1

CONFIDENTIAL INFORMATION PROTECTION AND STATISTICAL EFFICIENCY

Part A—General

§3561. Definitions

In this subchapter:

(1) Agency.—The term "agency" means any entity that falls within the definition of the term "executive 

agency", as defined in section 102 of title 31, or "agency", as defined in section 3502.

(2) Agent.—The term "agent" means an individual— 

(A)(i) who is an employee of a private organization or a researcher affiliated with an institution of higher 

learning (including a person granted special sworn status by the Bureau of the Census under section 23(c) of 

title 13), and with whom a contract or other agreement is executed, on a temporary basis, by an executive 

agency to perform exclusively statistical activities under the control and supervision of an officer or employee of 

that agency;

(ii) who is working under the authority of a government entity with which a contract or other agreement is 

executed by an executive agency to perform exclusively statistical activities under the control of an officer or 

employee of that agency;

(iii) who is a self-employed researcher, a consultant, a contractor, or an employee of a contractor, and with 

whom a contract or other agreement is executed by an executive agency to perform a statistical activity under 

the control of an officer or employee of that agency; or

(iv) who is a contractor or an employee of a contractor, and who is engaged by the agency to design or 

maintain the systems for handling or storage of data received under this subchapter; and

(B) who agrees in writing to comply with all provisions of law that affect information acquired by that agency.

(3) Business data.—The term "business data" means operating and financial data and information about 

businesses, tax-exempt organizations, and government entities.

(4) Data asset.—The term "data asset" has the meaning given that term in section 3502.

(5) Director.—The term "Director" means the Director of the Office of Management and Budget.

(6) Evidence.—The term "evidence" means information produced as a result of statistical activities 

conducted for a statistical purpose.

(7) Identifiable form.—The term "identifiable form" means any representation of information that permits the 

identity of the respondent to whom the information applies to be reasonably inferred by either direct or indirect

means.

(8) Nonstatistical purpose.—The term "nonstatistical purpose"— 

(A) means the use of data in identifiable form for any purpose that is not a statistical purpose, including any 

administrative, regulatory, law enforcement, adjudicatory, or other purpose that affects the rights, privileges, or 

benefits of a particular identifiable respondent; and

(B) includes the disclosure under section 552 of title 5 of data that are acquired for exclusively 

statistical purposes under a pledge of confidentiality.

(9) Respondent.—The term "respondent" means a person who, or organization that, is requested or 

required to supply information to an agency, is the subject of information requested or required to be 

supplied to an agency, or provides that information to an agency.

(10) Statistical activities.—The term "statistical activities"— 

(A) means the collection, compilation, processing, or analysis of data for the purpose of describing or 

making estimates concerning the whole, or relevant groups or components within, the economy, society, or 

the natural environment; and
2

(B) includes the development of methods or resources that support those activities, such as 

measurement methods, models, statistical classifications, or sampling frames.

(11) Statistical agency or unit.—The term "statistical agency or unit" means an agency or organizational unit 

of the executive branch whose activities are predominantly the collection, compilation, processing, or analysis

of information for statistical purposes, as designated by the Director under section 3562.

(12) Statistical purpose.—The term "statistical purpose"— 

(A) means the description, estimation, or analysis of the characteristics of groups, without identifying the 

individuals or organizations that comprise such groups; and

(B) includes the development, implementation, or maintenance of methods, technical or administrative 

procedures, or information resources that support the purposes described in subparagraph (A).

§3562. Coordination and oversight of policies

(a) In General.—The Director shall coordinate and oversee the confidentiality and disclosure policies 

established by this subchapter. The Director may promulgate rules or provide other guidance to ensure consistent 

interpretation of this subchapter by the affected agencies. The Director shall develop a process by which the 

Director designates agencies or organizational units as statistical agencies and units. The Director shall

promulgate guidance to implement such process, which shall include specific criteria for such designation and 

methods by which the Director will ensure transparency in the process.

(b) Agency Rules.—Subject to subsection (c), agencies may promulgate rules to implement this 

subchapter. Rules governing disclosures of information that are authorized by this subchapter shall be 

promulgated by the agency that originally collected the information.

(c) Review and Approval of Rules.—The Director shall review any rules proposed by an agency pursuant to this 

subchapter for consistency with the provisions of this chapter and such rules shall be subject to the approval of the

Director.

(d) Reports.— 

(1) The head of each agency shall provide to the Director such reports and other information as the 

Director requests.

(2) Each Designated Statistical Agency (as defined in section 3576(e)) shall report annually to the Director, the 

Committee on Oversight and Government Reform of the House of Representatives, and the Committee on 

Homeland Security and Governmental Affairs of the Senate on the actions it has taken to implement section 

3576. The report shall include copies of each written agreement entered into pursuant to section 3576(c)(1) for 

the applicable year.

(3) The Director shall include a summary of reports submitted to the Director under this subsection and 

actions taken by the Director to advance the purposes of this subchapter in the annual report to Congress on 

statistical programs prepared under section 3504(e)(2).

§3563. Statistical agencies

(a) Responsibilities.— 

(1) In general.—Each statistical agency or unit shall— 

(A) produce and disseminate relevant and timely statistical information;

(B) conduct credible and accurate statistical activities;

(C) conduct objective statistical activities; and

(D) protect the trust of information providers by ensuring the confidentiality and exclusive statistical use of 

their responses.

(2) Policies, best practices, and procedures.—Each statistical agency or unit shall adopt policies, best 

practices, and appropriate procedures to implement the responsibilities described in paragraph (1).

(b) Support From Other Agencies.—The head of each agency shall enable, support, and facilitate statistical 

agencies or units in carrying out the responsibilities described in subsection (a)(1).
3

(c) Regulations.—The Director shall prescribe regulations to carry out this section.

(d) Definitions.—In this section:

(1) Accurate.—The term "accurate", when used with respect to statistical activities, means statistics that 

consistently match the events and trends being measured.

(2) Confidentiality.—The term "confidentiality" means a quality or condition accorded to information as an 

obligation not to disclose that information to an unauthorized party.

(3) Objective.—The term "objective", when used with respect to statistical activities, means accurate, 

clear, complete, and unbiased.

(4) Relevant.—The term "relevant", when used with respect to statistical information, means processes, 

activities, and other such matters likely to be useful to policymakers and public and private sector data users.

§3564. Effect on other laws

(a) Title 44, United States Code.—This subchapter does not diminish the authority under section 3510 of the

Director to direct, and of an agency to make, disclosures that are not inconsistent with any applicable law.

(b) Title 13 and Title 44, United States Code.—This subchapter does not diminish the authority of the Bureau 

of the Census to provide information in accordance with sections 8, 16, 301, and 401 of title 13 and section 2108 

of this title.

(c) Title 13, United States Code.—This subchapter shall not be construed as authorizing the disclosure for 

nonstatistical purposes of demographic data or information collected by the Bureau of the Census pursuant to 

section 9 of title 13.

(d) Various Energy Statutes.—Data or information acquired by the Energy Information Administration under a 

pledge of confidentiality and designated by the Energy Information Administration to be used for exclusively 

statistical purposes shall not be disclosed in identifiable form for nonstatistical purposes under— 

(1) section 12, 20, or 59 of the Federal Energy Administration Act of 1974 (15 U.S.C. 771, 779, 790h);

(2) section 11 of the Energy Supply and Environmental Coordination Act of 1974 (15 U.S.C. 796); or

(3) section 205 or 407 of the Department of Energy Organization Act (42 U.S.C. 7135, 7177).

(e) Section 201 of Congressional Budget Act of 1974.—This subchapter shall not be construed to limit any 

authorities of the Congressional Budget Office to work (consistent with laws governing the confidentiality of 

information the disclosure of which would be a violation of law) with databases of Designated Statistical Agencies 

(as defined in section 3576(e)), either separately or, for data that may be shared pursuant to section 3576(c) or 

other authority, jointly in order to improve the general utility of these databases for the statistical purpose of 

analyzing pension and health care financing issues.

(f) Preemption of State Law.—Nothing in this subchapter shall preempt applicable State law regarding the 

confidentiality of data collected by the States.

(g) Statutes Regarding False Statements.—Notwithstanding section 3572, information collected by an agency 

for exclusively statistical purposes under a pledge of confidentiality may be provided by the collecting agency to a 

law enforcement agency for the prosecution of submissions to the collecting agency of false statistical information 

under statutes that authorize criminal penalties (such as section 221 of title 13) or civil penalties for the provision of 

false statistical information, unless such disclosure or use would otherwise be prohibited under Federal law.

(h) Construction.—Nothing in this subchapter shall be construed as restricting or diminishing any confidentiality 

protections or penalties for unauthorized disclosure that otherwise apply to data or information collected for 

statistical purposes or nonstatistical purposes, including, but not limited to, section 6103 of the Internal Revenue 

Code of 1986.

(i) Authority of Congress.—Nothing in this subchapter shall be construed to affect the authority of the 

Congress, including its committees, members, or agents, to obtain data or information for a statistical 

purpose, including for oversight of an agency's statistical activities.
4

Part B—Confidential Information Protection

§3571. Findings

The Congress finds the following:

(1) Individuals, businesses, and other organizations have varying degrees of legal protection when 

providing information to the agencies for strictly statistical purposes.

(2) Pledges of confidentiality by agencies provide assurances to the public that information about individuals 

or organizations or provided by individuals or organizations for exclusively statistical purposes will be held in 

confidence and will not be used against such individuals or organizations in any agency action.

(3) Protecting the confidentiality interests of individuals or organizations who provide information under a 

pledge of confidentiality for Federal statistical programs serves both the interests of the public and the needs of

society.

(4) Declining trust of the public in the protection of information provided under a pledge of confidentiality to

the agencies adversely affects both the accuracy and completeness of statistical analyses.

(5) Ensuring that information provided under a pledge of confidentiality for statistical purposes receives 

protection is essential in continuing public cooperation in statistical programs.

§3572. Confidential information protection

(a) Purposes.—The purposes of this section are the following:

(1) To ensure that information supplied by individuals or organizations to an agency for statistical 

purposes under a pledge of confidentiality is used exclusively for statistical purposes.

(2) To ensure that individuals or organizations who supply information under a pledge of confidentiality to 

agencies for statistical purposes will neither have that information disclosed in identifiable form to anyone not 

authorized by this subchapter nor have that information used for any purpose other than a statistical purpose.

(3) To safeguard the confidentiality of individually identifiable information acquired under a pledge of 

confidentiality for statistical purposes by controlling access to, and uses made of, such information.

(b) Use of Statistical Data or Information.—Data or information acquired by an agency under a pledge of 

confidentiality and for exclusively statistical purposes shall be used by officers, employees, or agents of the 

agency exclusively for statistical purposes and protected in accordance with such pledge.

(c) Disclosure of Statistical Data or Information.— 

(1) Data or information acquired by an agency under a pledge of confidentiality for exclusively statistical 

purposes shall not be disclosed by an agency in identifiable form, for any use other than an exclusively 

statistical purpose, except with the informed consent of the respondent.

(2) A disclosure pursuant to paragraph (1) is authorized only when the head of the agency approves such 

disclosure and the disclosure is not prohibited by any other law.

(3) This section does not restrict or diminish any confidentiality protections in law that otherwise apply to data 

or information acquired by an agency under a pledge of confidentiality for exclusively statistical purposes.

(d) Rule for Use of Data or Information for Nonstatistical Purposes.—A statistical agency or unit shall clearly 

distinguish any data or information it collects for nonstatistical purposes (as authorized by law) and provide 

notice to the public, before the data or information is collected, that the data or information could be used for 

nonstatistical purposes.

(e) Designation of Agents.—A statistical agency or unit may designate agents, by contract or by entering into a 

special agreement containing the provisions required under section 3561(2) for treatment as an agent under that 

section, who may perform exclusively statistical activities, subject to the limitations and penalties described in this

subchapter.
5

(f) Fines and Penalties.—Whoever, being an officer, employee, or agent of an agency acquiring information

for exclusively statistical purposes, having taken and subscribed the oath of office, or having sworn to observe 

the limitations imposed by this section, comes into possession of such information by reason of his or her being 

an officer, employee, or agent and, knowing that the disclosure of the specific information is prohibited under the 

provisions of this subchapter, willfully discloses the information in any manner to a person or agency not entitled 

to receive it, shall be guilty of a class E felony and imprisoned for not more than 5 years, or fined not more than 

$250,000, or both.

Part C—Statistical Efficiency

§3575. Findings

The Congress finds the following:

(1) Federal statistics are an important source of information for public and private decision-makers such as 

policymakers, consumers, businesses, investors, and workers.

(2) Federal statistical agencies should continuously seek to improve their efficiency. Statutory constraints limit 

the ability of these agencies to share data and thus to achieve higher efficiency for Federal statistical programs.

(3) The quality of Federal statistics depends on the willingness of businesses to respond to statistical 

surveys. Reducing reporting burdens will increase response rates, and therefore lead to more accurate 

characterizations of the economy.

(4) Enhanced sharing of business data among the Bureau of the Census, the Bureau of Economic Analysis, 

and the Bureau of Labor Statistics for exclusively statistical purposes will improve their ability to track more 

accurately the large and rapidly changing nature of United States business. In particular, the statistical 

agencies will be able to better ensure that businesses are consistently classified in appropriate industries, 

resolve data anomalies, produce statistical samples that are consistently adjusted for the entry and exit of new

businesses in a timely manner, and correct faulty reporting errors quickly and efficiently.

(5) Congress enacted the International Investment and Trade in Services Survey Act (Public Law 94–472), 

which allowed the Bureau of the Census, the Bureau of Economic Analysis, and the Bureau of Labor Statistics to 

share data on foreign-owned companies. The Act not only expanded detailed industry coverage from 135 

industries to over 800 industries with no increase in the data collected from respondents but also demonstrated

how data sharing can result in the creation of valuable data products.

(6) With part B of this subchapter, the sharing of business data among the Bureau of the Census, the 

Bureau of Economic Analysis, and the Bureau of Labor Statistics continues to ensure the highest level of 

confidentiality for respondents to statistical surveys.

§3576. Designated statistical agencies

(a) Purposes.—The purposes of this section are the following:

(1) To authorize the sharing of business data among the Bureau of the Census, the Bureau of Economic 

Analysis, and the Bureau of Labor Statistics for exclusively statistical purposes.

(2) To reduce the paperwork burdens imposed on businesses that provide requested information to the 

Federal Government.

(3) To improve the comparability and accuracy of Federal economic statistics by allowing the Bureau of the 

Census, the Bureau of Economic Analysis, and the Bureau of Labor Statistics to update sample frames, develop 

consistent classifications of establishments and companies into industries, improve coverage, and reconcile 

significant differences in data produced by the three agencies.

(4) To increase understanding of the United States economy, especially for key industry and regional statistics, 

to develop more accurate measures of the impact of technology on productivity growth, and to enhance the 

reliability of the Nation's most important economic indicators, such as the National Income and Product

Accounts.

(b) Responsibilities of Designated Statistical Agencies.—The head of each of the Designated Statistical 

Agencies shall— 
6

(1) identify opportunities to eliminate duplication and otherwise reduce reporting burden and cost 

imposed on the public in providing information for statistical purposes;

(2) enter into joint statistical projects to improve the quality and reduce the cost of statistical programs; and

(3) protect the confidentiality of individually identifiable information acquired for statistical purposes by 

adhering to safeguard principles, including— 

(A) emphasizing to their officers, employees, and agents the importance of protecting the confidentiality 

of information in cases where the identity of individual respondents can reasonably be inferred by either 

direct or indirect means;

(B) training their officers, employees, and agents in their legal obligations to protect the confidentiality of 

individually identifiable information and in the procedures that must be followed to provide access to such

information;

(C) implementing appropriate measures to assure the physical and electronic security of confidential 

data;

(D) establishing a system of records that identifies individuals accessing confidential data and the 

project for which the data were required; and

(E) being prepared to document their compliance with safeguard principles to other agencies 

authorized by law to monitor such compliance.

(c) Sharing of Business Data Among Designated Statistical Agencies.— 

(1) In general.—A Designated Statistical Agency may provide business data in an identifiable form to another 

Designated Statistical Agency under the terms of a written agreement among the agencies sharing the business 

data that specifies— 

(A) the business data to be shared;

(B) the statistical purposes for which the business data are to be used;

(C) the officers, employees, and agents authorized to examine the business data to be shared; and

(D) appropriate security procedures to safeguard the confidentiality of the business data.

(2) Responsibilities of agencies under other laws.—The provision of business data by an agency to a 

Designated Statistical Agency under this section shall in no way alter the responsibility of the agency 

providing the data under other statutes (including sections 552 and 552b of title 5) with respect to the 

provision or withholding of such information by the agency providing the data.

(3) Responsibilities of officers, employees, and agents.—Examination of business data in identifiable form 

shall be limited to the officers, employees, and agents authorized to examine the individual reports in 

accordance with written agreements pursuant to this section. Officers, employees, and agents of a Designated 

Statistical Agency who receive data pursuant to this section shall be subject to all provisions of law, including 

penalties, that relate— 

(A) to the unlawful provision of the business data that would apply to the officers, employees, and 

agents of the agency that originally obtained the information; and

(B) to the unlawful disclosure of the business data that would apply to officers, employees, and agents of 

the agency that originally obtained the information.

(4) Notice.—Whenever a written agreement concerns data that respondents were required by law to report 

and the respondents were not informed that the data could be shared among the Designated Statistical

Agencies, for exclusively statistical purposes, the terms of such agreement shall be described in a public notice 

issued by the agency that intends to provide the data. Such notice shall allow a minimum of 60 days for public 

comment.

(d) Limitations on Use of Business Data Provided by Designated Statistical Agencies.— 

(1) General use.—Business data provided by a Designated Statistical Agency pursuant to this section shall 

be used exclusively for statistical purposes.

(2) Publication.—Publication of business data acquired by a Designated Statistical Agency shall occur in a

manner whereby the data furnished by any particular respondent are not in identifiable form.
7

(e) Designated Statistical Agency Defined.—In this section, the term "Designated Statistical Agency" 

means each of the following:

(1) The Census Bureau of the Department of Commerce.

(2) The Bureau of Economic Analysis of the Department of Commerce.

(3) The Bureau of Labor Statistics of the Department of Labor. 

Part D—Access to Data for Evidence

§3581. Presumption of accessibility for statistical agencies and units

(a) Accessibility of Data Assets.—The head of an agency shall, to the extent practicable, make any data 

asset maintained by the agency available, upon request, to any statistical agency or unit for purposes of 

developing evidence.

(b) Limitations.—Subsection (a) does not apply to any data asset that is subject to a statute that— 

(1) prohibits the sharing or intended use of such asset in a manner as to leave no discretion on the issue;

or

(2) if enacted after the date of the enactment of this section, specifically cites to this paragraph.

(c) Regulations.—The Director shall prescribe regulations for agencies to carry out this section. Such 

regulations shall— 

(1) require the timely provision of data assets under subsection (a);

(2) provide a list of statutes that exempt agencies from the requirement under subsection (a) pursuant to 

subsection (b)(1);

(3) establish clear and consistent standards, to the extent possible, for complying with section 552a of title 5 

(commonly known as the "Privacy Act of 1974") and any other applicable law requiring the protection and 

confidentiality of individually identifiable information; and

(4) require a transparent process for statistical agencies and units to request data assets from agencies and 

for agencies to respond to such requests.

(d) Rule of Construction.—Nothing in this section may be construed as altering existing intellectual property 

rights or the terms of any contract or other binding, written agreement.

§3582. Expanding secure access to CIPSEA data assets

(a) Statistical Agency Responsibilities.—To the extent practicable, each statistical agency or unit shall expand 

access to data assets of such agency or unit acquired or accessed under this subchapter to develop evidence 

while protecting such assets from inappropriate access and use, in accordance with the regulations promulgated 

under subsection (b).

(b) Regulations for Accessibility of Nonpublic Data Assets.—The Director shall promulgate regulations, in 

accordance with applicable law, for statistical agencies and units to carry out the requirement under subsection 

(a). Such regulations shall include the following:

(1) Standards for each statistical agency or unit to assess each data asset owned or accessed by the 

statistical agency or unit for purposes of categorizing the sensitivity level of each such asset and identifying the 

corresponding level of accessibility to each such asset. Such standards shall include— 

(A) common sensitivity levels and corresponding levels of accessibility that may be assigned to a data 

asset, including a requisite minimum and maximum number of sensitivity levels for each statistical agency or 

unit to use;

(B) criteria for determining the sensitivity level and corresponding level of accessibility of each data 

asset; and

(C) criteria for determining whether a less sensitive and more accessible version of a data asset can be

produced.
8

(1) Standards for each statistical agency or unit to improve access to a data asset pursuant to paragraph (1) or 

(3) by removing or obscuring information in such a manner that the identity of the data subject is less likely to be 

reasonably inferred by either direct or indirect means.

(3) A requirement for each statistical agency or unit to conduct a comprehensive risk assessment of any data 

asset acquired or accessed under this subchapter prior to any public release of such asset, including standards 

for such comprehensive risk assessment and criteria for making a determination of whether to release the data.

(4) Requirements for each statistical agency or unit to make any process or assessment established, 

produced, or conducted pursuant to this section transparent and easy to understand, including the following:

(A) A requirement to make information on the assessment of the sensitivity level of each data asset 

conducted pursuant to paragraph (1) available on the Federal data catalogue established under section 

3511(c)(1).

(B) A requirement to make any comprehensive risk assessment, and associated determinations, 

conducted under paragraph (3) available on the Federal data catalogue established under section 3511 

(c)(1).

(C) A requirement to make any standard or policy established by the statistical agency or unit to carry out 

this section and any assessment conducted under this section easily accessible on the public website of 

such agency or unit.

(c) Responsibilities of the Director.—The Director shall— 

(1) make public all standards and policies established under this section; and

(2) ensure that statistical agencies and units have the ability to make information public on the Federal data 

catalogue established under section 3511(c)(1), in accordance with requirements established pursuant to 

subsection (b).

§3583. Application to access data assets for developing evidence

(a) Standard Application Process.—The Director shall establish a process through which agencies, the 

Congressional Budget Office, State, local, and Tribal governments, researchers, and other individuals, as 

appropriate, may apply to access the data assets accessed or acquired under this subchapter by a statistical

agency or unit for purposes of developing evidence. The process shall include the following:

(1) Sufficient detail to ensure that each statistical agency or unit establishes an identical process.

(2) A common application form.

(3) Criteria for statistical agencies and units to determine whether to grant an applicant access to a data 

asset.

(4) Timeframes for prompt determinations by each statistical agency or unit.

(5) An appeals process for adverse decisions and noncompliance with the process established under this 

subsection.

(6) Standards for transparency, including requirements to make the following information publicly 

available:

(A) Each application received.

(B) The status of each application.

(C) The determination made for each application.

(D) Any other information, as appropriate, to ensure full transparency of the process established under this

subsection.

(b) Consultation.—In establishing the process required under subsection (a), the Director shall consult with 

stakeholders, including the public, agencies, State and local governments, and representatives of nongovernmental researchers.

(c) Implementation.—The head of each statistical agency or unit shall implement the process established 

under subsection (a).