104544 Federal Register / Vol. 89, No. 246 / Monday, December 23, 2024 / Notices 

• To examine the operations of 

FedRAMP and determine ways that 

authorization processes can 

continuously be improved, including 

the following: 

Æ Measures to increase agency reuse 

of FedRAMP authorizations. 

Æ Proposed actions that can be 

adopted to reduce the burden, 

confusion, and cost associated with 

FedRAMP authorizations for cloud 

service providers. 

Æ Measures to increase the number of 

FedRAMP authorizations for cloud 

computing products and services 

offered by small businesses concerns (as 

defined by section 3(a) of the Small 

Business Act (15 U.S.C. 632(a)). 

Æ Proposed actions that can be 

adopted to reduce the burden and cost 

of FedRAMP authorizations for 

agencies. 

• Collect information and feedback 

on agency compliance with, and 

implementation of, FedRAMP 

requirements. 

• Serve as a forum that facilitates 

communication and collaboration 

among the FedRAMP stakeholder 

community. 

The FSCAC will meet no fewer than 

three (3) times a calendar year. Meetings 

shall occur as frequently as needed, 

called, and approved by the DFO. 

Purpose of the Meeting and Agenda 

The February 26, 2025 public meeting 

will include two presentations by 

FedRAMP on their roadmap as well as 

commercial and federal framework 

reciprocity, and the meeting will also 

include several panel discussions on the 

topics of the current FedRAMP 

authorization process experience, the 

current state of Open Security Controls 

Assessment Language (OSCAL), and 

Federal framework reciprocity. 

The February 27, 2025 public meeting 

will be dedicated to continued 

deliberations in order to finalize 

recommendations to the GSA 

Administrator on their initial two (2) 

priority initiatives of 1) identifying and 

documenting top challenges and 

proposing solutions around the barrier 

to entry for Cloud Service Providers 

(CSPs) with a focus on small businesses, 

third party assessment organizations 

(3PAOs), and small & large agencies, 

and 2) identifying and documenting 

ways to expedite the authorization 

process for Cloud Service Offerings 

(CSOs), such as exploring agile 

authorizations and other potential cost 

reductions, both labor and financial, 

with a focus on small businesses. 

Additionally, the committee will 

begin deliberations to develop their 

initial recommendations on their last 

two (2) priority initiatives of 3) 

identifying best practices and 

recommendations on how FedRAMP 

can make progress with commercial 

reciprocity using different security 

frameworks, and 4) identifying what is 

needed to support OSCAL adoption and 

if there are any barriers to OSCAL 

interoperability within the CSP and 

agency GRC ecosystem that need to be 

addressed. 

Members of the public will have the 

opportunity to provide oral public 

comments during each meeting, and 

may also submit public comments in 

writing prior to this meeting by 

completing the public comment form on 

our website, https://gsa.gov/fscac. The 

meeting agendas will be posted on 

https://gsa.gov/fscac prior to each 

meeting and can be accessed by 

selecting the ‘‘Federal Secure Cloud 

Advisory Committee meetings’’ tab on 

the left, and then selecting the 

‘‘February 26 & 27, 2025—Virtual’’ 

meeting accordion in order to view all 

meeting materials, agendas, and 

registration information. 

Meeting Attendance 

The virtual meeting is open to the 

public. The meeting materials, 

registration information, and agenda 

will be made available prior to the 

meeting online at https://gsa.gov/ 

fscac,by selecting the ‘‘Federal Secure 

Cloud Advisory Committee meetings’’ 

tab on the left, and then selecting the 

‘‘February 26 & 27, 2025—Virtual’’ 

meeting accordion. Registration for 

attending the virtual meeting is highly 

encouraged by 5 p.m. EST, on Friday, 

February 21, 2025. After registration, 

individuals will receive instructions on 

how to attend the meetings via email. 

For information on services for 

individuals with disabilities, or to 

request accommodation for a disability, 

please email the FSCAC staff at 

FSCAC@gsa.gov at least 10 days prior to 

the meeting date. Live captioning may 

be provided virtually. 

Public Comment 

Members of the public attending will 

have the opportunity to provide oral 

public comment during the FSCAC 

meeting. Written public comments can 

be submitted at any time by completing 

the public comment form on our 

website, https://gsa.gov/fscac, located 

under the ‘‘Get Involved’’ section. All 

written public comments will be 

provided to FSCAC members in advance 

of the meeting if received by Tuesday, 

February 18, 2025. 

Margaret Dugan, 

Service-Level Liaison, Federal Acquisition 

Service, General Services Administration. 

[FR Doc. 2024–30489 Filed 12–20–24; 8:45 am] 

BILLING CODE 6820–34–P 

DEPARTMENT OF HEALTH AND 

HUMAN SERVICES 

Centers for Medicare & Medicaid 

Services 

Privacy Act of 1974; Matching Program 

AGENCY: Centers for Medicare & 

Medicaid Services (CMS), Department 

of Health and Human Services (HHS). 

ACTION: Notice of a new matching 

program. 

SUMMARY: In accordance with subsection 

(e)(12) of the Privacy Act of 1974, as 

amended, the Department of Health and 

Human Services (HHS), Centers for 

Medicare & Medicaid Services (CMS) is 

providing notice of a new matching 

program between CMS and the 

Department of the Treasury (Treasury), 

Internal Revenue Service (IRS), 

‘‘Verification of Household Income and 

Family Size for Insurance Affordability 

Programs and Exemptions.’’ The new 

matching program will commence 

under a new agreement when the 

agreement for the existing matching 

program expires in April 2025. 

DATES: The deadline for comments on 

this notice is January 22, 2025. The new 

matching program will commence not 

sooner than 30 days after publication of 

this notice, provided no comments are 

received that warrant a change to this 

notice. The matching program will be 

conducted for an initial term of 18 

months (from April 5, 2025 to October 

4, 2026) and within 3 months of 

expiration may be renewed for up to one 

additional year if the parties make no 

change to the matching program and 

certify that the program has been 

conducted in compliance with the 

matching agreement. 

ADDRESSES: Interested parties may 

submit comments on this notice to the 

CMS Privacy Act Officer by mail at: 

Division of Security, Privacy Policy & 

Governance, Information Security & 

Privacy Group, Office of Information 

Technology, Centers for Medicare & 

Medicaid Services, Location: N1–14–56, 

7500 Security Blvd., Baltimore, MD 

21244–1850, or by email to 

Barbara.Demopulos@cms.hhs.gov. 

FOR FURTHER INFORMATION CONTACT: If 

you have questions about the matching 


khammond on DSK9W7S144PROD with NOTICES
Federal Register / Vol. 89, No. 246 / Monday, December 23, 2024 / Notices 104545 

program, you may contact Anne Pesto, 

Senior Advisor, Marketplace Eligibility 

and Enrollment Group, Center for 

Consumer Information and Insurance 

Oversight, Centers for Medicare & 

Medicaid Services, at 667–290–9486, by 

email at anne.pesto@cms.hhs.gov, or by 

mail at 7500 Security Blvd., Baltimore, 

MD 21244. 

SUPPLEMENTARY INFORMATION: The 

Privacy Act of 1974, as amended (5 

U.S.C. 552a) provides certain 

protections for individuals applying for 

and receiving Federal benefits. The law 

governs the use of computer matching 

by Federal agencies when records in a 

system of records (meaning, Federal 

agency records about individuals 

retrieved by name or other personal 

identifier) are matched with records of 

other Federal or non-Federal agencies. 

The Privacy Act requires agencies 

involved in a matching program to: 

1. Enter into a written agreement, 

which must be prepared in accordance 

with the Privacy Act, approved by the 

Data Integrity Board of each source and 

recipient Federal agency, provided to 

Congress and the Office of Management 

and Budget (OMB), and made available 

to the public, as required by 5 U.S.C. 

552a(o), (u)(3)(A), and (u)(4). 

2. Notify the individuals whose 

information will be used in the 

matching program that the information 

they provide is subject to verification 

through matching, as required by 5 

U.S.C. 552a(o)(1)(D). 

3. Verify match findings before 

suspending, terminating, reducing, or 

making a final denial of an individual’s 

benefits or payments or taking other 

adverse action against the individual, as 

required by 5 U.S.C. 552a(p). 

4. Report the matching program to 

Congress and the OMB, in advance and 

annually, as required by 5 U.S.C. 

552a(o) (2)(A)(i), (r), and (u)(3)(D). 

5. Publish advance notice of the 

matching program in the Federal 

Register as required by 5 U.S.C. 

552a(e)(12). 

This matching program meets these 

requirements. 

Barbara Demopulos, 

Privacy Act Officer, Division of Security, 

Privacy Policy and Governance, Office of 

Information Technology, Centers for Medicare 

& Medicaid Services. 

Participating Agencies 

The Department of Health and Human 

Services (HHS), Centers for Medicare & 

Medicaid Services (CMS) is the 

recipient agency, and the Department of 

the Treasury (Treasury), Internal 

Revenue Service (IRS) is the source 

agency. 

Authority for Conducting the Matching 

Program 

The authority for the matching 

program is 42 U.S.C. 18001, et seq. 

Purpose(s) 

The purpose of the matching program 

is to provide CMS with IRS Federal tax 

information which CMS and State-based 

administering entities (AEs) will use to 

verify household income and family 

size for applicants and enrollees 

receiving eligibility determinations and 

redeterminations for benefits under the 

Patient Protection and Affordable Care 

Act (PPACA), including: enrollment in 

a Qualified Health Plan (QHP) or a 

State’s Basic Health Plan (BHP) through 

the federally-facilitated Exchange (FFE) 

or a State-based Exchange (SBE); 

advance payments of the premium tax 

credit (APTC); a cost sharing reduction 

(CSR); enrollment in Medicaid and the 

Children’s Health Insurance Program 

(CHIP); and certain certificates of 

exemption. 

Categories of Individuals 

The individuals whose information 

will be used in the matching program 

are consumers (applicants and 

enrollees) who receive the eligibility 

determinations and redeterminations 

described in the preceding Purpose(s) 

section (in particular, taxpayers whose 

Federal tax information is requested 

from IRS to verify an applicant’s or 

enrollee’s household income and family 

size). 

Categories of Records 

The categories of records used in the 

matching program are identity 

information and Federal tax information 

(specifically, household income and 

family size information). To request 

Federal tax information from IRS, CMS 

will provide IRS with the relevant 

taxpayer’s name, social security number 

(SSN), and relationship to the 

applicant(s) or enrollee(s) (i.e., primary, 

spouse, or dependent). When IRS is able 

to match the SSN and name provided by 

CMS and Federal tax information is 

available, IRS will disclose to CMS the 

following items of Federal tax 

information with respect to that 

taxpayer: 

1. SSN; 

2. family size; 

3. filing status; 

4. modified adjusted gross income 

(MAGI); 

5. taxable Social Security benefits; 

6. adjusted gross income (AGI) for 

adjusted tax returns; 

7. taxable year with respect to which 

the preceding information relates or, if 

applicable, the fact that such 

information is not available; and 

8. any other specified item of Federal 

tax information (FTI) authorized 

pursuant to 26 U.S.C. 6103(1)(21) and 

its implementing regulations. 

System(s) of Records 

The records used in this matching 

program will be disclosed from the 

following systems of records, as 

authorized by routine uses published in 

the System of Records Notices (SORNs) 

cited below: 

A. System of Records Maintained by 

CMS 

• CMS Health Insurance Exchanges 

System (HIX), CMS System No. 09–70– 

0560, last published in full at 78 FR 

63211 (Oct. 23, 2013), as amended at 83 

FR 6591 (Feb. 14, 2018). 

B. System of Records Maintained by IRS 

• FTI Treasury/IRS 24.030, published 

at 80 FR 54064 (Sept. 8, 2015). 

[FR Doc. 2024–30522 Filed 12–20–24; 8:45 am] 

BILLING CODE 4120–03–P 

DEPARTMENT OF HEALTH AND 

HUMAN SERVICES 

Centers for Medicare & Medicaid 

Services 

[Document Identifiers: CMS–10630 and 

CMS–10798] 

Agency Information Collection 

Activities: Proposed Collection; 

Comment Request 

AGENCY: Centers for Medicare & 

Medicaid Services, Health and Human 

Services (HHS). 

ACTION: Notice. 

SUMMARY: The Centers for Medicare & 

Medicaid Services (CMS) is announcing 

an opportunity for the public to 

comment on CMS’ intention to collect 

information from the public. Under the 

Paperwork Reduction Act of 1995 

(PRA), Federal agencies are required to 

publish notice in the Federal Register 

concerning each proposed collection of 

information (including each proposed 

extension or reinstatement of an existing 

collection of information) and to allow 

60 days for public comment on the 

proposed action. Interested persons are 

invited to send comments regarding our 

burden estimates or any other aspect of 

this collection of information, including 

the necessity and utility of the proposed 

information collection for the proper 

performance of the agency’s functions, 

the accuracy of the estimated burden, 

ways to enhance the quality, utility, and 


khammond on DSK9W7S144PROD with NOTICES