[Federal Register Volume 88, Number 173 (Friday, September 8, 2023)]
[Notices]
[Pages 62136-62140]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2023-19371]


=======================================================================
-----------------------------------------------------------------------

SOCIAL SECURITY ADMINISTRATION

[Docket No: SSA-2023-0035]


Agency Information Collection Activities: Proposed Request and 
Comment Request

    The Social Security Administration (SSA) publishes a list of 
information collection packages requiring clearance by the Office of 
Management and Budget (OMB) in compliance with Public Law 104-13, the 
Paperwork Reduction Act of 1995, effective October 1, 1995. This notice 
includes revisions of OMB-approved information collections.
    SSA is soliciting comments on the accuracy of the agency's burden 
estimate; the need for the information; its practical utility; ways to 
enhance its quality, utility, and clarity; and ways to minimize burden 
on respondents, including the use of automated collection techniques or 
other forms of information technology. Mail, email, or fax your 
comments and recommendations on the information collection(s) to the 
OMB Desk Officer and SSA Reports Clearance Officer at the following 
addresses or fax numbers.
    (OMB) Office of Management and Budget, Attn: Desk Officer for SSA, 
Fax: 202-395-6974, Email address: <a href="/cdn-cgi/l/email-protection#8dc2c4dfccd2def8efe0e4fefee4e2e3cde2e0efa3e8e2fda3eae2fb"><span class="__cf_email__" data-cfemail="6c23253e2d333f190e01051f1f0503022c03010e4209031c420b031a">[email protected]</span></a>.
    Submit your comments online referencing Docket ID Number [SSA-2023-
0035].
    (SSA) Social Security Administration, OLCA, Attn: Reports Clearance 
Director, Mail Stop 3253 Altmeyer, 6401 Security Blvd., Baltimore, MD 
21235, Fax: 833-410-1631, Email address: <a href="/cdn-cgi/l/email-protection#c18e93ef93a4b1aeb3b5b2ef82ada4a0b3a0afa2a481b2b2a0efa6aeb7"><span class="__cf_email__" data-cfemail="ce819ce09cabbea1bcbabde08da2abafbcafa0adab8ebdbdafe0a9a1b8">[email protected]</span></a>.
    Or you may submit your comments online through https://www.reginfo.gov/public/do/PRAMain, referencing Docket ID Number [SSA-
2023-0035].
    I. The information collections below are pending at SSA. SSA will 
submit them to OMB within 60 days from the date of this notice. To be 
sure we consider your comments, we must receive them no later than 
November 7, 2023. Individuals can obtain copies of the collection 
instruments by writing to the above email address.
    1. Agreement to Sell Property--20 CFR 416.1240--1245--0960--0127. 
Individuals or couples who are otherwise eligible for Supplemental 
Security Income (SSI) payments, but whose resources exceed the 
allowable limit, may receive conditional payments if they agree to 
dispose of the excess non-liquid resources and make repayments. SSA 
uses Form SSA-8060-U3 to document this agreement, and to ensure the 
individuals understand their obligations. Respondents are applicants 
for and recipients of SSI payments who will be disposing of excess non-
liquid resources.
    Type of Request: Revision of an OMB-approved information 
collection.

--------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                                                                         Average
                                                                                   Average  burden     Estimated       theoretical       Total annual
             Modality of completion                 Number of       Frequency of    per  response    total  annual     hourly  cost    opportunity  cost
                                                   respondents        response        (minutes)     burden  (hours)       amount         (dollars) **
                                                                                                                       (dollars) *
--------------------------------------------------------------------------------------------------------------------------------------------------------
SSA-8060-U3....................................          20,000                1               20            6,667         * $29.76         ** $198,410
--------------------------------------------------------------------------------------------------------------------------------------------------------
* We based this figures on average U.S. citizen's hourly salary, as reported by Bureau of Labor Statistics data (https://www.bls.gov/oes/current/oes_nat.htm).
** This figure does not represent actual costs that SSA is imposing on recipients of Social Security payments to complete this application; rather,
  these are theoretical opportunity costs for the additional time respondents will spend to complete the application. There is no actual charge to
  respondents to complete the application.

    2. Work Activity Report (Self-Employment)--20 CFR 404.1520(b), 
404.1571--404.1576, 404.1584--404.1593, and 416.971--416.976--0960-
0598. SSA uses Form SSA-820-BK to determine initial or continuing 
eligibility for: (1) Title II Social Security disability benefits 
(SSDI); or (2) Title XVI SSI payments. Under Titles II and XVI of the 
Social Security Act, recipients receive disability benefits and SSI 
payments based on their inability to engage in substantial gainful 
activity (SGA) due to a physical or mental condition. Therefore, when 
the recipients resume work, they must report their work so SSA can 
evaluate and determine by law whether they continue to meet the 
disability requirements. SSA uses Form SSA-820-BK to obtain information 
on self-employment activities of Social Security Title II and XVI 
disability applicants and recipients. We use the data we obtain to 
evaluate disability claims, and to help us determine if the claimant 
meets current disability provisions under Titles II and XVI. Since 
applicants for disability benefits or payments must prove an inability 
to perform any kind of SGA generally available in the national economy 
for which we expect them to qualify based on age, education, and work 
experience, any work an applicant performed until, or subsequent to, 
the date the disability allegedly began, affects our disability 
determination. The respondents are

[[Page 62137]]

applicants and claimants for SSI payments or SSDI benefits.
    Type of Request: Revision of an OMB-approved information 
collection.

--------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                                                                        Average  wait
                                                                           Average        Estimated        Average     time  in field
                                          Number of     Frequency of     burden per     total  annual    theoretical    office or for     Total annual
        Modality of completion           respondents      response        response         burden       hourly  cost     teleservice   opportunity  cost
                                                                          (minutes)        (hours)         amount          centers        (dollars) **
                                                                                                         (dollars) *    (minutes) **
--------------------------------------------------------------------------------------------------------------------------------------------------------
SSA-820-BK (in Office)...............          12,144               1              30           6,072        * $12.81           ** 24       *** $140.013
SSA-820-BK (phone)...................          36,428               1              30          18,214         * 12.81           ** 19        *** 381,085
SSA-820-BK (paper)...................          48,571               1              30          24,286         *1 2.81               0        *** 311,104
SSA-820-APP (online submission)......           2,857               1              30           1,429         * 12.81               0         *** 18,305
--------------------------------------------------------------------------------------------------------------------------------------------------------
* We based this figure on average DI payments, as reported in SSA's disability insurance payment data (https://www.ssa.gov/legislation/2023factsheet.pdf).
** We based this figure on the average FY 2022 wait times for field offices and teleservice centers, based on SSA's current management information data.
*** This figure does not represent actual costs that SSA is imposing on recipients of Social Security payments to complete this application; rather,
  these are theoretical opportunity costs for the additional time respondents will spend to complete the application. There is no actual charge to
  respondents to complete the application.

    3. Social Security's Public Credentialing and Authentication 
Process--20 CFR 401.45 and 402--0960-0789.

Background

    Authentication is the foundation for secure, online transactions. 
Identity authentication is the process of determining, with confidence, 
that someone is who he or she claims to be during a remote, automated 
session. It comprises three distinct factors: something you know; 
something you have; and something you are. Single-factor authentication 
uses one of the factors, and multi-factor authentication uses two or 
more of the factors.

SSA's Public Credentialing and Authentication Process

    SSA offers consistent authentication across SSA's secured online 
services. We allow our users to request and maintain only one User ID, 
consisting of a self-selected username and password, to access multiple 
Social Security electronic services. Designed in accordance with the 
OMB Memorandum M-04-04 and the National Institute of Standards and 
Technology (NIST) Special Publication 800-63, this process provides the 
means of authenticating users of our secured electronic services and 
streamlines access to those services.
    SSA's public credentialing and authentication process:
    <bullet> Issues a single User ID to anyone who wants to do business 
with the agency and meets the eligibility criteria;
    <bullet> Partners with an external Identity Services Provider (ISP) 
to help us verify the identity of our online customers;
    <bullet> Complies with relevant standards;
    <bullet> Offers access to some of SSA's workloads online, while 
providing a high level of confidence in the identity of the person 
requesting access to these services;
    <bullet> Offers an in-person process for those who are 
uncomfortable with or unable to use the internet process;
    <bullet> Balances security with ease of use; and
    <bullet> Provides a user-friendly way for the public to conduct 
extended business with us online instead of visiting local servicing 
offices or requesting information over the phone. Individuals have 
real-time access to their Social Security information in a safe and 
secure web environment.

Public Credentialing and Authentication Process Features

    We collect and maintain the users' personally identifiable 
information (PII) in our Central Repository of Electronic 
Authentication Data Master File Privacy Act system of records, which we 
published in the Federal Register (75 FR 79065). The PII may include 
the users' name; address; date of birth; Social Security number (SSN); 
phone number; and other types of identity information [e.g., address 
information of persons from the W-2 and Schedule Self Employed forms we 
receive electronically for our programmatic purposes as permitted by 26 
U.S.C. 6103(l)(1)(A)]. We may also collect knowledge-based 
authentication data, which is information users establish with us or 
that we already maintain in our existing Privacy Act systems of 
records.
    We retain the data necessary to administer and maintain our e-
Authentication infrastructure. This includes management and profile 
information, such as blocked accounts; failed access data; effective 
date of passwords; and other data allowing us to evaluate the system's 
effectiveness. The data we maintain also may include archived 
transaction data and historical data.
    We use the information from this collection to identity proof and 
authenticate our users online, and to allow them access to their 
personal information from our records. We also use this information to 
provide second factor authentication. We are committed to expanding and 
improving this process so we can grant access to additional online 
services in the future.
    Offering online services is not only an important part of meeting 
SSA's goals, but is vital to good public service. In increasing 
numbers, the public expects to conduct complex business over the 
internet. Ensuring SSA's online services are both secure and user-
friendly is a high priority.
    We awarded a competitively bid contract to an ISP, Equifax,\1\ to 
help us verify the identity of our online customers. We use this ISP, 
in addition to our other authentication methods, to help us prove, or 
verify, the identity of our customers when they are completing online 
or electronic transactions with us.
---------------------------------------------------------------------------

    \1\ Equifax is a global information solutions provider. 
Equifax's solutions help Social Security to manage risk and mitigate 
fraud.
---------------------------------------------------------------------------

Social Security's Authentication Strategy

    We remain committed to enhancing our online services using 
authentication processes that balance usability and security. We will 
continue to research and develop new authentication tools while 
monitoring the emerging threats.
    The following are key components of our authentication strategy:
    <bullet> Enrollment and Identity Verification--Individuals who meet 
the following eligibility requirements may enroll:
    [cir] Must have a valid email address;
    [cir] Must have a valid Social Security number (SSN);
    [cir] Must have a domestic address of record (includes military 
addresses); and
    [cir] Must be at least 18 years of age.
    We collect identifying data and use SSA and ISP records to verify 
an

[[Page 62138]]

individual's identity. Individuals have the option of obtaining an 
enhanced, stronger, User ID by providing certain financial information 
(e.g., Medicare wages, self-employed earnings, or the last eight digits 
of a credit card number) for verification. We also ask individuals to 
answer out-of-wallet questions so we can further verify their 
identities. Individuals who are unable to complete the process online 
can present identification at a field office to obtain a User ID.
    <bullet> Establishing the User Profile--The individual self-selects 
a username and password, both of which can be of variable length and 
alphanumeric. We provide a password strength indicator to help the 
individual select a strong password. We also ask the individual to 
choose challenge questions for use in restoring a lost or forgotten 
username or password.
    <bullet> Provide a Second Factor--We ask the individual to provide 
a text message enabled cell phone number or an email address. We 
consider the cell phone number or email address the second factor of 
authentication. We send a security code to the individual's selected 
second factor. We require the individual to confirm its receipt by 
entering the security code online. Subsequently, each time the 
individual attempts to sign in to his or her online account, we will 
also send a message with a one-time security code to the individual's 
selected second factor. The individual must enter the security code 
along with his or her username and password. The code is valid for only 
10 minutes. If the individual does not enter the code within 10 
minutes, the code expires, and the individual must request another 
code.
    <bullet> Enhancing the User ID--If individuals opt to enhance or 
upgrade their User IDs, they must provide certain financial information 
for verification. We mail a one-time-use upgrade code to the 
individual's verified residential address. When the individual receives 
the upgrade code in the mail, he or she can enter this code online to 
enhance the security of the account. With extra security, we continue 
to require the individuals to sign in using their username, password, 
and a one-time security code we send to their second factor email 
address or cell phone number (whichever the users listed in their 
account).
    <bullet> Sign in and Use--Our authentication process provides an 
individual with a User ID for access to our sensitive online Social 
Security services. Second factor authentication requires the individual 
to sign in with a username, password, and a one-time security code sent 
to the individual's selected second factor. SSA expanded its existing 
capabilities to require second factor authentication for every online 
sign in. We also allow for maintenance of the second factor options. An 
individual who forgets the password can reset it automatically without 
contacting SSA.

Social Security's Enrollment Process

    The enrollment process is a one-time only activity. SSA requires 
the individuals to agree to the ``Terms of Service'' detailed on our 
website before we allow them to begin the enrollment process. The 
``Terms of Service'' inform the individuals what we will and will not 
do with their personal information, and the privacy and security 
protections we provide on all data we collect. These terms also detail 
the consequences of misusing this service.
    To verify the individual's identity, we ask the individual to give 
us minimal personal information, which may include:
    <bullet> Name;
    <bullet> SSN;
    <bullet> Date of birth;
    <bullet> Address--mailing and residential;
    <bullet> Telephone number;
    <bullet> Email address;
    <bullet> Financial information;
    <bullet> Cell phone number; and
    <bullet> Selecting and answering password reset questions.
    We send a subset of this information to the ISP, who then generates 
a series of out-of-wallet questions back to the individual. The 
individual must answer all or most of the questions correctly before 
continuing in the process. The exact questions generated are unique to 
each individual.
    This collection of information, or a subset of it, is mandatory for 
respondents who want to do business with SSA via the internet. We 
collect this information via the internet, on SSA's public-facing 
website. We also offer an in-person identification verification process 
for individuals who cannot, or are not willing, to register online. For 
this process, the individual must go to a local SSA field office and 
provide identifying information. We do not ask for financial 
information with the in-person process.
    We only collect the identity verification information one time, 
when the individual registers for a credential. We ask for the User ID 
(username and password) every time an individual signs in to our 
automated services. If individuals opt for the enhanced or upgraded 
account, they also either receive an email message or a text message on 
their cell phones (this serves as the second factor for authentication) 
each time they sign in.
    The respondents are individuals who choose to use the internet or 
Automated Telephone Response System to conduct business with SSA.
    Type of Request: Revision of an OMB-approved information 
collection.

--------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                                                           Average
                                                                           Average        Estimated      theoretical    Average  wait     Total annual
        Modality of completion            Number of     Frequency of     burden per     total  annual   hourly  cost   time  in field  opportunity  cost
                                         respondents      response        response         burden          amount           office        (dollars) **
                                                                          (minutes)        (hours)       (dollars) *    (minutes) **
--------------------------------------------------------------------------------------------------------------------------------------------------------
Internet Registrations...............      11,788,914               1               8       1,571,855        * $29.76  ..............    *** $46,778,405
Internet Sign-Ins....................     124,989,089               1               1       2,083,151         * 29.76  ..............      *** 6,194,574
Intranet Registration (RCS)..........          54,908               1               8           7,321         * 29.76           ** 24        *** 871,492
                                      ------------------------------------------------------------------------------------------------------------------
    Totals...........................     136,832,911  ..............  ..............       3,662,327  ..............  ..............      ** 53,844,471
--------------------------------------------------------------------------------------------------------------------------------------------------------
* We based this figure on average U.S. citizen's hourly salary, as reported by Bureau of Labor Statistics data (https://www.bls.gov/oes/current/oes_nat.htm#00-0000).
** We based these figures on the average FY 2022 wait times for field offices, based on SSA's current management information data.
*** This figure does not represent actual costs that SSA is imposing on recipients of Social Security payments to complete this application; rather,
  these are theoretical opportunity costs for the additional time respondents will spend to complete the application. There is no actual charge to
  respondents to complete the application.

    II. SSA submitted the information collection below to OMB for 
clearance. Your comments regarding this information collection would be 
most useful if OMB and SSA receive them 30 days from the date of this 
publication. To be sure we consider your comments, we must receive them 
no later than October 10, 2023. Individuals can obtain

[[Page 62139]]

copies of this OMB clearance package by writing to the 
<a href="/cdn-cgi/l/email-protection#e0afb2ceb285908f929493cea38c858192818e8385a0939381ce878f96"><span class="__cf_email__" data-cfemail="cb8499e599aebba4b9bfb8e588a7aeaab9aaa5a8ae8bb8b8aae5aca4bd">[email protected]</span></a>.
    1. Authorization for the Social Security Administration to Obtain 
Wage and Employment Information from Payroll Data Providers--0960-0807. 
Section 824 of the Bipartisan Budget Act (BBA) of 2015, Public Law 114-
74, authorizes SSA to enter into information exchanges with payroll 
data providers for the purposes of improving program administration and 
preventing improper payments in the SSDI and SSI programs. SSA uses 
Form SSA-8240, ``Authorization for the Social Security Administration 
to Obtain Wage and Employment Information from Payroll Data 
Providers,'' to secure the authorization needed from the relevant 
members of the public to obtain their wage and employment information 
from payroll data providers. Ultimately, SSA uses this wage and 
employment information to help determine program eligibility and 
payment amounts.
    The public can complete Form SSA-8240 using the following 
modalities: a paper form; the internet; and an in-office or telephone 
interview, during which an SSA employee documents the wage and 
employment information authorization information on one of SSA's 
internal systems (the Modernized Claims System (MCS); the SSI Claims 
System; eWork; or iMain). The individual's authorization will remain 
effective until one of the following four events occurs:
    <bullet> SSA makes a final adverse decision on the application for 
benefits, and the applicant has filed no other claims or appeals under 
the Title for which SSA obtained the authorization;
    <bullet> the individual's eligibility for payments ends, and the 
individual has not filed other claims or appeals under the Title for 
which SSA obtained the authorization;
    <bullet> the individual revokes the authorization verbally or in 
writing; or
    <bullet> the deeming relationship ends (for SSI purposes only).
    SSA requests authorization on an as-needed basis as part of the 
following processes: (a) SSDI and SSI initial claims; (b) SSI 
redeterminations; and (c) SSDI Work Continuing Disability Reviews. The 
respondents are individuals who file for, or are currently receiving, 
SSDI or SSI payments, and any person whose income and resources SSA 
counts when determining an individual's SSI eligibility or payment 
amount.
    Type of Request: Revision of an OMB approved information 
collection.

--------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                                                                        Average  wait
                                                                           Average        Estimated        Average     time  in field
                                          Number of     Frequency of     burden per     total  annual    theoretical    office or for     Total annual
        Modality of completion           respondents      response        response         burden       hourly  cost     teleservice   opportunity  cost
                                                                          (minutes)        (hours)         amount          centers        (dollars) **
                                                                                                         (dollars) *    (minutes) **
--------------------------------------------------------------------------------------------------------------------------------------------------------
SSA-8240 (paper).....................         150,000               1               8          20,000        * $12.81  ..............       *** $256,200
Web Title II & Title XVI Electronic           697,580               1               3          34,879         * 12.81            * 21      *** 3,574,400
 (MCS, MSSICS, and eWork)............
Internet.............................         147,820               1               3           7,391         * 12.81               0         *** 94,679
                                      ------------------------------------------------------------------------------------------------------------------
    Totals...........................         995,400  ..............  ..............          62,270  ..............  ..............      *** 3,925,279
--------------------------------------------------------------------------------------------------------------------------------------------------------
* We based this figure on the average DI payments based on SSA's current FY 2023 data (https://www.ssa.gov/legislation/2023factsheet.pdf).
** We based this figure by averaging the average FY 2023 wait times for field offices and teleservice centers, based on SSA's current management
  information data.
*** This figure does not represent actual costs that SSA is imposing on recipients of Social Security payments to complete this application; rather,
  these are theoretical opportunity costs for the additional time respondents will spend to complete the application. There is no actual charge to
  respondents to complete the application.

    2. Notice to Electronic Information Exchange Partners to Provide 
Contractor List--0960-0820. The Federal standards Privacy Act of 1974; 
E-Government act of 2002; and the National Institute of Standard 
Special Publications 800-53-4, requires SSA to maintain oversight of 
the information it provides to Electronic Information Exchange Partners 
(EIEPs). EIEPs obtain SSA data for the administration of federally 
funded and state-administered programs. SSA has a responsibility to 
monitor and protect the personally identifiable information SSA shares 
with other Federal and State agencies, and private organizations 
through the Computer Matching and Privacy Protection Act, and the 
Information Exchange Agreements (IEA). Under the terms of the State 
Transmission Component IEA, and agency IEA, EIEPs agree to comply with 
Electronic Information Exchange security requirements and procedures 
for State and local Agencies exchanging electronic information with 
SSA. SSA's Technical Systems Security Requirements document provides 
all agencies using SSA data ensure SSA information is not processed; 
maintained; transmitted; or stored in; or by means of data 
communications channel; electronic devices; computers; or computer 
networks located in geographic or virtual areas not subject to U.S. 
law. SSA conducts tri-annual compliance reviews of all State and local 
agencies, and Tribes with whom we have an IEA, to verify appropriate 
security safeguards remain in place to protect the confidentiality of 
information SSA supplies. SSA requires any organization with an 
electronic data exchange agreement, to provide the SSA Regional Office 
contact a current list of contractors, or agents who have access to SSA 
data upon request. SSA uses Form SSA-731, Notice to Electronic 
Information Exchange Partners to Provide Contractor List to collect 
this. The respondents are Federal agencies; State, local, or tribal 
agencies; who exchange electronic information with SSA.
    Type of Request: Revision to an OMB-approved information 
collection.

--------------------------------------------------------------------------------------------------------------------------------------------------------
                                                                                                                         Average
                                                                                   Average  burden     Estimated       theoretical       Total annual
             Modality of completion                 Number of       Frequency of    per  response    total  annual     hourly  cost    opportunity  cost
                                                   respondents        response        (minutes)     burden  (hours)       amount         (dollars) **
                                                                                                                       (dollars) *
--------------------------------------------------------------------------------------------------------------------------------------------------------
SSA-731........................................             300                1               20              100         * $29.76           ** $2,976
--------------------------------------------------------------------------------------------------------------------------------------------------------
* We based this figure on average State, local and tribal government worker's salaries (https://www.bls.gov/oes/current/oes_nat.htm).

[[Page 62140]]

 
** This figure does not represent actual costs that SSA is imposing on recipients of Social Security payments to complete this application; rather,
  these are theoretical opportunity costs for the additional time respondents will spend to complete the application. There is no actual charge to
  respondents to complete the application.


    Dated: September 1, 2023.
Naomi Sipple,
Reports Clearance Officer, Social Security Administration.
[FR Doc. 2023-19371 Filed 9-7-23; 8:45 am]
BILLING CODE 4191-02-P


</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>