting background checks on applicants for employment or licensure.

11. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

12. VA may disclose on its own initiative any information in the system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

13. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

14. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Disclosure to consumer reporting agencies:

Pursuant to 5 U.S.C. 552a(b)(12), VA may disclose records from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 US.C. 168la(f)) or the Federal Claims Collection Act of 1966 (31 US.C. 3701(a)(3)).

Storage:

Records are maintained primarily on a computer disk in a centralized database system. Paper records of program Participation Agreements and individual customer records are maintained in canteen office files.

Records are retrieved by name and/or Social Security number of the participating VA employees or customers.

1. Access to VA work and file areas is restricted to VA personnel with a legitimate need for the information in the performance of their official duties. Strict control measures are enforced to ensure that access by these individuals is appropriately limited. Information stored electronically may be accessed by authorized VCS employees at remote locations, including VA health care facilities. Access is controlled by individually unique passwords or codes, which must be changed periodically by the users.

2. Physical access to the Austin VA Data Processing Center is generally restricted to Center employees, custodial personnel, Federal Protective Service, and other security personnel. VA file areas are generally locked after normal duty hours, and the facilities are protected from outside access by the Federal Protective Service or other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted.

3. All data transmissions are encrypted to prevent disclosure of protected Privacy Act information. Access to backup copies of data is restricted to authorized personnel in the same manner as the Austin VA Data Processing Center.

Records for active participants in the Payroll Deduction Program are maintained indefinitely. Records for participants who leave VA employment voluntarily or involuntarily terminate their participation in the Payroll Deduction Program are retained for three years following the date the account attains a zero balance; or for three years following the date the account balance is written off following unsuccessful collection action.

Official responsible for policies and procedures: Office of the Chief Financial Officer, Veterans Canteen Service (103), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Officials maintaining the system: Chief of the Canteen Service at the facility where the individuals were associated. Addresses for VA facilities are listed in VA Appendix 1.

Individuals who wish to determine whether this system of records contains records about them should contact the VCS Payroll Deduction Program Specialist at the Veterans Canteen Service Central Office (VCSCO-FC), St. Louis, Missouri 63125; telephone: (314) 845-1301. Inquiries should include the person's full name, Social Security number, date(s) of contact, and return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call, or visit the VCS Payroll Deduction Program Specialist at the Veterans Canteen Service Central Office (VCSCO-FC), St. Louis, Missouri 63125; telephone: (314) 845-1301.

(See Record Access Procedures above.)

Information in this system of records is provided by the customers who participate in the program, VA employees and various VA systems.

Records are maintained at the VA Central Office FOIA Offices, 810 Vermont Avenue, NW, Washington, DC 20420; AINS, Inc., 1355 Piccard Drive, Rockville, MD 20850, and all VA field facilities. A list of the field facilities may be found at the following Internet address: http://www2.va.gov/directory/guide/home.asp.

This system contains records and related correspondence on individuals who have filed with VA:

a. Requests for information under the provisions of the Freedom of Information Act (5 U.S.C. 552), including requests for review of initial denials of such requests.

b. Requests under the provisions of the Privacy Act (5 U.S.C. 552a) for records about themselves where the FOIA is also relied upon to process the request and which then meet the Department of Justice’s (DOJ) standard for required reporting in the Annual FOIA Report to the Attorney General of the United States.

c. All persons who have requested records from VA under the provisions of the Freedom of Information Act (FOIA); all persons whose requests for records have been referred to VA by other Federal agencies; and all persons who have submitted appeals to the Secretary of VA under the provisions of the FOIA.

d. All persons about whom information has been requested under the provisions of the FOIA.

This system contains correspondence and other documents related to requests made by individuals to VA for:

a. Information under the provisions of the Freedom of Information Act (5 U.S.C 552), including requests for review of initial denials of such requests.

b. Information under provisions of the Privacy Act (5 U.S.C. 552a) and requests for review of initial denials of such requests made under VA’s Privacy Act regulations regarding requests for records about themselves where the FOIA is also relied upon to process the request and which then meet the Department of Justice’s (DOJ) standard for required reporting in the Annual FOIA Report to the Attorney General of the United States.

c. Name, home address, telephone number, e-mail address, FOIA case numbers assigned to individual cases, and appeals, FOIA requests and appeals, responses to requests (including unredacted and redacted responsive records), determinations of appeals, correspondence with requesters and with other persons who have contacted VA in connection with requests or appeals other than requesters or other memoranda and correspondence in connection with requests or appeals.

Includes the following with any revisions and amendments:

The Privacy Act of 1974 (5 U.S.C. 552a); the Freedom of Information Act, as amended (5 U.S.C. 552); 5 U.S.C. 301; and 38 U.S.C. 501.

The system is maintained for the purpose of processing an individual’s record request made under the provisions of the Freedom of Information and Privacy Acts. These records are also used by VA to prepare reports required by the Freedom of Information and Privacy Acts to the Office of Management and Budget and the Department of Justice. The proposed system of records will assist the Department of Veterans Affairs in carrying out its responsibilities under the Freedom of Information and Privacy Acts. The records maintained in the proposed system can originate in both paper and electronic format.

System information may be accessed and used by authorized VA employees, with a legitimate need to know, to conduct duties associated with the management and operation of the FOIA-PA program. Information may also be disclosed as a routine use for the following purposes:

1. VA may disclose information from this system of records to the Office of Management and Budget (OMB) for the performance of its statutory responsibilities for evaluating Federal programs.

2. VA may disclose information from this system of records to the Department of Justice (DOJ), either on VA’s initiative or in response to DOJ’s request for the information, after either VA or DOJ determines that such information is relevant to DOJ’s representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DOJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

3. VA may disclose information from the record of an individual in response to an inquiry from a Congressional office made at the request of that individual.

4. VA may disclose information from this system to the National Archives and Records Administration (NARA) and General Services Administration (GSA) in records management inspections conducted under Title 44 U.S.C.

5. VA may disclose information from this system of records to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has a contract or agreement to perform services under the contract or agreement.

6. VA may, on its own initiative, disclose information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

7. VA may disclose information from this system to the Equal Employment Opportunity Commission (EEOC) when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or other functions of the Commission as authorized by law or regulation.

8. VA may disclose information from this system to the Merit Systems Protection Board (MSPB), or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1205 and 1206, or as authorized by law.

9. VA may disclose information from this system to the Federal Labor Relations Authority (FLRA), including its General Counsel, information related to the establishment of jurisdiction, investigation, and resolution of allegations of unfair labor practices, or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; for it to address matters properly before the Federal Services Impasses Panel, investigate representation petitions, and conduct or supervise representation elections.

10. VA may, on its own initiative, disclose information from this system to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

11. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

12. To the National Archives and Records Administration Office of Government Information Services (OGIS), to the extent necessary to fulfill its responsibilities in 5 U.S.C. 552(b), to review administrative agency policies, procedures and compliance with the Freedom of Information Act (FOIA), and to facilitate OGIS’ offering of mediation services to resolve disputes between persons making FOIA requests and administrative agencies.

Storage:

Electronic data are maintained on Direct Access Storage Devices at AINS Inc., 1355 Piccard Drive, Rockville, Maryland. AINS Inc. stores registry tapes for disaster back up at the storage location. Registry tapes for disaster back up are also maintained at an off-site location. VA Central Office and VA field facilities also maintain paper reports and electronic data.

Records are indexed by name of requester, date and any other identifier deemed appropriate.

This list of safeguards furnished in this System of Records is not an exclusive list of measures that has been, or will be, taken to protect individually-identifiable information.

All records are maintained in compliance with applicable VA security policy directives that specify the standards that will be applied to protect sensitive personal information, including protection from unauthorized access through appropriate administrative, physical, and technical safeguards. These safeguards include restricting access to authorized personnel who have a need-to-know, using locks and password protection identification features.

Authorized personnel are required to take annual VA mandatory data privacy and security training. Access to data storage areas is restricted to authorized VA employees or contract staff who have been cleared to work by the VA Office of Security and Law Enforcement. File areas are locked after normal duty hours. VA facilities are protected from outside access by the Federal Protective Service and/or other security personnel. Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Contractors and their subcontractors who access the data are required to maintain the same level of security as VA staff. Access to electronic files is controlled by using an individually unique password entered in combination with an individually unique user identification code.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States. Routine records will be disposed of when the agency determines they are no longer needed for administrative, legal, audit or other operational purposes. These retention and disposal statements are pursuant to the National Archives and Records Administration (NARA) General Record Schedules GRS-20, item 1c and GRS 24, item 6a.

Director, FOIA Service (005R1C), Department of Veterans Affairs, 810 Vermont Avenue, NW, Washington, D.C. 20420

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personnel identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the last VA facility where the request or appeal was submitted or to the Director, FOIA Service (005R1C), 810 Vermont Avenue, NW, Washington, DC 20420. Such requests must contain a reasonable description of the records requested. Inquires should also include the following:

a. Name

b. Telephone Number and Return Address

c. Date of Request or Appeal

Individuals wishing to request access to their records maintained under his or her name may write or visit the nearest VA facility or write to their regional VA Public Liaison/FOIA officer listed at http://www.foia.va.gov/FOIA_Contacts.asp.

(See "Record Access Procedures above.")

Information in this system of records is obtained from the following: requests and administrative appeals submitted by individuals and organizations pursuant to the FOIA and Privacy Acts; VA personnel assigned to handle such requests and appeals; Agency records searched and identified as responsive to such requests and appeals; and requests referred by Agencies or other entities concerning VA records.

During the course of a FOIA action, exempt materials from other systems of records may in turn become part of the case records in this system. To the extent that copies of exempt records from those ‘other’ systems of records are entered into this FOIA case record, VA hereby claims the same exemptions for the records from those ‘other’ systems that are entered into this system, as claimed for the original primary systems of records of which they are a part.

Records are maintained at VA medical centers, VA data processing centers, VISNs and Office of Information field offices. Address location for each VA national patient database is listed in VA Appendix 4 at the end of this document.

The records contain information for all individuals (1) Receiving health care from VHA, and (2) Providing the health care. Individuals encompass Veterans and their immediate family members, members of the Armed Services, current and former employees, trainees, contractors, subcontractors, consultants, volunteers, and other individuals working collaboratively with VA.

The records may include information and health information related to:

1. Patient medical record abstract information including, but not limited to, information from Patient Medical Recordâ€"VA (24VA10P2).

2. Identifying information (e.g., name, birth date, death date, admission date, discharge date, gender, Social Security number, taxpayer identification number); address information (e.g., home and/or mailing address, home telephone number, emergency contact information such as name, address, telephone number, and relationship); prosthetic and sensory aid serial numbers; medical record numbers; integration control numbers; information related to medical examination or treatment (e.g., location of VA medical facility providing examination or treatment, treatment dates, medical conditions treated or noted on examination); information related to military service and status;

3. Medical benefit and eligibility information;

4. Patient workload data such as admissions, discharges, and outpatient visits; resource utilization such as laboratory tests, x-rays;

5. Patient Satisfaction Survey Data which include questions and responses;

6. External Peer Review Program (EPRP) data capture;

7. Online Data Collection system supported by Northeast Program Evaluation Center and VHA Support Service Center to include electronic information from all Veteran homeless programs and external sources; and

8. Clinically oriented information associated with My HealtheVet such as secure messages.

Title 38, United States Code, Section 501.

The records and information may be used for statistical analysis to produce various management, workload tracking, and follow-up reports; to track and evaluate the ordering and delivery of equipment, services, and patient care; for the planning, distribution, and utilization of resources; to monitor the performance of VISNs; and to allocate clinical and administrative support to patient medical care. The data may be used for VA's extensive research programs in accordance with VA policy. In addition, the data may be used to assist in workload allocation for patient treatment services including provider panel management, nursing care, clinic appointments, surgery, prescription processing, diagnostic and therapeutic procedures; to plan and schedule training activities for employees; for audits, reviews, and investigations conducted by the network directors office and VA Central Office; for quality assurance audits, reviews, and investigations; for law enforcement investigations; and for personnel management, evaluation and employee ratings, and performance evaluations. Survey data will be collected for the purpose of measuring and monitoring national, VISN, and facility-level performance on VHA's Veteran Health Care Service Standards (VHSS) pursuant to Executive Order 12862 and VHA Customer Service Standards Directive. The VHSS are designed to measure levels of patient satisfaction in areas that patients have defined as important in receiving quality, patient-centered health care. Results of the survey data analysis are shared throughout the VHA system. The EPRP data are collected in order to provide medical centers and outpatient clinics with diagnosis and procedure-specific quality of care information. EPRP is a contracted review of care, specifically designated to collect data to be used to improve the quality of care. The Veteran Homeless records and information will be used for case management in addition to statistical analysis to produce various management, workload tracking, and follow-up reports; to track and evaluate the goal of ending Veteran homelessness. HAIISS data will be available to VHA clinicians to use for the monitoring of health care-associated infections and for the transmittal of data to state/local health departments for biosurveillance purposes.

To the extent that records contained in the system include information protected by 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus; information protected by 38 U.S.C. 5705, i.e., quality assurance records; or information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, such information cannot be disclosed under a routine use unless there is also specific statutory authority permitting the disclosure. VA may disclose protected health information pursuant to the following routine uses where required or permitted by law.

1. VA may disclose on its own initiative any information in this system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. On its own initiative, VA may also disclose the names and addresses of Veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

2. Disclosure may be made to any source from which additional information is requested (to the extent necessary to identify the individual, inform the source of the purpose(s) of the request, and identify the type of information requested), when necessary to obtain or provide information relevant to an individual's eligibility, care history, or other benefits across different Federal, state, or local, public health, health care, or program benefit agencies that improves the quality and safety of health care for our Veterans.

3. Disclosure may be made to a Federal agency in the executive, legislative, or judicial branch, State and local Government or the District of Columbia government in response to its request or at the initiation of VA, in connection with disease tracking, patient outcomes, or other health information required for program accountability.

4. Disclosure may be made to the National Archives and Records Administration and the General Services Administration for records management inspections under authority of Title 44, Chapter 29, of the United States Code.

5. VA may disclose information in this system of records to the Department of Justice (DOJ), either on VA's initiative or in response to DOJ's request for the information, after either VA or DOJ determines that such information is relevant to DOJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the DOJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

6. Records from this system of records may be disclosed to a Federal agency or to a state or local government licensing board and/or to the Federation of State Medical Boards or a similar non-government entity that maintains records concerning individuals' employment histories or concerning the issuance, retention, or revocation of licenses, certifications, or registration necessary to practice an occupation, profession, or specialty, in order for the agency to obtain information relevant to an agency decision concerning the hiring, retention, or termination of an employee.

7. Records from this system of records may be disclosed to inform a Federal agency, licensing boards, or appropriate non-governmental entities about the health care practices of a terminated, resigned, or retired health care employee whose professional health care activity so significantly failed to conform to generally accepted standards of professional medical practice as to raise reasonable concern for the health and safety of patients receiving medical care in the private sector or from another Federal agency.

8. For program review purposes and the seeking of accreditation and/or certification, disclosure may be made to survey teams of the Joint Commission, College of American Pathologists, American Association of Blood Banks, and similar national accreditation agencies or boards with whom VA has a contract or agreement to conduct such reviews but only to the extent that the information is necessary and relevant to the review.

9. Disclosure may be made to a national certifying body that has the authority to make decisions concerning the issuance, retention, or revocation of licenses, certifications, or registrations required to practice a health care profession, when requested in writing by an investigator or supervisory official of the national certifying body for the purpose of making a decision concerning the issuance, retention, or revocation of the license, certification, or registration of a named health care professional.

10. Records from this system that contain information listed in 5 U.S.C. 7114(b)(4) may be disclosed to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

11. Disclosure may be made to the representative of an employee of all notices, determinations, decisions, or other written communications issued to the employee in connection with an examination ordered by VA under medical evaluation (formerly fitness-for duty) examination procedures or Department-filed disability retirement procedures.

12. VA may disclose information to officials of the Merit Systems Protection Board, or the Office of Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

13. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

14. VA may disclose information to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

15. Disclosure of medical record data, excluding name and address, unless name and address are furnished by the requester, may be made to non-Federal research facilities for research purposes determined to be necessary and proper when approved in accordance with VA policy.

16. Disclosure of name(s) and address(s) of present or former personnel of the Armed Services, and/or their dependents, may be made to: (a) a Federal department or agency, at the written request of the head or designee of that agency; or (b) directly to a contractor or subcontractor of a Federal department or agency, for the purpose of conducting Federal research necessary to accomplish a statutory purpose of an agency. When disclosure of this information is made directly to a contractor, VA may impose applicable conditions on the department, agency, and/or contractor to insure the appropriateness of the disclosure to the contractor.

17. Disclosure may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

18. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

19. VA may disclose information to a Federal agency for the conduct of research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and the VHA Office of Information has determined prior to the disclosure that VHA data handling requirements are satisfied.

20. Disclosure of limited individual identification information may be made to another Federal agency for the purpose of matching and acquiring information held by that agency for VHA to use for the purposes stated for this system of records.

21. VA may, on its own initiative disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

22. On its own initiative, VA may disclose to the general public via an Internet Web site, Primary Care Management Module information, including the names of its providers, provider panel sizes and reports on provider performance measures of quality when approved in accordance with VA policy.

23. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

24. VA may disclose names and addresses of present or former members of the Armed Services and/or their dependents under certain circumstances: (a) to any nonprofit organization, if the release is directly connected with the conduct of programs and the utilization of benefits under Title 38, or (b) to any criminal or civil law enforcement governmental agency or instrumentality charged under applicable law with the protection of the public health or safety, if a qualified representative of such organization, agency, or instrumentality has made a written request for such names or addresses for a purpose authorized by law, provided that the records will not be used for any purpose other than that stated in the request and that the organization, agency, or instrumentality is aware of the penalty provision of 38 U.S.C. 5701(f).

25. VA may disclose information, including demographic information, to U.S. Department of Housing and Urban Development (HUD) for the purpose of reducing homelessness among Veterans by implementing the Federal strategic plan to prevent and end homelessness and by evaluating and monitoring the HUD-Veterans Affairs Supported Housing program.

26. VA may disclose health care information to the Food and Drug Administration (FDA), or a person subject to the jurisdiction of the FDA, with respect to FDA-regulated products, for purposes of reporting adverse events; product defects or problems, or biological product deviations; tracking products; enabling product recalls, repairs, or replacements; and/or conducting post marketing surveillance.

Storage:

Records are maintained on electronic storage media including magnetic tape, disk, laser optical media.

Records are retrieved by name, Social Security number, or other assigned identifiers of the individuals on whom they are maintained.

1. Access to and use of national patient databases are limited to those persons whose official duties require such access, and VA has established security procedures to ensure that access is appropriately limited. Information security officers and system data stewards review and authorize data access requests. VA regulates data access with security software that authenticates users and requires individually unique codes and passwords. VA provides information security training to all staff and instructs staff on the responsibility each person has for safeguarding data confidentiality.

2. VA maintains Business Associate Agreements and Non-Disclosure Agreements with contracted resources in order to maintain confidentiality of the information.

3. Physical access to computer rooms housing national patient databases is restricted to authorized staff and protected by a variety of security devices. Unauthorized employees, contractors, and other staff are not allowed in computer rooms. The Federal Protective Service or other security personnel provide physical security for the buildings housing computer rooms and data centers.

4. Data transmissions between operational systems and national patient databases maintained by this system of record are protected by state-of-the-art telecommunication software and hardware. This may include firewalls, encryption, and other security measures necessary to safeguard data as it travels across the VA Wide Area Network. Data may be transmitted via a password protected spreadsheet and placed on the secured share point Web portal by the user that has been provided access to their secure file. Data can only be accessed by authorized personnel from each facility within the Polytrauma System of Care and the Physical Medicine and Rehabilitation Program Office.

5. In most cases, copies of back-up computer files are maintained at off-site locations.

The records are disposed of in accordance with General Records Schedule 20, item 4. Item 4 provides for deletion of data files when the agency determines that the files are no longer needed for administrative, legal, audit, or other operational purposes.

Officials responsible for policies and procedures; Assistant Deputy Under Secretary for Health for Informatics and Analytics (10P2), Department of Veterans Affairs, 810 Vermont Avenue NW, Washington, DC 20420. Officials maintaining this system of records; Director, National Data Systems (10P2C), Austin Information Technology Center, 1615 Woodward Street, Austin, Texas 78772.

Individuals who wish to determine whether this system of records contains information about them should contact the Director of National Data Systems (10P2C), Austin Information Technology Center, 1615 Woodward Street, Austin, Texas 78772. Inquiries should include the person's full name, Social Security number, location and dates of employment or location and dates of treatment, and their return address.

Individuals seeking information regarding access to and contesting of records in this system may write or call the Director of National Data Systems (10P2C), Austin Information Technology Center, 1615 Woodward Street, Austin, Texas 78772, or call the VA National Service Desk and ask to speak with the VHA Director of National Data Systems at (512) 326-6780.

(See Record Access Procedures above.)

Information in this system of records is provided by Veterans, VA employees, VA computer systems, Veterans Health Information Systems and Technology Architecture, VA medical centers, VA Health Eligibility Center, VA program offices, VISNs, VA Austin Automation Center, the Food and Drug Administration, DoD, HUD, Survey of Healthcare Experiences of Patients, EPRP, and the following Systems Of Records: `Patient Medical Recordsâ€"VA' (24VA10P2), `National Prosthetics Patient Databaseâ€"VA' (33VA113), `Healthcare Eligibility Recordsâ€"VA' (89VA16), VA Veterans Benefits Administration automated record systems (including the Veterans and Beneficiaries Identification and Records Location Subsystemâ€"VA (38VA23), and subsequent iterations of those systems of records.

Records will be maintained at the Hines Office of Information Field Office, Edward Hines, Jr. Hospital, Bldg. 37, Hines, IL 60141.

Current and former VA employees, contractors, or subcontractors acting in the capacity of project managers and project team members on Information Technology (IT) projects.

The records may include information related to: names and other identifying information, project work activities, hours of effort spent on project activities/tasks and on non-project activities, generic leave category or specific vacation and/or sick time, and salaries of project managers and team members.

Title 38, United States Code, section 501.

The records will be used to track, manage, and report on the development of IT systems within VA in order to make informed decisions and deliver projects on time through the capture and re-use of best practices.

1. VA may disclose information to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made on behalf and at the written request of that individual.

2. VA may disclose information to the National Archives and Records Administration in records management inspections conducted under authority of Title 44, United States Code.

3. VA may disclose information to the Department of Justice (DOJ), including United States Attorneys, or in a proceeding before a court, adjudicative body, or other administrative body when the litigation or adjudicative or administrative process is likely to affect VA, its employees, or any of its components, or when VA, its employees, or any of its components is a party to the litigation or process, or has an interest in the litigation or process and the use of these records is deemed by VA to be relevant and necessary to the litigation or process, provided that the disclosure is compatible with the purpose for which the records were collected.

4. VA may disclose information to individuals, organizations, private or public agencies, or other entities with which VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

5. VA may disclose information to the Office of Management and Budget in order for them to perform their statutory responsibilities for evaluating Federal programs.

6. VA may disclose on its own initiative any information in this system, except the names of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

7. VA may disclose information to the Federal Labor Relations Authority (FLRA), including its General Counsel, when requested in connection with the investigation and resolution of allegations of unfair labor practices, in connection with the resolution of exceptions to arbitrator awards when a question of material fact is raised, in connection with matters before the Federal Service Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

8. VA may disclose information to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

9. VA may disclose information to offices of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

10. VA may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination practices, examination of Federal affirmative employment programs, compliance with the Uniform Guidelines of Employee Selection Procedures, or other functions vested in the Commission by the President's Reorganization Plan No. 1 of 1978.

Storage:

Records are maintained on electronic storage media, such as disks, drives, or more specifically, the IT Project Office database.

Records are retrieved by individual name or other unique identifier (not Social Security number).

1. Access to VA working and storage areas is restricted to VA personnel, including contractors or subcontractors, on a ldquo;need-to-knowrdquo; basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours, and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Physical access to the Hines Office of Information Field Office is restricted to Center personnel, custodial personnel, the Federal Protective Service or other security personnel, and authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted.

3. Access to computer rooms is generally limited by appropriate locking devices and restricted to authorized VA personnel. IT peripheral devices are placed in secure areas that are locked, with limited access, or otherwise protected. Access to information stored on automated storage media at other VA locations is controlled by individually unique passwords/codes, which must be changed periodically by the user. Access by authorized VA employees at remote locations, including VA field offices and health care facilities, Information Systems Centers, and VA Central Office, who may access information stored in the computer, is controlled in the same manner.

Records are disposed of in accordance with the National Archives and Records Administration (NARA) General Records Schedule (GRS) 14, which specifies that information service project case files in formally designated information offices be maintained for one year after close of file or completion of project.

Official responsible for policies and procedures is: Director, Information Technology Program and Project Management Service, 810 Vermont Avenue, NW., Washington, DC 20420ndash;0001, (202) 565ndash;8828.

Individuals seeking information on the existence and content of a record pertaining to them should contact the VA facility at which they are or were employed, or have or made contact. Inquiries should include the person's full name, project name, dates of work on the project, and return address.

Individuals seeking information on access to and contesting of a record in this system may contact the VA facility where they are or were employed, or have or made contact. Inquiries should include the person's full name, project name, dates of the project, and return address.

(See Record Access Procedures above.)

Information in this system of records is provided by VA employees, contractors, and subcontractors.

None. This system of records does not contain classified information or records.

Records are maintained at the Center for Veterans Enterprise's office in VA Headquarters, Washington, DC. VA's Web Operations (WebOps), Third Floor, 1335 East-West Highway, Silver Spring, MD 20910, maintains the computerized database and Web site.

Veterans who have applied to have their small businesses included in the VetBiz database, and, if deceased, their surviving spouses.

The records in this system include:

1. Identifying information on veterans and the surviving spouses of veterans who apply to have their businesses listed in the VetBiz database, including names and social security numbers.

2. Information documenting the eligibility of veterans to have their businesses listed in the VetBiz database, including service-connected status and information concerning ownership of the business(es) listed in VetBiz, including certifications, and security clearances held.

38 U.S.C. 8127 and Public Law No. 106-50, as amended.

To gather and maintain information on small businesses owned and controlled by veterans, including service-disabled veterans, to enable them to effectively compete for Federal contracts, as well as working with the Small Business Administration in its provision of services to veteran-owned businesses under the Veterans Entrepreneurship and Small Business Development Act of 1999, as amended, Public Law 106-50, 113 Stat. 233.

1. The Department may disclose information in the system to Federal, State, and local government personnel to assist them in finding veteran-owned businesses to contract with and for purposes of market research, in compliance with their respective procurement regulations and procedures.

2. The Department may disclose information to the general public, including companies and corporate entities, to assist them in locating potential contractors, subcontractors and/or potential teaming partners, for purposes of complying with applicable regulations concerning use of veteran-owned businesses.

3. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

4. VA may disclose on its own initiative any information in this system, except the names and addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order.

5. VA may disclose information to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made on behalf of and at the request of that individual.

6. VA may disclose information to the National Archives and Records Administration (NARA) in records disposition and management inspections conducted under authority of Title 44 of United States Code.

7. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

8. VA may disclose information to individuals, organizations, private or public agencies, or other entities with which VA has a contract or agreement, or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

Disclosures to Consumer Reporting Agencies:

None.

Storage:

The VetBiz VIP will be stored in a computerized database. The system will operate on servers, located at VA's Web Operations (WebOps), 822 TJ Jackson Drive, Falling Waters, WV 25419. Data backups will reside on appropriate media, according to normal system backup plans for WebOps. The system will be managed by the CVE, in VA Headquarters, Washington, DC.

Automated records may be retrieved by the names of the veteran business owners and/or their social security numbers.

Read access to the system is via Internet access. WebOps, CVE, and contractor personnel will have access to the system, via VA Intranet and local connections, for management and maintenance purposes and tasks. Access to the Intranet portion of the system is via user-id and password, at officially approved access points. Veteran-owned small businesses will establish and maintain user- ids and passwords for accessing their corporate information under system control. Contracting officers will establish and maintain user-ids and passwords for accessing non-vital business information. Policy regarding issuance of user-ids and passwords is formulated in VA by the Office of Information and Technology, Washington, DC. Security for data in the VetBiz database complies with applicable statutes, regulations and government-wide and VA policies. The system is configured so that access to the public data elements in the database does not lead to access to the non-public data elements, such as veteran social security number.

Records will be maintained and disposed of, in accordance with the records disposal authority approved by the Archivist of the United States, the National Archives and Records Administration, and published in Agency Records Control Schedules.

Deputy Director, Center for Veterans Enterprise (00VE), 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals wishing to inquire, whether this system of records contains information about themselves, should contact the Deputy Director, Center for Veterans Enterprise (00VE), 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals seeking access to records about themselves, contained in this system of records, may access the records via the Internet, or submit a written request to the system manager.

An individual, who wishes to contest records maintained under his or her name or other personal identifier, may write or call the system manager. VA's rules for accessing records, contesting contents and appealing initial agency determinations are published in regulations, set forth in the Code of Federal Regulations. See 38 CFR 1.577, 1.578.

The information in this system of records is obtained from the following source: a. Information voluntarily submitted by the business owners; and/or information extracted from CCR database.

None.

All system records are maintained at the Center for Veterans Enterprise office in VA Headquarters, Washington, DC.

The system shall record the names and numbers of individuals calling the CVE for advice and assistance, as well as any voice messages.

The system of records will provide integrated customer service for the Center's telephone and operational business communication needs to include, but not limited to, automated switchboard referral to CVE resource partners and automated electronic mail responses and referrals. It shall record the names and numbers of individuals calling the CVE for advice and assistance.

Pub. L. 106-50, as amended.

The records maintained by the system will be used within the Center for Veterans Enterprise to manage communications from veterans and other individuals seeking assistance from the Center in establishing new businesses or enhancing existing businesses or seeking information on business opportunities for veterans.

Compatibility of the Routine Uses:

The Privacy Act permits disclosure of information about individuals without their consent for a routine use when the information will be used for a purpose that is compatible with the purpose for which the information is collected. In all of the routine use disclosures described above, either the recipient of the information will use the information in connection with a matter relating to one of VA's programs; to provide a benefit to VA; or because disclosure is required by law.

Storage:

The EVIC will operate on equipment located at VA's Center for Veterans Enterprise located in Washington, DC. Data backups will reside on appropriate media according to normal system back-up plans recommended by the manufacturer. The system will be managed by the Center for Veterans Enterprise in VA Headquarters, Washington, DC.

Records may be retrieved by calling telephone number, date, name, and other data given by the caller that is stored in the database.

The system and all files will be physically located in a locked room within CVE offices. Access to the building is controlled by access card during non-duty hours and by guard service during duty hours. Access to CVE offices is via a receptionist during duty hours and by physical key entry during non-duty hours.

Access to the system is via user-id/password restricted to authorized administrators only. Overall policy, within VA, regarding issuance of user-ids and passwords is formulated in VA by the Office of Information and Technology, Washington, DC.

Records will be maintained and disposed of in accordance with the records disposal authority approved by the Archivist of the United States, the National Archives and Records Administration, and published in Agency Records Control Schedules.

Deputy Director, Center for Veterans Enterprise (00VE), 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals seeking access to records about themselves contained in this system of records may access the records via the Internet, or submit a written request to the system manager.

An individual who wishes to contest records maintained under his or her name or other personal identifier may write or call the system manager. VA's rules for accessing records and contesting the contents and appealing initial agency determinations are published in regulations set forth in the Code of Federal Regulations. See 38 CFR 1.577, 1.578.

Records contained in EVIC will be created from information provided by persons voluntarily contacting the Center for Veterans Enterprise and by caller-id information supplied via the local telephone carrier.

One location for electronic and paper records, following VA-approved procedures, is in the Office of the Director, Data Development and Analysis Service, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. Additionally, electronic records are also placed on the Department of Veterans Affairs' (VA's) secured server which is housed at VA's Austin Automation Center, 1615 Woodward St., Austin, TX 78772. Records necessary for a contractor to perform under a VA-approved contract are located at the respective contractor's facility.

Veterans identified by DoD or another government agency as having been exposed to any type of chemical (including psycho-chemical) and biological agents during active duty.

The records include personal identifiers, residential and professional contact data, population demographics, military service-related data, financial-related data, claims processing codes and information, and other VA and non-VA Federal benefit information. Additionally, some records may contain DoD health care-related data or VHA-originated health care information.

Title 38, U.S.C 527.

To measure and evaluate on a continuing basis all programs authorized under title 38, U.S.C., including analysis and review of policy and planning issues affecting VA programs, in order to support legislative, regulatory and policy recommendations, initiatives and decisions affecting VA programs and activities.

To the extent that records contained in the system include information protected by Title 45, Code of Federal Regulations (CFR) Parts 160 and 164 (i.e., individually identifiable health information) and title 38, U.S.C. 7332 (i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus), that information cannot be disclosed under a routine use unless there is also specific statutory authority in title 38, U.S.C. 7332 and regulatory authority in Title 45, CFR Parts 160 and 164 permitting disclosure.

1. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

2. Any disclosure from the system of records may be made to the National Archives and Records Administration (NARA) in records management inspections under title 44, U.S.C.

3. Any system records may be disclosed to a Federal agency for the conduct of research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and OPP has determined prior to the disclosure that OPP data handling requirements are satisfied. OPP may disclose limited individual identification information to another Federal agency for the purpose of matching and acquiring information held by that agency for OPP to use for the purposes stated for this system of records.

4. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

5. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

6. Any system records may be disclosed to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement for the performance of the services identified in the contract or agreement. The person performing the agreement or contract (or employees of the person) also may disclose records covered by the contract or agreement to any secondary entity or individual to perform an activity necessary to provide to VA the service identified in the contract or agreement as permitted under the contract or agreement.

7. VA may, on its own initiative, disclose information when VA reasonably believes that there may have been a data breach with respect to information in the system such that the confidentiality or integrity of information in the system of records may have been compromised to such agencies, entities, and persons who are reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed data breach and prevent, minimize, or remedy such harm, including conduct of any risk analysis, or provision of credit protection services as provided in title 38, U.S.C. 5724.

8. Disclosure of information, excluding names and address (unless furnished by the requestor) for research purposes determined to be necessary and proper, may be made to epidemiological and other research facilities approved by the Under Secretary for Health.

Disclosure to consumer reporting agencies:

VA will not disclose information to consumer reporting agencies.

Storage:

OPP's secured records are maintained electronically or remain in textual form. All portable storage devices and media are kept in a safe when not in immediate use. The devices and other media are located in a combination-locked safe which is secured inside a key-accessed room at the U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. Other electronic data are placed on VA's segregated server which is housed at VA's Austin Automation Center, 615 Woodward St., Austin, TX 78772. Information stored on paper is kept locked in file cabinets when not in immediate use. Databases are temporarily placed on a secured server inside a restricted network area for data match purposes only. Information that resides on a segregated server is kept behind cipher locked doors with limited access. Requestors of OPP stored health information within VA, or from external individuals, contractors, organizations, and/or agencies with whom VA has a contract or agreement, must provide an equivalent level of security protection and comply with all applicable VA policies and procedures for storage and transmission as codified in VA directives such as but not limited to VA Directive 6504.

OPP's records may be retrieved by using a social security number, military service number, VA claim or file number, non-VA Federal benefit identifiers, and other personal identifiers.

This list of safeguards furnished in this system of records is a general statement of measures taken to protect data in this system of records and is not an exclusive list of measures taken. Other policies and protections apply. For example, HIPAA guidelines for protecting health information will be followed by adopting health-care-industry best practices in order to provide adequate safeguards. Further, VA policy directives that specify the standards that will be applied to protect information will be reviewed by VA staff and contractors through mandatory data privacy and security training annually.

All VA offices are protected from unauthorized access by security personnel seven days a week. Entrances and exits are monitored by security cameras and protected by an alarm system. All VA staff and visitors are required to either have a VA-issued employment identification card or a temporary visitor identification badge. All work stations are secured during daytime and evening hours.

Electronic data located in Washington, DC, are stored in a combination-key-locked safe which is secured inside a limited-access room. Authorized employee access to the limited-access room and the safe is based upon strict business needs as determined by the Assistant Secretary for Policy and Planning. Textual data are stored in key-locked cabinets inside secured rooms. Access to the server in Austin, TX, is generally limited by appropriate locking devices and restricted to authorized VA personnel.

Access to health information provided by VHA pursuant to a Business Associate Agreement (BAA) is restricted to those OPP employees and contractors who have a need for the information in the performance of their official duties related to the terms of the BAA. As a general rule, full sets of health care information are not provided for use unless authorized by the Assistant Secretary for Policy and Planning. File extracts provided for specific official uses will be limited to the minimum necessary records and contain only the information fields needed for the analysis. Data used for analyses will have individual identifying characteristics removed whenever possible.

Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Health information files containing unique identifiers such as social security numbers are encrypted to NIST verified FIPS 140ndash;2 standard or higher for storage, transport, or transmission. All files stored or transmitted on laptops, workstations, or data storage devices are encrypted. Files are kept encrypted at all times except when data are in immediate use. These methods are applied in accordance with HIPAA Privacy and Security regulations.

All data requests must be received in writing, vetted through a review board, concurred on by the Assistant Secretary for Policy and Planning, and released under the auspices of a signed data use agreement. File extracts provided for specific official uses will be limited to contain only the information fields needed for the analysis. Data used for analyses will have individual identifying characteristics removed or encrypted whenever possible. Unencrypted sensitive variables will only be used for analysis as a last resort.

In the event of a contract or special project, VA may secure the services of contractors and/or subcontractors. In such cases, VA will maximize the utilization of encrypted data when possible. Contractors and their subcontractors are required to maintain the same level of security as VA staff for health care information that has been disclosed to them. Any data disclosed to a contractor or subcontractor to perform authorized analyses requires the use of Data Use Agreements (DUAs), Non- Disclosure Statements and BAAs to protect health information. Unless explicitly authorized in writing by VA, sensitive or protected data made available to the contractor and subcontractors shall not be divulged or made known in any manner to other parties or to any person. Other Federal or State agencies requesting health care information need to provide DUAs to protect data.

Records are destroyed or deleted when no longer needed for administrative, legal, audit, or other operational purposes in accordance with applicable, approved records disposition authority.

If the Archivist has not approved disposition authority for any records covered by the system notice, the System Manager will take immediate action to obtain an approved records disposition authority in accordance with VA Handbook 6300.1, Records Management Procedures. The records may not be destroyed until VA obtains an approved records disposition authority.

OPP's system manager is the Director, Data Development and Analysis Service, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the Director, Office of Data Development and Analysis, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. Such requests must contain a reasonable description of the records requested. In addition, identification of the individual requesting the information will be required in the written request and will minimally consist of the requester's name, signature, social security number, address, telephone number, and return address.

Individuals seeking information regarding access to and contesting of records maintained by OPP under his or her name or other personal identifier may write the System Manager named above and specify the information being requested or contested.

(See Notification procedure above.)

Information is obtained from VHA patient medical records, various automated record systems providing clinical and managerial support to VA health care facilities, records from VA's Veterans Benefits Administration, DoD, and other Federal agencies.

Veterans Health Administration (VHA) local facilities, VA National Data Centers, and VA Health Data Repository (HDR) located at the VA National Data Centers. Address locations for VA facilities are listed in VA Appendix 1 of the biennial publications of the VA systems of records.

Individuals covered encompass: (1) All individuals who successfully register for a My HealtheVet account and whose identity has been verified; (2) Representatives of the above individuals who have been provided grantee or delegate access to My HealtheVet including, but not limited to, family members, friends, or VA and non-VA health care providers; (3) VA health care providers and certain administrative staff; (4) VHA Information Technology (IT) staff and/or their approved contractors who may need to enter identifying, administrative information into the system to initiate, support and maintain electronic services for My HealtheVet participants; and (5) VA researchers fulfilling VA required authorization procedures.

The records include personally identifiable information, such as an individual's full name; My HealtheVet User Identifier (ID); date of birth; social security number; e-mail address; telephone number; mother's maiden name; ZIP code; place and date of registration for My HealtheVet; delegate and grantee user IDs associated with My HealtheVet accounts; level of access to My HealtheVet electronic services; date and type of transaction; web analytics for the purpose of monitoring site usage, patient internal control number (ICN); and other administrative data needed for My HealtheVet roles and services.

Title 38, United States Code, § 501.

The information in the My HealtheVet Administrative Records is needed to operate the My HealtheVet program, including but not limited to registration and verification of the Veteran's identity or to register and authenticate those who have legal authority to participate in lieu of the Veteran, to assign and verify administrators of the My HealtheVet portal, to retrieve the Veteran's information to perform specific functions, allow access to specific information and provide other associated My HealtheVet electronic services in current and future applications of the My HealtheVet program. The administrative information may also be used to create administrative business reports for system operators and VA managers who are responsible for ensuring that the My Healthe Vet system is meeting performance expectations, and is in compliance with applicable Federal laws and regulations. Administrative information may also be used for evaluation to support program improvement, including VA approved research studies.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Disclosure of information in this system of records may be made to private or public sector organizations, individuals, agencies, etc., with whom VA has a contract or agreement, including subcontractors, in order to administer the My HealtheVet program, or perform other such services as VA deems appropriate and practical for the purposes of administering VA laws.

2. VA may disclose on its own initiative any information in the system, except the names and home addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

3. Disclosure may be made to National Archives and Records Administration (NARA) and the General Services Administration (GSA) to support its records management inspections responsibilities and its role as Archivist of the United States under authority of title 44 United States Code (U.S.C).

4. Any information in this system of records may be disclosed to the United States Department of Justice or United States Attorneys in order to prosecute or defend litigation involving or pertaining to the United States, or in which the United States has an interest.

5. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. Disclosure of information may be made when (1) it is suspected or confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is to agencies, entities, and persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosure by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

8. Disclosure of information may be made to VA to approved researchers to enhance, advance and promote both the function and the content of the My HealtheVet application.

Storage:

These administrative records are maintained on paper and electronic media, including hard drive disks, which are backed up to tape at regular intervals.

Records may be retrieved by an individual's name, user ID, date of registration for My HealtheVet electronic services, zip code, the VA assigned ICN, date of birth and/or social security number, if provided.

1. Access to and use of the My HealtheVet Administrative Records are limited to those persons whose official duties require such access; VA has established security procedures to ensure that access is appropriately limited. Information security officers and system data stewards review and authorize data access requests. VA regulates data access with security software that authenticates My HealtheVet administrative users and requires individually unique codes and passwords. VA provides information security training to all staff and instructs staff on the responsibility each person has for safeguarding data confidentiality. VA regularly updates security standards and procedures that are applied to systems and individuals supporting this program.

2. Physical access to computer rooms housing the My HealtheVet Administrative Records is restricted to authorized staff and protected by a variety of security devices. Unauthorized employees, contractors, and other staff are not allowed in computer rooms. The Federal Protective Service or other security personnel provide physical security for the buildings housing computer systems and data centers.

3. Data transmissions between operational systems and My HealtheVet Administrative Records maintained by this system of records are protected by telecommunications software and hardware as prescribed by VA standards and practices. This includes firewalls, encryption, and other security measures necessary to safeguard data as it travels across the VA-Wide Area Network.

4. Copies of back-up computer files are maintained at secure off-site locations.

Records are maintained and disposed of in accordance with the records disposition authority approved by the Archivist of the United States. Records from this system that are needed for audit purposes will be disposed of 6 years after a user's account becomes inactive. Routine records will be disposed of when the agency determines they are no longer needed for administrative, legal, audit, or other operational purposes. These retention and disposal statements are pursuant to NARA General Records Schedules GRS 20, item 1c and GRS 24, item 6a.

Official responsible for policies and procedures: Deputy Chief Information Officer for Health (19), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Officials maintaining this system of records: The local VA facility (Address locations for VA facilities are listed in VA Appendix 1 of the biennial publications of the VA systems of records) and the Chief, Technical Infrastructure Division (31), Austin Automation Center, 1615 Woodward Street, Austin, Texas 78772.

Individuals who wish to determine whether a record is being maintained under their name in this system or wish to determine the contents of such records have two options:

1. Submit a written request or apply in person to the VA facility where the records are located. VA facility location information can be found in the Facilities Locator section of VA's Web site at http://www.va.gov; or

2. Submit a written request or apply in person to the Chief of the Technical Infrastructure Division (31), Austin Automation Center, 1615 Woodward Street, Austin, Texas 78772.

Inquiries should include the person's full name, user ID, date of birth and return address.

Individuals seeking information regarding access to and contesting of records in this system may write or call their local VA facility and/or the Chief of the Technical Infrastructure Division (31), Austin Automation Center, 1615 Woodward Street, Austin, Texas 78772, or call (512) 326- 6780 to reach the VA Austin Automation Center Help Desk speak with the Chief of the Technical Infrastructure Division.

(See Record Access Procedures above).

The sources of information for this system of records include the individuals covered by this notice and an additional contributor, as listed below:

(1) All individuals who successfully register for a My HealtheVet account;

(2) Representatives of the above individuals who have been provided access to the private health space by the Veteran user, including but not limited to, family members, friends, or VA and non-VA health care providers;

(3) VA health care providers;

(4) VHA IT staff and/or their contractors and subcontractors who may need to enter information into the system to initiate, support and maintain My HealtheVet electronic services for My HealtheVet users;

(5) VistA systems and

(6) VA researchers fulfilling VA required authorization procedures (see VHA Handbook 1200.01 http://www1.va.gov/vhapublications/ViewPublication.asp?pub_ID=2038).

This system of records is located in the finance/fiscal office of the local installations of the Department, the Financial Services Center, Austin, TX, and VA Central Office, Washington, DC. Records necessary for a contractor to perform under a contract are located at the contractor's facility.

Individuals covered by the system are current VA employees who have their own Government assigned charge card, or who have had a charge card.

Records include name, work and home addresses, social security number, date of birth, employment information, work and home telephone numbers, information needed for identification verification, charge card applications, charge card statements, terms and conditions for use of the charge card, and monthly report from contractor(s) showing charges to individual account numbers, balances, and other types of account analysis.

Federal Acquisition Regulation (FAR), Part 13, 48 CFR part 13, and Public Law 93-579, section 7(b).

To establish and maintain a system for operating, controlling, and managing the purchase credit card program involving commercial purchases by authorized VA employees.

System information may be accessed and used by authorized VA employees or contractors to conduct duties associated with the management and operation of the purchase credit card program.

Information from this system also may be disclosed as a routine use for the following purposes:

(1) The record of an individual who is covered by this system may be disclosed to a member of Congress, or a staff person acting for the member, when the member or staff person requests the record on behalf of and at the written request of the individual.

(2) Disclosure may be made to the National Archives and Records Administration (NARA) in records management inspections conducted under authority of Title 44 U.S.C.

(3) VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

(4) Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

(5) VA may disclose on its own initiative any information in this system, except the names and addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependants to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

(6) Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

(7) Any information in this system of records concerning a delinquent debt may be disclosed to the Secretary of the Treasury, or to any designated Government disbursing official, for the purpose of conducting administrative offset of any eligible Federal payments, under the authority set forth in 31 U.S.C. 3716. Tax refund and Federal salary payments may be included in those Federal payments eligible for administrative offset.

(8) Any information in this system of records concerning a delinquent debt may be disclosed to the Secretary of the Treasury for appropriate collection or termination action, including the transfer of the indebtedness for collection or termination, in accordance with 31 U.S.C. 3711(g)(4), to a debt collection center designated by the Secretary of the Treasury, to a private collection agency, or to the Department of Justice. The Secretary of the Treasury, through the Department of the Treasury, a designated debt collection center, a private collection agency, or the Department of Justice, may take appropriate action on a debt in accordance with the existing laws under which the debt arose.

(9) Records from this system of records may be disclosed to officials of labor organizations recognized under 5 U.S.C. chapter 71, when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

(10) VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (a) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (b) VA has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputation of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (c) the disclosure to such agencies, entities, or persons whom VA determines to be reasonably necessary to assist or carry out VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

(11) VA may disclose information from this system to the Merit Systems Protection Board (MSPB), or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5 U.S.C. 1205 and 1206, or as authorized by law.

(12) VA may disclose information from this system to the Federal Labor Relations Authority (FLRA), including its General Counsel, related to the establishment of jurisdiction, investigation, and resolution of allegations of unfair labor practices, or in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised. Information may also be disclosed to the FLRA in order for it to address matters properly before the Federal Services Impasses Panel, to investigate representation petitions, and to conduct or supervise representation elections.

(13) VA may disclose information from this system to the Equal Employment Opportunity Commission (EEOC) when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or other functions of the Commission as authorized by law or regulation.

Disclosure to consumer reporting agencies:

Pursuant to 5 U.S.C. 552a(b)(12), VA may disclose records from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act 15 U.S.C. 1681a(f) or the Federal Claims Collection Act of 1966 31 U.S.C. 3701(a)(3). The disclosure is limited to information necessary to establish the identity of the individual, including name, address, and taxpayer identification number (Social Security number), the amount, status and history of the claim; and the agency or program under which the claim arose for the sole purpose of allowing the consumer reporting agency to prepare a commercial credit report. Title 31 U.S.C. 3711(e) governs the release of names and addresses of any person to consumer reporting agencies under certain circumstances.

Storage:

Paper documents and electronic storage media.

These records may be retrieved using various combinations of name or identification number (credit card number) of the individual on whom the records are maintained.

This list of safeguards furnished in this System of Record is not an exclusive list of measures that has been, or will be, taken to protect individually-identifiable information.

The Financial Services Center will maintain the data in compliance with applicable VA security policy directives that specify the standards that will be applied to protect sensitive personal information. Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST).

Access to these records is restricted to authorized VA employees, contractors, or subcontractors who have been cleared to work by the VA Office of Security and Law Enforcement, on a "need to know" basis. They are required to take annual VA data privacy and security training.

Offices where these records are maintained are locked after working hours and are protected from outside access by the Federal Protective Service, other security officers, and alarm systems. Access to computerized records is restricted to authorized VA employees, contractors, or subcontractors by means of unique user identification and passwords.

Records are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States. In accordance with General Records Schedule 1.1, Item #10, destroy 6 years after final payment or cancellation, but longer retention is authorized if required for business use.

Deputy Assistant Secretary for Finance (047), VA Central Office, Washington, DC 20420.

Individuals seeking information concerning the existence of a record pertaining to them must submit a written request to the VA station where the records are maintained. Such request must contain a reasonable description of the records requested. In addition, identification of the individual requesting the information will be required in the written request and will consist of the requester's name, signature, and address, at a minimum.

See "Notification Procedure" above.

See "Notification Procedure" above.

Information received from individuals and the private credit card contractor.

Records are maintained at the Center for Veterans Enterprise's office in VA Headquarters, Washington, DC. VA's Information Services Center, 1335 East West Highway, Silver Spring, Maryland 20910, maintains the computerized database and Web site.

The system of records will cover programs of Federal, State, and local governments, and private sector organizations and companies offering business or business assistance services to veteran entrepreneurs that wish to be a part of the information clearinghouse.

The records will contain data on the assistance programs of Federal, state, and local governments, and of the private sector, including information on office locations, key personnel, telephone numbers, mailing and e-mail addresses, and contracting and subcontracting opportunities available to veteran entrepreneurs. The data will come from both governments and private sector organizations who have contacted the Center for Veterans Enterprise, registered their products or services online in the database, or have been extracted from e-government databases to which the companies have voluntarily submitted the data. The records may include business addresses and other contact information, information concerning products or services offered, and information pertaining to the business, such as federal contracts, and certifications.

Public Law 106-50, as amended.

1. VA personnel will access the system to find resources available to veteran entrepreneurs and to register those resources that they provide. They may also utilize the database to counsel and assist veteran entrepreneurs in starting a small business or expanding an existing small business.

2. The Center for Veterans Enterprise will use the records and reports derived from the database to manage their responsibilities under the Veterans Entrepreneurship and Small Business Development Act of 1999.

1. Federal, State, and local government personnel will access the system to find resources available to veteran entrepreneurs and to register those resources that they provide. They may also utilize the database to counsel and assist veteran entrepreneurs in starting a small business or expanding an existing small business.

2. The general public, including private sector companies and corporate entities, will access the system, via Internet, to review the information, register those resources that they provide, and to locate potential resources for veteran entrepreneurs.

Compatibility of the proposed routine uses:

The Privacy Act permits disclosure of information about individuals without their consent for a routine use when the information will be used for a purpose that is compatible with the purpose for which the information is collected. In all of the routine use disclosures described above, the recipient of the information will use the information in connection with a matter relating to one of VA's programs.

Storage:

The VetBiz APP will be stored in an automated, computerized database. The system will operate on servers located at VA's Information Services Center, 1335 East West Highway, Silver Spring, Maryland 20910. Data backups will reside on appropriate media according to normal system backup plans. The system will be managed by the Center for Veterans Enterprise in VA Headquarters, Washington, DC.

Automated records may be retrieved by:

1. Organization Name.

2. Contact Name.

3. E-mail Address.

4. Web Address.

5. Area Code and Phone Number.

6. Zip Code.

7. County Code (NaCO).

8. State(s).

9. Type of Organization: Government (Federal; State; County; Municipal; Other); Nongovernmental Organization; Commercial.

10. Type of Assistance: (paperwork packaging; grants/loans; procurement assistance; management/technical assistance; mentoring/incubator; contract opportunities; other).

11. Service Area Limits (if any).

12. Service limited to Veterans.

13. Fees.

14. Organization Funding Limits: (none; term--funding expires on a specific date).

15. Year Established.

16. Full-time/part-time.

17. Days and Hours of Service.

18. Other Professional Staff Available.

Read access to the system is via Internet access. VA Information Service Center and CVE personnel will have access to the system via VA Intranet and local connections for management and maintenance purposes and tasks.

Records will be maintained and disposed of in accordance with the records disposal authority approved by the Archivist of the United States, the National Archives and Records Administration, and published in Agency Records Control Schedule No. 20, Electronic Records.

Deputy Director, Center for Veterans Enterprise (00VE), 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals wishing to inquire whether this system of records contains information about themselves should contact the Deputy Director, Center for Veterans Enterprise (00VE), 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals seeking access to records about themselves contained in this system of records may access the records via the Internet, or submit a written request to the system manager.

An individual who wishes to contest records maintained under his or her name or other personal identifier may write or call the system manager. VA's rules for accessing records and contesting contents and appealing initial agency determinations are published in regulations set forth in the Code of Federal Regulations. See 38 CFR 1.577, 1.578.

The information in this system of records is obtained from the following sources:

a. Information voluntarily submitted by Federal, State, and local governments;

b. Information voluntarily submitted by the private sector; and

c. Information extracted from other business and resource databases.

Records are maintained at each Department of Veterans Affairs (VA) medical center library (see Appendix A) and VA Central Office Library at 810 Vermont Avenue, NW., Washington, DC 20420.

The records may include information concerning all present and former VA employees volunteers, students, contractors, regardless of whether they check out materials or use tables of content routing and interlibrary loan services, but only those veterans and others receiving care at the facility who check out materials.

The records may include information related to:

1. Items checked out and in use (library books, journals, audiovisuals);

2. Library public access computer work stations used by VA staff and patients;

3. Name, last four digits of the social security number, email address, other assigned identifier, work location information, such as service, and extension for employees, students, and ward location for patients or other assigned ID.

Title 38, United States Code, section 501.

The records and information may be used to track library materials checked out to library users and those materials that are overdue, materials borrowed from other libraries for library users, to track and recover costs of lost library materials to determine library materials to purchase and/or replace based on usage, to track users of library public access computers, and to compile management and statistical reports. Cost is recovered by Fiscal Service through Bills of Collection. If Bills of Collection are not paid, Fiscal Service garnishes checks, including Federal tax refunds, or turns the matter over to collection agencies.

1. Information from this system of records may be disclosed to a congressional office from the record of an individual in response to an inquiry from the congressional office made on behalf of that individual.

2. Disclosure may be made to the National Archives and Records Administration (NARA) for records management inspections under authority of Title 44 United States Code.

3. Disclosure may be at VA's initiative made to the appropriate Federal, State, or local agency responsible for investigating, prosecuting, enforcing, or implementing a statute, rule, regulation, or order, where the agency becomes aware of an indication of a violation or potential violation of civil or criminal law or regulation.

4. A record from this system of records may be disclosed to a Federal agency, in response to its request, in connection with the hiring or retention of an employee, the issuance of a security clearance, the conducting of a security or suitability investigation of an individual, the reporting of an investigation, the letting of a grant or other benefit, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.

5. Records from this system of records may be disclosed in a proceeding before a court, adjudicative body, or other administrative body when the Agency, or any Agency component or employee (in his or her official capacity as a VA employee), is a party to litigation; when the Agency determines that litigation is likely to affect the Agency, any of its components or employees, or the United States has an interest in the litigation, and such records are deemed to be relevant and necessary to the legal proceedings; provided that the disclosure is compatible with the purpose for which the records were collected.

6. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, etc., with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

7. Disclosure may be made to officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

8. Disclosure may be made to officials of the Merit Systems Protection Board, including the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

9. Disclosure may be made to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discrimination.

10. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

11. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

12. To disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

13. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

14. VA may disclose information from this system of records relevant to a claim of a veteran or beneficiary, such as the name, address, the basis and nature of a claim, amount of benefit payment information, medical information, and military service and active duty separation information, at the request of the claimant to accredited service organizations, VA approved claim agents, and attorneys acting under a declaration of representation, so that these individuals can aid claimants in the preparation, presentation, and prosecution of claims under the laws administered by VA. The name and address of a claimant will not, however, be disclosed to these individuals under this routine use if the claimant has not requested the assistance of an accredited service organization, claims agent or an attorney. VA must be able to disclose this information to accredited service organizations, VA approved claim agents, and attorneys representing veterans so they can assist veterans by preparing, presenting, and prosecuting claims under the laws administered by VA.

15. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

Storage:

Records are maintained in electronic and/or paper format.

Records are retrieved by name, last four of the social security number and/or other assigned identifiers of the individuals on whom they are maintained.

1. Access to VA libraries is not restricted to VA employees. Generally the offices housing the files for storage of records are attended by staff who maintain the files during normal duty hours and after normal duty hours facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to files is controlled by the employees who maintain the files. Access to computerized records is controlled by the use of security codes known only to authorized users.

The VALNET records may be disposed of in accordance with the records retention standards authorized by the National Archives and Records Administration General Records Schedule 14, item 6, and published in the Veterans Health Administration Records Control Schedule 10-1, Item XLV.

Official responsible for policies and procedures; Network Librarian, VHA Library Program Office (19E), Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Officials maintaining the system; Director at the facility where the individuals were associated.

Individuals wishing to inquire whether this system of records contains information about themselves should contact the designated individual at the VA facility where the records are maintained. Individuals must furnish the following information in order for their records to be located and identified: a. full name, b. dates of employment, service, hospital stay, or use of library, c. description of information being sought and, d. return address.

Individuals seeking information regarding access to and contesting records in the system may write, call, or visit the VA facility location where they are or were employed or made contact.

(See Record Access Procedures above.)

Information in this system of records is provided by VA employees, volunteers, students, contractors, veterans, others receiving care at the facility and automated computer systems such as Integrated Library Systems (ILS) which are used to track items which have been checked out of the library.

Appendix A--List of VA Libraries

Chief, Library Service (142D), VA MROC, 2925 DeBarr Road, Anchorage, AK 99508-2989.

Chief, Library Service (142D), VA Medical Center, 3701 Loop Road, East Tuscaloosa, AL 35404-5088.

Chief, Library Service (142D), VA Medical Center, 100 North College Avenue, Fayetteville, AR 72703-1999.

Chief, Lng Resources (142D), VA Medical Center (2), 4300 W. 7th St., Little Rock, AR 72205- 5484.

Chief, Library Service (142D), VA Medical Center, 650 East Indian School Road, Phoenix, AZ 85012 -1892.

Library Manager (154), VA Medical Center, 500 Highway 89 North, Prescott, AZ 86313.

Chief, Library Service (7-142D),VA Medical Center, 3601 South 6th Street, Tucson, AZ 85723 -0001.

Chief, Lng Resources (162D), VA Medical Center, 2615 East Clinton Avenue, Fresno, CA 93703-2286.

Chief, Library Service (142D), VA Medical Center, 11201 Benton Street, Loma Linda, CA 92357-1000.

Chief, Library Service (142D), VA Medical Center, 5901 East 7th Street, Long Beach, CA 90822-5201.

Chief, Library Service (W142D), VA Greater LA Healthcare Sys, Bldg 500, Room 6249, 11301 Wilshire Boulevard, Los Angeles, CA 90073.

Chief, Library Service (142D), VA No. California HCS, 10535 Hospital Way, Mather, CA 95655.

Chief, Med. Information (142D), VA Medical Center, 3801 Miranda Avenue, Palo Alto, CA 94304-1290.

Chief, Library Service (142D), VA Medical Center, 3350 La Jolla Village Drive, San Diego, CA 92161-4041.

Chief, Lng Resources (142D), VA Medical Center, 4150 Clement Street, San Francisco, CA 94121-1598.

Chief, Library Service (142D), VA Greater LA Healthcare System, 16111 Plummer Street, Sepulveda, CA 91343-2036.

Chief, Medical Library (142D), VA Medical Center, 1055 Clermont Street, Denver, CO 80220-3808.

Chief, Library Service (142D), VA Medical Center, 2121 North Avenue, Grand Junction, CO 81501-6499.

Chief, Library Service (142D), VA Medical Center, 950 Campbell Avenue, West Haven, CT 06516.

Chief, Library Service (142D), VA Medical Center, 50 Irving Street, NW., Washington, DC 20422.

Jan Julian (19E) VA Headquarters, 810 Vermont Avenue, NW., Washington, DC 20420-0002.

Chief, Library Service (142D), VA Medical Center, 1601 Kirkwood Highway, Wilmington, DE 19805.

Chief, Library Service (142D), VA Medical Center, P.O. Box 5005, Bay Pines, FL 33744.

Chief, Library Service (142D), VA Medical Center, 1601 SW Archer Road, Gainesville, FL 32608-1197.

Library Service (142D), VA Medical Center, 619 South Marion Street, Lake City, FL 32025.

Chief, Library Service (142D), VA Health Care Center, 5201 Raymond Street, Orlando, FL 32803.

Chief, Library Service (142D), VA Medical Center, 13000 Bruce B. Downs Blvd., Tampa, FL 33612 -4745.

Chief, EES/Library (142D), VA Medical Center, 7305 N. Military Trail, West Palm Beach, FL 33410 -6400.

Chief, Library Service (142D), VA Medical Center-Atlanta, 1670 Clairmont Road, Decatur, GA 30033.

Chief, Library Department (123), VA Medical Center, 1 Freedom Way, Augusta, GA 30904-6285.

Associate Chief of Staff for Education (11E), Spark M. Matsunaga VAMC, 459 Patterson Road, Honolulu, HI 96819-1522.

Chief, Library Service (142D), VA Medical Center, 1515 W. Pleasant Street, Knoxville, IA 50138-3399.

Chief, Library Service (142D), VA Medical Center, 500 West Fort Street, Boise, ID 83702-4598.

Chief, Library Service (142D), Jesse Brown VAMC, 820 S. Damen Avenue, Chicago, IL 60612-3740.

Chief, Library Service (142D), VA Medical Center, 1900 East Main Street, Danville, IL 61832-5198.

Chief, Library Service (142D), VA Medical Center, P.O. Box 5000 (142D), Hines, IL 60141-5142.

Chief, Library Service (142D), VA Medical Center, 2401 West Main Street, Marion, IL 62959-1188.

Chief, Library Service (142D), VA Medical Center, 3001 N. Green Bay Road, North Chicago, IL 60064-3096.

Chief, Library Service (142D), VA Medical Center, 1481 West 10th Street, Indianapolis, IN 46202-2803.

Chief, Library Section (142D), VA Medical Center, 1700 East 38th Street, Marion, IN 46953-4589.

Chief, Library Section (142D), VA Medical Center, 2200 Gage Boulevard, Topeka, KS 66622-0001.

Chief, Library Service (11PM-4), VA Medical Center, 5500 East Kellogg, Wichita, KS 67218-1698.

Chief, Library Section (141D-CDD), VA Medical Center, 2250 Leestown Road, Lexington, KY 40511-1093.

Chief, Library Service (142D), VA Medical Center, 800 Zorn Avenue, Louisville, KY 40206-1499.

Chief, Library Service (142D), VA Medical Center, P.O. Box 69004, Alexandria, LA 71306-9004.

Learning Resources (AD35), VA Medical Center, 1601 Perdido Street, New Orleans, LA 70112.

Chief, Library Section (142D), VA Medical Center, 510 East Stoner Avenue, Shreveport, LA 71101-4295.

Chief, Lng Resources (142D), VA MROC 1 VA Center, Togus, ME 04330-6795.

Chief, Library Service (BT/14/LIB), VA Maryland Healthcare System, 10 North Greene Street, Baltimore, MD 21201-1524.

Chief, Library Service (142D), VA Medical Center, 200 Springs Road, Bedford, MA 01730.

Chief, Library Service (142D), VA Medical Center, 421 North Main Street, Leeds, MA 01053-9714.

Chief, Library Service (142D), VA Medical Center, 1400 VFW Parkway, West Roxbury, MA 02132.

Chief, Library Service (11L), VA Ann Arbor Healthcare System, 2215 Fuller Road, Ann Arbor, MI 48105.

Chief, Library Section (142D), VA Medical Center, 5500 Armstrong Road, Battle Creek, MI 49016-1099.

Chief, Library Service (11R-1), VA Medical Center, 4646 John R. St., Detroit, MI 48201-1916.

Chief, Library Service (142D), VA Medical Center, 325 H Street, Iron Mountain, MI 49801- 372.

Chief, Library Service (142D), VA Medical Center, 1500 Weiss Street, Saginaw, MI 48602.

Chief, Library Service (142D), VA Medical Center, One Veterans Drive, Minneapolis, MN 55417-2236.

Chief, Library Service (ED-142D), VA Medical Center, 4801 Eighth Street, North St. Cloud, MN 56303-2099.

Chief, Info. Mgt Service (19CI), VA Medical Center, 400 Veterans Avenue, Biloxi, MS 39531-2410.

Chief, Library Service (142D), VA Medical Center, 1500 East Woodrow Wilson, Jackson, MS 39216-5199.

Chief, Library Service (IM/LR), VA Medical Center, 800 Hospital Drive, Columbia, MO 65201-5275.

Chief, Library Service (142D), VA Medical Center, 4801 Linwood Boulevard, Kansas City, MO 64128-2295.

Chief, Lng Resources Center (142D), VA Medical Center, 1500 N. Westwood Boulevard, Poplar Bluff, MO 63901-3393.

Chief, Library Service (142D-JB), VA Medical Center (2), #1 Jefferson Barracks Drive, St. Louis, MO 63125-4199.

Chief, Library Service (142D), VA Medical Center, P.O. Box 167, 436 Williams St., Fort Harrison, MT 59636.

Chief, Library Service (142D), VA Medical Center, 1100 Tunnel Road, Asheville, NC 28805- 2087.

Chief, Library Service (142D), VA Medical Center, 508 Fulton Street, Durham, NC 27705-3875.

Chief, Library Service (142D), VA Medical Center, 2300 Ramsey Street, Fayetteville, NC 28301-3899.

Chief, Library Service (142D), VA Medical Center, 1601 Brenner Avenue, Salisbury, NC 28144.

Chief, Library Service (142D), VA Medical Center, 2101 Elm Street, Fargo, ND 58102-2417.

Chief, Library Service (026), VA Medical Center, 4101 Woolworth Avenue, Omaha, NE 68105-1873.

Chief, Library Service (142D), VA Medical Center, 718 Smyth Road, Manchester, NH 03104- 4098.

Chief, Library Service (142D), VA Medical Center, 151 Knollcroft Road, Lyons, NJ 07939-5000.

Chief, Library Service (142D), VA Medical Center, 1501 San Pedro Drive, S.E., Albuquerque, NM 87108-5138.

Library 03-FES, VA Medical Center, 901 Rancho Lane, Suite 185, Room 1106, Las Vegas, NV 89106.

Chief, Lng Resources (142), VA Medical Center, 1000 Locust Street, Reno, NV 89520.

Chief, Library Service (142D), VA Medical Center, 113 Holland Avenue, Albany, NY 12208-3410.

Chief, Library Service (142D), VA Medical Center, 222 Richmond Avenue, Batavia, NY 14020-1288.

Chief, Library Service (142D), VA Medical Center, 76 Veterans Way, Bath, NY 14810.

Chief, Library Service (142D), VA Medical Center, 130 West Kingsbridge Road, Bronx, NY 10468.

Chief, Library Service (142D), VA Medical Center, 800 Poly Place, Brooklyn, NY 11209.

Chief, Library Service (142D), VA Medical Center, 3495 Bailey Avenue, Buffalo, NY 14215-1199.

Chief, Library Service (142D), VA Medical Center, 400 Fort Hill Avenue, Canandaigua, NY 14424-1188.

Chief, Library Service (142D), VA Medical Center, P.O. Box 100, Montrose, NY 10548.

Chief, Library Service (142D), VA Medical Center, 423 East 23rd Street, New York, NY 10010-5050.

Chief, Library Service (142D), VA Medical Center, 79 Middleville Road-Bldg 12, Northport, NY 11768-2290.

Medical Library (19L), Central Alabama Veterans Healthcare System, 2400 Hospital Road, Tuskegee, AL 36083.

Chief, Library Section (19D), VA Medical Center, 17273 State Route 104, Chillicothe, OH 45601.

Chief, Lng Resources (142), VA Medical Center, 3200 Vine Street, Cincinnati, OH 45220-2288.

Chief, Library Service 142D(B), VA Medical Center-Brecksville, Medical Library, 10000 Brecksville Road, Brecksville, OH 44141.

Chief, Library Service (142D), VA Outpatient Clinic, 543 Taylor Avenue, Columbus, OH 43203-1278.

Chief, Library Service (142D), VA Medical Center, 4100 West 3rd Street, Dayton, OH 45428.

Chief, Library Service (142D), VA Medical Center, 1011 Honor Heights Drive, Muskogee, OK 74401-1399.

Chief, Library Service (142D), VA Medical Center, 921 Northeast 13th Street, Oklahoma City, OK 73104-5028.

VA Medical Center (2 COPIES), ATTN: V6LIB, 1601 E 4th Plain Blvd., Vancouver, WA 98661.

Chief, Library Service (142D), VA Domiciliary, 8495 Crater Lake Highway, White City, OR 97503-1088.

Chief, Library Service (15-L), VA Medical Center, 2907 Pleasant Valley Blvd., Altoona, PA 16602-4377.

Chief, Library Service (142D), VA Medical Center, 325 New Castle Road, Butler, PA 16001-2480.

Chief, Library Service (142D), VA Medical Center, 1400 Black Horse Hill Road, Coatesville, PA 19320-2096.

Library Services (174M), Erie VA Medical Center, 135 E. 38th Street, Erie, PA 16504-1559.

Chief, Library Section (N13), VA Medical Center, 1700 S. Lincoln Avenue, Lebanon, PA 17042-7597.

Chief, Library Service (142D), VA Medical Center, 10 Calle Casia, San Juan, PR 00921-3201.

Chief, Library Service (142D), VA Medical Center, University & Woodland Avenues, Philadelphia, PA 19104-9020.

Chief, Library Section (05E), VA Medical Center, 1111 East End Boulevard, Wilkes-Barre, PA 18711-0026.

VISN 7 Library Mgr (IMSL-07-L)), WJB Dorn VA Medical Center, 6439 Garners Ferry Road, Columbia, SC 29209.

Chief, Library Service (142D), VA Medical Center, 830 Chalkstone Avenue, Providence, RI 02908-4799.

Chief, Lib & Lng Resources (142D), VA Medical Center, 109 Bee Street, Charleston, SC 29401-5799.

Chief, Lng Resources (142), VA Medical Center, Sydney & Lamont Sts., (Johnson City), Mountain Home, TN 37684-5001.

Chief, Medical Library (INFO-4), VA Medical Center, 113 Comanche Road, Fort Meade, SD 57741-1099.

Chief, Library Section (142D), VA Medical Center, 1030 Jefferson Avenue, Memphis, TN 38104-2193.

Chief, Library Section (142D), VA Medical Center, 300 Veterans Boulevard, Big Spring, TX 79720-5500.

Chief, Library Service (142D), VA Medical Center, 1310 24th Avenue, South, Nashville, TN 37212-2637.

Chief, Library Section (142D), VA Medical Center, 6010 Amarillo Blvd. West, Amarillo, TX 79106-1992.

Chief, Library Service (142D), VA Medical Center, 4500 South Lancaster Road, Dallas, TX 75216-7191.

Chief, Library Service (142D), VA Medical Center, 2002 Holcombe Blvd., Houston, TX 77030-4298.

Chief, Lib & Ed Resources (142D), VA Medical Center, 100 Emancipation Drive, Hampton, VA 23667-0001.

Chief, Library Service (14LIB-W), VA Central TX Vets Healtcare Sys, 4800 Memorial Drive, Waco, TX 76711-1397.

Chief, Library Service (142L), VA Medical Center, 500 Foothill Boulevard, Salt Lake City, UT 84148.

Chief, Library Service (142D), VA MROC, 215 North Main Street, White River Junction, VT 05009.

Chief, Library Service (142D), VA Medical Center, 1201 Broad Rock Blvd., Richmond, VA 23249-0001.

Chief, Library Service (142D), VA Medical Center, 1970 Roanoke Boulevard, Salem, VA 24153-6478.

Chief, Library Service (EDC/L), VA Medical Center, 77 Wainwright, Walla Walla, WA 99362.

Chief, Library Service (142D), VA Medical Center, 1660 S. Columbian Way, Seattle, WA 98108-1597.

Chief, Library Service (142D), VA Medical Center, North 4815 Assembly Street, Spokane, WA 99205-6197.

Chief, Lng Resources (142D), VA Medical Center, 500 East Veterans Street, Tomah, WI 54660-3100.

Chief, Library Section (142D), VA Medical Center, 2500 Overbrook Terrace, Madison, WI 53705-2286.

Chief, Library Service (142D), VA Medical Center, 5000 West National Avenue, Milwaukee, WI 53295-0001.

Chief, Lng Resources (142D), VA Medical Center, 1540 Spring Valley Drive, Huntington, WV 25704.

Chief, Library Service (142D), VA Medical Center, 200 Veterans Avenue, Beckley, WV 25801-6499.

Chief, Library Service (017L), VA Medical Center, One Medical Center Drive, Clarksburg, WV 26301.

Chief, Library Service (142D), VA Medical Center, 1898 Fort Road, Sheridan, WY 82801-8320.

Chief, Library Section (142D), VA Medical Center, 510 Butler Avenue, Martinsburg, WV 25401-0205.

Chief, Lib/Education (142D), VA Medical Center, 2360 East Pershing Blvd., Cheyenne, WY 82001-5356.

Chief, Medical Library (11L), VA Medical Center, 4101 S. 4th St. Trafficway, Leavenworth, KS 66048.

Chief, Library Service (142D), VA Maryland Healthcare System, Circle Drive, Perry Point, MD 21902-1105.

Chief, Library Section (142D), VA Medical Center, 2121 Lake Avenue, Fort Wayne, IN 46805-5100.

Chief, Library Service (142D), VA Medical Center, 385 Tremont Avenue, East Orange, NJ 07018-1095.

Chief, Library Service (142D), VA Medical Center, 940 Belmont Street, Brockton, MA 02301-5596.

Chief, Library Service (142D), VA Medical Center, 210 S. Winchester Avenue, Miles City, MT 59301-4798.

Chief, Library Service (142D), VA Medical Center, 913 NW Garden Valley Blvd., Roseburg, OR 97470-0193.

Chief, Library Service (142D), VA Medical Center, Route 9D, Castle Point, NY 12511.

Chief, Library Service 142D(W), VA Medical Center--Wade Park, Medical Library, 10701 East Boulevard, Cleveland, OH 44106.

Chief, Knowledge-Based Info (142D), VA Medical Center, 1201 Northwest 16th Street, Miami, FL 33125-1693.

Aspinwall Library (142D-A), VA Pittsburgh Health System), Delafield Road (3 COPIES), Pittsburgh, PA 15240.

Chief, Medical Library (INFO-4), VA Black Hill Health Care System, 500 North 5th Street, Hot Springs, SD 57747.

Chief, Library Service (142D), VA Medical Center, 1201 East 9th Street, Bonham, TX 75418-4019.

Chief, Library Service (142D), VA Medical Center, 9600 Veterans Drive, Tacoma, WA 98493-5000.

Chief, Library Service (142D), VA Medical Center, 3400 Lebanon Road, Murfreesboro, TN 37129-1236.

Chief, Library Service (14LIB-T), VA Medical Center, Veterans Memorial Drive, Temple, TX 76504-7497.

Library Service (118L), VA Medical Center, 2501 W. 22nd Street, Sioux Falls, SD 57117.

Library Service (142D), VA Medical Center, 800 Irving Avenue, Syracuse, NY 13210-2799.

The VIS application is located in the Austin Automation Center (AAC), 1615 East Woodward Street, Austin, Texas 78772. A second VIS disaster recovery site is planned to be stood up in FY09 at the Veterans Affairs (VA) data center in Hines, Illinois.

The category of the individuals covered by the VIS application include Veterans and their dependents whose information is provided to VIS via the Beneficiary Identification and Record Locator Subsystem (BIRLS), the Veterans Affairs/Department of Defense Identity Repository (VADIR), the Benefits Delivery Network (BDN), and the Rating Board Automation (RBA2000) corporate database.

The record, or information contained in the record, may include identifying information ( e.g., name, address, social security number); military service and active duty separation information (e.g., name, service number, date of birth, rank, sex, total amount of active service, branch of service, character of service, pay grade, assigned separation reason, whether Veteran was discharged with a disability, types of disabilities, served in Vietnam Conflict, reenlisted, received a Purple Heart or other military decoration); personal information (e.g., marital status, name and address of dependents, occupation, amount of education of a Veteran or a dependent, dependent's relationship to Veteran).

Title 38, United States Code, Part II, Chapters 11, 13, 15, 17, 18, 19 and 23.

Purpose:

VIS is an Intranet-based application that provides a consolidated view of information gathered from the BIRLS, VADIR, BDN, and RBA2000 systems for determination of eligibility for Veteran's benefits. VIS provides a read only view of a subset of the data contained within these databases listed; VIS does not provide updates to any of these systems, nor does it retain any of the data gathered from these systems. Once the user request has been fulfilled, the data is expunged from the system.

1. The record of an individual included in this system may be provided to Department of Defense (DoD) systems or offices for use in connection with matters relating to one of DoD's programs to enable delivery of healthcare or other DoD benefit to eligible beneficiaries.

2. The name, address, VA file number, effective date of compensation or pension, current and historical benefit pay amounts for compensation or pension, service information, date of birth, competency payment status, incarceration status, and social security number of Veterans and their surviving spouses may be disclosed to the Department of Defense Manpower Data Center (DMDC) to reconcile the amount and/or waiver of service, department and retired pay. These records may also be disclosed as part of a computer matching program to accomplish these purposes.

3. The name, address, VA file number, date of birth, date of death, social security number, and service information may be disclosed to DoD's DMDC. DoD will use this information to identify retired Veterans and dependent members of their families who have entitlement to Department of Defense benefits but who are not identified in the Department of Defense Enrollment Eligibility Reporting System (DEERS) program and to assist in determining eligibility for Civilian Health and Medical Program of the Uniformed Services (CHAMPUS) benefits. This purpose is consistent with 38 U.S.C. 5701.

4. VA may disclose on its own initiative any information in this system, except the names and addresses of Veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

5. VA may disclose any information or records to appropriate agencies, entities, and persons when (1) it is suspected or confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the records subjects, harm to economic or property interest, identity theft or fraud, or harm to the security, confidentiality or integrity of this system or other systems or programs (whether maintained by VA or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is made to such agencies, entities, and persons whom VA determines are reasonably necessary to assist or carry out VA's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by VA to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision or credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the member, when the member or staff person requests the record on behalf of and at the written request of the individual.

8. The name(s) and address (es) of a veteran may be disclosed to another Federal agency or to a contractor of that agency, at the written request of the head of that agency or designee of the head of that agency for the purpose of conducting government research necessary to accomplish a statutory purpose of that agency.

9. VA may disclose information in the system of records to the Department of Justice (DOJ), either on VA's initiative or in response to DOJ's request for information, after either VA or DOJ determines that such information is relevant to DOJ's representation of the United States or any of its components in legal, or in a proceedings before a court or adjudicative body provided that, in each case, the agency also determines prior to disclosure that release of records to the DOJ is a use of information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

10. Where VA determines that there is good cause to question the legality or ethical propriety of the conduct of a person or organization representing a person in a matter before VA, a record from this system may be disclosed, on VA's initiative, to any or all of the following: (1) Applicable civil or criminal law enforcement authorities and (2) a person or entity responsible for the licensing, supervision, or professional discipline of the person or organization acting as representative. Name and home addresses of Veterans and their dependents will be released on VA's initiative under this routine use only to Federal entities when VA believes that the names and addresses are required by the Federal department or agency.

11. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor or entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement.

12. Disclosure may be made to the National Archives and Records Administration or the General Services Administration in records management inspections conducted under authority of Title 44 U.S.C.

Storage:

The VIS application electronically stores personal information on veterans only long enough to fulfill a user's request for information; once the user's request is fulfilled, the data is expunged from the system.

The VIS application queries the BIRLS, the VADIR, the BDN, and the RBA2000 corporate database to populate user requests for data. The data is retrieved using name, social security number, and/or other unique personal identifier.

1. Physical Security: The VIS system is located in the AAC in Texas; a backup disaster recovery system will be installed at the Hines Data Processing Center in Illinois. Access to data processing centers is generally restricted to center employees, custodial personnel, Federal Protective Service and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons needing access to computer rooms are escorted.

2. System Security: Access to the VA network is protected by the usage of "logon" identifications and passwords. Once on the VA network, separate ID and password credentials are required to gain access to the VIS server and/or database. Access to the server and/or database is granted to a limited number of users, system administrators and database administrators. In addition VIS has undergone certification and accreditation. Based on a risk assessment that followed National Institute of Standards and Technology Vulnerability and Threat Guidelines, the system is considered stable and operational and an Authority to Operate has been granted. The system was found to be operationally secure, with very few exceptions or recommendations for change.

The VIS Application does not retain veteran's personal data in the application system. VIS queries four data systems (BIRLS, VADIR, BDN and RBA2000) to meet user requests for data; once the user request has been satisfied, the data is expunged from the system.

The official responsible for maintaining the VADIR repository: Program Manager, Registration and Eligibility, Office of Enterprise Development, Interagency Program Executive Office (005Q3), ATTN: VIS System of Records, 810 Vermont Avenue, NW., Washington, DC 20420.

Individuals seeking information on the existence and content of a record pertaining to them should contact the system manager, in writing, at the above address. Requests should contain the full name, address and telephone number of the individual making the inquiry.

See Notification Procedure above.

See Notification Procedure above.

The VIS data sources are: VADIR, the BIRLS, the BDN, and the RBA2000 corporate database.

Primary location: Electronic records are kept at the U.S. Environmental Protection Agency, Research Triangle Park, NC 27711-0001. Secondary location: Paper records are kept at Department of Veterans Affairs, 810 Vermont Avenue, NW, Washington, DC 20420.

Individuals who voluntarily provide personal contact information when submitting a public comment and/or supporting materials in response to a Department of Veterans Affairs rulemaking document or notice.

Full name, postal address, e-mail address, phone and fax numbers of the individual submitting comments, the name of the individual or organization that the individual represents, and the comments, as well as other supporting documentation, furnished by the individual. Comments may include personal information about the commenter.

44 U.S.C. 3501, Note; Sec. 206(d), Pub. L. 107-347; 5 U.S.C. 301, 552, 552a, and 553.

To permit the Department of Veterans Affairs (VA) to identify individuals, who have submitted comments in response to VA rulemaking documents or notices, so that communications or other actions, as appropriate and necessary, can be effected, such as to seek clarification of the comment, to directly respond to a comment, and for other activities associated with the rulemaking or notice process.

1. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of and at the written request of the individual.

2. Disclosure may be made to the National Archives and Records Administration in records management inspections conducted under authority of Title 44 U.S.C.

3. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

4. Disclosure of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

5. VA may disclose on its own initiative any information in the system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of the law whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, or order issued pursuant thereto.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) VA has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information, and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

8. VA may disclose information contained in this System of Records, as necessary, to comply with the requirements of the Administrative Procedure Act (APA) that comments are available for public review if submitted in response to VA’s solicitation of public comments as part of the Agency’s notice and rulemaking activities under the APA. However, VA will not release individually-identifiable personal information, such as an individual’s address or home telephone number, under this routine-use, except where VA determines that publication without redaction was intended by the submitter.

Storage:

Records are maintained on electronic storage media and paper. See System Location.

Records are retrieved by various data elements and key word searches, among which are by: Name, Agency, Docket Type, Docket Sub-Type, Agency Docket ID, Docket Title, Docket Category, Document Type, CFR Part, Date Comment Received, and Federal Register Published Date.

Electronic records are maintained in a secure, password protected, electronic system that utilizes security hardware and software to include: multiple firewalls, active intruder detection, and role-based access controls. Paper records are maintained in a controlled facility, where physical entry is restricted by the use of locks, guards, and/or administrative procedures. Access to records is limited to those officials who require the records to perform their official duties consistent with the purpose for which the information was collected. All personnel whose official duties require access to the information are trained in the proper safeguarding and use of the information.

Records will be maintained and disposed of, in accordance with records disposition authority, approved by the Archivist of the United States.

William F. Russo, Privacy Officer, Office of Regulation Policy and Management (02REG), Department of Veterans Affairs, 810 Vermont Ave., NW, Washington, DC 20420; telephone (202) 461-4902.

Individuals seeking to determine whether this System of Records contains information about them should address written inquiries to the Office of Regulation Policy and Management (02REG), Department of Veterans Affairs, 810 Vermont Ave., NW, Washington, DC 20420. Requests should contain the full name, address and telephone number of the individual making the inquiry.

Individuals seeking to access or contest the contents of records, about themselves, contained in this System of Records should address a written request, including full name, address and telephone number to the Office of Regulation Policy and Management (02REG), Department of Veterans Affairs, 810 Vermont Ave., NW, Washington, DC 20420.

(See Record Access Procedure above.)

Individuals; public or private organizations.

There are no exemptions being claimed for this system.

None.

The primary location of Exec VA application and database is at the Corporate Data Center Operations (CDCO), 1615 Woodward Street, Austin, Texas 78772. Some copies of electronic records and paper records may be available at various Department of Veterans Affairs (VA) offices where a matter has been referred for action. Additionally, copies of records in this system of records may be stored at various VA back up sites, including, Hines, Ill.

The category of the individuals covered by the Exec VA database encompasses veterans, their dependents, representatives, beneficiaries, and others contacting VA on veterans' issues.

Records are maintained in electronic and paper form depending on the nature of the materials received, background information compiled, and/or response sent. Each may include the names, Social Security numbers, mailing addresses, telephone numbers, and other personal identifiers routinely required to identify a correspondent or subject. Other record items maintained may include personal facts about medical, financial, or memorial benefits related to the correspondent, veteran, dependent or beneficiary. Internal VA records may include (but are not limited to) VA administrative, financial and personnel information. Records may include scanned document, letter, e-mail, fax, Internet document, tracking sheet, note, and documentation of a telephone call and/or of a meeting with an individual.

44 U.S.C. 3501, Note; Pub. L. 107-347, sec. 206(d); Note; 5 U.S.C. 301, and 553.

Purpose:

The Exec VA is a contact management system designed to track issues from veterans, others acting on their behalf, and others seeking information regarding veterans' issues. Initial contact may come from calls placed to a VA call center, telephone inquiries received at a VA office, or other medium including fax, e-mail, or information received at http://www.va.gov. The Exec VA system is designed to provide a one-stop repository for veterans' issues. Upon receipt of an inquiry, pertinent information is entered into Exec VA. The system provides access controls maintaining the integrity and confidentiality of the contact management system.

1. VA may disclose information from the record of an individual to a congressional office in response to an inquiry made at the request of that individual.

2. VA may disclose information to individuals, organizations, private or public agencies, or other entities whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the individual or entity with whom VA has an agreement or contract to perform the services of the contract or agreement.

3. VA may disclose information in this system to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

4. VA may disclose to the Federal Labor Relations Authority, including its General Counsel, information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised, in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

5. VA may disclose information in this system to officials of the Merit Systems Protection Board, or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

6. VA may disclose information identified in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

7. VA may disclose information from this system of records to the National Archives and Records Administration (NARA) in records management inspections conducted under title 44, U.S.C. NARA is responsible for archiving old records no longer actively used but which may be appropriate for preservation, and for the physical maintenance of the Federal government's records.

8. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

9. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

10. VA may disclose information in this system of records to another Federal agency; either on VA's initiative or in response to a request from another Federal agency for the information after VA determines that such information is relevant to that Federal agency's mission.

Disclosure to consumer reporting agencies:

The Exec VA database will not disclose information to any consumer reporting agency from this system of record.

Storage:

Exec VA data is regularly backed up and stored at the Corporate Data Center Operations (CDCO). A copy of the regular backups is securely transported and stored in a controlled storage facility at Hines, Illinois.

Records are retrieved by various data elements and key word searches, among which are by: Name, Number, Call#, Priority, Status, Subject, Address, Call Type, History, Claim#, SSN, Country, State, VISN, Phone, Date, time, group, and Call Range.

The Exec VA is accessible by authorized VA personnel only with a user ID and a password that can be authenticated. Staff of the CDCO performs backups for the Exec VA Application Server and the Oracle Database Server, respectively, according to the following schedule:

• Incremental data backups on a daily basis; and

• Full data backups on a weekly basis.

Records will be maintained and disposed of, in accordance with records disposition authority, approved by the Archivist of the United States.

Director, Customer Relations & Executive Projects, Office of the Secretary, 810 Vermont Ave., NW., Washington, DC 20420; (202) 273-4830.

Individuals seeking to determine whether this System of Records contains information, about them, should address written inquiries to the Office of Secretary (00), Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. Requests should contain the full name, address and telephone number of the individual making the inquiry.

Individuals seeking to access or contest the contents of records, about themselves, contained in this System of Records should address a written request, including full name, address and telephone number to the Office of Secretary (00), Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420.

(See Record Access Procedure above.)

Individuals who contact VA via the VA Web site at http://www.va.gov or by using a VA call center include veterans, veterans' family members and/or their representatives, government employees (Federal, State and local), realtors and home buyers, small business owners, vendors, funeral directors, clinicians, teachers, researchers, employees of veterans' service organizations, member of the public and all other individuals and representatives of organizations.

No exemptions claimed for this system.

Records are maintained at selected VA health care facilities that have Community Residential Care (CRC) and Medical Foster Home (MFH) Programs (in most cases, back-up computer tape information is stored at the VA Data Processing Center, 1615 East Woodward Street, Austin, Texas 78772). Address locations for VA facilities are listed in VA Appendix 1. In addition, information from these records or copies of records may be maintained at the Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC, VA Data Processing Centers, and Veterans Integrated Service Network Offices.

The records include information concerning veterans who reside in CRC or MFH homes. In addition, the records include information on the operators and staff of these homes.

The records may include information related to:

1. Applications, background checks, agreements with veterans, educational programs, driver's licenses, health screenings, etc.

2. Home inspection reports, corrective plans of action, emergency plans, correspondence, and hearing documents.

3. Personal identifiers (including date of birth, Social Security number, VA Claim number, financial information, pictures, etc.), medical records, etc.

Title 38, United States Code, section 1730.

The records and information may be used for determining a potential facility's initial eligibility and ongoing participation in the program, provision of medical and psycho-social services to veterans, operation of the programs, and information required by VA Medical Centers to complete quarterly statistical reports.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia, or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. The record of an individual who is covered by a system of records may be disclosed to a Member of Congress, or a staff person acting for the Member, when the Member or staff person requests the record on behalf of or at the written request of the individual.

2. Disclosure may be made to National Archives and Records Administration (NARA) and the General Services Administration (GSA) in records management inspections conducted under authority of title 44, chapter 29, of the United States Code (U.S.C.).

3. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, that is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal, or regulatory in nature and whether arising by general or program statute or by regulation, rule, or order issued pursuant thereto, to a Federal, state, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule, or order. VA may also disclose on its own initiative the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal, or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule, or order issued pursuant thereto.

4. VA may disclose information from this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that release of the records to the DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

5. Disclosures of relevant information may be made to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement or where there is a subcontract to perform the services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor or subcontractor to perform the services of the contract or agreement.

6. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

7. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs whether maintained by the Department or another agency or disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

8. VA may disclose identifying information, including Social Security number, concerning veterans, spouses of veterans, and the beneficiaries of veterans to other Federal agencies for the purpose of conducting computer matches to obtain information to determine or verify eligibility of veterans receiving VA medical care under Title 38, U.S.C.

9. VA may disclose relevant health care information to: (1) A Federal agency or non-VA health care provider or institution when VA refers a patient for hospital or nursing home care or medical services, or authorizes a patient to obtain non-VA medical services and the information is needed by the Federal agency or non-VA institution or provider to perform the services; or (2) a Federal agency or to a non-VA hospital (Federal, state, and local public or private) or other medical installation having hospital facilities, organ banks, blood banks, or similar institutions, medical schools or clinics, or other groups or individuals that have contracted or agreed to provide medical services or share the use of medical resources under the provisions of 38 U.S.C. 513, 7409, 8111, or 8153, when treatment is rendered by VA under the terms of such contract or agreement or the issuance of an authorization, and the information is needed for purposes of medical treatment and/or follow- up, determining entitlement to a benefit, or for VA to effect recovery of the costs of the medical care.

10. VA may disclose information from this system of records to the Office of Management and Budget (OMB) for the performance of its statutory responsibilities for evaluating Federal programs.

11. VA may disclose information to a fiduciary or guardian ad litem in relation to his or her representation of a claimant in any legal proceeding, but only to the extent necessary to fulfill the duties of the fiduciary or guardian ad litem.

12. VA may disclose relevant information from this system of records in the course of presenting evidence to a court, magistrate, or administrative tribunal; in matters of guardianship, inquests, and commitments; to private attorneys representing veterans rated incompetent in conjunction with issuance of Certificates of Incompetency; and to probation and parole officers in connection with court-required duties.

13. VA may disclose information from this system of records relevant to a claim of a veteran or beneficiary, such as the name, address, the basis and nature of a claim, amount of benefit payment information, medical information, and military service and active duty separation information, at the request of the claimant to accredited service organizations, VA-approved claim agents, and attorneys acting under a declaration of representation, so that these individuals can aid claimants in the preparation, presentation, and prosecution of claims under the laws administered by VA. The name and address of a claimant will not, however, be disclosed to these individuals under this routine use if the claimant has not requested the assistance of an accredited service organization, claims agent, or an attorney.

14. VA may disclose relevant medical record information concerning a patient to a non-VA nursing home facility that is considering the patient for admission, when information concerning the individual's medical care is needed for the purpose of preadmission screening under 42 CFR 483.20(f) to identify patients who are mentally ill or mentally retarded so they can be evaluated for appropriate placement.

Storage:

Records are maintained on computers, paper, and removable or external hardware.

Records are retrieved by name, Social Security number, or other assigned identifiers of the individuals on whom they are maintained.

1. Access to VA working and storage areas is restricted to VA employees on a "need-to- know" basis; strict control measures are enforced to ensure that disclosure to these individuals is also based on this same principle. Generally, VA file areas are locked after normal duty hours and the facilities are protected from outside access by the Federal Protective Service or other security personnel.

2. Access to computer rooms at health care facilities is generally limited by appropriate locking devices and restricted to authorized VA employees and vendor personnel. ADP peripheral devices are placed in secure areas (areas that are locked or have limited access) or are otherwise protected. Information in VistA may be accessed by authorized VA employees. Access to file information is controlled at two levels; the systems recognize authorized employees by series of individually unique passwords/codes as a part of each data message, and the employees are limited to only that information in the file which is needed in the performance of their official duties. Information that is downloaded from VistA and maintained on personal computers is afforded similar storage and access protections as the data that is maintained in the original files. Access to information stored on automated storage media at other VA locations is controlled by individually unique passwords/codes.

3. Access to the Austin VA Data Processing Center is generally restricted to Center employees, custodial personnel, Federal Protective Service, and other security personnel. Access to computer rooms is restricted to authorized operational personnel through electronic locking devices. All other persons gaining access to computer rooms are escorted. Information stored in the computer may be accessed by authorized VA employees at remote locations including VA health care facilities, Information Systems Centers, VA Central Office, and Veterans Integrated Service Networks. Access is controlled by individually unique passwords/codes which must be changed periodically by the employee.

Paper records and information are maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

Official responsible for policies and procedures; Office of Geriatrics and Extended Care (114), Department of Veterans Affairs, 810 Vermont Avenue NW, Washington, DC 20420.

Individuals who wish to determine whether this system of records contains information about them should contact the VA facility location at which they are or were employed or made or have contact. Inquiries should include the person's full name, Social Security number, dates of employment, date(s) of contact, and return address.

Individuals seeking information regarding access to and contesting of records in this system may write, call, or visit the VA facility location where they are or were employed or made contact.

(See Record Access Procedures above.)

Information in this system of records is provided by individuals requesting participation in the CRC and MFH programs.

APPENDIX I--ADDRESS LOCATIONS FOR VA FACILITIES

COMMUNITY RESIDENTIAL CARE PROGRAMS:

Togus ME; Bedford MA; Leeds MA; Boston MA; Bath NY; Canandaigua NY; Syracuse NY; Montrose NY; East Orange NJ; Northport NY; Altoona PA; Lebanon PA; Wilkes Barre PA; Pittsburgh PA; Wilmington DE; Clarksburg WV; Martinsburg WV; Perry Point MD; Beckley WV; Washington DC; Richmond VA; Hampton VA; Salem VA; Asheville NC; Salisbury NC; Atlanta GA; Augusta GA; Dublin GA; Birmingham AL; Tuscaloosa AL; Tuskegee AL; San Juan PR; Gainesville FL; Jacksonville FL; West Palm Beach FL; Murfreesboro TN; Mountain Home TN: Lexington KY; Louisville KY; Cleveland OH; Dayton OH; Chillicothe OH; Columbus OH; Danville IL; Indianapolis IN; Marion IN; Tomah WI; North Chicago IL; Hines IL; St. Louis MO; Alexandria LA; New Orleans LA; Shreveport LA; Biloxi MS; Jackson MI; Fayetteville AR; Little Rock AR; Dallas TX; Houston TX; San Antonio TX; Waco TX; Muskogee OK; Oklahoma City OK; Denver CO; Salt Lake City UT; Boise ID; Roseburg OR; Tacoma WA; Loma Linda CA; Long Beach CA; Los Angeles CA; San Diego CA; Palo Alto CA; St. Cloud MN; Sioux Falls SD; Omaha NE; Des Moines IA.

MEDICAL FOSTER HOME PROGRAMS (Operational or Being Developed):

Togus ME; Manchester NH; Boston MA; Lebanon PA; Huntington WV; Asheville NC; Hampton VA; Salem VA; Augusta GA; Dublin GA; Tuscaloosa AL; Tuskegee AL; Bay Pines FL; Gainesville FL; Miami FL; Tampa FL; West Palm Beach FL; San Juan PR; Lexington KY; Louisville KY; Memphis TN; Murfreesboro TN; Chillicothe OH; Cleveland OH; Battle Creek MI; St. Louis MO; Biloxi MS; Fayetteville AR; Little Rock AR; Dallas TX; San Antonio TX; Denver CO; Portland OR; Salt Lake City UT; Honolulu HI; Sioux Falls SD; Des Moines IA; Minneapolis MN.

None.

The system of records is located in the Office of the General Counsel, Professional Staff Group VI (026), U.S. Department of Veterans Affairs (VA), 810 Vermont Avenue, NW., Washington, DC 20420 and in the 22 Regional Counsel offices (Regions and addresses are listed at 38 Code of Federal Regulations sect;thnsp;14.501(f)). Records for all Regions and Washington, DC are stored on a secured server computer at the VA Capitol Regional Data Center in Falling Waters, West Virginia.

Veterans and their beneficiaries, current and former employees, current contractors employed by Department of Veterans Affairs, medical service providers, veterans' claims representatives, and veterans' service organizations.

Records include the name of an individual or business entity, and may contain Social Security Number, partial address (city, state, and zip code), date of birth, veterans' claim number, financial records, and/or medical records.

38 U.S.C. Section 501; and Title 38, United States Code, Section 311.

Case management, correspondence control, and statistical analysis. This system of records contains case tracking for time and OGC personnel, and may contain embedded documents which may be data privileged under the attorney-client relationship. The system will be used to provide statistical and other information in response to legitimate and reasonable requests.

1. VA may disclose any information in this system of records to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual.

2. VA may disclose any record in this system of records to NARA (National Archives and Records Administration), the GSA (General Services Administration), or both, for which either agency says that it needs the records in order to perform records management activities under authority of 44 U.S.C.

3. VA may disclose information in this system of records to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

4. VA may disclose on its own initiative any information in this system which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order.

5. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

6. VA may disclose any information in this system of records to appropriate agencies, entities, and persons under the following circumstances: When (1) it is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is made to such agencies, entities, and persons reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

7. The Department may disclose the information listed in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

8. The Department may disclose information to officials of the Merit Systems Protection Board, or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

9. The Department may disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or other functions of the Commission as authorized by law or regulation.

10. The Department may disclose to the Federal Labor Relations Authority (including its General Counsel) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

Disclosure to consumer reporting agencies:

None.

Storage:

The system of records is stored on a secured server computer protected in accordance with current, applicable physical, technical and administrative requirements.

Individually-identified information is retrieved by the name of the record subject.

This list of safeguards furnished in this System of Record is not an exclusive list of measures that has been, or will be, taken to protect individually-identifiable information.

OGC will maintain the data in compliance with applicable VA security policy directives that specify the standards that will be applied to protect sensitive personal information. Further, only authorized individuals may have access to the data and only when needed to perform their duties. They are required to take annual VA mandatory data privacy and security training.

Access to data storage areas is restricted to authorized VA employee or contract staff who has been cleared to work by the VA Office of Security and Law Enforcement. File areas are locked after normal duty hours. VA facilities are protected from outside access by the Federal Protective Service and/or other security personnel.

Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST).

Contractors and their subcontractors who access the data are required to maintain the same level of security as VA staff.

Access to electronic files is controlled by using an individually unique password entered in combination with an individually unique user identification code.

Records will be maintained and disposed of in accordance with records disposition authority approved by the Archivist of the United States.

At the current time, OGC has records disposition authority for certain categories of these records under Records Control Schedule N1ndash;15ndash;06ndash;2 which was approved by the Archivist of the United States on March 7, 2007. The System Manager will initiate action to seek and obtain additional disposition authority for the disposition of the non-covered records in accordance with VA Handbook 6300.1, Records Management Procedures. The non-covered records will not be destroyed until VA obtains a NARA-approved records disposition authority. Once VA has obtained NARA-approved records disposition authority, VA OGC will amend this notice to reflect that authority, and any destruction of electronic records will occur in accordance with the disposition authority.

Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, United States Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the Assistant General Counsel, Professional Staff Group VI (026), Office of General Counsel, U.S. Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420. Such requests must contain a reasonable description of the records requested. All inquiries must reasonably identify the information involved and should include the individual's full name, social security number, telephone number and return address.

Individuals seeking information regarding access to and contesting of VA information maintained by the Office of General Counsel may send a request by mail to the Assistant General Counsel, Professional Staff Group VI (026), Office of the General Counsel, Department of Veterans Affairs, 810 Vermont Avenue, NW., Washington, DC 20420.

(See Notification Procedure above.)

Individuals, businesses, and organizations that are covered by the system notice.

None.

Primary location: Electronic records are kept at the VA Data Center at Falling Waters, WV. Secondary locations: VA Data Center at Hines, IL, and Austin Automation Center, Austin, TX. Paper records are kept at the individual VA field site locations, within the local human resources offices.

Individuals who require routine, long-term access to VA Federal facilities, and/or information technology systems to perform their jobs, namely:

1. VA employees;

2. Contractors and subcontractors;

3. Affiliates, including students, researchers, residents, Veterans Service Organization volunteers, temporary help, and interns.

Records maintained, on individuals issued PIV cards by VA, include the following data fields: Full legal name, Social Security number; date of birth; signature; facial image (photograph); fingerprints; hair color; eye color; height; weight; organization/office of assignment; company name; telephone number; Personal Identity Verification (PIV) card issue and expiration dates; personal identification number (PIN); results of background investigation; PIV card request form; PIV registrar approval signature; PIV card serial number; PIV card expiration date; copies of documents used to verify PIV card applicant identification, and/or information derived from those documents, such as document title, document issuing authority, document number, document expiration date, document other information); level of national security clearance and expiration date; computer system user e-mail address; user access and permission rights, authentication certificates; digital signature information, and card holder unique identifier (CHUID).

Records maintained on card holders, entering VA facilities or using VA computer systems, are verified during the life cycle of audit records to include: Name, PIV Card serial number; date, time, and location of entry and exit; contractor company name (if applicable); level of national security clearance and expiration date; digital signature information; computer access dates, times, and locations.

5 U.S.C. 301; 38 U.S.C. 501; 40 U.S.C. 11331; 44 U.S.C 3544; Executive Order 9397; Homeland Security Presidential Directive 12; Federal Information Processing Standard 201-1.

Purpose:

The information collected in this system of records is used to a) ensure the safety and security of VA facilities, systems, or information, (b) verify that all persons entering Federal facilities, using Federal information resources, or accessing sensitive or classified information are authorized to do so; (c) track and control PIV cards issued to persons entering and exiting the facilities, using systems, or accessing sensitive or classified information, including patient records. This system of records applies to all VA Federal employment and contract positions, and may include VA employees, contractors, and affiliates to the extent their duties require access to VA Federal facilities and/or information systems.

1. Disclosure may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

2. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist in or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

3. VA may disclose the information listed in 5 U.S.C. 7114(b)(4) to officials of labor organizations recognized under 5 U.S.C. Chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

4. VA may disclose the information to officials of the Merit Systems Protection Board, or the Office of Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

5. VA may disclose the information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

6. VA may disclose the information to the Federal Labor Relations Authority (FLRA) information related to the establishment of jurisdiction, the investigation and resolution of allegations of unfair labor practices, or information in connection with the resolution of exceptions to arbitration awards when a question of material fact is raised; to disclose information in matters properly before the Federal Services Impasses Panel, and to investigate representation petitions and conduct or supervise representation elections.

7. VA may disclose the information to a Member of Congress or to a Congressional staff member in response to an inquiry of the Congressional office made at the written request of the constituent about whom the record is maintained.

8. VA may disclose the information to the National Archives and Records Administration or to the General Services Administration for records management inspections conducted under 44 U.S.C. 2904 and 2906.

9. VA may disclose information in this system of records to the Department of Justice (DOJ) and Office Personnel Management (OPM), either on VA's initiative or in response to DOJ's and OPM's request for the information, after either VA, DOJ, or OPM determines that such information is relevant to DOJ's or OPM's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the DOJ or OPM is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

10. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

Storage:

Records are stored on paper in locked containers and electronically in secure locations.

Records may be retrieved by name of the individual, Cardholder Unique Identification (CHUID) Number, Social Security Number (SSN), and/or by any other unique individual identifier.

Paper records are kept in locked cabinets in secure local VA facilities and access to them is restricted to individuals whose role requires use of the PIV records. Electronic records are kept in the PIV Identity Management System servers maintained at VA Data Centers in Falling Waters; WV, Hines, IL; and Austin Automation Data Center, Austin, TX. Access to the records is restricted to those with a specific role in the PIV process that requires access to PIV applicant data in order to perform their duties, and who have been given a PIV card for authentication, and a password to access the system of records. The computer servers in which records are stored are located in secure, monitored facilities.

Electronic records at the Data Centers are maintained in a secure, password protected electronic system that utilizes security hardware and software to include: encryption, multiple firewalls, active intruder detection, and role-based access controls.

A Privacy Act Warning Notice appears on the Web-based PIV Registration Portal screen when records containing information on individuals are first displayed. Data exchanged between the PIV servers located in VA data centers, and PC computer equipment at PIV registration offices are encrypted using SSL encryption (HTTPS) over commonly available Internet browsers. Backup tapes are stored in a locked and controlled room in a secure, off-site location.

An audit trail is maintained and reviewed periodically to identify unauthorized attempts to access, and actual unauthorized access. Persons given roles in the PIV process must complete training specific to their roles to ensure they are knowledgeable about how to protect individually- identified information.

Records relating to persons covered by this system are retained in accordance with General Records Schedule 18, Item 17. Unless retained for specific, ongoing security investigations, and in accordance with NARA, all of the PIV collected data will be retained for a minimum of 7.5 years beyond the term of employment, unless otherwise directed.

In accordance with HSPD-12, PIV Cards are deactivated within 18 hours from the notification time for cardholder separation, loss of card, or expiration. The information on PIV Cards is maintained in accordance with General Records Schedule 11, Item 4. PIV Cards are destroyed by shredding, typically within 90 days after deactivation.

VA PIV Program Manager, Office of Human Resources (005Q3), Department of Veterans Affairs, 810 Vermont Ave., NW., Room B-11, Washington, DC 20420; telephone (202) 461-9759 (This is not a toll free number).

An individual can determine if this system contains a record pertaining to him/her by sending a request in writing, signed, to the Systems Manager. When requesting notification of or access to records covered by this Notice, an individual should provide his/her full name, date of birth, agency name, and work location. An individual requesting notification of records in person must provide identity documents sufficient to satisfy the custodian of the records that the requester is entitled to access, such as a government-issued photo ID. Individuals requesting notification via mail or telephone must furnish, at minimum, name, date of birth, Social Security number, and home address in order to establish identity.

Same as Notification procedures above.

Same as Notification procedures above. Requesters should also reasonably identify the record, specify the information they are contesting, state the corrective action sought and the reasons for the correction along with supporting justification showing why the record is not accurate, timely, relevant, or complete.

Information is obtained from a variety of sources including the PIV applicant (employee, contractor, or affiliate); the VA Active Directory; PIV applicant supervisor; existing VA personnel file; PIV-compliant identity documents; former sponsoring agency; other Federal agencies; contract employer; former employer.

None.

Records are maintained at the Health Eligibility Center (HEC) in Atlanta, Georgia, the Austin Automation Center (AAC) in Austin, Texas, at each VA health care facility as described in the VA system of records entitled "Patient Medical Records--24VA19," and at the Veteran Identification Card (VIC) National Card Management Directory (NCMD) located at the Hines, Illinois, and Silver Spring, Maryland VA facilities. Electronic and magnetic records are also stored at contracted facilities for storage and back-up purposes.

The records contain information on individuals who have applied for or who have received VA health care benefits under title 38, United States Code, chapter 17; the records also include veterans, their spouses and dependents as provided for in other provisions of title 38, United States Code.

The categories of records in this system may include: Medical benefit applications, eligibility and enrollment information, including information obtained from Veterans Benefits Administration automated records such as the Compensation, Pension, Education and Rehabilitation Records--VA'' (58VA21/22), and VIC information including applicant's name, address(es), date of birth, Social Security number, race and ethnicity, claim number, ICN, applicant's image, preferred facility and facility requesting a VIC, names, addresses and phone numbers of persons to contact in the event of a medical emergency, family information including spouse and dependent(s) name(s), address(es) and Social Security number; applicant and spouse's employment information, including occupation, employer(s) name(s) and address(es); financial information concerning the applicant and the applicant's spouse including family income, assets, expenses, debts; third party health plan contract information, including health insurance carrier name and address, policy number and time period covered by policy; facility location(s) where treatment is provided; type of treatment provided (i.e., inpatient or outpatient); information about the applicant's military service (e.g., dates of active duty service, dates and branch of service, and character of discharge, combat service dates and locations, military decorations, POW status and military service experience including exposures to toxic substances); information about the applicant's eligibility for VA compensation or pension benefits, and the applicant's enrollment status and enrollment priority group. These records also include, but are not limited to, individual correspondence provided to the HEC by veterans, their family members and veterans' representatives such as Veteran Service Officers (VSO), copies of death certificates; form DD 214, Certificate of Release or Discharge from Active Duty; disability award letters; VA and other pension applications; VA Form 10-10EZ, Application for Health Benefits; VA Form 10-10EZR, Health Benefits Renewal; VA Form 10- 10EC, Application for Extended Care Services; and workers compensation forms.

Title 38, United States Code, Sections 501(a), 1705, 1710, 1722, and 5317.

Information in this system of records is used to establish and maintain applicants' records necessary to support the delivery of health care benefits; establish applicants' eligibility for VA health care benefits; operate an annual enrollment system; provide eligible veterans with an identification card; collect from an applicant's health insurance provider for care of their nonservice-connected conditions; provide educational materials related to VA health care benefits, enrollment and eligibility; respond to veteran and non-veteran inquiries related to VA health care benefits, enrollment and eligibility; and compile management reports.

To the extent that records contained in the system include information protected by 45 CFR parts 160 and 164 (i.e., individually identifiable health information), that information cannot be disclosed under a routine use unless there is also specific regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. VA may disclose information from this system of records, as deemed necessary and proper, to named individuals serving as accredited service organization representatives and other individuals named as approved agents or attorneys for a documented purpose and period of time, to aid beneficiaries in the preparation and presentation of their cases during the verification and/or due process procedures and in the presentation and prosecution of claims under laws administered by VA.

2. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

3. VA may disclose information from this system of records to private attorneys representing veterans rated incompetent in conjunction with issuance of Certificates of Incompetence, in the course of presenting evidence to a court, magistrate or administrative tribunal, in matters of guardianship, inquests and commitments; and to probation and parole officers in connection with court required duties.

4. VA may disclose information to a VA Federal fiduciary or a guardian ad litem in relation to his or her representation of a veteran only to the extent necessary to fulfill the duties of the VA Federal fiduciary or the guardian ad litem.

5. VA may disclose information to attorneys, insurance companies, employers, third parties liable or potentially liable under health plan contracts, and to courts, boards, or commissions, but only to the extent necessary to aid VA in the preparation, presentation, and prosecution of claims authorized under Federal, State, or local laws, and regulations promulgated thereunder.

6. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

7. VA may disclose information to the National Archives and Records Administration (NARA) and General Services Administration (GSA) in records management inspections conducted under authority of title 44 United States Code.

8. VA may disclose information for the purposes identified below to a third party, except consumer reporting agencies, in connection with any proceeding for the collection of an amount owed to the United States by virtue of a person's participation in any benefit program administered by VA. Information may be disclosed under this routine use only to the extent that it is reasonably necessary for the following purposes: (a) To assist VA in the collection of costs of services provided individuals not entitled to such services, (b) to initiate civil or criminal legal actions for collecting amounts owed to the United States, and (c) for prosecuting individuals who willfully or fraudulently obtained or seek to obtain title 38 medical benefits. This disclosure is consistent with 38 U.S.C. 5701(b)(6).

9. VA may disclose information such as the name and address of a veteran, or other information as is reasonably necessary to identify such veteran, and any information concerning the veteran's indebtedness to the United States by virtue of the person's participation in a benefits program administered by VA, to a consumer reporting agency for purposes of assisting in the collection of such indebtedness, provided that the provisions of 38 U.S.C. 5701(g)(4) have been met.

10. VA may disclose information to individuals, organizations, private or public agencies, or other entities with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA in order for the individual or entity with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary individual or entity to perform an activity that is necessary for the individual or entity with whom VA has a contract or agreement to provide the service to VA.

11. VA may disclose information from the record of an individual who is covered by a system of records to a member of Congress, or a staff person acting for the member, when the member or staff person requests the record on behalf of and at the written request of the individual.

12. VA may disclose information to other Federal agencies to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

13. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise, there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosure is required by the Memorandum from the Office of Management and Budget (M- 07-16), dated May 22, 2007, of all systems of records of all Federal agencies. This routine use also permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

Storage:

Records are maintained on magnetic tape, magnetic disk, optical disk and paper at the HEC, VIC databases, VA medical centers, the NCMD databases, AAC, contract facilities, and at Federal Record Centers. In most cases, copies of back-up computer files are maintained at off-site locations and/or agencies with whom VA has a contract or agreement to perform such services, as VA may deem practicable.

Records are retrieved by name, and/or Social Security number, ICN, military service number, claim folder number, correspondence tracking number, internal record number (DFN), facility number, or other assigned identifiers of the individuals on whom they are maintained.

1. In accordance with national and locally established data security procedures, access to enrollment information databases (HEC Legacy system and the Enrollment Database) is controlled by unique entry codes (access and verification codes). The user's verification code is automatically set to be changed every 90 days. User access to data is controlled by role-based access as determined necessary by supervisory and information security staff as well as by management of option menus available to the employee. Determination of such access is based upon the role or position of the employee and functionality necessary to perform the employee's assigned duties.

2. On an annual basis, employees are required to sign a computer access agreement acknowledging their understanding of confidentiality requirements. In addition, all employees receive annual privacy awareness and information security training. Access to electronic records is deactivated when no longer required for official duties. Recurring monitors are in place to ensure compliance with nationally and locally established security measures.

3. User access to the VIC National Card Management Directory database utilizes the national NT network authentication infrastructure. The external VIC vendor utilizes the One-VA VPN secured connection for access to VIC records.

4. Strict control measures are enforced to ensure that access to and disclosure from all records is limited to VA and the contractor's employees whose official duties warrant access to those files.

5. As required by the provisions of the HIPAA Privacy Rule, 45 CFR Parts 160 and 164, access to records by HEC employees is classified under functional category "Eligibility and Enrollment Staff."

1. Data transmissions between VA health care facilities, the HEC, the AAC, Silver Spring, and Hines databases are accomplished using the Department's secure wide area network. The software programs automatically flag records or events for transmission based upon functional requirements. Server jobs at each facility run continuously to check for data to be transmitted and/or incoming data which needs to be parsed to files on the receiving end. All messages containing data transmissions include header information that is used for validation purposes. The recipients of the messages are controlled and/or assigned to the mail group based on their role or position. Consistency checks in the software are used to validate the transmission, and electronic acknowledgment messages are returned to the sending application. The Department's Office of Cyber Security has oversight responsibility for planning and implementing computer security.

2. Working spaces and record storage areas at HEC, AAC, and the VIC processing locations are secured during all business hours, as well as during non-business hours. All entrance doors require an electronic pass card, for entry when unlocked, and entry doors are locked outside normal business hours. Visitors to the HEC are required to present identification, sign-in at a specified location and are issued a pass card that restricts access to non-sensitive areas. Visitors to the HEC are escorted by staff through restricted areas. At the end of the visit, visitors are required to turn in their badge. The building is equipped with an intrusion alarm system, which is activated during non-business hours. This alarm system is monitored by a private security service vendor. The office space occupied by employees with access to veteran records is secured with an electronic locking system, which requires a card for entry and exit of that office space. Access to the AAC is generally restricted to AAC staff, VA Central Office employees, custodial personnel, Federal Protective Service and authorized operational personnel through electronic locking devices. All other persons gaining access to the computer rooms are escorted.

3. Access to the VIC contractor secured work areas is also controlled by electronic entry devices, which require a card and manual input for entry and exit of the production space. The VIC contractor's building is also equipped with an intrusion alarm system and a security service vendor monitors the system.

4. Contract employees are required to sign a Business Associates Agreement (BAA) as required by the Health Insurance Portability and Accountability Act of 1996 as acknowledgement of mandatory provisions regarding the use and disclosure of protected health information. Employee and contractor access is deactivated when no longer required for official duties or upon termination of employment. Recurring monitors are in place to ensure compliance with nationally and locally established security measures.

5. Beneficiary's enrollment and eligibility information is transmitted from the Enrollment and Eligibility information system to VA health care facilities over the Department's secure computerized electronic communications system.

6. Only specific key staff have authorized access to the computer room. Programmer access to the information systems is restricted only to staff whose official duties require that level of access.

7. On-line data reside on magnetic media in the HEC and AAC computer rooms that are highly secured. Backup media are stored in the computer room within the same building and only information system staff and designated management staff have access to the computer room. On a weekly basis, backup media are stored in off-site storage by a media storage vendor. The vendor picks up and returns the media in a locked storage container; vendor personnel do not have key access to the locked container. The AAC has established a backup plan for the Enrollment system as part of a required Certification and Accreditation of the information system.

8. Any sensitive information that may be downloaded to personal computers or printed to hard copy format is provided the same level of security as the electronic records. All paper documents and informal notations containing sensitive data are shredded prior to disposal. All magnetic media (primary computer system) and personal computer disks are degaussed prior to disposal or release off-site for repair. The VIC contractor destroys all veteran identification data 30 days after the VIC card has been mailed to the veteran in accordance with contractual requirements.

9. All new HEC employees receive initial information security and privacy training; refresher training is provided to all employees on an annual basis. The HEC's Information Security Officer performs an annual information security audit and periodic reviews to ensure security of the system. This annual audit includes the primary computer information system, the telecommunication system, and local area networks. Additionally, the IRS performs periodic on-site inspections to ensure the appropriate level of security is maintained for Federal tax data.

10. Identification codes and codes used to access Enrollment and Eligibility information systems and records systems, as well as security profiles and possible security violations, are maintained on magnetic media in a secure environment at the Center. For contingency purposes, database back-ups on removable magnetic media are stored off-site by a licensed and bonded media storage vendor.

11. Contractors, subcontractors, and other users of the Enrollment and Eligibility Records systems will adhere to the same safeguards and security requirements to which HEC staff must comply.

Regardless of the record medium, all records are disposed of in accordance with the records retention standards approved by the Archivist of the United States, National Archives and Records Administration, and published in the VHA Records Control Schedule 10-1.

Official responsible for policies and procedures: Chief Business Officer (16), VA Central Office, 1722 I St., NW., Washington, DC 20420. Official maintaining the system: Director, Health Eligibility Center, 2957 Clairmont Road, Atlanta, Georgia 30329.

Any individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request or apply in person to the Health Eligibility Center. All inquiries must reasonably identify the records requested. Inquiries should include the individual's full name, Social Security number, military service number, claim folder number and return address.

Individuals seeking information regarding access to and contesting of Enrollment and Eligibility Records may write to the Director, Health Eligibility Center, 2957 Clairmont Road, Atlanta, Georgia 30329.

(See Record Access procedures above).

Information in the systems of records may be provided by the applicant; applicant's spouse or other family members or accredited representatives or friends; health insurance carriers; other Federal agencies; "Patient Medical Records--VA" (24VA19) system of records; " Veterans Health Information System and Technology Architecture (VistA) Records--VA" (79VA19); "Income Verification Records--VA" (89VA19); and Veterans Benefits Administration automated record systems, including "Veterans and Beneficiaries Identification and Records Location Subsystem--VA" (38VA23) and the "Compensation, Pension, Education and Rehabilitation Records--VA" (58VA21/22).

One location for electronic and paper records, following VA-approved procedures, is in the Office of the Director, Office of Data Development and Analysis, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. Electronic records are also placed on a Department of Veterans Affairs' (VA's) secured server housed at VA's Austin Automation Center, 1615 Woodward St., Austin, TX 78772. Records necessary for a contractor to perform a contract with VA are located at the respective contractor's facility.

1. Service members and veterans who have applied for any non-health-related benefits under title 38, U.S.C.

2. Veterans' spouse, surviving spouse, previous spouse, children, and parents who have applied for any non-health-related benefit under title 38, U.S.C.

3. Beneficiaries of other Federal agencies or other governmental entities.

4. Individuals who have applied for any non-health-related benefits under title 38, U.S.C., but who do not meet the requirements under Title 38 to receive such benefits.

The records may include personal identifiers (e.g., social security numbers and military service numbers etc.), residential and professional contact data (e.g., address and telephone numbers etc.), population demographics (e.g., gender and zip codes etc.), military service-related data (e.g., branch of service and service dates etc.), financial-related data (e.g., amount of historic benefit payments etc.), claims processing codes and information (e.g., disability compensation and pension award codes etc.), and other VA and non-VA Federal information.

Title 38, U.S.C. 527.

Non-health-related qualitative, quantitative, and actuarial analyses and projections to support policy analyses and recommendations to improve VA services for veterans and their families. Analysis and review of policy and long-term planning issues affecting veterans programs to support legislative, regulatory and policy recommendations, decisions and initiatives. These activities are conducted for the Secretary, VA Administrations and Staff Offices, special programs and projects within the Department (e.g., special studies, advisory committees and task forces etc.), and entities external to VA, such as the Office of Management and Budget (OMB), and the United States (U.S.) Congress.

Note: To the extent that records contained in the system include individually- identifiable information protected by title 38, U.S.C. 7332, that information cannot be disclosed under any of the following routine uses unless there is also specific disclosure authority in title 38, U.S.C. 7332.

1. Upon suspicion or confirmation of compromised data in this system of records, Office of Policy and Planning (OPP) may disclose any system records to law enforcement and security entities, as necessary, for the investigations of any data security, identity theft, and fraud issues.

2. Disclosure may be made to a Member of Congress or to a Congressional staff member in response to an inquiry of the Congressional office made at the written request of the constituent about whom the record is maintained.

3. Any system records disclosure may be made to the National Archives and

Records Administration in records management inspections under title 44, U.S.C.

4. Any information in this system may be disclosed to the Department of Justice (DOJ), including U.S. Attorneys, upon its official request in order for VA to respond to pleadings, interrogatories, orders or inquiries from DOJ and to supply DOJ with information to enable DOJ to represent the U.S. Government in any phase of litigation or in any case or controversy involving VA.

5. Any system records may be disclosed to a Federal agency for the conduct of research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and OPP has determined prior to the disclosure that OPP data handling requirements are satisfied. OPP may disclose limited individual identification information to another Federal agency for the purpose of matching and acquiring information held by that agency for OPP to use for the purposes stated for this system of records.

6. Any system records may be disclosed to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

7. Any system records disclosure may be made to the OMB in order for them to perform their statutory responsibilities for evaluating Federal programs.

8. Upon receipt of a written request, VA may disclose information to any state, tribe, county, or municipal agency for the purposes of outreach to a benefit under Title 38 Code of Federal Regulations (CFR).

9. Any records may be disclosed to appropriate agencies, entities, and persons under the following circumstances: When (1) It is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.

10. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA's initiative or in response to DoJ's request for the information, after either VA or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

In determining whether to disclose records under this routine use, VA will comply with the guidance promulgated by the Office of Management and Budget in a May 24, 1985, memorandum entitled ldquo;Privacy Act Guidancemdash;Updaterdquo;, currently posted at http://www.whitehouse.gov/omb/inforeg/guidance1985.pdf.

11. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature, and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

Disclosure to consumer reporting agencies:

The Department will not make disclosures from this system of records to consumer reporting agencies.

Storage:

OPP's records are maintained electronically or in hard-copy form. All portable electronic storage devices and media are stored in a combination-locked safe which is secured inside a key- accessed room at the U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. Other electronic data is placed on VA's segregated server which is housed at VA's Austin Automation Center, 615 Woodward St., Austin, TX 78772. Information stored on paper is kept locked in file cabinets when not in immediate use. All imported and exported OPP data is handled and housed via the provisions of signed data use agreements and current VA data security policies, procedures, and directives. When contractors must have access to data in this system of records in order to perform the contract, contractors house VA data in their own facilities in accordance with current VA data security policies, procedures and directives.

OPP's records may be retrieved by using an individual's social security number, military service number, VA claim or file number, non-VA Federal benefit identifiers, and other personal identifiers.

All VA offices are protected from outside access by security personnel seven days a week. Entrances and exits are monitored by security cameras and protected by an alarm system. All VA staff and visitors are required to either have a VA-issued employment identification card or a temporary visitor identification badge. All work stations are secured during daytime and evening hours.

Electronic data located in Washington, DC is stored in a combination-key-locked safe which is secured inside a limited-access room. Authorized employee access to the limited-access room and the safe is based upon strict business needs as determined by OPP's Assistant Secretary. Textual data is stored in key-locked cabinets inside secured rooms. Access to the server in the Austin Automation Center in Austin, TX is generally limited by appropriate locking devices and restricted to authorized VA personnel. The Austin Automation Center is a secure facility.

All data requests must be in writing, reviewed by a panel of OPP personnel, concurred on by OPP's Assistant Secretary, and released under the auspices of a signed data use agreement. File extracts provided for specific official uses will be limited to contain only the information fields needed for the analysis. Data used for analyses will have individual identifying characteristics removed or encrypted whenever possible. Unencrypted sensitive variables will only be used for analysis as a last resort.

Security complies with applicable Federal Information Processing Standards (FIPS) issued by the National Institute of Standards and Technology (NIST). Health information files containing unique identifiers such as social security numbers are encrypted to NIST-verified FIPS 140ndash;2 standard or higher for storage, transport, or transmission. All files stored or transmitted on laptops, workstations, data storage devices and media are encrypted. Files are kept encrypted at all times except when data is in immediate use, per specifications by VA Office of Information Technology. NIST publications were consulted in development of security for this system of records.

In the event of a contract or special project, VA may secure the services of contractors and/or subcontractors. In such cases, VA will maximize the utilization of encrypted data, when possible. Contractors and their subcontractors are required to maintain the same level of security as VA staff for non-health care information that has been disclosed to them. Unless explicitly authorized in writing by the VA, sensitive or protected data made available to the contractor and subcontractors shall not be divulged or made known in any manner to any person.

All VA employees and contractors are mandated to complete annual cyber security and privacy training.

In accordance with Title 36, CFR, Section 1234.34, Destruction of Electronic Records, ldquo;electronic records may be destroyed only in accordance with a records disposition schedule approved by the Archivist of the United States, including General Records Schedules.rdquo; This Office's electronic files are destroyed or deleted when no longer needed for administrative, legal, audit, or other operational purposes in accordance with records disposition authority approved by the Archivist.

If the Archivist has not approved disposition authority for any records covered by the system notice, the System Manager will take immediate action to have the disposition of records in the system reviewed and paperwork initiated to obtain an approved records disposition authority in accordance with VA Handbook 6300.1, Records Management Procedures. The records may not be destroyed until VA obtains an approved records disposition authority. OPP will publish an amendment to this notice upon issuance of a NARA-approved disposition authority.

OPP's system manager is the Director, Office of Data Development and Analysis, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420.

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to determine the contents of such record, should submit a written request to the Director, Office of Data Development and Analysis, (008A3), U.S. Department of Veterans Affairs, 810 Vermont Ave., NW., Washington, DC 20420. Such requests must contain a reasonable description of the records requested. In addition, identification of the individual requesting the information will be required in the written request and will minimally consist of the requester's name, signature, social security number, address, telephone number, and return address.

(See Notification procedure above.)

(See Notification procedure above.)

This Office's information is obtained from VA's benefits-related databases, the DoD, Federal and State agencies, and other organizations whose data is necessary to accomplish the purpose for this system of records.

The system of records is located at Oracle’s secure government

cloud facility at Equnix Datacenter, 1905 Lunt Avenue, Elk Grove, Illinois 60007.

Individuals who contact VA via the VA Web site at www.va.gov or by contacting a VA call center including beneficiaries and other veterans, veterans’ family members and/or their representatives, health care professionals, clinicians, employees and managers of small businesses, vendors, funeral directors, mortgage companies, realtors, home buyers, researchers, small business owners, veterans’ service organizations, other Federal agencies, State and local government employees, teachers, and other demographic groups representing every segment of the population both at home and abroad.

The records include questions, complaints, suggestions, compliments, and/or requests for the status of claims and may also include name, address, phone number, e-mail address, service or claim number, Social Security number, date of birth; branch of service; entered on active duty date and released from active duty date,

Title 38, United States Code, Sections 501 and 7304.

The purpose of this system of records is to receive and respond to questions, complaints, suggestions, compliments, and requests for the status of claims and other information by gathering sufficient information from the senders of inquiries to provide thorough, accurate and timely responses. The IRIS gives VA the ability to track inquiry traffic, measure the quality and timeliness of responses, and develop and post Frequently Asked Questions (FAQs) based on the analysis of messages received. VA management also uses the information to quantify contacts, analyze issues pertaining to veterans and VA’s mission, and to measure staff performance regarding the quality and timeliness of responses.

To the extent that records contained in the system include information protected by 45 CFR Parts 160 and 164, i.e., individually identifiable health information, and 38 U.S.C. 7332, i.e., medical treatment information related to drug abuse, alcoholism or alcohol abuse, sickle cell anemia or infection with the human immunodeficiency virus, that information cannot be disclosed under a routine use unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR Parts 160 and 164 permitting disclosure.

1. Disclosure may be made to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement the to provide the service to VA.

2. To disclose information to the Equal Employment Opportunity Commission when requested in connection with investigations of alleged or possible discriminatory practices, examination of Federal affirmative employment programs, or for other functions of the Commission as authorized by law or regulation.

3. To disclose information to officials of the Merit Systems Protection Board, or the Office of the Special Counsel, when requested in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions, promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.

4. VA may disclose on its own initiative any information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

5. VA may, on its own initiative, disclose any information or records to appropriate agencies, entities, and persons when (1) VA suspects or has confirmed that the integrity or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security, confidentiality, or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the potentially compromised information; and (3) the disclosure is to agencies, entities, or persons whom VA determines are reasonably necessary to assist or carry out the Department’s efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.

6. VA may disclose information in this system of records to the Department of Justice (DoJ), either on VA’s initiative or in response to DoJ’s request for the information, after either VA or DoJ determines that such information is relevant to DoJ’s representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records.

7. VA may disclose information to a member of Congress or a congressional staff member in response to an inquiry from the congressional office made at the request of that individual.

8. Disclosure may be made to National Archives and Records Administration (NARA) in records management activities and inspections conducted under authority of title 44 United States Code.

9. Disclosure may be made to other Federal agencies to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

Storage:

The IRIS stores electronic and archived messages on the secure IRIS server at the Oracle’s FedRamp-approved hosting facility in Elk Grove, Illinois.

All records in the IRIS are electronic only and are retrieved by system inquiry number, and/or name, and/or zip code, and/or e-mail address, and/or Social Security number, and/or claim and/or service number.

The IRIS runs on a Secure Socket Layer (SSL) and on Transport Layer Security (TLS) and can only be accessed by authorized persons employed by and/or contracted to VA with the use of unique usernames and passwords, consistent with VA security policy.

The server on which the IRIS software and database reside is located in a secure facility at Equnix Datacenter, 1905 Lunt Ave., Elk Grove, Illinois 60007. This facility is locked down at all times and has a security guard on duty at all times. Access to the computer room is restricted to specifically authorized VA staff or persons contracted to VA. In addition, these persons must have separate and authorized access to the IRIS server itself. All electronic data in this system are backed up nightly, with backups stored electronically and securely in the Elk Grove, Illinois location.

Records are maintained and disposed of with records disposition authority approved by the Archivist of the United States.

The IRIS system falls under the jurisdiction of the Director, Enterprise Web Applications Support (EWAS) 005Q3, Service Delivery and Engineering (SDE), Office of Information & Technology (OI&T) OI Field Office, 1100 1st St, NE, Room 513, Washington, D.C. 20002-4221.

A person who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier or wishes to determine the contents of such records should submit a written request or apply in person to Enterprise Web Applications Support (EWAS) 005Q3, Service Delivery and Engineering (SDE), Office of Information & Technology (OI&T),OI Field Office, 1100 1st St, NE, Room 513, Washington, D.C. 20002-4221. Requests should contain full name, address and phone number of the person making this request.

Individuals seeking information regarding access to and amendment of records in this system may write, call or visit Enterprise Web Applications Support (EWAS)005Q3, Service Delivery and Engineering (SDE), Office of Information & Technology (OI&T), OI Field Office, 1100 1st St, NE, Room 513, Washington, D.C. 20002-4221. Requests should contain full name, address and phone number of the person making this request.

(See Record Access Procedure above)

Individuals who contact VA via the VA Web site at www.va.gov or by using a VA call center include veterans, veterans’ family members and/or their representatives, government employees (Federal, State and local), realtors and home buyers, small business owners, vendors, funeral directors, clinicians, teachers, researchers, employees of veterans’ service organizations, member of the public and all other individuals and representatives of organizations.

Information contained in this system of records is provided by Veterans, beneficiaries, family members, and all other persons doing business with VA using Contact VA on department web sites and utilizing 800 toll free numbers to reach VA call centers, regional offices, medical centers and other VA entities.

The location for electronic records is in the Office of Inspector General, Information Technology and Data Analysis Division, (53CT), U.S. Department of Veterans Affairs, Consolidated Franchise Data Center, 1615 Woodward Street, Austin, TX 78772.

1. Service members and veterans who have applied for any type of benefits under title 38, U.S.C.

2. Veterans' spouse, surviving spouse, previous spouse, children, and parents who have applied for any type of benefit under title 38, U.S.C.

3. Beneficiaries of other Federal agencies or other governmental entities.

4. Individuals who have applied for any benefits under title 38, U.S.C., but who do not meet the requirements under Title 38 to receive such benefits.

5. VA employees, contractor employees, and volunteers.

6. Employees of VA affiliated hospitals and medical schools, researchers, and without compensation (WOC) employees.

The records in this system of records consist of data, and extracts of data, provided from master databases under the jurisdiction of the Department of Veterans Affairs, including but not limited to, the Veterans Benefits Administration, Veterans Health Administration, and the National Cemetery Administration. Data extracts may also be from databases provided by the Department of Defense, as well as other Federal and State agencies. The records may include personal identifiers ( e.g., social security numbers and military service numbers, etc.), residential and professional contact data (e.g., address and telephone numbers etc.), population demographics (e.g., gender and zip codes, etc.), military service-related data (e.g., branch of service and service dates, etc.), financial-related data (e.g., amount of historic benefit payments, etc.), claims processing codes and information (e.g., disability compensation and pension award codes, etc.), and other VA and non-VA Federal information.

Title 5, U.S.C. App. 3.

The records in this system of records are used for qualitative, quantitative, and other analyses used to support OIG reviews, investigations, audits, and healthcare inspections. The Inspector General has a statutory mission of detecting and preventing fraud, waste, abuse, and mismanagement in the Department of Veterans Affairs programs and operations and does so through a number of means. The OIG intends that its operational elements will utilize the least amount of data necessary to support a particular project or review.

Note:

To the extent that records contained in the system include individually-identifiable health information protected by 45 CFR parts 160 and 164 and 38 U.S.C. 7332, that information cannot be disclosed under any of the following routine uses unless there is also specific statutory authority in 38 U.S.C. 7332 and regulatory authority in 45 CFR parts 160 and 164 permitting disclosure.

1. Any records may be disclosed to appropriate agencies, entities, and persons under the following circumstances: When (1) it is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised; (2) the Department has determined that as a result of the suspected or confirmed compromise there is a risk of embarrassment or harm to the reputations of the record subjects, harm to economic or property interests, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the Department or another agency or entity) that rely upon the compromised information; and (3) the disclosure is made to such agencies, entities, and persons who are reasonably necessary to assist in connection with the Department's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such. This routine use permits disclosures by the Department to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38 U.S.C. 5724.

2. VA may, on its own initiative, disclose information in this system, except the names and home addresses of veterans and their dependents, which is relevant to a suspected or reasonably imminent violation of law, whether civil, criminal or regulatory in nature and whether arising by general or program statute or by regulation, rule or order issued pursuant thereto, to a Federal, State, local, tribal, or foreign agency charged with the responsibility of investigating or prosecuting such violation, or charged with enforcing or implementing the statute, regulation, rule or order. On its own initiative, VA may also disclose the names and addresses of veterans and their dependents to a Federal agency charged with the responsibility of investigating or prosecuting civil, criminal or regulatory violations of law, or charged with enforcing or implementing the statute, regulation, rule or order issued pursuant thereto.

3. Disclosure may be made to a Member of Congress or to a Congressional staff member in response to an inquiry of the Congressional office made at the written request of the constituent about whom the record is maintained.

4. Any system records disclosure may be made to the National Archives and Records Administration in records management inspections under title 44, U.S.C.

5. VA may disclose information from this system to a Federal agency to conduct research and data analysis to perform a statutory purpose of that Federal agency upon the prior written request of that agency, provided that there is legal authority under all applicable confidentiality statutes and regulations to provide the data and OIG has determined prior to the disclosure that VA and OIG data handling requirements are satisfied.

6. Any system records may be disclosed to individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to perform such services as VA may deem practicable for the purposes of laws administered by VA, in order for the contractor, subcontractor, public or private agency, or other entity or individual with whom VA has an agreement or contract to perform the services of the contract or agreement. This routine use includes disclosures by the individual or entity performing the service for VA to any secondary entity or individual to perform an activity that is necessary for individuals, organizations, private or public agencies, or other entities or individuals with whom VA has a contract or agreement to provide the service to VA.

7. Any system records disclosure may be made to the OMB in order for them to perform their statutory responsibilities for evaluating Federal programs.

8. VA OIG may disclose information in this system of records to the Department of Justice (DoJ), either on VA OIG's initiative or in response to DoJ's request for the information, after either VA OIG or DoJ determines that such information is relevant to DoJ's representation of the United States or any of its components in legal proceedings before a court or adjudicative body, provided that, in each case, the agency also determines prior to disclosure that disclosure of the records to the Department of Justice is a use of the information contained in the records that is compatible with the purpose for which VA OIG collected the records. VA OIG, on its own initiative, may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA OIG collected the records. In determining whether to disclose records under this routine use, VA OIG will comply with the guidance promulgated by the Office of Management and Budget in a May 24, 1985, memorandum entitled "Privacy Act Guidance--Update", currently posted at http://www.whitehouse.gov/omb/inforeg/guidance1985.pdf.

9. Disclosure to other Federal agencies may be made to assist such agencies in preventing and detecting possible fraud or abuse by individuals in their operations and programs.

Disclosure to consumer reporting agencies:

The Department will not make disclosures from this system of records to consumer reporting agencies.

Storage:

OIG's records in this system of records are maintained in an electronic format on VA's segregated server housed at VA's Consolidated Franchise Data Center, 1615 Woodward Street, Austin, TX 78772. Access to that electronic data is handled through the OIG's Data Analysis Division (53CT). All imported and exported OIG data is handled and housed via the provisions of current VA and OIG data security policies, procedures, and directives.