Appendix

THIS PAGE LEFT BLANK INTENTIONALLY.

Table of Contents

[**Module 1 Handouts 2**](#handouts)

[**1-1 uncle sam has all your numbers: Module 1**
3](#uncle-sam-has-all-your-numbers-module-1)

[**1-2 digital government: Module 1** 10](#digital-government-module-1)

[**1-3 identity thieves thrive in the information age: module 1**
15](#identity-thieves-thrive-in-the-information-age-module-1)

[**1-4 Web of lies: Module 1** 18](#web-of-lies-module-1)

[**1-5 federal computer week: module 1**
23](#federal-computer-week-module-1)

[**1-6 Suspect in mass. shooting rampage pleads not guilty: Module 1**
28](#suspect-in-mass.-shooting-rampage-pleads-not-guilty-module-1)

[**1-7 Security assessment tool: Module 1**
30](#security-assessment-tool-module-1)

[**Module 2 Handouts 34**](#handouts-1)

[**2-1 steps to protect your privacy**
35](#steps-to-protect-your-privacy)

[**Module 3 Handouts 37**](#handouts-2)

[**3-1 bomb threat checklist and handy reference card: module 3**
38](#bomb-threat-checklist-and-handy-reference-card-module-3)

[**3-2 password checklist: module 3** 41](#password-checklist-module-3)

[**3-3 Social Security Act 453** 42](#social-security-act-453)

[**3-4 internet insecurity: module 3**
55](#internet-insecurity-module-3)

[**Module 4 Handouts 57**](#handouts-3)

[**4-1 social security act 463** 58](#social-security-act-463-module-4)

[**4-2 case scenarios: Module 4** 61](#case-scenarios-module-4)

[**4-3 summary of privacy act: module 4**
65](#summary-of-privacy-act-module-4)

[**4-4 IRC SEC. 6103: Module 4** 67](#irc-sec.-6103-module-4)

[**4-5 IRC 7213: Module 4** 69](#irc-7213-module-4)

[**4-6 irc 7431** 71](#irc-7431-module-4)

[**4-7 IRC 7213** 73](#irc-7213-module-4-1)

# Handouts 

## uncle sam has all your numbers: Module 1

**Huge Net for Deadbeat Dads Catches Privacy Criticism**

**By Robert O\' Harrow Jr.**

**Washington Post Staff Writer**

**Sunday, June 27, 1999; Page A01**

As part of a new and aggressive effort to track down parents who owe
child support, the federal government has created a vast computerized
data-monitoring system that includes all individuals with new jobs and
the names, addresses, Social Security numbers and wages of nearly every
working adult in the United States.

Government agencies have long gathered personal information for specific
reasons, such as collecting taxes. But never before have federal
officials had the legal authority and technological ability to locate so
many Americans found to be delinquent parents \-- or such potential to
keep tabs on Americans accused of nothing.

The system was established under a little-known part of the law
overhauling welfare three years ago. It calls for all employers to
quickly file reports on every person they hire and, quarterly, the wages
of every worker. States regularly must report all people seeking
unemployment benefits and all child-support cases.

Starting next month, the system will reach further. Large banks and
other financial institutions will be obligated to search for data about
delinquent parents by name on behalf of the government, providing
authorities with details about bank accounts, money-market mutual funds
and other holdings of those parents. State officials, meanwhile, have
sharply expanded the use of Social Security numbers. Congress ordered
the officials to obtain the nine-digit numbers when issuing licenses \--
such as drivers\', doctors\' and outdoorsmen\'s \-- in order to revoke
the licenses of delinquents.

Enforcement officials say the coupling of computer technology with
details about individuals\' employment and financial holdings will give
them an unparalleled ability to identify and locate parents who owe
child support and, when necessary, withhold money from their paychecks
or freeze their financial assets.

\"They never get away from us anymore. It\'s just wonderful. . . . What
you\'re trying to do in child support is build a box, four walls, around
a person,\" said Brian Shea, the acting executive director of
child-support enforcement in Maryland. \"It has in some ways
revolutionized this business.\"

But privacy experts and civil libertarians say the scope of the effort
raises new questions about the proper line between aggressive public
policy and intrusive government snooping. In pursuing an objective that
is almost universally applauded, the government has also created
something that many Americans have staunchly opposed: a vast pool of
fresh personal information that could be used in a variety of ways to
monitor their lives.

\"What you have here is a compilation of information that is much better
and more current than any other data system in the U.S.,\" said Robert
Gellman, a lawyer and privacy specialist in the District. \"All of the
sudden we\'re on the verge of creating the Holy Grail of data
collection, a central file on every American.\"

**Uncle Sam Has All Your Numbers (Continued)**

Already lawmakers, federal agencies and the White House have considered
expanding the permitted aims of the system to include cutting down on
fraud by government contractors, improving the efficiency of the
government and pinpointing debtors, such as students who default on
government loans.

Under the system, every employer must send information about new hires
and quarterly wages to state child-support agencies. State officials
gather the data, along with information on unemployment benefits and
child-support cases, and then ship it to computers run by the
Administration for Children and Families. ACF officials then use
computers to sort and send back to state authorities reports about
people obligated to pay child support.

Government officials say the system is safe, accurate and discreet. They
also say it is secure. Because it has, among other safeguards, systems
that confirm the accuracy of Social Security numbers, officials say it
will not intrude into the lives of most people.

An examination of the program, however, shows that government officials
have played down or overlooked a variety of privacy and security
concerns as they worked to meet congressional deadlines.

The computer system that houses much of the data at the Social Security
Administration \"has known weaknesses in the security of its information
systems,\" according to a Dec. 31 report by the General Accounting
Office. And authorities have not studied the frequency of mistakes that
might arise from incorrect data, even though the system will enable
local child-support enforcement officials to routinely freeze a
parent\'s assets without an additional court hearing.

Few people know about the system, even though it was created through one
of the signature acts of Congress and the Clinton administration \-- the
Personal Responsibility and Work Opportunity Reconciliation Act of 1996,
the law that ended the federal guarantee of welfare payments. Much of
the congressional debate and news coverage at the time focused on the
broad policy and political implications of the new law.

Officials have not publicized their ability to obtain financial
information because they do not want to alert delinquents to the ability
of enforcement workers to seize or freeze financial assets, according to
Michael Kharfen, spokesman for the federal Administration for Children
and Families, which administers the program.

\"We\'re setting aside some of the courtesies in order to accomplish
what we\'re trying to do,\" said Kharfen, who described the network as
an \"unprecedented, vast amount of information that is updated
constantly.\"

He added: \"This is about getting financial support to the kids.\"

**A Boost for Some**

When welfare reformers on Capitol Hill and the White House approved the
system in 1996, their aim was to cut down welfare spending by boosting
child-support payments.

They had in mind people such as Stephanie Dudley and her son Robert, who
live in Farmington, Minn. Robert\'s father had split up with Dudley
shortly after the boy was born and drifted from place to place. He owed
\$350 a month in child-support payments, but it was hard tracking him
down and getting him to pay.

**Uncle Sam Has All Your Numbers (Continued)**

Officials found Robert\'s father \-- and then started withholding money
from his paycheck \-- after a new employer in Pennsylvania reported him
to the network. \"I literally was living from check to check,\" Dudley
said. \"I mean, that money literally put shoes on the kid\'s feet,
helped pay the rent.\"

Kathy Robins of Tazewell, Va., and her 7-year-old son, Dwight, never
received court-ordered child support until the system turned up his
father in North Carolina. Now she gets about \$120 a month, money she
plans to use to pay for a babysitter this summer. \"It\'ll help,\" she
said. \"I mean, it\'s better than I was getting before, which was
nothing.\"

Child-support advocates contend that fears about privacy are overblown
when weighed against such successes.

As of 1997, the latest year for which figures are available, more than
7.4 million delinquents owed more than \$43 billion in past child
support. The system has helped boost support payments from \$12 billion
in 1996 to \$14.4 billion last year, officials said. And in 1997, the
burgeoning system helped enforcement programs locate more than 1.2
million delinquents.

The system is essentially an electronic dragnet. It collects the names,
Social Security numbers and other data about every newly hired employee
in the nation from employers, who also must provide pay reports for most
wage-earning adults. States ship along the names and other identifying
information of people who receive state unemployment insurance.

The Administration for Children and Families, a part of the Department
of Health and Human Services, serves as a sort of clearinghouse that
automatically matches all of that information against a file of nearly
12 million child support cases to locate parents obligated to pay
support.

Then the agency provides information about those parents \-- no matter
whether they are behind on payments \-- to the appropriate state
enforcement workers. The idea is to track the parents across state
lines.

Supporters of the system note that Congress explicitly restricted access
to it. Those authorized to use the information include the Social
Security Administration, which can use the directory of new hires to
verify unemployment reports; the Treasury Department, which can use it
to cross-reference tax-deduction claims; and researchers, who gain
access only

to anonymous data.

Next month, financial institutions that operate in multiple states \--
such as Crestar Financial Corp., Charles Schwab & Co. and the State
Department Federal Credit Union \-- will begin comparing a list of more
than 3 million known delinquents against their customer accounts. Under
federal law, the institutions are obligated to return the names, Social
Security numbers and account details of delinquents they turn up.

The Administration for Children and Families will then forward that
financial information to the appropriate states. For security reasons,
spokesman Kharfen said, the agency will not mix the financial data with
information about new hires, wages and the like. Bank account
information will be deleted after 90 days.

In a test run this spring, Wells Fargo & Co. identified 72,000 customers
whom states have identified as delinquents. NationsBank Corp. found
74,000 alleged delinquents in its test.

**Uncle Sam Has All Your Numbers (Continued)**

Later this year, smaller companies that operate only in one state will
be asked to perform a similar service. Officials say most of these
institutions will compare their files against the government\'s. But
some operations that don\'t have enough computing power \-- such as
small local banks, credit unions and securities firms \-- will hand over
lists of customers to state officials for inspection. States can then
administratively freeze the accounts.

In California, more than 100 financial institutions have already handed
over lists of all their depositors to state officials, including names,
Social Security numbers and account balances, a state official said.

\"This is a major leap forward,\" said Nathaniel L. \"Nick\" Young Jr.,
director of child-support enforcement in Virginia, who estimates that
more than 200,000 Virginia parents owe up to \$1.6 billion in past
support. \"We are now into the electronic age.\"

**A New Standard**

Civil liberties activists say it would be a mistake to consider the
system solely in terms of finding bad parents and making them pay up.
They worry that the network \-- a massive expansion of earlier
child-support efforts \-- sets a new standard for data surveillance by
using computers to cross-reference hundreds of millions of personal
records about Americans.

Over the past quarter-century, since the Privacy Act was enacted in
1974, the federal government has tried to place limits on how its
officials could compare databases to find or profile people. And in
general, the government was supposed to limit data collection about
people who paid taxes, received a federal benefit, served in the
military or tangled with the judicial system.

Critics say this new effort leaps beyond those practices by
systematically creating centralized files about workers, wages and
families, and sifting through those files to find a relatively small
number of suspected deadbeats.

The new registry of child-support cases, for example, now requires the
names of all parents and children involved, even if they do not receive
public assistance or ask for help in getting a problem resolved. The
registry has information about nearly 12 million families.

There is also concern about the government\'s reliance on private
employers and financial institutions to watch citizens. A proposal last
year to require banks to routinely track customer transactions for signs
of criminal activity prompted an outpouring of protest. Regulators
ditched the plan, called Know Your Customer, this spring after
acknowledging they had misstepped.

Critics say this system in essence asks banks and other financial
companies to do the same thing. \"It really starts to blur that line
between the government and the private sector,\" said Deirdre Mulligan,
staff counsel at the Center for Democracy and Technology, a privacy and
civil liberties advocacy group in the District.

A review of the swift development of the system has turned up still
other questions about whether the government paid enough attention to
privacy \-- particularly at a time when the issue has become a flash
point in public policy debates across the country.

As the system was phased in, officials posted federally required notices
only in the Federal Register. No additional information has been added
to W-4 forms that people must fill out when taking a new job.

**Uncle Sam Has All Your Numbers (Continued)**

Linda Ricci, a spokeswoman for the Office of Management and Budget,
defended the approach. She said people received notice when the program
was publicly debated by Congress before its approval in 1996. She said
existing language on the W-4 forms \"makes clear the data will be shared
with law enforcement for a variety of purposes.\"

In addition to the issues raised by the GAO about the security of
computer systems gathering and transmitting personal information, the
systems in about a dozen states also have not been certified by federal
officials as meeting security and privacy guidelines.

But government officials say they are confident the security is
adequate. Ricci noted that the GAO based its report on a private audit
conducted at the request of the Social Security Administration. It found
no security breaches, she said, and the agency has taken many steps to
address concerns.

Officials in OMB and the Administration for Children and Families sought
to allay fears about mistakes. While acknowledging they have no idea
about the likely rate of errors because no study was conducted,
officials said the program verifies the accuracy of any Social Security
numbers before sending data along to the states.

In addition, officials said, individuals in every state will have an
opportunity to appeal administrative actions. Virginia, for instance,
will give parents up to 10 days before seizing assets, a state official
said.

Critics wonder what might happen to someone who is away on vacation or
business. \"A Social Security number is not a bullet-proof identifier.
There are always going to be mistakes,\" said Mary J. Culnan, a business
professor at Georgetown University\'s McDonough School of Business, who
drew an analogy to problems with the accuracy of credit reports in the
early 1990s.

Finally, the operation appears to be at odds with the Clinton
administration\'s recent push to make privacy a priority. Last month,
Clinton called on banks and other financial institutions to give
consumers more control over how their information is gathered and used.
\"President Clinton believes that consumers deserve notice and choice
about the use of their personal information,\" said a White House memo
about the event.

Ricci said the administration distinguishes between data collection
efforts by government for issues such as child support and those of
business. \"There\'s no opting out for law enforcement. Individuals
don\'t have an option about paying taxes or court-ordered child
support,\" she said. \"That\'s just the law.\"

**Critics Unappeased**

The assurances of such officials do little to assuage the fears of
people who worry about the potential ills of having a government that
closely monitors its citizens.

Taylor Burke, vice president of Burke & Herbert Bank & Trust Co. in
Alexandria, said he doesn\'t believe banks should be asked to watch
their customers so closely on behalf of the government. \"We\'re all
good citizens. But it doesn\'t mean we spy on our neighbors,\" Burke
said. \"It\'s really scary.\"

**Uncle Sam Has All Your Numbers (Continued)**

Such anxieties have been underscored by mistakes child-support
enforcement workers have made in recent years. Last year, officials in
Virginia had to apologize to 2,300 parents for misidentifying them as
delinquent and announcing they would lose their hunting and fishing
licenses. Officials attributed the mistake to a computer programming
error. \"We\'re not perfect,\" a state official said at the time.

California officials also misidentified hundreds of men after it began
the federally mandated, data-driven crackdown on deadbeats. In some
cases, they confused men who had similar names.

\"In my estimation, this is going to be nothing more than a huge
invasion of privacy,\" said James Dean of Oshkosh, Wis., who was unable
to get a fishing license because he refused to provide his Social
Security number.

Connie White, the system-development manager for the Virginia division
of Child Support Enforcement, said she understands such qualms. But she
believes the system is ultimately in the best interests of society. \"I
have problems with the Big Brother concept myself,\" White said. \"But
the need for people to support their children far outweighs their need
for privacy.\"

**HOW INFORMATION IS COLLECTED AND PROCESSED**

As part of the welfare overhaul in 1996, Congress mandated a national
data-collection system to help locate child-support delinquents across
state lines. It requires state officials to gather and send data about
new hires, quarterly wages for employees, people who receive
unemployment benefits and all child-support cases to federal officials.
Those officials then use computers to sort and send back to proper state
authorities reports about people obligated to pay child support.

**SOURCES OF INFORMATION:**

EMPLOYERS

Wages

New hires

Send data about individual wages and all new employees, including name,
Social

Security number and other information.

STATE

Unemployment

Child support cases

**Uncle Sam Has All Your Numbers (Continued)**

Information on all people who receive state unemployment payments; data
for child

support cases includes names of parents and children.

FINANCIAL INSTITUTIONS

Delinquent accounts

Information includes names, Social Security numbers, and account
information

such as for savings, money market accounts and others.

CLEARINGHOUSES:

STATES

Child support enforcement offices

Data on child support cases, wages, information on new hires

U.S. Administration for Children and Families

Information on new hires, wages, child support cases and financial data

STATES

Child support enforcement offices

ENFORCEMENT:

Local child support enforcement offices

Withhold wages

Freeze/seize assets

Monitor parents who owe

Provide info to state and federal authorities

© Copyright 1999 The Washington Post Company

## digital government: Module 1

**June 1, 2001**

**DIGITAL GOVERNMENT**

**Prying Eyes**

**By Shawn Zellar**

**letters@govexec.com**

*The information sharing that makes e-government possible is producing a
backlash of concerns about privacy.*

Nick Young can't say enough about the benefits of the federal
government's new hires database. As director of Virginia's child support
enforcement agency, he takes pride in the fact that the database has
helped him put millions of additional dollars in the pockets of parents
raising children on their own.

Thanks to the 1996 Personal Responsibility and Work Opportunity Act,
better known as welfare reform, all Virginia employers---indeed all
employers in the United States---must tell the federal government
whenever they hire a new employee. The new hires database, officially
known as the National Directory of New Hires, includes not only
information about newly hired employees, but quarterly wage reporting
for every citizen and noncitizen who works for wages in the United
States. The only people it misses are the self-employed. Every three
months, employers send the Administration for Children and Families,
part of the Health and Human Services Department, an update on each
employee, listing his or her salary. State child support agencies can
check the database to find parents who haven't paid the money they owe.
Furthermore, state agents can track the deadbeat parents across state
lines, a nearly impossible task before the database was created. The
state agents can then order the deadbeat parent's employer to withhold a
chunk of the employee's paycheck and send it to the child support
agency.

"Seventy percent of my payments come from income-withholding," says
Young. "It's a marvelous way to do it." Yet, Young fears that this
marvelous tool is at risk. "We're about one bad incident away from
losing that database," he says. "If we don't safeguard that database,
someone is going to say 'Whoa, we didn't mean to give you all that
data.'"

That's why Young fought hard to convince policy-makers not to allow the
Education Department to use the new hires database to track down student
loan defaulters. Young, as president of the National Council of Child
Support Directors, lobbied David Ross, President Clinton's child support
director. But his efforts failed. In 1999, the Education Department won
congressional approval for its plan, which budget analysts expect will
yield an additional \$1 billion in loan payments for the U.S. Treasury.

**Protests Over Privacy**

The use of databases and information sharing among federal agencies, or
between federal and state government, and even between government and
private industry, is reshaping the way government provides services. In
almost every way, the changes are for the better, improving efficiency
and the quality of government services. In the case of child support,
it's played a key role in helping states more than double the amount
they've been able to collect from delinquent parents.

**Digital Government (Continued)**

But the creation of databases and the use of those databases for an
ever-expanding list of purposes has raised concerns among privacy
advocates. The notion that government knows where we work and how much
we earn, where we live and how much money we have in our bank accounts,
rubs many privacy advocates the wrong way. They say that these databases
make citizens more vulnerable to identity theft, that they encroach on
Americans' constitutional right protecting us from unfair searches and
seizures, and that they violate that fundamental tenet of the American
dream, the right to be left alone.

In April, the General Accounting Office rang some alarms with its report
"Record Linkage and Privacy: Issues in Creating New Federal Research and
Statistical Information" (GAO-01-126SP). In numerous cases, GAO found,
the government has linked records from one government database with
those of another database, often without requesting permission from
those whose personal information is being examined. For example, in
order to create models of the long-term health of the Social Security
and Medicare programs, the Congressional Budget Office has sought access
to records compiled by the Census Bureau, the IRS and the Social
Security Administration.

Similarly, the Health and Human Services Department's Substance Abuse
and Mental Health Services Administration funds state efforts to measure
program outcomes by linking records, GAO says. For example, program data
on people treated for drug addiction are paired with their employment or
criminal records.

In another GAO example, university researchers, working with a grant
from the National Longitudinal Study of Adolescent Health, surveyed
teenagers on a wide variety of topics. The teens were asked to give the
names of several friends. By linking surveys of friends, the researchers
were able to gauge peer influences in teens' lives. Similarly, the
investigators visited students' homes and used a handheld
global-positioning device to track their locations, thus enabling the
researchers to compare data for teens living near each other.

GAO researcher Judy Droitcour says her office launched the survey of its
own accord. "We realized that the general public really wasn't aware of
linkage, and probably many policy-makers weren't aware." GAO doesn't
make judgments about whether the programs violate privacy, she says, but
the agency does provide recommendations to agencies about protecting
privacy while running linkage programs. "No. 1 is getting permission
from the individuals involved," Droitcour explains.

**In Hot Water**

Those recommendations might come in handy. Since the revolution in
e-government began in the early 1990s, numerous government agencies,
both state and federal, have found themselves in hot water with privacy
activists. In almost every case, the government's intentions were good.
In 1997, activists pounced on the Social Security Administration when
SSA began allowing citizens to access their Social Security records over
the Internet. Likewise, the FBI faced an uproar last year when it
acknowledged the existence of Carnivore, a computer program that allows
law enforcement officers to read e-mail sent by suspected criminals. The
Office of National Drug Control Policy got hit when it admitted to
tracking the Web-surfing habits of visitors to its Internet site
promoting the office's anti-drug media campaign.

**Digital Government (Continued)**

"The federal government is, in fact, the largest collector, user and
sometime abuser of citizens' personal and private information,"
according to a March report published by the libertarian privacy-rights
group Privacilla, which is supported by the Heritage Foundation,
Citizens Against Government Waste, Americans for Fair Taxation and other
groups. From September 1999 to February 2001, federal agencies announced
47 times that they would exchange and merge personal information from
databases about American citizens, according to the report. Among the
findings: The Education Department's Office of Student Financial
Assistance has arranged to exchange information not only with HHS, but
also with the IRS, the Housing and Urban Development Department and the
U.S. Postal Service in its quest to track down student loan defaulters.
The Veterans Affairs Department also is accessing Postal Service and IRS
databases to "locate taxpayers who owe delinquent debts to the federal
government as a result of their participation in benefit programs
administered by VA." Likewise, the Small Business Administra-tion is
tracking down federal employees who have defaulted on SBA loans, using
Defense Department and HUD databases.

In April, Knight-Ridder newspapers reported that the Social Security
Administration is cooperating with other federal agencies, such as the
Education Department and the VA, to force delinquent debtors to pay the
government what they owe. And for the first time in its history, the SSA
is garnisheeing the Social Security benefits of debtors. The initiative
is the result of the 1996 Debt Collection Improvement Act, and is only
possible, according to SSA administrators, because of new technology
enabling the agency to compare its database information with that of
other agencies.

"Even the best-intended government programs have, as part of their
design, the removal of citizens' power over information about
themselves," according to the Privacilla report. "In the private sector,
by contrast, privacy can be protected through a combination of educated
consumer choice."

**Accelerating E-Government**

A recent survey compared the public's attitude toward electronic
government with that of government employees and found wide
discrepancies. Responding to the question of whether government should
proceed quickly or slowly in implementing e-government, 65 percent of
the public said the government should move slowly and carefully consider
concerns about privacy and security. Government employees, by contrast,
favored moving quickly by a margin of 56 percent to 31 percent, citing
opportunities for improved services, communication and efficiency in
government. Pollsters Peter D. Hart and Robert M. Teeter conducted the
survey in August 2000 for the Council for Excellence in Government.

Attitudes among government employees and the general public also tend to
diverge on the issue of security. Child support administrators like
Wise, for example, say they are confident that the new hires database is
secure. But two-thirds of the public respondents to the Hart/Teeter
survey expressed concerns about the security of government data. There
is evidence to support those concerns. For example, House Majority
Leader Dick Armey, R-Texas, wrote to the House Veterans Affairs
Committee in April to express dismay over reports that confidential
veterans information can be widely accessed via the Veterans Affairs
Department computer system.

But the beneficial nature of many government information-sharing
programs has enabled them to slide through Congress with relatively
little debate. The child support enforcement mechanisms enacted in 1996
provide a clear example. "No one wanted to become the congressman who
opposes child support," says one Capitol Hill staffer who was skeptical
of the effort. The bill coasted through Congress with scant opposition,

**Digital Government (Continued)**

The enforcement tools that resulted are truly extraordinary. The new
hires database now rivals in size the databases maintained by the IRS,
the Census Bureau and the Social Security Administration. Because the
agency provides quarterly wage reports, it now has access to better data
on Americans' earnings than the IRS, which reports only on an annual
basis. Maya Bernstein, an associate at the law firm of Fried, Frank,
Harris, Shriver and Jacobson, who previously oversaw privacy issues at
the Office of Management and Budget, is disturbed by the fact that
information about any American who changes jobs is placed in the
database, though only a small percentage of that group actually owes any
child support. "You have over 200 million records, and last I checked we
were talking about 6 million people who were noncompliant with their
child support obligations," she explains.

In addition, the law requires that private financial institutions allow
state child support agencies to access their records and put liens on
funds held by deadbeat parents. The law requires states to begin
collecting Social Security numbers when citizens apply for drivers'
licenses, professional licenses and even hunting licenses. States can
then deny licenses to delinquents until they pay up.

At the same time, the Administration for Children and Families has
backed states that have taken their enforcement mechanisms even further.
For example, ACF provided seed money to Rhode Island to help the state
set up the Child Support Lien Network. The network enables state child
support administrators to access insurance company records and place
liens on settlements due delinquent parents. The 1996 welfare bill gave
child support agents subpoena power over insurance company records. Five
other New England states have joined the Rhode Island network, and Rhode
Island's child support division plans to take its network national in
the coming year.

By drafting private industry to track down child support evaders, the
government has created unprecedented mandates on industry. If it's all
right to use insurance company records to track child support evaders,
why not use the companies to track down student loan defaulters, or tax
evaders, or use the companies' records for myriad other government
purposes? In the case of child support, the companies have worked hard
to ensure that the government's needs are met in the most cost-effective
manner. But could child support be just the beginning? "Child support is
an area that has been given a lot of power to collect outstanding
monies," says one insurance company executive. "If the same types of
laws are passed for other types of obligations, we would have no choice
but to participate."

**Seeking Safeguards**

Meanwhile, other government agencies are already itching to gain access
to the new hires database. Some insiders believe the Education
Department was just the beginning. The new hires database is just too
substantial a resource for the government not to use it for other
purposes, explains Bernstein. "Education is just the first to get on
board.

There will be more." Bernstein cites a 1998 report issued by the federal
government's inspectors general that said the database should be
available to every federal agency. That concerns Bernstein, whose job at
OMB required her to ensure the compliance of agencies with the 1974
Privacy Act, which establishes the government's responsibilities in
safeguarding data about citizens. "There is a principle built into the
Privacy Act that information collected for one purpose shouldn't be used
for another purpose without the person's consent," she notes.

**Digital Government (Continued)**

That's a primary reason Michigan Secretary of State Candice S. Miller, a
Republican, decided to sue the federal government last year to avoid
implementing the 1996 Personal Responsibility Act requirement that
orders states to collect Social Security numbers from applicants for any
state license. "The Secretary of State is opposed to the continued
proliferation of the Social Security number beyond its intended
purpose," says Anne Corgan, director of the Michigan State Department's
legal services bureau. "The problem is that the number is personal
information, which is the key to unlocking your identity. It puts people
at risk that their identity can be stolen."

Indeed, identity theft is the most concrete of the possible
repercussions that result from the increased availability of personal
information. With access to a Social Security number and some other
basic identifying information, a thief can procure credit cards in
another person's name or access his or her bank account. Congress has
held hearings on the problem, but has taken no action.

Still, no other state has raised such concerns. And even in Michigan,
Gov. John Engler, also a Republican, supports the new enforcement tools,
as does the state's child support agency.

Engler and other supporters of Social Security number collection point
to results. For example, when President Clinton took office in 1992,
child support agencies collected \$8 billion from negligent parents. By
1999, that figure was \$19 billion. Though just getting under way, the
financial institution data match program has revealed nearly 1 million
accounts held by deadbeat parents since August 1999 with a total value
of \$3 billion. Jack Murphy, administrator of Rhode Island's Child
Support Lien Network, says his program offers the potential for
collections of \$2 billion per year. Across the United States, children
and single parents are benefiting, says Laura Kadwell, president of the
National Child Support Enforcement Association. "We in the child support
enforcement world are very self-righteous about our mission. We are an
agency that gets money to low-income families. It's hard to point out a
more important purpose for government, and we want to preserve our
ability to do that. We can't perform our mission without these tools."

But Kadwell acknowledges it's difficult to argue that child support
agencies alone should have access to powerful tools like the new hires
database. "I shared \[Virginia child support chief Nick Young's\]
concerns about the student loan agency gaining access to the database,
because we want to preserve our right to collect child support using
these tools," says Kadwell. "But it's hard to say that we should have
the database and only us. It's easy to see other legitimate government
interests in using the data."

## identity thieves thrive in the information age: module 1

**Identity Thieves Thrive in Information Age**

**Rise of Online Data Brokers Makes Criminal Impersonation Easier**

**By Robert O\'Harrow Jr.**

**Washington Post Staff Writer**

**Thursday, May 31, 2001; Page A01**

The identify thieves began their scam the old-fashioned way, stealing
card statements, new bank checks and other documents from mailboxes in a
neighborhood just south of Portland, Ore.

But their operation took a high-tech turn that confirmed what law
enforcement authorities and privacy specialists have long suspected:
Criminal groups, like legitimate businesses, are using commercial online
data brokers, which collect and sell personal information.

Using an America Online e-mail account and one of the stolen credit card
numbers, the thieves paid \$25 to \$280 for reports containing Social
Security numbers, employment information and driving records via e-mail,
according to documents and interviews. They used those details to order
more credit cards, create a phony driver\'s license and begin plundering
at least two bank accounts.

\"What has taken me a lifetime to build \-- my trust, integrity and my
identity \-- has been tainted,\" said Rita Johnson, whose identity and
credit card were used to order the reports. \"I don\'t know if I\'m
dealing with a 14-year-old messing around with a computer or if I\'m
dealing with organized crime.\"

Law enforcement officials said the case is especially unsettling because
reports available from hundreds of brokers on the World Wide Web can
serve as Information Age keys in the hands of criminals.

There\'s no way to know how often commercial brokers are used in such
schemes. But brokers acknowledge, in interviews and documents filed with
Securities and Exchange Commission, that they unwittingly sell dossiers
online to people using fraudulent credit cards and posing as others.

\"Although information brokers provide a legitimate service, we are
concerned that bad actors and practices by some in the industry may be
fueling identity theft,\" Brad Blower, assistant director of financial
practices division at the Federal Trade Commission, said when told about
the case.

Some law enforcement and regulatory officials say identity theft has
become one of their most pressing problems. The federal Office of the
Comptroller of the Currency recently estimated that there are half a
million victims of identity theft per year in the United States.

The Justice Department told Congress last week that Internet fraud,
including identity theft, is one of the nation\'s fastest-growing
white-collar crimes. And John G. Huse Jr., the Social Security
Administration\'s inspector general, testified that misuse of Social
Security numbers in fraudulent activity is \"a national crisis.\"

The power \[the Social Security number\] wields \-- power to engage in
financial transactions, power to obtain personal information, power to
create or commandeer identities \-- makes it a valuable asset and one
that is subject to limitless abuse,\" Huse said.

**Identity Thieves Thrive in Information Age (Continued)**

Congress is struggling over how to address the misuse of personal
information, in part because lawmakers don\'t want to discourage the use
of the Internet or the free flow of information.

Congress in 1998 made it a federal crime to assume the identity of
another, and a year later it outlawed the practice of some brokers who
use trickery \-- known as pretext calling \-- to obtain confidential
financial information. The FTC recently charged three brokers with
violating the law.

While the identity thieves in the Lake Oswego, Ore. case somehow
obtained access to confidential details about bank accounts, it\'s not
clear whether they bought the information from brokers using illegal
means.

Brokers of all sizes generally offer legitimate customers information to
review job candidates, track down debtors, or find relatives or friends.
Customers include banks, insurance companies, lawyers, journalists and
law enforcement agencies.

Most brokers sell data collected from public records, or from details
consumers provide on such forms as warranty cards and credit
applications. When brokers sell reports online, they often have no way
to verify the identity of buyers who claim to be checking on a
prospective nanny, tenant or employee.

\"We\'re as cautious as we\'re able to be on a free and open medium such
as the Internet,\" said Mal Ransom, an executive vice president at US
Search.com, whose company disclosed in a recent SEC filing that some of
its customers had used fraudulent credit-card numbers. He estimated that
the company sold about 500,000 reports to consumers last year \-- 80
percent of them over the Internet. \"Online, we have little protection
for ourselves,\" he said.

That\'s a little solace for Johnson and other victims of the unknown
thieves in Oregon. \"It\'s very invasive, because I\'m so out of control
of it,\" said Sue Nelson, a caterer whose information was bought from at
least two brokers by someone posing as Johnson.

The thieves moved money from Nelson\'s daughter\'s bank account into her
own checking account and then starting writing bogus checks. They also
created a driver\'s license using her name and ID number.

The case began when Johnson, a bank-fraud investigator, noticed that her
credit card statement had not arrived at the usual time in March and
when it did, it contained charges from companies she had never heard of.
One was from YourOwnPrivateEye.com, a Los Angeles broker, for three \$25
reports about another woman\'s name and past and current addresses,
Johnson said.

The site\'s owner, Sam Rokni, declined to discuss the case but said that
every couple of days someone buys a report using a stolen credit card.

US Search.com then charged Johnson \$84.95 for a report that contained
another man\'s phone number and the names of his neighbors and the owner
of his property.

Information Search Inc. in Baltimore, a broker charged by the FTC with
using pretext calling to obtain individual\'s financial data, sold
Social Security numbers, criminal records and driving records to the
thieves.

The person posing as Rita Johnson claimed in one instance to be a mother
checking out the background of a nanny. For another order, the person
posed as a property manager checking out a prospective tenant.

**Identity Thieves Thrive in Information Age (Continued)**

\"We do more good that we do harm,\" said David Kacala, owner of
Information Search, acknowledging that he sometimes unwittingly sells to
people using others\' credit card numbers.

Darryl Wrisley, a Lake Oswego police officer, said he is seeking a
subpoena for records from America Online in an effort to identify the
people involved. He said the combination of the Internet, information
brokers and fraud artists is a dangerous one.

\"For the Crooks, it\'s great because they can use anybody\'s card
number. They don\'t have to be verified. They don\'t have to be seen, so
they don\'t have to be identified physically. They don\'t have to sign
anything,\" Wrisley said.

Financial damage in the case has been limited, in part because Johnson,
the fraud investigator, acted so quickly on her suspicions. But she and
other victims are afraid that their troubles are just beginning. \"It\'s
not an open-and-shut case,\" she said. \"It\'s just ongoing, and it
could be ongoing for months or years.\"

## Web of lies: Module 1

1

**NYC DEPARTMENT OF**

**CONSUMER AFFAIRS**

**[The Web of Lies]{.underline}**

**A Consumer's Guide to Internet Scams**

**Rudolph W. Giuliani, Mayor**

**Jane S. Hoffman, Commissioner**

**Consumer News**

2

**Introduction**

Online services and access to the Internet provide consumers with a wide
world of information, and sellers with a new way to promote their
products or services. \"Online banking\", the ability to pay parking
tickets without leaving your desk chair, as well other conveniences,
will spur an increasing number of consumers to do business by computer.
Unfortunately con artists also have recognized the potential of
cyberspace. The same old scams that have been conducted via mail or
phone for years, can now be found on the Internet with new high-tech
twists. Technology is resulting in new ways to commit crimes against
consumers. That is why we have provided information that will help keep
consumers safe while surfing on this web of lies.

**[WEB AUCTIONS]{.underline}**

**Internet Auction fraud involves:**

**Non-delivery** -- The seller places an item up for bid when in fact
there is no item at all. As a

result, the item is never delivered to the buyer after he/she purchases
the item. Additionally

if the buyer pays by credit card the seller obtains their name and
credit card number.

**Misrepresentation** -- The seller's purpose is to deceive the buyer as
to the true value of the

item. This can be as simple as listing false information about the item
that is up for bid.

**Fee stacking** - The seller adds hidden charges to the item after the
auction is over to obtain

more money. Instead of a flat rate for postage and handling the seller
adds separate charges

for postage, handling and the shipping container. As a result the buyer
has now paid a lot

more for the item than what he/she had anticipated.

**Black-market goods** -- Some sellers offer black-market goods for sale
on Internet auction sites.

These goods include copied software, music C's, videos, etc. The goods
are delivered without a

box, warranty or instructions.

**Multiple bidding** --This occurs when a buyer places multiple bids
(some high and some

low) on the same item using different aliases. The multiple high bids by
the same buyer

cause the price to escalate, which scares off other potential buyers
from bidding. Then in

the last few minutes of the auction the same buyer withdraws their high
bids, only to purchase

the item with their much lower bid.

**Shill bidding** -- This is intentional fake bidding by the seller to
drive up the price of his/her

own item that is up for bid.

**Web of Lies (Continued)**

**How to avoid Internet Auction Fraud:**

-   Understand as much as possible about how the auction works, what
    your obligations are as a buyer, and what the seller's obligations
    are before you bid.

-   Find out what actions the web site/company takes if a problem occurs
    and consider insuring the transaction and shipment.

-   Learn as much as possible about the seller, especially if the only
    information you have is an e-mail address. If it is a business,
    check the Better Business Bureau where the seller/ business is
    located.

-   Examine the feedback on the seller.

-   Determine what method of payment the seller is asking from the buyer
    and where he/she is asking to send payment.

-   Ask the seller about when delivery can be expected and if there is a
    problem with the merchandise is it covered by a warranty or can you
    exchange it. Find out if shipping and delivery are included in the
    auction price or are additional costs so there are no unexpected
    costs. There should be no reason to give out your social security
    number or drivers license number to the seller.

**[ONLINE INVESTING]{.underline}**

You should be skeptical of investment opportunities you learn about
through the Internet. When you see an offering on the Internet --
whether it\'s on a company\'s web site, in an online newsletter, on a
message board, or in a chat room -- you should assume it\'s a scam until
you\'ve done your homework and proven otherwise.

**Pump and Dump Schem**e: People buy a stock, recommend it to thousands
of investors driving the price up as a result as a quick spike in the
price followed by an equally quick downfall. Early investors sell the
stock at its peak price.

**How to avoid Internet Investment Fraud:**

· Find out if the investment is registered by contacting the SEC.

· Find out if the person or firm selling the investment is licensed by
calling the NASD Regulation hotline at (800) 289-9999.

· If the investment sounds too good to be true, it probably is. Never
invest in an opportunity that promises "risk-free" or "guaranteed"
returns.

**PYRAMID SCHEMES/MULTI-LEVEL MARKETING**

Pyramid schemes promise consumers or investors large profits based
primarily on recruiting others to join their program, not based on
profits from any real investment or real sale of goods to the public.
Some schemes may purport to sell a product, but they often simply use
the product to hide their pyramid structure. Most consumers never see a
check after sending an initial payment. There are two tell-tale signs
that a product is simply being used to disguise a pyramid scheme:
inventory loading and a lack of retail sales.

**Web of Lies (Continued)**

**[TRAVEL/VACATION]{.underline}**

Travel and vacation scams defraud consumers out of millions of dollars
each month. Many offers require you to pay upgrade costs to receive the
actual destinations, accommodations, cruises or dates you were promised.
The offers often have written misrepresentations, high-pressure sales
tactics, are designed to appeal to anyone who is looking for a getaway
and include contradictory follow-up material.

**How to Protect Yourself Against Travel Scams:**

-   Be wary of \"great deals\" and low-priced offers.

-   Do not be pressured into buying.

-   Ask detailed questions. If the salesperson cannot give you detailed
    answers, hang up.

-   If you decide to buy, find out the name of the travel provider.

-   Get all information in writing before you agree to buy.

-   Do not give your credit card number or bank information over the
    phone unless you know the company.

-   If you charged your trip to a credit card, you may dispute the
    charges by writing to your credit card issuer.

**[IDENTITY THEFT]{.underline}**

Identity theft occurs when a criminal steals the identity of an innocent
consumer by gaining access to crucial personal information. Such
information could come from a Social Security number, a date of birth,
or bank account information. The thief then uses that information to
establish phony accounts under the false identity. The most common forms
of identity theft are credit card fraud and the opening of unauthorized
utility accounts, like phone or electric service. Identity thieves can
also use personal information to open false bank accounts or make
unauthorized withdrawals from existing accounts, obtain personal or
other types of loans, or even file for government benefits under the
false identity.

**How to avoid Identity Theft:**

Be careful about giving out your personal information. For example,
don\'t give out personal identifying information (SSN, date of birth,
mother\'s maiden name) to someone over the phone (or the Internet) when
you haven\'t initiated the transaction. And don\'t carry your Social
Security card (or your children\'s SSNs) in your wallet. Put passwords
(NOT your mother\'s maiden name) on credit card and bank accounts, to
make it harder for an ID thief to make changes to, or \"takeover,\" your
account. Order your credit reports once a year from each of the three
national credit bureaus. That way you\'re likely to catch any identity
theft before it gets out of hand \-- and not when you\'re waiting for a
mortgage application to be approved.

**If you discover you have been a victim of Identity Theft:**

-   Call the fraud departments of all three credit bureaus. Ask them to
    put a \"fraud alert\" on your file (this tells creditors to call you
    before they open any more accounts in your name). Also, ask for a
    copy of your credit report, and ask the credit bureau to remove any
    fraudulent or incorrect information.

-   Contact the credit grantors involved - e.g., the bank or credit card
    issuers who opened the fraudulent account or permitted access to
    your existing account. Immediately close all affected accounts.

-   Contact your local police, and ask to file a report. Even if the
    police can\'t catch the identity thief, having a police report can
    help you in clearing up your credit records later on.

**Web of Lies (Continued)**

**[TIPS ON HOW TO AVOID INTERNET FRAUD:]{.underline}**

**Do Not Judge by Initial Appearance**s. It may seem obvious, but
consumers need to remember that just because something appears on the
Internet - no matter how impressive or professional the Web site looks -
doesn\'t mean it\'s true. The ready availability of software that allows
anyone, at minimal cost, to set up a professional-looking Web site means
that criminals can make their Web sites look as impressive as those of
legitimate e-commerce merchants.

**Be Careful About Giving Out Valuable Personal Data Onlin**e. If you
see e-mail messages from someone you don\'t know that ask you for
personal data - such as your Social Security number, credit-card number,
or password - don\'t just send the data without knowing more about
who\'s asking. Criminals have been known to send messages in which they
pretend to be (for example) a systems administrator or Internet service
provider representative in order to persuade people online that they
should disclose valuable personal data. While secure transactions with
known e-commerce sites are fairly safe, especially if you use a credit
card, nonsecure messages to unknown recipients are not.

**Be Especially Careful About Online Communications With Someone Who
Conceals His True Identit**y. If someone sends you an e-mail in which he
refuses to disclose his full identity, or uses an e-mail header that has
no useful identifying data (e.g., \"W6T7S8@provider.com\"), that may be
an indication that the person doesn\'t want to leave any information
that could allow you to contact them later if you have a dispute over
undelivered goods for which you paid. As a result, you should be highly
wary about relying on advice that such people give you if they are
trying to persuade you to entrust your money to them.

**Watch Out for \"Advance-Fee\" Demand**s. In general, you need to look
carefully at any online seller of goods or services who wants you to
send checks or money orders immediately to a post office box, before you
receive the goods or services you\'ve been promised. Legitimate startup
\"dot com\" companies, of course, may not have the brand-name
recognition of long-established companies, and still be fully capable of
delivering what you need at a fair price. Even so, using the Internet to
research online companies that are not known to you is a reasonable step
to take before you decide to entrust a significant amount of money to
such companies.

**[GENERAL INTERNET TIPS]{.underline}**

-   Instruct your children to NEVER give out any personal information
    over the Internet, such as whole names, addresses, phone numbers,
    school names or photographs; ·Tell your children not to respond to
    any messages that make them feel uncomfortable and to let you know
    about them. Do not take other users\' identities for granted.
    Remember that the online world is in many ways an anonymous one.
    Online user profiles and personal information provided by others
    could be more fiction than fact. When first joining a chat room or
    news group, read along for a while before joining the conversation
    to get a feel for the discussion and participants. If the newsgroup
    or chat room has a charter or FAQ (which stands for \"Frequently
    Asked Questions\"), you should read it before joining in.

-   E-mail is not always private - While most e-mail is only read by the
    sender and recipient, in rare cases others may have access to it.
    Also, one incorrect letter in an e-mail address can send the message
    to the wrong recipient. It is also possible that others will
    intentionally or inadvertently forward your message on to others.
    Unless you are encrypting your e-mail, think of it like a post card
    when it comes to privacy. A good rule of thumb is not to send a
    message you would not want your children, parents or boss to see.

> **Web of Lies (Continued)**

-   Be a good consumer. It is impossible to \"kick the tires\" of most
    products purchased online. Make sure you are comfortable with a
    company\'s return and shipping policies, and remember that credit
    card purchases are protected under the Fair Credit Billing Act. When
    providing credit card information, make sure information is sent to
    a secure server. Use of secure servers is automatic in major Web
    browsers, and most Web sites that support them will clearly mark
    that option. Make sure you get a message acknowledging that a secure
    server is in use before sending information.

-   Protect your password. People can use your online password to log on
    to your Internet account, send mail from it or otherwise run up
    expenses. Use a combination of letters, numbers and symbols for your
    password, change it frequently and do not share it with anyone. Be
    careful about making purchases with an ATM/Debit card they are not
    afforded the same protection as a credit card.

**[AVOIDING INTERNET SCAMS]{.underline}**

-   Do not judge reliability by how nice or flashy a website may seem.

-   Know that people in cyberspace may not always be what they seem.

-   Take your time to decide.

-   Understand the offer.

-   Check out the company's track record.

-   Be careful of whom you give your financial or other personal
    information.

-   Do not respond to bulk emails.

-   Always think twice before you invest your money in an opportunity
    you learn about over the Internet.

-   Make sure the company has a phone number and a physical address.

-   Always use common sense. If you have a gut feeling that something is
    not legitimate, you are probably right.

**[AGENCY CONTACTS]{.underline}**

**For Web Auction Fraud, contact:**

FBI/Dept of Justice

Internet Fraud Complaint Center

http://www.ifccfbi.gov

\(202\) 324-3000

**For Pyramid Schemes, Identity Theft, or Travel and Vacation Fraud,
contact:**

Federal Trade Commission

http://www.ftc.gov

(877)FTC-HELP

**For Online Investing Fraud, contact:**

U.S. Securities and Exchange Commission

http://www.sec.gov

(202)942-7040

## federal computer week: module 1

**FEDERAL COMPUTER WEEK**

**The state of surveillance**

By William Matthews

June 18, 2001

The Internal Revenue Service knows who you are, where you live, where
you work, how much you earn, whether you're married, have kids, own a
house, give to charity, have investments and more.

The Department of Health and Human Services receives quarterly reports
on where you work and how much you make. If you're old or poor, HHS
probably also has detailed records on your health. The Census Bureau
knows you well. If you filled out the long form last year, it knows how
you heat your house, how many people you live with, even how many
toilets you have. Increasingly, thanks to computerized databases, the
Internet and e-government, federal agencies are sharing and comparing
what they know about you.

\"Your complete life history is floating around the bureaucracy, whether
you like it or not,\" said House Majority Leader Dick Armey (R-Texas).

With the continued push toward e-government, the federal appetite for
personal information is only getting bigger. That has privacy advocates
wondering what the government is doing with all that data.

A Hart-Teeter poll that measured the public's enthusiasm for
e-government last summer found that the potential loss of privacy is a
major worry. Sixty-five percent of those polled said they were
\"extremely concerned\" that hackers could break into government
computers and steal or tamper with personal information. Fifty-five
percent were \"very concerned\" that government employees would poke
through personal data.

\"Americans want government to address Web site security and privacy
protections,\" wrote officials at the Council for Excellence in
Government, which commissioned the poll.

\"Surveys show that today nine out of 10 Americans are concerned about
the potential misuse of their personal information,\" Alan Westin told a
House subcommittee in May. Privacy protection has become a top social
policy issue and \"a political imperative for both Republicans and
Democrats,\"said Westin, a Columbia University professor emeritus.

Republican lawmakers have jumped on the issue. This spring, Armey issued
a harshly critical three-part paper detailing privacy violations by
federal agencies ranging from the IRS to the Department of Veterans
Affairs.

In April, Sen. Fred Thompson (R-Tenn.) introduced legislation to create
a Citizens' Privacy Commission. The 11-member panel would \"examine how
federal, state and local governments collect and use our personal
information,\" and recommend how Congress can protect privacy in the
future.

\"People are uncertain and fearful about who has access to their
personal information and how that information is being used,\" Thompson
said. \"A recent poll shows that Americans perceive government as the
greatest threat to their personal privacy, above both the media and
corporations.\"

**Federal Computer Week (Continued)**

People are right to be fearful, said Solveig Singleton, a senior analyst
at the Competitive Enterprise Institute. What they should fear most is
the government's insatiable urge to collect and store personal
information.

\"Government databases pose terrible risks,\" she said. The danger is
twofold: The government can ---and does --- compel people to disclose
information, and the government has enormous power to act on the
information it collects through the police, the courts and the military.

Abuses are well documented. President Nixon used IRS and other federal
files to harass his political foes and create \"enemies lists.\"
Congress passed the Privacy Act in 1974 to end that practice.
Nevertheless, during the Clinton years, White House operatives combed
FBI and personnel files to find damaging personal information on
administration opponents.

Outside the Oval Office, hundreds of IRS employees were caught in 1995
and again in 1997 illegally snooping through tax records of celebrities,
friends and acquaintances.

It is not hard to imagine far more serious abuses in future times of
civil unrest, Singleton said, much like the use of census data to
imprison Japanese Americans during World War II.

Government information gathering is leading toward \"a government
surveillance society,\" warned Rep. Ron Paul (R-Texas), who often rails
against big, intrusive government. \"The federal government is by far
the worst violator of our privacy.\"

Paul has battled efforts to establish national databases based on DNA,
driver's license photos and biometric identifications such as retina
scans.

His latest crusade is to roll back Clinton administration regulations on
electronic health records. Paul says the regulations require doctors to
disclose health data to \"federal health bureaucrats\" without patients'
consent.

HHS Secretary Tommy Thompson called the new rules \"a bold and
definitive step to protect the rights of citizens to keep their medical
records confidential.\"

The new regulations took effect in April despite efforts by Paul and
others to block them.

Peter Swire, chief counselor for privacy under President Clinton, helped
write the regulations. Though the new rules increase some access to
medical records, the overall effect is greater privacy protection, Swire
said.

As the federal privacy counselor, Swire presided over the debate on
e-government and the protection of privacy.

\"Americans have two conflicting impulses,\" he said: Embracing the
efficiency and convenience of e-government, while worrying that the
Information Age makes it too easy for too many to learn too much about
everyone.

One of the persistent worries is, \"Who gets to see all the data?\"
Swire said. \"Is it every civil servant in the country? Do we give it to
inappropriate people?\"

Swire said there are substantial benefits and risks to sharing
information.

**Federal Computer Week (Continued)**

Electronic databases make it much easier to check for Medicare and
Social Security files to uncover fraudulent claims. But electronic
efficiency also means that an immigrant family seeking medical treatment
for an ailing child could suddenly find itself facing deportation
proceedings, he said.

The public's concern about losing privacy is legitimate, said IRS
privacy adviser Peggy Irving. But contrary to what many think, the IRS
is strict about maintaining the privacy of tax records.

\"We are so heavily regulated, we're governed by at least three statutes
on \[information\] sharing,\" she said. Essentially, IRS employees are
forbidden to look at tax information unless they have an official reason
to do so. Violators are fired, she said.

Privacy advocates say, however, that serious punishment for privacy
violation is rare. Of the hundreds of IRS personnel caught snooping
through files in 1995, only five were fired, Singleton said. Irving said
the courts have overturned some IRS decisions to fire offenders.

Irving concedes that there is a perception problem. \"The American
public thinks of the federal government \[as a\] Big Brother that has
all the information. We need to reassure them that we are careful to
safeguard it.\"

The tax agency shares information in its databases with other agencies,
Irving said, but \"we reduce the information involved down to just that
which is necessary and relevant.\"

Perception or reality, the greater use of electronic records and
services such as electronic tax filing \"is a given,\" she said. \"To
think we would not use technology to provide better customer service is
foolish. We will go forward.\"

The Office of Management and Budget sees it the same way. In a December
memo on protecting personal privacy, former OMB Director Jacob Lew said
government reliance on electronic collection and dissemination of data,
and \"opportunities to share data across agencies, will likely
increase.\"

Lew focused first on the positive. \"Interagency sharing of information
about individuals can be an important tool in improving the efficiency
of government programs,\" he said. Sharing data can help agencies reduce
errors, identify and prevent fraud, locate people who are entitled to
benefits, evaluate program performance and reduce the need for each
agency to separately collect the same information.

But he also cautioned of potential pitfalls. \"Information shared among
agencies may be used to deny, reduce or otherwise adversely affect
benefits to individuals,\" Lew said. \"It is critical that agencies have
reasonable procedures to ensure the accuracy of the data shared.\"

Information sharing troubles civil libertarians such as Beth Givens,
director of the San Diego-based Privacy Rights Clearinghouse. \"There is
a sacrosanct privacy principle in data collection that says information
collected for one purpose should not used for another purpose without
the consent of the individuals the information was gathered from,\"
Givens said. \"But we're seeing a lot of that in government.\"

One of the newest and most sweeping databases is the National Directory
of New Hires, which includes the names, addresses, Social Security
numbers and quarterly wage reports of every employed American.

**Federal Computer Week (Continued)**

The new hires database was created by the Clinton administration and
approved by Congress; HHS uses it to track down parents who fail to make
child support payments.

But now the database is also used by the Social Security Administration
to check applications for unemployment insurance, by the IRS to check
tax deduction claims and by the Education Department to find delinquent
student loan recipients. It has been suggested as a tool for locating
illegal aliens.

\"The question is, what's fair?\" said Richard Smith, chief technology
officer for the Privacy Foundation, based in Denver. \"I would love to
see everyone with \[a\] student loan pay it back, but how far are you
going to go? Are you going to build a surveillance state\" to collect
college loans?

Now that agencies may use databases to cross-check information, it is
conceivable that applications for health care, housing or other public
assistance could be turned down because of unpaid parking tickets, he
said. \"The state has extraordinary power.\"

HHS credits its new hires database for locating more than a million
deadbeat parents and collecting more than \$1 billion in child support
payments. But Givens and others note that to catch child support
scofflaws, the database treats tens of millions of employees as
suspects. \"Everyone is guilty until proven innocent,\" she said.

Alarm over the government's use of databases doesn't stop with federal
agencies.

The FBI has hired commercial information broker ChoicePoint Inc. to
supply its agents with online information about individuals--- from
names, addresses and phone numbers to driving records, arrest records,
property ownership data, work histories and more.

The problem, say Givens and others, is that ChoicePoint's information
isn't always correct. For example, the company supplied erroneous
information about felony convictions that caused Florida officials to
improperly bar hundreds --- perhaps thousands --- of voters from casting
ballots last November, Givens said.

Smith, of the Privacy Foundation, paid \$20 for a copy of his
ChoicePoint dossier. Among other errors, ChoicePoint reported that Smith
might have been married to a woman named Mary.

The FBI buys information from ChoicePoint because it is restricted by
law from collecting and maintaining its own databases on individuals,
said Ari Schwartz of the Center for Democracy and Technology.

An impending law-enforcement information-collection initiative also
alarms civil libertarians --- enhanced 911.

By October, the Federal Communications Commission has ordered, wireless
phone manufacturers must begin equipping their phones so that Global
Positioning System satellites can locate them.

The intent is laudable, said Jim Harper, a privacy advocate and editor
of Privacilla.org, a Web site devoted to privacy issues. About half of
all 911 emergency calls now come from wireless phones, he said. Enhanced
911 or \"e-911\" is intended to enable police, ambulance crews and
firefighters to quickly locate those who call for help. \"You can
pinpoint them within 50 or 100 feet,\" Harper said, \"but privacy goes
out the window.\" He and others worry about what police will do with the
data. It remains unclear who will have access to phone logs and under
what circumstances, Harper said.

**Federal Computer Week (Continued)**

E-911 could, indeed, turn wireless phones into tracking devices, said
Swire, the former presidential privacy counselor. \"There should not be
random tracking of citizens. There should be a significant showing of
probable cause\" before police are allowed to use information in
wireless phone logs.

E-911 is another step toward \"a surveillance society,\" Smith said. The
public has accepted surveillance cameras in stores, offices, schools and
other public places. Until recently, it was safe to assume that most of
the data collected is never looked at. \"There's not enough time in the
day for people to look at it all,\" he said.

But computers can. Facial recognition cameras were employed at the Super
Bowl in Tampa, Fla., in January, searching for biometric features that
matched those of wanted criminals. \"That crossed the line,\" Smith
said.

Privacy concerns are unlikely to stop the development of invasive
technology or government's use of it, most privacy advocates agree. But
e-government and privacy can coexist if e-government designers are
careful, Smith contends.

There are \"privacy-friendly\" ways to create electronic databases, he
said, such as posting property tax files with only property addresses
and values. However, others list names, addresses, phone numbers and
additional personal information about property owners. Smith found home
addresses for Janet Reno and O.J. Simpson through online property
records, even though both avoided public listings such as local phone
books.

Another important step government agencies should take is to make their
databases as secure as possible against hackers, said Singleton, the
Competitive Enterprise Institute analyst. Agencies should also \"make
sure there is real accountability for people\" who use government
databases. That means firing those caught misusing sensitive data," she
said.

And when new databases are created, agencies should make sure people
know what they will be used for, she said. Data collected by the Census
Bureau to determine population trends, for example, should not be turned
over to other agencies for other purposes.

A month before leaving office, Clinton administration officials tried to
raise awareness among federal agency and department heads of the
importance of privacy and the threat posed to it by databases, said
Swire, whose office was within the Office of Management and Budget.

In a memo to agency chiefs, then OMB director Lew admonished that \"when
information about individuals is involved, agencies must pay especially
close attention to privacy interests and must incorporate measures to
safeguard those interests.\" \"It was our last attempt to explain\" the
importance of preserving privacy amid the government's growing use and
sharing of electronic databases, Swire said.

How well agencies will follow those final Clinton administration
instructions remains to be seen. One signal from the new administration
is clear, however. President Bush has decided not to appoint another
federal privacy counselor.

Copyright 2001 FCW Government Technology Group

## Suspect in mass. shooting rampage pleads not guilty: Module 1

**Suspect In Mass. Shooting Rampage Pleads Not Guilty**

**By Ronna Abramson, The Industry Standard**

**(Dec. 27, 2000)**

A 42-year-old employee of an Internet consulting firm pleaded not guilty
today of seven counts of murder in connection with a shooting rampage
yesterday in the company\'s suburban Boston offices.

Michael McDermott, a software engineer at Edgewater Technology Inc. in
Wakefield, Mass., is being held without bail. Police arrested him
yesterday at Edgewater\'s offices, where he was found in the lobby armed
with an assault rifle, a shotgun and a semiautomatic handgun. Four women
and three men were killed in the shooting.

The victims included employees in the accounting department, which was
recently served with a garnishment order from the Internal Revenue
Service to withhold some of McDermott\'s wages, according to a report by
the Associated Press.

\"It is my sad duty to confirm that a shooting took place at our
Wakefield office earlier today,\" Edgewater CEO Shirley Singleton said
in a statement. \"Everyone here at Edgewater Technology is shocked and
devastated by the loss of our friends.\"

A spokeswoman for Edgewater said the software consulting company had
about 200 people in Wakefield, located about 30 minutes north of Boston.
The company is in the process of moving its headquarters from
Fayetteville, Ark., to Wakefield, spokesman Kevin Carvin said.

Founded in 1992, Edgewater describes itself as a provider of tailored
Internet solutions for middle-market companies that have annual revenues
ranging from \$100 million to \$1 billion.

The company was acquired in May 1999 by StaffMark, a temporary staffing
company that later changed its name to Edgewater. The acquisition was a
major step in StaffMark Inc.\'s shift in focus from the staffing
industry to e-business services. The change, which involved a series of
divestitures, came in response to a decline in market values for
publicly traded staffing companies that began during the first quarter
of 1999, according to the company.

The latest move came Dec. 15, when Edgewater announced an agreement to
sell ClinForce Inc., its clinical trials support services division, to
Cross Country TravCorps in Boca Raton, Fla., for about \$31 million in
cash. It also announced plans to use \$130 million of its \$145 million
cash balance to repurchase common stock at a fixed price, set at \$8 per
share on Dec. 21. Charlotte, N.C.-based Wachovia Securities Inc.
responded to the news by upgrading its rating of Edgewater from Neutral
to Buy.

In November, Edgewater shed another division, IntelliMark, which
provides IT staffing and solutions, to an affiliate of Boston-based
Charlesbank Equity Fund V Ltd. for about \$42.7 million in cash. The
division had more than 1,660 employees in 23 locations nationwide,
according to media reports at the time.

**Suspect In Mass. Shooting Rampage Pleads Not Guilty (Continued)**

But as Edgewater moved forward with its plans, Wall Street turned up its
nose at Internet consulting. \"A year ago, the strategy looked pretty
interesting,\" said one analyst who covers the company but asked to
remain anonymous. \"\[But\] they\'ve gone from a larger company in a
potentially slower-growing and less-profitable business to a small,
nimble company in a sector that\'s very out of favor right now.\"

Internet consulting firms have laid off thousands of employees in recent
months as their stock prices have plummeted. Edgewater spokeswoman Cindy
Leggett-Flynn said Edgewater is a profitable company and has been hiring
employees. The company has no plans for layoffs, she said. Edgewater
shares were trading at \$6.25 Tuesday afternoon, compared with a 52-week
high of \$12.06 in March.

*Wire reports contributed to this article.*

## Security assessment tool: Module 1

**[Security Assessment Tool]{.underline}**

> The Child Support Program has vastly increased its use of automation
> in the last few years. Although the increase in automation and
> information available to the Child Support Program has many benefits,
> it can also have serious security implications to our daily
> operations.
>
> Identity Theft is reaching epidemic proportions; cyber-hacking is
> front-page news; and new viral threats are created daily. Over 1
> million people are hurt in the workplace annually due to workplace
> violence. How much do child support managers play a role in this?
> Managers are responsible for "safety in the workplace". What exactly
> does safety in the workplace mean?
>
> Let's look at this in what we refer to as a "Security Trilogy."
> PEOPLE: The foundation of security begins with hiring highly
> qualified, conscientious employees and providing solid training as
> well as a safe and secure environment. DATA: The core of the child
> support program is the data that is available to the child support
> program---now more than ever we have access to an unprecedented amount
> of private information on Non-Custodial Parents (NCPs) and Custodial
> Parties (CPs). We must take proactive measures to secure this data.
> FACILITIES: The work location must provide for a safe and secure
> environment for employees and information.
>
> How does this impact the Child Support Program? Managers can set the
> tone for security. Your agency can be held liable for
> negligence---from hiring unqualified personnel to allowing harm to
> come to your employees, NCPs, and CPs. In order to provide a secure
> workplace, you must identify and evaluate the risks your agency faces.
> You must implement safeguards and continually update ongoing security
> programs.
>
> The attached Security Assessment Tool is designed to help you assess
> your agency's strengths and weaknesses with respect to security
> issues. Please use this tool to evaluate each area, which will provide
> an assessment of where your office stands today. You will find helpful
> information and suggestions that will assist you in each area.
>
> Remember, every action you take will positively impact the child
> support program---making a strong program stronger!

+--------------------------------+-----------------+---+-------------+
| **ASSESSMENT TOOL**            |                 |   |             |
|                                |                 |   |             |
| > **[Rating                    |                 |   |             |
| > Scale]{.underline}**         |                 |   |             |
| >                              |                 |   |             |
| > **1 = Fully Implemented**    |                 |   |             |
| >                              |                 |   |             |
| > **2 = Implementation         |                 |   |             |
| > Planned**                    |                 |   |             |
| >                              |                 |   |             |
| > **3 = Non-Existent**         |                 |   |             |
+--------------------------------+-----------------+---+-------------+
|                                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
|                                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| **[Written Policies and        | > **            |   |             |
| Procedures]{.underline}**      | [1]{.underline} |   |             |
|                                | >               |   |             |
|                                | [2]{.underline} |   |             |
|                                | > [3            |   |             |
|                                | ]{.underline}** |   |             |
+--------------------------------+-----------------+---+-------------+
|                                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 1.  The agency has a security  | >            |   |             |
|     mission statement.         |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 2.  There is a formal          | >            |   |             |
|     definition of objectives   |                 |   |             |
|     and formal policy          |                 |   |             |
|     statement on security      |                 |   |             |
|     endorsed by agency         |                 |   |             |
|     management.                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 3.  There is a formal manual   | >            |   |             |
|     defining the agency's      |                 |   |             |
|     security standards and     |                 |   |             |
|     procedures.                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 4.  Changes in security        | >            |   |             |
|     practices are incorporated |                 |   |             |
|     into the manual and        |                 |   |             |
|     disseminated to staff.     |                 |   |             |
+--------------------------------+-----------------+---+-------------+
|                                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| **TOTAL =**                    | >            |   |             |
+--------------------------------+-----------------+---+-------------+
|                                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| **[Scoring]{.underline}**      |                 |   |             |
|                                |                 |   |             |
| **Total this section adding    |                 |   |             |
| the value from each column     |                 |   |             |
| (1=1, 2=2, 3=3)**              |                 |   |             |
|                                |                 |   |             |
| **If you scored:**             |                 |   |             |
|                                |                 |   |             |
| **4-6 = No action necessary.** |                 |   |             |
|                                |                 |   |             |
| **7-12 = Review written        |                 |   |             |
| policies and procedures.\***   |                 |   |             |
|                                |                 |   |             |
| **\*For information and        |                 |   |             |
| resources available from OCSE  |                 |   |             |
| on Security see page 14:       |                 |   |             |
| Security Resources**           |                 |   |             |
+--------------------------------+-----------------+---+-------------+
|                                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| **ASSESSMENT TOOL**            |                 |   |             |
|                                |                 |   |             |
| > **[Rating                    |                 |   |             |
| > Scale]{.underline}**         |                 |   |             |
| >                              |                 |   |             |
| > **1 = Fully Implemented**    |                 |   |             |
| >                              |                 |   |             |
| > **2 = Implementation         |                 |   |             |
| > Planned**                    |                 |   |             |
| >                              |                 |   |             |
| > **3 = Non-Existent**         |                 |   |             |
+--------------------------------+-----------------+---+-------------+
|                                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| **[Physical                    | > **            |   |             |
| Security]{.underline}**        | [1]{.underline} |   |             |
|                                | >               |   |             |
|                                | [2]{.underline} |   |             |
|                                | > [3            |   |             |
|                                | ]{.underline}** |   |             |
+--------------------------------+-----------------+---+-------------+
| 1.  Employees are required to  | >            |   |             |
|     wear ID badges.            |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 2.  Access to the building is  | >            |   |             |
|     controlled.                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 3.  Armed security guards are  | >            |   |             |
|     present.                   |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 4.  Procedures are established | >            |   |             |
|     concerning possession of   |                 |   |             |
|     weapons; visitors are      |                 |   |             |
|     either permitted to        |                 |   |             |
|     possess weapons, or are    |                 |   |             |
|     disarmed. If visitors are  |                 |   |             |
|     disarmed, there is a       |                 |   |             |
|     secured holding place for  |                 |   |             |
|     the weapon.                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 5.  Interview rooms or offices | >            |   |             |
|     where the public is        |                 |   |             |
|     present with a worker are  |                 |   |             |
|     supplied with panic        |                 |   |             |
|     buttons. Polices and       |                 |   |             |
|     procedures are in place    |                 |   |             |
|     for action when the button |                 |   |             |
|     is activated.              |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 6.  Interview rooms are        | >            |   |             |
|     separate from employee     |                 |   |             |
|     work areas.                |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 7.  Video cameras are placed   | >            |   |             |
|     in strategic locations     |                 |   |             |
|     throughout the office.     |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 8.  All public access          | >            |   |             |
|     entryways have metal       |                 |   |             |
|     detectors.                 |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| 9.  All employee parking areas | >            |   |             |
|     are sufficiently lighted.  |                 |   |             |
+--------------------------------+-----------------+---+-------------+
| **ASSESSMENT TOOL**            |                 |   |             |
|                                |                 |   |             |
| > **[Rating                    |                 |   |             |
| > Scale]{.underline}**         |                 |   |             |
| >                              |                 |   |             |
| > **1 = Fully Implemented**    |                 |   |             |
| >                              |                 |   |             |
| > **2 = Implementation         |                 |   |             |
| > Planned**                    |                 |   |             |
| >                              |                 |   |             |
| > **3 = Non-Existent**         |                 |   |             |
+--------------------------------+-----------------+---+-------------+

+--------------------------------+-------------------------------------+
| 10. Cypher lock codes are      | >                                |
|     frequently changed.        |                                     |
+--------------------------------+-------------------------------------+
| 11. Furniture in interview     | >                                |
|     rooms is situated for      |                                     |
|     employees to have direct   |                                     |
|     and easy exit (escape      |                                     |
|     route).                    |                                     |
+--------------------------------+-------------------------------------+
| 12. Reception personnel are    | >                                |
|     protected with bulletproof |                                     |
|     glass.                     |                                     |
+--------------------------------+-------------------------------------+
| 13. The public utilizes        | >                                |
|     separate bathrooms.        |                                     |
+--------------------------------+-------------------------------------+
| 14. Procedures are in place    | >                                |
|     that dictate appropriate   |                                     |
|     responses to viral and     |                                     |
|     bacterial threats          |                                     |
|     (Anthrax, etc.).           |                                     |
+--------------------------------+-------------------------------------+
| 15. Procedures are in place    | >                                |
|     that dictate appropriate   |                                     |
|     security and safety        |                                     |
|     drills.                    |                                     |
+--------------------------------+-------------------------------------+
| 16. State or local police      | >                                |
|     departments provide        |                                     |
|     periodic security          |                                     |
|     assessments.               |                                     |
+--------------------------------+-------------------------------------+
| 17. Contact numbers for        | >                                |
|     police, fire, and          |                                     |
|     emergency personnel are    |                                     |
|     easily accessible to all   |                                     |
|     staff.                     |                                     |
+--------------------------------+-------------------------------------+
|                                |                                     |
+--------------------------------+-------------------------------------+
| **TOTAL =**                    | >                                |
+--------------------------------+-------------------------------------+

# Handouts

## steps to protect your privacy

**[Phone, Mail and Email Contacts]{.underline}**

+----------------+------------------+---+---------------------+---+-----------+
| **Who to       | **For...**       |   | **Address**         |   | **Phone   |
| contact**      |                  |   |                     |   | Number**  |
+================+==================+===+=====================+===+===========+
| Equifax        | Copy of your     |   | Equifax Options     |   | 1-800     |
|                | credit report    |   |                     |   | -685-1111 |
|                |                  |   | Equifax Marketing   |   |           |
|                |                  |   | Decision            |   |           |
|                |                  |   |                     |   |           |
|                |                  |   | Systems Inc.        |   |           |
|                |                  |   |                     |   |           |
|                |                  |   | P.O. Box 740123     |   |           |
|                |                  |   |                     |   |           |
|                |                  |   | Atlanta, Ga.        |   |           |
|                |                  |   | 30374-0123          |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Experian       | Copy of your     |   | Experian National   |   | 1-888     |
| (formerly TRW) | credit report    |   | Consumer Assistance |   | -397-3742 |
|                |                  |   | Center              |   |           |
|                |                  |   |                     |   |           |
|                |                  |   | P.O. Box 2104,      |   |           |
|                |                  |   |                     |   |           |
|                |                  |   | Allen, Texas        |   |           |
|                |                  |   | 75013-2104          |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Trans Union    | Copy of your     |   | Trans Union         |   | 1-800     |
|                | credit report    |   |                     |   | -888-4213 |
|                |                  |   | 555 West Adams St.  |   |           |
|                |                  |   |                     |   |           |
|                |                  |   | 8^th^ Floor         |   |           |
|                |                  |   |                     |   |           |
|                |                  |   | Chicago, Ill. 60661 |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Equifax        | Stop receiving   |   |                     |   | 1-888     |
|                | unsolicited      |   |                     |   | -567-8688 |
|                | "preapproved"    |   |                     |   |           |
|                | credit card      |   |                     |   |           |
|                | offers           |   |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Experian       | Stop receiving   |   |                     |   | 1-800     |
| (formerly TRW) | unsolicited      |   |                     |   | -353-0809 |
|                | "pre-approved"   |   |                     |   |           |
|                | credit card      |   |                     |   |           |
|                | offers           |   |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Trans Union    | Stop receiving   |   |                     |   | 1-888     |
|                | unsolicited      |   |                     |   | -567-8688 |
|                | "pre-approved"   |   |                     |   |           |
|                | credit card      |   |                     |   |           |
|                | offers           |   |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Cookies        | Instructions for |   | <http://www.junkb   |   |           |
|                | ensuring that    |   | usters.com/ht/en/co |   |           |
|                | the internet     |   | okies.html#disable> |   |           |
|                | sites do not hit |   |                     |   |           |
|                | you with         |   |                     |   |           |
|                | targeted ads     |   |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
|                |                  |   |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| FTC Web Site   | Links to all 50  |   | <http://www.        |   |           |
|                | DMV offices for  |   | ftc.gov/privacy/pro |   |           |
|                | policies on      |   | tect.htm#Department |   |           |
|                | whether your     |   | _of_Motor_Vehicles> |   |           |
|                | state sells DMV  |   |                     |   |           |
|                | data             |   |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| FTC Web Site   | Site Seeing On   | < |                     |   |           |
|                | The Internet-    | h |                     |   |           |
|                | Safety Tips for  | t |                     |   |           |
|                | browsing the     | t |                     |   |           |
|                | internet         | p |                     |   |           |
|                |                  | : |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | f |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | g |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | b |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | u |                     |   |           |
|                |                  | b |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | d |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | x |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | h |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | m |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | > |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Direct         | To tell the      | D |                     |   |           |
| Marketing      | Direct Marketing | i |                     |   |           |
| Association    | Association to   | r |                     |   |           |
|                | notify all its   | e |                     |   |           |
|                | members not to   | c |                     |   |           |
|                | send mail to you | t |                     |   |           |
|                |                  | M |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | k |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | g |                     |   |           |
|                |                  | A |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | M |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | P |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | f |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | S |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | P |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | O |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | B |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | x |                     |   |           |
|                |                  | 9 |                     |   |           |
|                |                  | 0 |                     |   |           |
|                |                  | 0 |                     |   |           |
|                |                  | 8 |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | F |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | m |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | d |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | , |                     |   |           |
|                |                  | N |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | Y |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | 1 |                     |   |           |
|                |                  | 1 |                     |   |           |
|                |                  | 7 |                     |   |           |
|                |                  | 3 |                     |   |           |
|                |                  | 5 |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| R.I. Polk &    | To notify the    | R |                     |   |           |
| Company        | major mailing    | . |                     |   |           |
|                | list companies   | I |                     |   |           |
|                | to take your     | . |                     |   |           |
|                | name off the     | P |                     |   |           |
|                | lists they sell  | o |                     |   |           |
|                | to direct        | l |                     |   |           |
|                | marketers        | k |                     |   |           |
|                |                  | & |                     |   |           |
|                |                  | C |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | m |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | y |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | L |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | C |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | m |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | & |                     |   |           |
|                |                  | D |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | m |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | 6 |                     |   |           |
|                |                  | 4 |                     |   |           |
|                |                  | 0 |                     |   |           |
|                |                  | 0 |                     |   |           |
|                |                  | M |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | B |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | d |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | T |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | y |                     |   |           |
|                |                  | l |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | , |                     |   |           |
|                |                  | M |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | h |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | 4 |                     |   |           |
|                |                  | 8 |                     |   |           |
|                |                  | 1 |                     |   |           |
|                |                  | 8 |                     |   |           |
|                |                  | 0 |                     |   |           |
|                |                  | - |                     |   |           |
|                |                  | 1 |                     |   |           |
|                |                  | 8 |                     |   |           |
|                |                  | 1 |                     |   |           |
|                |                  | 4 |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Donnelley      | To notify the    | D |                     |   |           |
| Marketing Inc. | major mailing    | o |                     |   |           |
|                | list companies   | n |                     |   |           |
|                | to take your     | n |                     |   |           |
|                | name off the     | e |                     |   |           |
|                | lists they sell  | l |                     |   |           |
|                | to direct        | l |                     |   |           |
|                | marketers        | y |                     |   |           |
|                |                  | M |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | k |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | g |                     |   |           |
|                |                  | I |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | D |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | b |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | O |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | n |                     |   |           |
|                |                  | s |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | 1 |                     |   |           |
|                |                  | 2 |                     |   |           |
|                |                  | 3 |                     |   |           |
|                |                  | 5 |                     |   |           |
|                |                  | N |                     |   |           |
|                |                  | A |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  |   |                     |   |           |
|                |                  | N |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | d |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | , |                     |   |           |
|                |                  | I |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | 5 |                     |   |           |
|                |                  | 0 |                     |   |           |
|                |                  | 2 |                     |   |           |
|                |                  | 0 |                     |   |           |
|                |                  | 1 |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Electronic     | For privacy      | [ |                     |   |           |
| Privacy        | issues relating  | w |                     |   |           |
| Information    | to the National  | w |                     |   |           |
| Center (EPIC)  | Information      | w |                     |   |           |
|                | Infrastructure   | . |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | g |                     |   |           |
|                |                  | ] |                     |   |           |
|                |                  | ( |                     |   |           |
|                |                  | h |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | : |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | e |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | g |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | ) |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+
| Privacy        | International    | [ |                     |   |           |
| International  | human rights     | w |                     |   |           |
|                | group that       | w |                     |   |           |
|                | campaigns        | w |                     |   |           |
|                | against privacy  | . |                     |   |           |
|                | violations       | p |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | y |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | g |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | ] |                     |   |           |
|                |                  | ( |                     |   |           |
|                |                  | h |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | t |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | : |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | w |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | v |                     |   |           |
|                |                  | a |                     |   |           |
|                |                  | c |                     |   |           |
|                |                  | y |                     |   |           |
|                |                  | . |                     |   |           |
|                |                  | o |                     |   |           |
|                |                  | r |                     |   |           |
|                |                  | g |                     |   |           |
|                |                  | / |                     |   |           |
|                |                  | p |                     |   |           |
|                |                  | i |                     |   |           |
|                |                  | ) |                     |   |           |
+----------------+------------------+---+---------------------+---+-----------+

# Handouts

## bomb threat checklist and handy reference card: module 3

-   Keep Calm. Keep talking.

-   Don't hang up.

-   Signal to a coworker to get on an extension.

-   Ask the caller to repeat the message and write it down.

-   For a bomb threat, ask where the bomb is and when it is set to go
    off.

-   Listen for background noises and write down a description.

-   Write down whether it's a man or woman; pitch of voice, accent,
    anything you hear.

-   Try to get the person's name, exact location, telephone number.

-   Signal a coworker to immediately call security or the police.

-   Notify your immediate supervisor.

**[Handy Reference Card]{.underline}**

Everyone in our office, including supervisors and managers, should
follow these same procedures. Make copies of the card necessary so
everyone will have his or her own card. (Print Out)

[CHECK LIST FOR TELEPHONE BOMB THREAT]{.underline}

-   Exact time & date of call

-   Exact words of caller: (ask them to repeat the message, if
    necessary, and write as much as possible. )

-   Keep calm. Keep talking. Don't hang up. Signal a coworker to get on
    an extension and/or notify FPS, contract guards, or the local
    police.

-   Ask when and where the bomb is going to explode.

-   Ask what the bomb looks like.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Ask what type of a bomb it is.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Ask what will cause it to detonate.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Ask why they are doing this.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Ask where are they calling from.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Try to get caller's full name:

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Try to get caller's exact location and phone number:

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Repeat questions, if necessary.

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

**Handy Reference Card (Continued)**

Listen carefully to the voice. Note whether it\'s a man or a woman,
pitch, accent; circle the following:

Calm Slow Nasal Broken Stutter

Disguised Lisp Sincere Giggler

Crying Squeaky Excited Accent

Loud Slurred Normal Angry

Rapid Deep Stressed

-   If the voice is familiar, who did it sound like?

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Background noises heard (e.g. cars, train, etc )

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Any other pertinent information?

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Person receiving call:

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Telephone number call received at:

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

-   Notification to immediate supervisor (time/date):

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

## password checklist: module 3

-   Never let anyone use your password

-   Never work under someone else's password---most computer systems
    maintain audit trails of who did what and which records were
    accessed

-   Change your password often

-   Do not use a predictable password

-   Don\'t use real life words

-   Use both upper and lowercase

-   Avoid simple sequences of letters and numbers (ABC123)

-   Create a password that includes a combination of numbers and letters
    (such as sun8ray or bel3jar2 or 12hat93)

-   Create a password that takes a common phrase and use its initials
    for a password. (For example, "I pledge allegiance to the flag"
    becomes ipa2tf)

-   Don't use birth dates, Social Security numbers, names of pets

-   Be original

-   Never make your password the same as your log-in ID or user name

-   Change the default password right away

-   Continue to change your password frequently

-   Write down your password in a safe, locked place

-   Do not "store" your password

-   Report unauthorized access to management

## Social SECURITY act 453

EC. 453. \[42 U.S.C. 653\] (a)(1)\[320\] The Secretary shall establish
and conduct a Federal 321\] Parent Locator Service, under the direction
of the designee of the Secretary referred to in section 452(a), which
shall be used for the purposes specified in paragraphs (2) and (3).

\(2\) For the purpose of establishing parentage or\[322\] establishing,
setting the amount of, modifying, or enforcing child support
obligations,\[323\] the Federal Parent Locator Service shall obtain and
transmit to any authorized person specified in subsection (c)\--

\(A\) information on, or facilitating the discovery of, the location of
any individual\--

\(i\) who is under an obligation to pay child support;

\(ii\) against whom such an obligation is sought; \[324\]

\(iii\) to whom such an obligation is owed, including the individual\'s
social security number (or numbers),

most recent address, and the name, address, and employer identification
number of the individual\'s employer; or\[325\]

\(iv\) who has or may have parental rights with respect to a
child,\[326\]

\(B\) information on the individual\'s wages (or other income) from, and
benefits of, employment (including rights to or enrollment in group
health care coverage); and

\(C\) information on the type, status, location, and amount of any
assets of, or debts owed by or to, any such individual.

\(3\) For the purpose of enforcing any Federal or State law with respect
to the unlawful taking or restraint of a child, or making or enforcing a
child custody or visitation determination, as defined in section
463(d)(1), the Federal Parent Locator Service shall be used to obtain
and transmit the information specified in section 463(c) to the
authorized persons pecified in section 463(d)(2).\[327\]

(b)(1) Upon request, filed in accordance with subsection (d), of any
authorized person, as defined in subsection (c) for the information
described in subsection (a)(2), or of any authorized person, as defined
in section 463(d)(2) for the information described in section 463(c),
the Secretary shall, notwithstanding any other provision of law, provide
through the Federal Parent Locator Service such information to such
person, if such information\--

\(A\) is contained in any files or records maintained by the Secretary
or by the Department of Health and Human Services; or

\(B\) is not contained in such files or records, but can be obtained by
the Secretary, under the authority conferred by subsection (e), from any
other department, agency, or instrumentality of the United States or of
any State, andis not prohibited from disclosure under paragraph (2).

\(2\) No information shall be disclosed to any person if the disclosure
of such information would contravene the national policy or security
interests of the United States or the confidentiality of census data.
The Secretary shall give priority to requests made by any authorized
person described in subsection (c)(1). No information shall be disclosed
to any person if the State has notified the Secretary that the State has
reasonable evidence of domestic violence or child abuse and the
disclosure of such information could be harmful to the custodial parent
or the child of such parent, provided that\--

\(A\) in response to a request from an authorized person (as defined in
subsection (c) of this section and section 463(d)(2)), the Secretary
shall advise the authorized person that the Secretary has been notified
that there is reasonable evidence of domestic violence or child abuse
and that information can only be disclosed to a court or an agent of a
court pursuant to subparagraph (B); and

**Social Security Act §453(Continued)**

\(B\) information may be disclosed to a court or an agent of a court
described in subsection (c)(2) of this section or section 463(d)(2)(B),
if\--

\(i\) upon receipt of information from the Secretary, the court
determines whether disclosure to any other person of that information
could be harmful to the parent or the child; and

\(ii\) if the court determines that disclosure of such information to
any other person could be harmful, the court and its agents shall not
make any such disclosure.

\(3\) Information received or transmitted pursuant to this section shall
be subject to the safeguard provisions contained in section
454(26).\[328\]

\(c\) As used in subsection (a), the term \"authorized person\" means\--

\(1\) any agent or attorney of any State having in effect a plan
approved under this part, who has the duty or authorityunder such plans
to seek to recover any amounts owed as child and spousal support or to
seek to enforce orders providing child custody or visitation
rights\[329\] (including, when authorized under the State plan, any
official of a political subdivision);

\(2\) the court which has authority to issue an order against a
noncustodial\[330\] parent for the support and maintenance of a child,
or to issue an order against a resident parent for child custody or
visitation rights, or any agent of such court; \[331\]

\(3\) the resident parent, legal guardian, attorney, or agent of a child
(other than a child receiving assistance under a State program funded
under part A\[332\]) (as determined by regulations prescribed by the
Secretary) without regard to the existence of a court order against a
noncustodial\[333\] parent who has a duty to support and maintain any
such child; and\[334\]

\(4\) a State agency that is administering a program operated under a
State plan under subpart 1 of part B, or a State plan approved under
subpart 2 of part B or under part E.\[335\]

\(d\) A request for information under this section shall be filed in
such manner and form as the Secretary shall by regulation prescribe and
shall be accompanied or supported by such documents as the Secretary may
determine to be necessary.

(e)(1) Whenever the Secretary receives a request submitted under
subsection (b) which he is reasonably satisfied meets the criteria
established by subsections (a), (b), and (c), he shall promptly
undertake to provide the information requested from the files and
records maintained by any of the departments, agencies, or
instrumentalities of the United States or of any State.

**Social Security Act §453(Continued)**

\(2\) Notwithstanding any other provision of law, whenever the
individual who is the head of any department, agency, or instrumentality
of the United States receives a request from the Secretary for
information authorized to be provided by the Secretary under this
section, such individual shall promptly cause a search to be made of the
files and records maintained by such department, agency, or
instrumentality with a view to determining whether the information
requested is contained in any such files or records. If such search
discloses the information requested, such individual shall immediately
transmit such information to the Secretary, except that if any
information is obtained the disclosure of which would contravene
national policy or security interests of the United States or the
confidentiality of census data, such information shall not be
transmitted and such individual shall immediately notify the Secretary.
If such search fails to disclose the information requested, such
individual shall immediately so notify the Secretary. The costs incurred
by any such department, agency, or instrumentality of the United States
or of any State in providing such information to the Secretary shall be
reimbursed by him in an amount which the Secretary determines to be
reasonable payment for the information exchange (which amount shall not
include payment for the costs of obtaining, compiling, or maintaining
the information)\[336\]. Whenever such services are furnished to an
individual specified in subsection (c)(3), a fee shall be charged such
individual. The fee so charged shall be used to reimburse the Secretary
or his delegate for the expense of providing such services.

\(3\) The Secretary of Labor shall enter into an agreement with the
Secretary to provide prompt access for the Secretary (in accordance with
this subsection) to the wage and unemployment compensation claims
information and data maintained by or for the Department of Labor or
State employment security agencies.

\(f\) The Secretary, in carrying out his duties and functions under this
section, shall enter into arrangements with State agencies administering
State plans approved under this part for such State agencies to accept
from resident parents, legal guardians, or agents of a child described
in subsection (c)(3) and to transmit to the Secretary requests for
information with regard to the

whereabouts of noncustodial\[337\] parents and otherwise to cooperate
with the Secretary in carrying out the purposes of this section.

\(g\) REIMBURSEMENT FOR REPORTS BY STATE AGENCIES.\--The Secretary may
reimburse Federal and State agencies for the costs incurred by such
entities in furnishing information requested by the Secretary under this
section in an amount which the Secretary determines to be reasonable
payment for the information exchange (which amount shall not include
payment for the costs of obtaining, compiling, or maintaining the
information).\[338\]

(h)\[339\] FEDERAL CASE REGISTRY OF CHILD SUPPORT ORDERS.\--

\(1\) IN GENERAL.\--Not later than October 1, 1998, in order to assist
States in administering programs under State plans approved under this
part and programs funded under part A, and for the other purposes
specified in this section, the Secretary shall establish and maintain in
the Federal Parent Locator Service an automated registry (which shall be
known as the \"Federal Case Registry of Child Support Orders\"), which
shall contain abstracts of support orders and other information
described in paragraph (2) with respect to each case and order\[340\] in
each State case registry maintained pursuant to section 454A(e), as
furnished (and regularly updated), pursuant to section 454A(f), by State
agencies administering programs under this part.

**Social Security Act §453(Continued)**

\(2\) CASE AND ORDER\[341\] INFORMATION. \--The information referred to
in paragraph (1) with respect to a case or an order\[342\] shall be such
information as the Secretary may specify in regulations (including the
names, social security numbers or other uniform identification numbers,
and State case identification numbers) to identify the individuals who
owe or are owed support (or with respect to or on behalf of whom support
obligations are sought to be established), and the State or States which
have the case or order\[343\]. Beginning not later than October 1, 1999,
the information referred to in paragraph (1) shall include the names and
social security numbers of the children of such individuals.\[344\]

\(3\) ADMINISTRATION OF FEDERAL TAX LAWS.\--The Secretary of the
Treasury shall have access to the information described in paragraph (2)
for the purpose of administering those sections of the Internal Revenue
Code of 1986 which grant tax benefits based on support or residence of
children.\[345\]

\(i\) NATIONAL DIRECTORY OF NEW HIRES\[346\].\--

\(1\) IN GENERAL.\--In order to assist States in administering programs
under State plans approved under this part and programs funded under
part A, and for the other purposes specified in this section, the
Secretary shall, not later than

October 1, 1997, establish and maintain in the Federal Parent Locator
Service an automated directory to be known as the National Directory of
New Hires, which shall contain the information supplied pursuant to
section 453A(g)(2).

\(2\) \[347\] ENTRY OF DATA.\--Information shall be entered into the
data base maintained by the National Directory of New Hires within 2
business days of receipt pursuant to section 453A(g)(2).

\(3\) ADMINISTRATION OF FEDERAL TAX LAWS.\--The Secretary of the
Treasury shall have access to the information in the National Directory
of New Hires for purposes of administering section 32 of the Internal
Revenue Code of 1986, or the advance payment of the earned income tax
credit under section 3507 of such Code, and verifying a claim with
respect to employment in a tax return.

\(4\) LIST OF MULTISTATE EMPLOYERS.\--The Secretary shall maintain
within the National Directory of New Hires a list of multistate
employers that report information regarding newly hired employees
pursuant to section 453A(b)(1)(B), and the State which each such
employer has designated to receive such information.

\(j\) INFORMATION COMPARISONS AND OTHER DISCLOSURES.\--

\(1\) VERIFICATION BY SOCIAL SECURITY ADMINISTRATION.\--

\(A\) IN GENERAL.\--The Secretary shall transmit information on
individuals and employers maintained under this section to the Social
Security Administration to the extent necessary for verification in
accordance with subparagraph (B).

\(B\) VERIFICATION BY SSA.\--The Social Security Administration shall
verify the accuracy of, correct, or supply to the extent possible, and
report to the Secretary, the following information supplied by the
Secretary pursuant to subparagraph (A):

\(i\) The name, social security number, and birth date of each such
individual.

\(ii\) The employer identification number of each such employer.

\(2\) INFORMATION COMPARISONS.\--For the purpose of locating individuals
in a paternity establishment case or a case involving the establishment,
modification, or enforcement of a support order, the Secretary shall\--

(A) compare information in the National Directory of New Hires against
    information in the support case abstracts in the Federal Case
    Registry of Child Support Orders not less often than every 2
    business days; and

> \(B\) within 2 business days after such a comparison reveals a match
> with respect to an individual, report the information to the State
> agency responsible for the case.

**Social Security Act §453(Continued)**

\(3\) INFORMATION COMPARISONS AND DISCLOSURES OF INFORMATION IN ALL
REGISTRIES FOR TITLE IV PROGRAM

PURPOSES.\--To the extent and with the frequency that the Secretary
determines to be effective in assisting States to carry out their
responsibilities under programs operated under this part and programs
funded under part A, the Secretary shall\--

\(A\) compare the information in each component of the Federal Parent
Locator Service maintained under this section against the information in
each other such component (other than the comparison required by
paragraph

(2)), and report instances in which such a comparison reveals a match
with respect to an individual to State

agencies operating such programs; and

\(B\) disclose information in such components\[348\] to such State
agencies.

\(4\) PROVISION OF NEW HIRE INFORMATION TO THE SOCIAL SECURITY
ADMINISTRATION.\--The National Directory of New Hires shall provide the
Commissioner of Social Security with all information in the National
Directory.

\(5\) RESEARCH.\--The Secretary may provide access to data in each
component of the Federal Parent Locator Service maintained under this
section to\[349\] information reported by employers pursuant to section
453A(b) for research purposes found by the Secretary to be likely to
contribute to achieving the purposes of part A or this part, but without
personal identifiers.

\(k\) FEES.\--

\(1\) FOR SSA VERIFICATION.\--The Secretary shall reimburse the
Commissioner of Social Security, at a rate negotiated between the
Secretary and the Commissioner, for the costs incurred by the
Commissioner in performing the verification services described in
subsection (j).

\(2\) FOR INFORMATION FROM STATE DIRECTORIES OF NEW HIRES.\--The
Secretary shall reimburse costs incurred by State directories of new
hires in furnishing information as required by section
453A(g)(2)\[350\], at rates which the Secretary determines to be
reasonable (which rates shall not include payment for the costs of
obtaining, compiling, or maintaining such information).

\(3\) FOR INFORMATION FURNISHED TO STATE AND FEDERAL AGENCIES.\--A State
or Federal agency that receives information from the Secretary pursuant
to this section shall reimburse the Secretary for costs incurred by the
Secretary in furnishing the information, at rates which the Secretary
determines to be reasonable (which rates shall include payment for the
costs of obtaining, verifying, maintaining, and comparing the
information).

\(l\) RESTRICTION ON DISCLOSURE AND USE.\--Information\[351\] in the
Federal Parent Locator Service, and information resulting from
comparisons using such information, shall not be used or disclosed
except as expressly provided in this section, subject to section 6103 of
the Internal Revenue Code of 1986.

\(m\) INFORMATION INTEGRITY AND SECURITY.\--The Secretary shall
establish and implement safeguards with respect to the entities
established under this section designed to\--

**Social Security Act §453(Continued)**

(1) ensure the accuracy and completeness of information in the Federal
    Parent Locator Service; and

\(2\) restrict access to confidential information in the Federal Parent
Locator Service to authorized persons, and restrict use of such
information to authorized purposes.

\(n\) FEDERAL GOVERNMENT REPORTING.\--Each department, agency, and
instrumentality of the United States shall on a quarterly basis report
to the Federal Parent Locator Service the name and social security
number of each employee and the wages paid to the employee during the
previous quarter, except that such a report shall not be filed with
respect to an employee of a

department, agency, or instrumentality performing intelligence or
counter-intelligence functions, if the head of such department, agency,
or instrumentality has determined that filing such a report could
endanger the safety of the employee or compromise an ongoing
investigation or intelligence mission.\[352\]

\(o\) USE OF SET-ASIDE FUNDS\[353\].\--Out of any money in the Treasury
of the United States not otherwise appropriated, there is hereby
appropriated to the Secretary for each fiscal year an amount equal to 2
percent of the total amount paid to the Federal government pursuant to a
plan approved under this part\[354\] during the immediately preceding
fiscal year (as determined on the

basis of the most recent reliable data available to the Secretary as of
the end of the third calendar quarter following the end of such
preceding fiscal year), which shall be available for use by the
Secretary, either directly or through grants, contracts, or interagency
agreements,\[355\] for operation of the Federal Parent Locator Service
under this section, to the extent such costs are

not recovered through user fees.\[356\] Amounts appropriated under this
subsection for each of fiscal years 1997 through 2001 shall remain
available until expended.\[357\]

\(p\) SUPPORT ORDER DEFINED.\--As used in this part, the term \"support
order\" means a judgment, decree, or order, whether temporary, final, or
subject to modification, issued by a court or an administrative agency
of competent jurisdiction, for the support and maintenance of a child,
including a child who has attained the age of majority under the law of
the issuing State, or

of\[358\] the parent with whom the child is living, which provides for
monetary support, health care, arrearages, or reimbursement, and which
may include related costs and fees, interest and penalties,
income-withholding, attorneys\' fees, and other relief.\[359\]

\[319\] P.L. 104-193, §316(e)(2), added \"FEDERAL\". For the effective
date, see Vol. II, P.L. 104-193, §395.

\[320\] P.L. 105-33, §5534(a)(1)(A), inserted \"(1)\".

\[321\] P.L. 104-193, §316(e)(1), inserted \"Federal\". For the
effective date, see Vol. II, P.L. 104-193, §395.

\[322\] P.L. 105-200, §410(d)(1), struck out \"parentage,\" and
substituted \"parentage or\", effective July 16, 1998.

\[323\] P.L. 105-89, §105(1)(A), inserted \"or making or enforcing child
custody or visitation orders,\", effective November 19,1997.

**Social Security Act §453(Continued)**

P.L. 105-200, §410(d)(2), struck out \"or making or enforcing child
custody or visitation orders,\", effective July 16, 1998.

\[324\] P.L. 105-89, §105(a)(1)(B)(i), struck out \"or\".

\[325\] P.L. 105-89, §105(a)(1)(B)(ii), struck out, the comma (sic),
semicolon and substituted \"; or\".

\[326\] P.L. 105-89, §105(a)(1)(B)(iii), added clause (iv), effective
November 19, 1997.

P.L. 105-200, §410(d)(3), decreased the indentation of clause (iv) by 2
ems.

\[327\] P.L. 105-33, 5534(a)(1)(B), struck out \"to obtain\" and all
that follows through the period, and substituted \"for purposes
specified in paragraphs (2) and (3).\", and amended paragraphs (2) and
(3) in their entirety, effective as if included in the enactment of
title III of P.L. 104-193, August 22, 1996.

For \"to obtain\" and the matter that followed, and for paragraphs (2)
and (3) as they formerly read, see Vol. II, Superseded Provisions, P.L.
105-33.

\[328\] P.L. 105-33, §5534(a)(2), amended subsection (b) in its
entirety, effective as if included in the enactment of title III of P.L.
104-193, August 22, 1996. For subsection (b) as it formerly read, see
Vol. II, Superseded Provisions, P.L. 105-33.

\[329\] P.L. 104-193, §316(b)(1), struck out \"support\" and substituted
\"support or to seek to enforce orders providing child custody or
visitation rights\". For the effective date, see Vol. II, P.L. 104-193,
§395.

\[330\] P.L. 104-193, §395(d)(2)(A), struck out \"an absent\" and
substituted \"a noncustodial\". For the effective date, see Vol. II,
P.L. 104-193, §395.

\[331\] P.L. 104-193, §316(b)(2), struck out \"or any agent of such
court; and\" and substituted \"or to issue an order against a resident
parent for child custody or visitation rights, or any agent of such
court;\". For the effective date, see Vol. II, P.L.

104-193, §395.

\[332\] P.L. 104-193, §108(c)(10), struck out \"aid under part A of this
title\" and substituted \"assistance under a State program funded under
part A\", effective July 1, 1997.

\[333\] P.L. 104-193, §395(d)(2)(A), struck out \"an absent\" and
substituted \"a noncustodial\". For the effective date, see Vol. II,
P.L. 104-193, §395.

\[334\] P.L. 105-89, §105(2)(A), struck out the period and substituted
\"; and\".

\[335\] P.L. 105-89, §105(2)(B), added paragraph (4), effective November
19, 1997.

\[336\] P.L. 104-193, §316(c), inserted \"in an amount which the
Secretary determines to be reasonable payment for the information
exchange (which amount shall not include payment for the costs of
obtaining, compiling, or maintaining the information)\". For the
effective date, see Vol. II, P.L. 104-193, §395.

\[337\] P.L. 104-193, §395(d)(2)(C), struck out \"absent\" and
substituted \"noncustodial\". For the effective date, see Vol. II, P.L.
104-193, §395(a), (b), and (c).

**Social Security Act §453(Continued)**

\[338\] P.L. 104-193, §316(d), added subsection (g). For the effective
date, see Vol. II, P.L. 104-193, §395.

\[339\] See Vol. II, P.L. 105-34, §1090(a)(3), with respect to
coordination between the Secretaries of the Treasury and Health and
Human Services on issues resulting from the amendments made by P.L.
105-34, §1090(a).

\[340\] P.L. 105-33, §5553(1), added \"and order\", effective as if
included in the enactment of title III of P.L. 104-193, August 22, 1996.

\[341\] P.L. 105-33, §5553(2)(A), added \"AND ORDER\", effective as if
included in the enactment of title III of P.L. 104-193, August 22, 1996.

\[342\] P.L. 105-33, §5553(2)(B), added \"or an order\", effective as if
included in the enactment of title III of P.L. 104-193, August 22, 1996.

\[343\] P.L. 105-33, §5553(2)(C), added \"or order\", effective as if
included in the enactment of title III of P.L. 104-193, August 22, 1996.

\[344\] P.L. 105-34, §1090(a)(2)(A), added \"Beginning not later than
October 1, 1999, the information referred to in paragraph (1) shall
include the names and social security numbers of the children of such
individuals.\", effective October 1, 1998.

See Vol. II, P.L. 105-34, §1090(a)(3), with respect to consultation and
reports required with regard to implementation issues.

\[345\] P.L. 105-34, §1090(a)(2)(B), added paragraph (3), effective
October 1, 1998.

See Vol. II, P.L. 105-200, §402(c), with respect to notice of purposes
for which wage and salary data are to be used and §402(d), with respect
to a report on the accuracy of data maintained by the National Directory
of New Hires.

\[346\] See Vol. II, P.L. 104-193, §316(h), with respect to a
requirement for cooperation in development of methods to access the
various directories for new hires.

\[347\] P.L. 105-200, §402(b), amended paragraph (2) to read:

\"(2) DATA ENTRY AND DELETION REQUIREMENTS.\--

\(A\) IN GENERAL.\--Information provided pursuant to section 453A(g)(2)
shall be entered into the data base maintained by the National Directory
of New Hires within two business days after receipt, and shall be
deleted from the data base 24 months after the date of entry.

\(B\) 12-MONTH LIMIT ON ACCESS TO WAGE AND UNEMPLOYMENT COMPENSATION
INFORMATION.\--The Secretary shall not have access for child support
enforcement purposes to information in the National Directory of New
Hires that is provided

pursuant to section 453A(g)(2)(B), if 12 months has elapsed since the
date the information is so provided and there has not been a match
resulting from the use of such information in any information comparison
under this subsection.

**Social Security Act §453(Continued)**

\(C\) RETENTION OF DATA FOR RESEARCH PURPOSES.\--Notwithstanding
subparagraphs (A) and (B), the Secretary may retain such samples of data
entered in the National Directory of New Hires as the Secretary may find
necessary to assist in carrying out subsection (j)(5).\", to take effect
on October 1, 2000.

\[348\] P.L. 105-33, §5535(b)(1), struck out \"registries\" and
substituted \"components\", effective as if included in the enactment of
title III of P.L. 104-193, August 22, 1996.

\[349\] P.L. 105-33, §5535(a), added \"data in each component of the
Federal Parent Locator Service maintained under this section and to\",
effective as if included in the enactment of title III of P.L. 104-193,
August 22, 1996.

\[350\] P.L. 105-33, §5535(b)(2), struck out \"subsection (j)(3)\" and
substituted \"section 453A(g)(2)\", effective as if included in the
enactment of title III of P.L. 104-193, August 22, 1996.

\[351\] P.L. 105-200, §402(a)(1), provided that \"Information\" be
stricken and substituted with \"(1) IN GENERAL.\--Information\", to take
effect on October 1, 2000. §402(a)(2) added a new paragraph (2): \"(2)
PENALTY FOR MISUSE OF INFORMATION IN THE NATIONAL DIRECTORY OF NEW
HIRES.\--The Secretary shall require the imposition of an administrative
penalty (up to and including dismissal from employment), and a fine of
\$1,000, for each act of unauthorized access to, disclosure of, or use
of, information in the National Directory of New Hires established under
subsection (i) by any officer or employee of the United States who
knowingly and willfully violates this paragraph.\", to take effect on
October 1, 2000.

\[352\] P.L. 104-193, §316(f), added subsections (h), (i), (j), (k),
(l), (m), and (n). For the effective date, see Vol. II, P.L. 104-193,
§395.

\[353\] P.L. 105-33, §5541(b)(1)(A), struck out \"RECOVERY OF COSTS\"
and substituted \"USE OF SET-ASIDE FUNDS\", effective as if included in
the enactment of title III of P.L. 104-193, August 22, 1996.

\[354\] P.L. 104-208, §215 (Title II - HHS), struck out \"section
457(a)\" and substituted \"a plan approved under this part\". Amounts
available under subsection (o), as added by P.L. 104-193, §345, shall be
calculated as though §345 were effective October 1, 1995.

P.L. 105-33, §5556(c), amended P.L. 104-208, §215 to read \"by striking
\`section 457(a)\' and inserting \`a plan approved under this part\'.
Amounts available under such sections 452(j) and 453(o) shall be
calculated as though the amendments made by this section were effective
October 1, 1995.\", effective as if included in P.L. 104-208, §215.

\[355\] P.L. 105-33, §5541(b)(1)(B), struck out \"to cover costs
incurred by the Secretary\" and substituted \"which shall be available
for use by the Secretary, either directly or through grants, contracts,
or interagency agreements,\", effective as if included in the enactment
of title III of P.L. 104-193, August 22, 1996.

\[356\] P.L. 104-193, §345(b), added subsection (o). For the effective
date, see P.L. 104-193, §395.

\[357\] P.L. 105-33, §5541(b)(2), added \"Amounts appropriated under
this subsection for each of fiscal years 1997 through 2001 shall remain
available until expended.\", effective as if included in the enactment
of title III of P.L. 104-193, August 22,

1996\.

**Social Security Act §453(Continued)**

\[358\] P.L. 105-33, §5543, struck out \"a child and\" and substituted
\"of\", effective as if included in the enactment of title III of P.L.
104-193, August 22, 1996.

\[359\] P.L. 104-193, §366, added subsection (p). For the effective
date, see P.L. 104-193, §395.

**Social Security Act §453A**

SEC. 453A. \[42 U.S.C. 653a\] (a) ESTABLISHMENT.\--

\(1\) IN GENERAL.\--

\(A\) REQUIREMENT FOR STATES THAT HAVE NO DIRECTORY.\--Except as
provided in subparagraph (B), not later than October 1, 1997, each State
shall establish an automated directory (to be known as the \"State
Directory of New Hires\") which shall contain information supplied in
accordance with subsection (b) by employers on each newly hired
employee.

\(B\) STATES WITH NEW HIRE REPORTING LAW IN EXISTENCE.\--A State which
has a new hire reporting law in existence on the date of the enactment
of this section may continue to operate under the State law, but the
State must meet the requirements of subsection (g)(2) not later than
October 1, 1997, and the requirements of this section (other than
subsection (g)(2)) not later than October 1, 1998.

\(2\) DEFINITIONS.\--As used in this section:

\(A\) EMPLOYEES.\--The term \"employee\"\--

\(i\) means an individual who is an employee within the meaning of
chapter 24 of the Internal Revenue Code of 1986; and

\(ii\) does not include an employee of a Federal or State agency
performing intelligence or counterintelligence functions, if the head of
such agency has determined that reporting pursuant to paragraph (1) with
respect to the employee could endanger the safety of the employee or
compromise an ongoing investigation or intelligence mission.

\(B\) EMPLOYER.\--

\(i\) IN GENERAL.\--The term \"employer\" has the meaning given such
term in section 3401(d) of the Internal Revenue Code of 1986 and
includes any governmental entity and any labor organization.

\(ii\) LABOR ORGANIZATION.\--The term \"labor organization\" shall have
the meaning given such term in section 2(5) of the National Labor
Relations Act, and includes any entity (also known as a \"hiring
hall\")which is used by the organization and an employer to carry out
requirements described in section 8(f)(3) of such Act of an agreement
between the organization and the employer.

\(b\) EMPLOYER INFORMATION.\--

\(1\) REPORTING REQUIREMENT.\--

\(A\) IN GENERAL.\--Except as provided in subparagraphs (B) and (C),
each employer shall furnish to the Directory of New Hires of the State
in which a newly hired employee works, a report that contains the name,
address, and social security number of the employee, and the name and
address of, and identifying number assigned under section 6109 of the
Internal Revenue Code of 1986 to, the employer.

**Social Security Act §453A(Continued)**

\(B\) MULTISTATE EMPLOYERS.\--An employer that has employees who are
employed in 2 or more States and that transmits reports magnetically or
electronically may comply with subparagraph (A) by designating 1 State
in which such employer has employees to which the employer will transmit
the report described in subparagraph (A), and transmitting such report
to such State. Any employer that transmits reports pursuant to this
subparagraph shall notify the Secretary in writing as to which State
such employer designates for the purpose of sending reports.

\(C\) FEDERAL GOVERNMENT EMPLOYERS.\--Any department, agency, or
instrumentality of the United States shall comply with subparagraph (A)
by transmitting the report described in subparagraph (A) to the National
Directory of New Hires established pursuant to section 453.

\(2\) TIMING OF REPORT.\--Each State may provide the time within which
the report required by paragraph (1) shall be made with respect to an
employee, but such report shall be made\--

\(A\) not later than 20 days after the date the employer hires the
employee; or

\(B\) in the case of an employer transmitting reports magnetically or
electronically, by 2 monthly transmissions (if necessary) not less than
12 days nor more than 16 days apart.

\(c\) REPORTING FORMAT AND METHOD.\--Each report required by subsection
(b) shall be made on a W-4 form or, at the option of the employer, an
equivalent form, and may be transmitted by 1st class mail, magnetically,
or electronically.

\(d\) CIVIL MONEY PENALTIES ON NONCOMPLYING EMPLOYERS.\--The State shall
have the option to set a State civil money

penalty which shall not exceed\[361\]\--

\(1\) \$25 per failure to meet the requirements of this section with
respect to a newly hired employee\[362\]; or

\(2\) \$500 if, under State law, the failure is the result of a
conspiracy between the employer and the employee to not

supply the required report or to supply a false or incomplete report.

\(e\) ENTRY OF EMPLOYER INFORMATION.\--Information shall be entered into
the data base maintained by the State Directory of New Hires within 5
business days of receipt from an employer pursuant to subsection (b).

\(f\) INFORMATION COMPARISONS.\--

\(1\) IN GENERAL.\--Not later than May 1, 1998, an agency designated by
the State shall, directly or by contract, conduct automated comparisons
of the social security numbers reported by employers pursuant to
subsection (b) and the social security numbers appearing in the records
of the State case registry for cases being enforced under the State
plan.

\(2\) NOTICE OF MATCH.\--When an information comparison conducted under
paragraph (1) reveals a match with respect to the social security number
of an individual required to provide support under a support order, the
State Directory of New Hires shall provide the agency administering the
State plan approved under this part of the appropriate State with the
name, address, and social security number of the employee to whom the
social security number is assigned, and the name and address of, and
identifying number assigned under section 6109 of the Internal Revenue
Code of 1986 to, the employer.

**Social Security Act §453A(Continued)**

\(g\) TRANSMISSION OF INFORMATION.\--

\(1\) TRANSMISSION OF WAGE WITHHOLDING NOTICES TO EMPLOYERS.\--Within 2
business days after the date information regarding a newly hired
employee is entered into the State Directory of New Hires, the State
agency enforcing the employee\'s child support obligation shall transmit
a notice to the employer of the employee directing the employer to
withhold from the income of the employee an amount equal to the monthly
(or other periodic) child support obligation (including any past due
support obligation) of the employee, unless the employee\'s income is
not subject to withholding pursuant to section 466(b)(3).

\(2\) TRANSMISSIONS TO THE NATIONAL DIRECTORY OF NEW HIRES.\--

\(A\) NEW HIRE INFORMATION.\--Within 3 business days after the date
information regarding a newly hired employee is entered into the State
Directory of New Hires, the State Directory of New Hires shall furnish
the information to the National Directory of New Hires.

\(B\) WAGE AND UNEMPLOYMENT COMPENSATION INFORMATION.\--The State
Directory of New Hires shall, on a quarterly basis, furnish to the
National Directory of New Hires information\[363\] concerning the wages
and unemployment compensation paid to individuals, by such dates, in
such format, and containing such information as the Secretary of Health
and Human Services shall specify in regulations.

\(3\) BUSINESS DAY DEFINED.\--As used in this subsection, the term
\"business day\" means a day on which State offices are open for regular
business.

\(h\) OTHER USES OF NEW HIRE INFORMATION.\--

\(1\) LOCATION OF CHILD SUPPORT OBLIGORS.\--The agency administering the
State plan approved under this part shall use information received
pursuant to subsection (f)(2) to locate individuals for purposes of
establishing paternity and establishing, modifying, and enforcing child
support obligations, and may disclose such information to any agent of
the

agency that is under contract with the agency to carry out such
purposes.

\(2\) VERIFICATION OF ELIGIBILITY FOR CERTAIN PROGRAMS.\--A State agency
responsible for administering a program specified in section 1137(b)
shall have access to information reported by employers pursuant to
subsection (b) of this section for purposes of verifying eligibility for
the program.

\(3\) ADMINISTRATION OF EMPLOYMENT SECURITY AND WORKERS\'
COMPENSATION.\--State agencies operating employment security and
workers\' compensation programs shall have access to information
reported by employers pursuant to subsection (b) for the purposes of
administering such programs.

\[360\] P.L. 104-193, §313(b), added §453A. For the effective date, see
Vol. II, P.L. 104-193, §395.

See Vol. II, P.L. 104-193, §316(h), with respect to a requirement for
cooperation in development of methods to access the various directories
of new hires.

\[361\] P.L. 105-33, §5533(1)(A), struck out \"shall be less than\" and
substituted \"shall not exceed\", effective as if included in the
enactment of title III of P.L. 104-193, August 22, 1996.

**Social Security Act §453A(Continued)**

\[362\] P.L. 105-33, §5533(1)(B), struck out \"\$25\" and substituted
\"\$25 per failure to meet the requirements of this section with respect
to a newly hired employee\", effective as if included in the enactment
of title III of P.L. 104-193, August 22, 1996.

\[363\] P.L. 105-33, §5533(2), struck out \"extracts of the reports
required under section 303(a)(6) to be made to the Secretary of Labor\"
and substituted \"information\", effective as if included in the
enactment of title III of P.L. 104-193, August 22, 1996.

##  internet insecurity: module 3

**Internet Insecurity**

**PROTECT YOURSELF**

**10 WAYS TO MORE PROTECT YOURSELF**

**By Joel Stein**

July 2, 2001 Issue

**1. Install a home firewall and virus protection.**

Hackers comb the internet looking for vulnerable computers, in some
cases trying to steal credit-card numbers and personal information. Home
firewall software such as BlackICE Defender or Zone Alarm can fend off
these attacks. You should also install virus protection if it is not
included on your computer.

**2. Be careful what you give out.**

Don't send sensitive information, like your home address, phone number
and names and ages of children, to strangers over the Internet. Be
careful what you put on personal home pages. If you want to post
pictures of yourself or your family online, consider doing it on a
hosting site that allows you to set up a password access. And keep in
mind that any postings you make on Internet discussion groups will be
archived, and can be easily retrieved.

**3. Don't download anything unless you trust the sender -- and the
file.**

Harmless-looking e-mail enclosures can contain spyware. To be safe,
never download anything unless you know and trust the sender, and have
confidence that the file being sent won't hack your computer.

**4. Use dummy e-mail accounts.**

When you fill out online profiles, post messages in newsgroups or give
out your e-mail address to strangers, consider using a secondary e-mail
account from a free service such as Hotmail or Yahoo Mail. If it gets
e-mail bombed, you can drop it and start over. Reserve your primary
e-mail account for friends and people you trust.

**5. Don't let your browser be a blabbermouth.**

Your name and e-mail address may be embedded in your browser. Websites
can then take them from your browser and make a permanent record of your
visit. To prevent this, you can go into your browser's preferences menu
and delete this information or replace it with a false name and dummy
e-mail account.

**6. Opt out.**

Check the privacy policies of websites you visit. Many are opt out,
meaning that unless you tell them otherwise, they reserve the right to
share your data with third parties. Opting out can be a chore. Start
with the site's Privacy Statement, and be prepared to wade through a lot
of fine print.

**Internet Insecurity (Continued)**

**7. Don't accept unnecessary cookies.**

You will probably want to accept cookies---code stored on your computer
that identifies you---since it's hard to shop, among other things,
without them. But you can reject unwanted cookies by resetting your
browser preferences or using software like Cookie Crusher.

**8. Use encryption for sensitive data.**

Before sending credit-card numbers and other financial information over
the Internet, be sure the transfer is encrypted---that is, scrambled to
prevent unauthorized access. Protected websites will tell you that the
transfer is encrypted, and your browser will usually display a symbol,
often a lock, confirming that the transfer is secure.

**9. Consider using an anonymizer.**

Since websites keep a record of your visits and may be able to identify
you by name, you might want to hide your identity with anonymizers like
www.anonymizer.com. Anonymizers also encrypt the URLs you visit so your
Internet-service provider cannot keep a record of them.

**10. Clean your memory cache after you surf the Internet.**

Your computer keeps a memory cache, effectively a log, of sites you
visit. Anyone with access to your computer can see your trail. Hide
these digital footprints with cache-deleting functions in you browser's
preferences or tools menu.

And bear in mind...Encryption can be cracked. It's not always easy to
know if spyware has been installed on your computer, at work or at home.

Bottom line: If it has to stay secret, don't put it on a computer hooked
up to the Internet.

# Handouts 

## social security act 463: MODULE 4

USE OF FEDERAL PARENT LOCATOR SERVICE IN CONNECTION WITH THE ENFORCEMENT
OR DETERMINATION OF CHILD CUSTODY AND IN CASES OF PARENTAL KIDNAPING OF
A CHILD

SEC. 463. \[42 U.S.C. 663\] (a) The Secretary shall enter into an
agreement with every State\[530\] under which the services of the
Federal\[531\] Parent Locator Service established under section 453
shall be made available to each State\[532\] for the purpose of
determining the whereabouts of any \[533\] parent or child when such
information is to be used to locate such parent or child for

the purpose of\--

\(1\) enforcing any State or Federal law with respect to the unlawful
taking or restraint of a child; or

\(2\) making or enforcing a child custody or visitation\[534\]
determination.

\(b\) An agreement entered into under subsection (a) shall provide that
the State agency described in section 454 will, under procedures
prescribed by the Secretary in regulations, receive and transmit to the
Secretary requests from authorized persons for information as to (or
useful in determining) the whereabouts of any \[535\] parent or child
when such information is to be used

to locate such parent or child for the purpose of\--

\(1\) enforcing any State or Federal law with respect to the unlawful
taking or restraint of a child; or

\(2\) making or enforcing a child custody or visitation\[536\]
determination.

\(c\) Information authorized to be provided by the Secretary under
subsection (a), (b), (e), or (f) shall be subject to the same conditions
with respect to disclosure as information authorized to be provided
under section 453, and a request for information by the Secretary under
this section shall be considered to be a request for information under
section 453 which is authorized to

be provided under such section. Only information as to the most recent
address and place of employment of any \[537\] parent or child shall be
provided under this section.

\(d\) For purposes of this section\--

\(1\) the term \"custody or visitation\[538\] determination\" means a
judgment, decree, or other order of a court providing for the custody or
visitation of a child, and includes permanent and temporary orders, and
initial orders and modification;

\(2\) the term \"authorized person\" means\--

\(A\) any agent or attorney of any State having an agreement under this
section, who has the duty or authority under

the law of such State to enforce a child custody or visitation\[539\]
determination;

\(B\) any court having jurisdiction to make or enforce such a child
custody or visitation\[540\] determination, or any

agent of such court; and

\(C\) any agent or attorney of the United States, or of a State having
an agreement under this section, who has the duty or authority to
investigate, enforce, or bring a prosecution with respect to the
unlawful taking or restraint of a child.

**Social Security Act §463 (Continued)**

\(e\) The Secretary shall enter into an agreement with the Central
Authority designated by the President in accordance with section 7 of
the International Child Abduction Remedies Act\[541\], under which the
services of the Federal\[542\] Parent Locator Service established under
section 453 shall be made available to such Central Authority upon its
request for the purpose of

locating any parent or child on behalf of an applicant to such Central
Authority within the meaning of section 3(1) of that Act.

The Federal\[543\] Parent Locator Service shall charge no fees for
services requested pursuant to this subsection.

\(f\) The Secretary shall enter into an agreement with the Attorney
General of the United States, under which the services of the
Federal\[544\] Parent Locator Service established under section 453
shall be made available to the Office of Juvenile Justice and
Delinquency Prevention upon its request to locate any parent or child on
behalf of such Office for the purpose of\--

\(1\) enforcing any State or Federal law with respect to the unlawful
taking or restraint of a child, or

\(2\) making or enforcing a child custody or visitation\[545\]
determination.

The Federal\[546\] Parent Locator Service shall charge no fees for
services requested pursuant to this subsection.

\[530\] P.L. 105-33, §5534(b)(1)(A)(i), struck out \"any State which is
able and willing to do so,\" and substituted \"every State\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[531\] P.L. 104-193, §316(e)(1), inserted \"Federal\". For the
effective date, see Vol. II, P.L. 104-193, §395.

\[532\] P.L. 105-33, §5534(b)(1)(A)(ii), struck out \"such State\" and
substituted \"each State\", effective as if included in the enactment of
title III of P.L. 104-193, August 22, 1996.

\[533\] P.L. 105-33, §5534(b)(5), struck out \"noncustodial\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[534\] P.L. 105-33, §5534(b)(1)(B), added \"or visitation\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[535\] P.L. 105-33, §5534(b)(5), struck out \"noncustodial\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[536\] P.L. 105-33, §5534(b)(2), added \"or visitation\", effective as
if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[537\] P.L. 105-33, §5534(b)(5), struck out \"noncustodial\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[538\] P.L. 105-33, §5534(b)(3)(A), added \"or visitation\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[539\] P.L. 105-33, §5534(b)(3)(B), added \"or visitation\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

**Social Security Act §463 (Continued)**

\[540\] P.L. 105-33, §5534(b)(3)(B), added \"or visitation\", effective
as if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[541\] See Vol. II, P.L. 100-300.

\[542\] P.L. 104-193, §316(e)(1), inserted \"Federal\". For the
effective date, see Vol. II, P.L. 104-193, §395.

\[543\] P.L. 104-193, §316(c)(1), inserted \"Federal\". For the
effective date, see Vol. II, P.L. 104-193, §395.

\[544\] P.L. 104-193, §316(e)(1), inserted \"Federal\". For the
effective date, see Vol. II, P.L. 104-193, §395.

\[545\] P.L. 105-33, §5534(b)(4), added \"or visitation\", effective as
if included in the enactment of title III of P.L. 104-193, August 22,
1996.

\[546\] P.L. 104-193, §316(e)(1), inserted \"Federal\". For the
effective date, see Vol. II, P.L. 104-193, §395.

## case scenarios: Module 4

+---------------------------+------------+------------+---------------+
| **Situation**             | **§453**   | **§463**   | **N/A**       |
+===========================+============+============+===============+
| **(Check Yes or No and    |            |            |               |
| Indicate the Appropriate  |            |            |               |
| Legislative Authority)**  |            |            |               |
+---------------------------+------------+------------+---------------+
| 1.  A police officer is   | **Yes **  | **Yes **  | **Yes **     |
|     sitting in the        |            |            |               |
|     waiting room and has  | **No **   | **No **   | **No **      |
|     asked to see the      |            |            |               |
|     child support worker  |            |            |               |
|     for NCP John Smith.   |            |            |               |
|     John Smith is in your |            |            |               |
|     caseload. The police  |            |            |               |
|     officer indicates     |            |            |               |
|     there is a warrant.   |            |            |               |
|     Mr. Smith believes    |            |            |               |
|     you may have some     |            |            |               |
|     information about     |            |            |               |
|     him, as his ex-wife   |            |            |               |
|     indicated she gets    |            |            |               |
|     child support every   |            |            |               |
|     now and then. The     |            |            |               |
|     police officer is     |            |            |               |
|     looking for an        |            |            |               |
|     address. You look at  |            |            |               |
|     your file and you see |            |            |               |
|     there is a current    |            |            |               |
|     address and employer  |            |            |               |
|     just reported from    |            |            |               |
|     the NDNH via the      |            |            |               |
|     FPLS.                 |            |            |               |
|                           |            |            |               |
| This is a legal matter    |            |            |               |
| and the officer has a     |            |            |               |
| warrant, is the entitled  |            |            |               |
| to the information?       |            |            |               |
|                           |            |            |               |
| If the police officer is  |            |            |               |
| entitled to this          |            |            |               |
| information under which   |            |            |               |
| authority?                |            |            |               |
+---------------------------+------------+------------+---------------+
|                           |            |            |               |
+---------------------------+------------+------------+---------------+
| 2.  You are in the        | **Yes **  | **Yes **  | **Yes **     |
|     courtroom on a child  |            |            |               |
|     support matter and    | **No **   | **No **   | **No **      |
|     the NCP fails to      |            |            |               |
|     appear. The judge is  |            |            |               |
|     about to make a       |            |            |               |
|     ruling of contempt    |            |            |               |
|     and is very angry as  |            |            |               |
|     he cut the NCP a      |            |            |               |
|     break at the last     |            |            |               |
|     court hearing a month |            |            |               |
|     ago. The judge asks   |            |            |               |
|     for the location      |            |            |               |
|     information.          |            |            |               |
|                           |            |            |               |
| Does the judge have legal |            |            |               |
| authority to obtain this  |            |            |               |
| information through FPLS? |            |            |               |
|                           |            |            |               |
| If the judge is entitled  |            |            |               |
| to this information under |            |            |               |
| which authority?          |            |            |               |
+---------------------------+------------+------------+---------------+
| 3.  You have just         | **Yes **  | **Yes **  | **Yes **     |
|     finished talking to a |            |            |               |
|     very irate CP who     | **No **   | **No **   | **No **      |
|     believes that you are |            |            |               |
|     not taking sufficient |            |            |               |
|     action on her case,   |            |            |               |
|     nor are you acting    |            |            |               |
|     quickly enough. A     |            |            |               |
|     little while later    |            |            |               |
|     the receptionist      |            |            |               |
|     calls and indicates   |            |            |               |
|     that the Custodial    |            |            |               |
|     Parent's attorney is  |            |            |               |
|     in the lobby to see   |            |            |               |
|     you. He wants access  |            |            |               |
|     to the FPLS           |            |            |               |
|     information.          |            |            |               |
|                           |            |            |               |
| > Does the attorney for a |            |            |               |
| > custodial parent have   |            |            |               |
| > the right to the FPLS   |            |            |               |
| > information on behalf   |            |            |               |
| > of the CP?              |            |            |               |
| >                         |            |            |               |
| > If the attorney is      |            |            |               |
| > entitled to this        |            |            |               |
| > information under which |            |            |               |
| > authority?              |            |            |               |
+---------------------------+------------+------------+---------------+
|                           |            |            |               |
+---------------------------+------------+------------+---------------+
| 4.  The grandmother of a  | **Yes **  | **Yes **  | **Yes **     |
|     child in your         |            |            |               |
|     caseload is in the    | **No **   | **No **   | **No **      |
|     office. She is a very |            |            |               |
|     kind, polite older    |            |            |               |
|     woman, who is         |            |            |               |
|     concerned about her   |            |            |               |
|     grandchild and is     |            |            |               |
|     wondering if there is |            |            |               |
|     anything else that    |            |            |               |
|     can be done on behalf |            |            |               |
|     of her daughter and   |            |            |               |
|     grandchild's case.    |            |            |               |
|     She has asked for the |            |            |               |
|     NCP's address so she  |            |            |               |
|     can go talk to him    |            |            |               |
|     about him visiting    |            |            |               |
|     the child more often. |            |            |               |
|                           |            |            |               |
| > Is the grandmother      |            |            |               |
| > entitled to the         |            |            |               |
| > information contained   |            |            |               |
| > in the file?            |            |            |               |
| >                         |            |            |               |
| > If the grandmother is   |            |            |               |
| > entitled to this        |            |            |               |
| > information under which |            |            |               |
| > authority?              |            |            |               |
+---------------------------+------------+------------+---------------+
| 5.  A social worker from  | **Yes **  | **Yes **  | **Yes **     |
|     the IV-B Child        |            |            |               |
|     Welfare Agency calls  | **No **   | **No **   | **No **      |
|     you on a case in your |            |            |               |
|     caseload. She needs   |            |            |               |
|     the NCP's address.    |            |            |               |
|     She is conducting a   |            |            |               |
|     home study and needs  |            |            |               |
|     the NCP to sign a     |            |            |               |
|     document about how    |            |            |               |
|     often he visits the   |            |            |               |
|     child.                |            |            |               |
|                           |            |            |               |
| > Is the social worker    |            |            |               |
| > entitled to this        |            |            |               |
| > information as an agent |            |            |               |
| > of the IV-B agency?     |            |            |               |
| >                         |            |            |               |
| > If the social worker is |            |            |               |
| > entitled to this        |            |            |               |
| > information under which |            |            |               |
| > authority?              |            |            |               |
+---------------------------+------------+------------+---------------+
| 6.  A private attorney    | **Yes **  | **Yes **  | **Yes **     |
|     calls you on behalf   |            |            |               |
|     of the custodial      | **No **   | **No **   | **No **      |
|     parent. Over the      |            |            |               |
|     weekend the NCP       |            |            |               |
|     picked up the child   |            |            |               |
|     for his weekend       |            |            |               |
|     visitation and has    |            |            |               |
|     not returned the      |            |            |               |
|     child. The custodial  |            |            |               |
|     parent is concerned   |            |            |               |
|     about parental        |            |            |               |
|     kidnapping. The       |            |            |               |
|     private attorney      |            |            |               |
|     wants you to provide  |            |            |               |
|     the NCP's SSN and     |            |            |               |
|     employer information  |            |            |               |
|     obtained through the  |            |            |               |
|     FPLS.                 |            |            |               |
|                           |            |            |               |
| > As an agent of the CP,  |            |            |               |
| > is the private attorney |            |            |               |
| > entitled to this        |            |            |               |
| > information?            |            |            |               |
| >                         |            |            |               |
| > If the private attorney |            |            |               |
| > is entitled to this     |            |            |               |
| > information, under      |            |            |               |
| > which authority?        |            |            |               |
+---------------------------+------------+------------+---------------+

## summary of privacy act: module 4

**Summary of Security Requirements**

**Privacy Act of 1974**

1.  **Overview of the Privacy Act**

The Privacy Act of 1974 is the cornerstone that drives safeguarding and
security requirements for FPLS. It fulfills the same role for all other
information systems used by the Federal government that contain data on
individuals. The terminology used in the Privacy Act for information
systems is "systems of records." The purpose of the Privacy Act is to
balance the government's need to maintain information about individuals
with the rights of individuals for protection against unwarranted
invasions of privacy resulting from agency collection, maintenance, use
and disclosure of personal information.

The Privacy Act was passed in 1974 as a reaction to the illegal
surveillance and investigation of individuals exposed by the Watergate
scandal. It was also passed to deal with concern about potential abuses
presented by the government's increasing use of computers to store and
retrieve information about individuals. The Privacy Act has undergone a
number of revisions over the years to reflect advances in technology.
One of the major revisions to the Privacy Act, the Computer Matching and
Privacy Protection Act (CMPPA) of 1988, added procedural requirements
that agencies were to follow when engaging in computer matching
activities. CMPPA requires agencies that engage in matching activities
(e.g., the match between Department of Education and NDNH data to locate
those that have defaulted on student loans) to provide public notice of
such activities, and to enter into formal agreements. Those agreements
have to be renewed every eighteen months.

The Privacy Act, and the Computer Matching and Privacy Protection Act
have four policy objectives:

-   To restrict disclosure of personally identifiable records maintained
    by agencies

-   To grant individuals increased rights of access to their records
    maintained by agencies

-   To grant the right to individuals to seek amendment of records that
    were incomplete or inaccurate

-   To establish a code of fair information practices which requires
    agencies to comply with statutory norms for collection, maintenance
    and dissemination of records.

Some of the key provisions of the Privacy Act are:

-   5 USC § 552 a(e)(1): Each agency that has a system of records shall
    'maintain in its system of records only such information about an
    individual as is relevant and necessary to accomplish a purpose of
    the agency required to be accomplished by statute of by Executive
    Order of the President."

-   5 USC § 552 a(e)(2): Each agency that has a system of records shall
    "collect information to the greatest extent practicable directly
    from the subject individual when the information may result in
    adverse determinations about an individual's rights, benefits and
    privileges under Federal programs."

-   5 USC § 552 a(e)(3): Each agency that has a system of records shall
    inform an individual it is asking for information the authority
    under which the information is being requested, and whether the
    information is mandatory or voluntary; the purpose for which the
    information is being requested; the routine uses for which the
    information is to be used; and the effects on the individual if the
    information is not provided.

**Summary of Security Requirements Privacy Act of 1974 (Continued)**

All of the provisions of the Privacy Act apply to FCR, NDNH and Tax
Offset because they constitute "systems of records". The Privacy Act
provides the answer to WHAT must be protected. The details of the HOW
records defined as falling under the definitions discussed in the
Privacy Act are found in other regulations such as OMB A-130.

## IRC SEC. 6103: Module 4

**IRC SEC. 6103. CONFIDENTIALITY AND DISCLOSURE OF RETURNS AND RETURN**

INFORMATION.

\(a\) GENERAL RULE.-Returns and return information shall be
confidential, and except as authorized by this title-

\(1\) no officer or employee of the United States,

\(2\) no officer or employee of any State, any local child support
enforcement agency, or any local agency administering a program listed
in subsection (1)(7)(D) who has or had access to returns or return
information under this section, and

\(3\) no other person (or officer or employee thereof) who has or had
access to returns or return information under subsection (c)(1)(D)(iii),
paragraph (6) or (12) of subsection (1), paragraph (2) or (4)(B) of
subsection (in), or subsection (n),

shall disclose any return or return information obtained by him in any
manner in connection with his service as such an officer or an employee
or otherwise or under the provisions of this section. For purposes on
this subsection, the term \"officer or employee\" includes a former
officer or employee.

> \(b\) DEFINITIONS.-For purposes of this section-
>
> \(1\) RETURN.-The term \"return\" means any tax or information return,
> declaration of

estimated tax, or claim for refund required by, or provided for or
permitted under, the provisions of this title which is filed with the
Secretary by, on behalf of, or with respect to any person, and any
amendment or supplement thereof, including supporting schedules,
attachments, or lists which are supplemental to, or part of the return
filed.

\(2\) RETURN INFORMATION.-The term \"return information\" means-

> \(A\) a taxpayer\'s identity, the nature, source, or amount of his
> income, payments, receipts, deductions, exemptions, credits, assets,
> liabilities, net worth, tax liability, tax withheld, deficiencies,
> over assessments, or tax payments, whether the taxpayer\'s return was,
> is being, or will be examined or subject to other investigation or
> processing, or any other data, received by, recorded by, prepared by,
> furnished to, or collected by the Secretary with respect to a return
> or with respect to the determination of the existence, or possible
> existence, of liability (or the amount thereof) of any person under
> this title for any tax, penalty, interest, fine, forfeiture, or other
> imposition, or offense, and
>
> \(B\) any part of any written determination or any background file
> document relating to such written determination \[as such terms are
> defined in section 6110(b)\] which is not open to the public
> inspection under 6110, but such term does not include data in a form
> which cannot be associated with, or otherwise identify, directly or
> indirectly, a particular taxpayer. Nothing in the preceding sentence,
> or in any other provision of the law, shall be construed to require
> the disclosure of standards used or to be used for the selection of
> returns for examination, or data used or to be used for determining
> such standards, if the Secretary determines that such disclosure will
> seriously impair assessment, collection, or enforcement under the
> internal revenue laws.

**IRC SEC. 6103 (Continued)**

\(3\) TAXPAYER RETURN INFORMATION.-The term \"taxpayer return
information\" means return information as defined in paragraph (2) which
is filed with, or furnished to, the Secretary by or on behalf of the
taxpayer to whom such return information relates.

\(4\) TAX ADMINISTRATION.-The term \"tax administration\" -

> \(A\) means-
>
> \(i\) the administration, management, conduct, direction, and
> supervision of the execution and application of the internal revenue
> laws and related statutes (or equivalent laws and statutes of a State)
> and tax convention to which the United States in a party, and
>
> \(ii\) the development and formulation of Federal tax policy relating
> to existing or proposed internal revenue laws, related statutes and
> tax conventions and
>
> \(B\) includes assessments, collection, enforcement, litigation,
> publication and statistical gathering functions under such laws,
> statutes, or conventions.

\(5\) STATE.-The term \"state\" means-

> \(A\) any of the 50 States, the District of Columbia, the Commonwealth
> of Puerto Rico, the Virgin Islands, the Canal Zone, Guam, American
> Samoa, and the Commonwealth of the Northern Mariana Islands, and
>
> \(B\) for purposes of subsection (a)(2), (b)(4), (d)(1), (h)(4) and
> (p) any municipality-
>
> \(i\) with a population in excess of 250,000 (as determined under the
> most recent decennial United States census data available),
>
> \(ii\) which imposes a tax on income or wages, and
>
> \(iii\) with which the Secretary (in his sole discretion ) has entered
> into an agreement regarding disclosure.

\(6\) TAXPAYER IDENTITY.-The term \"taxpayer identity\" means the name
of a person with respect to whom a return is filed, his mailing address,
his taxpayer identifying number (as described in section 6109), or a
combination thereof.

\(7\) INSPECTION.-The terms \"inspected\" and \"inspection\" mean any
examination of a return or return information.

\(8\) DISCLOSURE.-The term \"disclosure\" means the making known to any
person in any manner whatever a return or return information.

\(9\) FEDERAL AGENCY.-The term \"Federal agency\" means an agency within
the meaning of section 551 (1) of title 5, United States Code.

\(10\) CHIEF EXECUTIVE OFFICER.-The term \"chief executive officer\"
means, with respect to any municipality, any elected official and the
chief official (even if not elected) of such municipality.

## IRC 7213: Module 4

**IRS SEC. 7213 UNAUTHORIZED DISCLOSURE OF INFORMATION.**

\(a\) RETURNS AND RETURN INFORMATION.-

1\) FEDERAL EMPLOYEES AND OTHER PERSONS.-It shall be unlawful for any
officer or employee of the United States or any person described in
section 6103(n) (or an officer or employee of any such person), or any
former officer or employee, willfully to disclose to any person, except
as authorized in this title, any return or return information \[as
defined in section 6103(b)\]. Any violation of this paragraph shall be
felony punishable upon conviction by fine in any amount not exceeding
\$5,000, or imprisonment of not more than 5 years, or both, together
with the costs of prosecution, and if such offense is committed by any
officer or employee of the United States, he shall, in addition to any
other punishment, be dismissed from office or discharged from employment
upon conviction for such offense.

\(2\) STATE AND OTHER EMPLOYEES.-It shall be unlawful for any person
\[not described in paragraph (1)\] willfully to disclose to any person,
except as authorized in this title, any return or return information
\[as defined in section 6103(b)\] acquired by him or another person
under subsection (d),(i)(3)(B)(i), (1)(6), (7), (8), (9), (10), (12),
(15) or (16) or (m)(2), (4), (5), (6), or (7) of section 6103. Any
violation of this paragraph shall be felony punishable by fine in any
amount not exceeding \$5,000, or imprisonment of not more than 5 years,
or both, together with the cost of prosecution.

\(3\) OTHER PERSONS.-It shall be unlawful for any person to whom any
return or return information \[as defined in section 6103(b)\] is
disclosed in an manner unauthorized by this title thereafter willfully
to print or publish in any manner not provided by law any such return or
return information. Any violation of this paragraph shall be felony
punishable by fine in any amount not exceeding \$5,000, or imprisonment
of not more than 5 years, or both, together with the cost of
prosecution.

\(4\) SOLICITATION.-It shall be unlawful for any person willfully to
offer any item of material value in exchange for any return or return
information \[as defined in 6103(b)\] and to receive as a result of such
solicitation any such return or return information. Any violation of
this paragraph shall be felony punishable by a fine in any amount not
exceeding \$5,000, or imprisonment of not more than 5 years, or both,
together with the cost of prosecution.

\(5\) SHAREHOLDERS.-It shall be unlawful for any person to whom return
or return

information \[as defined in 6103(b) \] is disclosed pursuant to the
provisions of 6103(e)(1)(D)(iii) willfully to disclose such return or
return information in any manner not provided by law. Any violation of
this paragraph shall be felony punishable by a fine in any amount not
exceeding \$5,000, or imprisonment of not more than 5 years, or both,
together with the cost of prosecution.

SEC. 7213A. UNAUTHORIZED INSPECTION OF RETURNS OR RETURN INFORMATION

**IRS SEC. 7213 (Continued)**

(a ) PROHIBITIONS.-

\(1\) FEDERAL EMPLOYEES AND OTHER PERSONS.-It shall be unlawful for-

> \(A\) any officer or employee of the United States, or
>
> \(B\) any person described in section 6103(n) or an officer willfully
> to inspect, except as authorized in this title, any return or return
> information.

\(2\) STATE AND OTHER EMPLOYEES.-It shall be unlawful for any person
\[not described in paragraph(l)\] willfully to inspect, except as
authorized by this title, any return information acquired by such person
or another person under a provision of section 6103 referred to in
section 7213(a)(2).

\(b\) PENALTY.-

\(1\) IN GENERAL.-Any violation of subsection (a) shall be punishable
upon conviction by a

fine in any amount not exceeding \$1000, or imprisonment of not more
than 1 year, or both, together with

the costs of prosecution.

\(2\) FEDERAL OFFICERS OR EMPLOYEES.-An officer or employee of the
United States

who is convicted of any violation of subsection (a) shall, in addition
to any other punishment, be dismissed from office or discharged from
employment.

\(c\) DEFINITIONS.-For purposes of this section, the terms \"inspect\",
\"return\", and \"return

information\" have respective meanings given such terms by section
6103(b).

## irc 7431: MODULE 4

**IRC SEC. 7431 CIVIL DAMAGES FOR UNAUTHORIZED DISCLOSURE OF RETURNS**

**AND RETURN INFORMATION.**

\(a\) IN GENERAL.-

\(1\) INSPECTION OR DISCLOSURE BY EMPLOYEE OF UNITED STATES.-If any
officer or employee of the United States knowingly, or by reason of
negligence, inspects or discloses any return or return information with
respect to a taxpayer in violation of any provision of section 6103,
such taxpayer may bring a civil action for damages against the United
States in a district court of the United States.

\(2\) INSPECTION OR DISCLOSURE BY A P RSON WHO IS NOT AN EMPLOYEE OF

UNITED STATES.-If any person who is not an officer or employee of the
United States knowingly, or by reason of negligence, inspects or
discloses any return or return information with respect to a taxpayer in
violation of any provision of section 6103, such taxpayer may bring a
civil action for damages against such person in a district court of the
United States.

\(b\) EXCEPTIONS.-No liability shall arise under this section with
respect to any inspection or

disclosure --

\(1\) which results from good faith, but erroneous, interpretation of
section 6103, or

\(2\) which is requested by the taxpayer.

\(c\) DAMAGES.-In any action brought under subsection (a), upon a
finding of liability on the part of the defendant, the defendant shall
be liable to the plaintiff in an amount equal to the sum of-

\(1\) the greater of-

> \(A\) \$1,000 for each act of unauthorized inspection or disclosure of
> a return or return information with respect to which such defendant is
> found liable, or
>
> \(B\) the sum of-
>
> \(i\) the actual damages sustained by the plaintiff as a result of
> such unauthorized inspection or disclosure, plus
>
> \(ii\) in the case of a willful inspection or disclosure or an
> inspection or disclosure which is the result of gross negligence,
> punitive damages, plus

\(2\) the cost of the action.

\(d\) PERIOD FOR BRINGING ACTION.-Notwithstanding any other provision of
law, an action to enforce any liability created under this section may
be brought, without regard to the amount in controversy, at any time
within 2 years after the date of discovery by the plaintiff of the
unauthorized inspection or disclosure.

**IRC SEC. 7431 (Continued)**

\(e\) NOTIFICATION OF UNLAWFUL INSPECTION AND DISCLOSURE.-If any person
is criminally charged by indictment or information with inspection or
disclosure of a taxpayer\'s return or return information in violation
of-

\(1\) paragraph (1) or (2) of section 7213(a),

\(2\) section 7213A(a), or

\(3\) subparagraph (B) of section 1030(a)(2) of title 18, United States
Code, the Secretary shall notify such taxpayer as soon as practicable of
such inspection or disclosure.

\(f\) DEFINITIONS.-For purposes of this section, the terms \"inspect\",
\"inspection\",\"return\" and \"return information\" have the respective
meanings given such terms by section 6103(b).

\(g\) EXTENSION TO INFORMATION OBTAINED UNDER SECTION 3406.-For purposes
of this

section-

\(1\) any information obtained under section 3406 (including information
with respect to any payee certification failure under subsection (d)
thereof) shall be treated as return information, and

\(2\) any inspection or use of such information other than for purposes
of meeting any requirement under section 3406 or (subject to the
safeguards set forth in 6103) for purposes permitted under section 6103
shall be treated as a violation of section 6103.

For purposes of subsection (b), the reference to section 6103 shall be
treated as including a reference to section 3406.

## IRC 7213: MODULE 4

**IRS SEC. 7213 UNAUTHORIZED DISCLOSURE OF INFORMATION.**

\(a\) RETURNS AND RETURN INFORMATION.-

1\) FEDERAL EMPLOYEES AND OTHER PERSONS.-It shall be unlawful for any
officer or employee of the United States or any person described in
section 6103(n) (or an officer or employee of any such person), or any
former officer or employee, willfully to disclose to any person, except
as authorized in this title, any return or return information \[as
defined in section 6103(b)\]. Any violation of this paragraph shall be
felony punishable upon conviction by fine in any amount not exceeding
\$5,000, or imprisonment of not more than 5 years, or both, together
with the costs of prosecution, and if such offense is committed by any
officer or employee of the United States, he shall, in addition to any
other punishment, be dismissed from office or discharged from employment
upon conviction for such offense.

\(2\) STATE AND OTHER EMPLOYEES.-It shall be unlawful for any person
\[not described in paragraph (1)\] willfully to disclose to any person,
except as authorized in this title, any return or return information
\[as defined in section 6103(b)\] acquired by him or another person
under subsection (d),(i)(3)(B)(i), (1)(6), (7), (8), (9), (10), (12),
(15) or (16) or (m)(2), (4), (5), (6), or (7) of section 6103. Any
violation of this paragraph shall be felony punishable by fine in any
amount not exceeding \$5,000, or imprisonment of not more than 5 years,
or both, together with the cost of prosecution.

\(3\) OTHER PERSONS.-It shall be unlawful for any person to whom any
return or return information \[as defined in section 6103(b)\] is
disclosed in an manner unauthorized by this title thereafter willfully
to print or publish in any manner not provided by law any such return or
return information. Any violation of this paragraph shall be felony
punishable by fine in any amount not exceeding \$5,000, or imprisonment
of not more than 5 years, or both, together with the cost of
prosecution.

\(4\) SOLICITATION.-It shall be unlawful for any person willfully to
offer any item of material value in exchange for any return or return
information \[as defined in 6103(b)\] and to receive as a result of such
solicitation any such return or return information. Any violation of
this paragraph shall be felony punishable by a fine in any amount not
exceeding \$5,000, or imprisonment of not more than 5 years, or both,
together with the cost of prosecution.

\(5\) SHAREHOLDERS.-It shall be unlawful for any person to whom return
or return

information \[as defined in 6103(b) \] is disclosed pursuant to the
provisions of 6103(e)(1)(D)(iii) willfully to disclose such return or
return information in any manner not provided by law. Any violation of
this paragraph shall be felony punishable by a fine in any amount not
exceeding \$5,000, or imprisonment of not more than 5 years, or both,
together with the cost of prosecution.

SEC. 7213A. UNAUTHORIZED INSPECTION OF RETURNS OR RETURN INFORMATION

**IRS SEC. 7213 (Continued)**

(a ) PROHIBITIONS.-

\(1\) FEDERAL EMPLOYEES AND OTHER PERSONS.-It shall be unlawful for-

> \(A\) any officer or employee of the United States, or
>
> \(B\) any person described in section 6103(n) or an officer willfully
> to inspect, except as authorized in this title, any return or return
> information.

\(2\) STATE AND OTHER EMPLOYEES.-It shall be unlawful for any person
\[not described in paragraph(l)\] willfully to inspect, except as
authorized by this title, any return information acquired by such person
or another person under a provision of section 6103 referred to in
section 7213(a)(2).

\(b\) PENALTY.-

\(1\) IN GENERAL.-Any violation of subsection (a) shall be punishable
upon conviction by a fine in any amount not exceeding \$1000, or
imprisonment of not more than 1 year, or both, together with the costs
of prosecution.

\(2\) FEDERAL OFFICERS OR EMPLOYEES.-An officer or employee of the
United States who is convicted of any violation of subsection (a) shall,
in addition to any other punishment, be dismissed from office or
discharged from employment.

\(c\) DEFINITIONS.-For purposes of this section, the terms \"inspect\",
\"return\", and \"return

Information\" have respective meanings given such terms by section
6103(b).

## IRC 7213A: Module 4

### Unauthorized Inspection of Returns or Return Information {#unauthorized-inspection-of-returns-or-return-information .unnumbered}

Internal Revenue Code Section 7213A.

(a) Prohibitions.-

```{=html}
<!-- -->
```
(1) Federal Employees and Other Persons.- It shall be unlawful for-

```{=html}
<!-- -->
```
(A) any officer or employee of the United States, or

(B) any person described in section 6103(n) or an officer willfully to
    inspect, except as authorized in this title, any return or return
    information.

```{=html}
<!-- -->
```
(2) State and Other Employees.- It shall be unlawful for any person
    \[not described in paragraph(1)\] willfully to inspect, except as
    authorized by this title, any return information acquired by such
    person or another person under a provision of section 6103 referred
    to in section 7213(a)(2).

```{=html}
<!-- -->
```
(b) Penalty.-

```{=html}
<!-- -->
```
(1) In General.- Any violation of subsection (a) shall be punishable
    upon conviction by a fine in any amount not exceeding \$1000, or
    imprisonment of not more than 1 year, or both, together with the
    costs of prosecution.

(2) Federal Officers or Employees.- An officer or employee of the United
    States who is convicted of any violation of subsection (a) shall, in
    addition to any other punishment, be dismissed from office or
    discharged from employment.

```{=html}
<!-- -->
```
(c) Definitions.- For purposes of this section, the terms "inspect",
    "return", and "return information", have respective meanings given
    such terms by section 6103(b).

## Evaluation

**Course Title:** Expanded Federal Parent Locator Service Annual
Security Awareness Training

**Location:**
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

**Date:**
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

**Instructor(s):**
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

*[Instructions]{.underline}*: Please check the box in the column that
best represents your response to each question. Your comments are
encouraged. If more space is needed, please use the back of the page.

  ------------------- -------- -------- -- --- --------------- ----------- ------------- ------- ----------- ------ ---------- -----
                                                                                                                               

                                                               **ABOVE**                         **BELOW**                     

                                               **EXCELLENT**   **AVG**     **AVERAGE**           **AVG**            **POOR**   

  **THE COURSE**                                                                                                               

  1\. Information                                                                                                         
  contained in the                                                                                                             
  course                                                                                                                       

  2\. Length of the                                                                                                       
  course                                                                                                                       

  3\. Usefulness of                                                                                                       
  the course                                                                                                                   

                                                                                                                               

  **COURSE                                                                                                                     
  MATERIALS**                                                                                                                  

  1\. Order of the                                                                                                        
  modules                                                                                                                      

  2\. Usefulness of                                                                                                       
  information                                                                                                                  

  3\. Appendices and                                                                                                      
  hand-outs                                                                                                                    

                                                                                                                               

  **INSTRUCTOR(S)**                                                                                                            

  1\. Ability to                                                                                                          
  present information                                                                                                          
  in a clear and                                                                                                               
  understandable way                                                                                                           

  2\. Teaching skills                                                                                                     
  and presentation                                                                                                             
  methods                                                                                                                      

  3\. Ability to                                                                                                          
  answer or find                                                                                                               
  answers to                                                                                                                   
  questions                                                                                                                    

                                                                                                                               

  **OTHER**                                                                                                                    

  1\. Did the course                                                       Yes                   No                            
  meet your                                                                                                                    
  objectives and                                                                                                               
  expectations?                                                                                                                

  (Circle one. If no,                                                                                                          
  please explain.)                                                                                                             

                                                                                                                               

                                                                                                                               

  2\. Will this                                                            Yes                   No                            
  course help you in                                                                                                           
  relation to your                                                                                                             
  job?                                                                                                                         

  (Circle one. If no,                                                                                                          
  please explain.)                                                                                                             

                                                                                                                               

                                                                                                                               

  3\. What did you                                                                                                             
  like most about                                                                                                              
  this course?                                                                                                                 

                                                                                                                               

                                                                                                                               

  4\. What did you                                                                                                             
  like least about                                                                                                             
  this course?                                                                                                                 

  **ADDITIONAL                                                                                                                 
  COMMENTS** (please                                                                                                           
  use the reverse                                                                                                              
  side if necessary                                                                                                            
  ------------------- -------- -------- -- --- --------------- ----------- ------------- ------- ----------- ------ ---------- -----