Document: NUREG-0800
Document ID: fd099646-2b48-49c1-9d0b-a36844679790
Document Type: srp
Title: ACCESS AUTHORIZATION - OPERATIONAL PROGRAM
Source: NUREG-0800
Source URL: https://www.nrc.gov/docs/ML1522/ML15226A009.pdf
Revision Date: 2023-06
Chapter: 13
Section ID: 13.6.4
CFR Part: 
CFR Title: 

Content:
73.56 (m), “Protection of information.” Licensees or applicants shall establish, implement, and outline requirements for the protection and release of personal information collected by a licensee, applicant, C/V to authorized persons while maintaining confidentiality of sources. Licensee, applicant, C/V possessing personal records will promptly provide personal information as authorized by the individual’s signed consent. This may include to an individual’s representative and other licensees or applicants. 13. 10 CFR 73.56 (n), “Audits and corrective action” − Licensees or applicants shall establish, implement, and outline requirements for audits and corrective action to confirm compliance with the requirements of this section and those comprehensive corrective actions are taken in response to any violations of the requirements of this section identified from an audit. Licensees and applicants shall perform an audit of their AA program at intervals nominally every 24 months. With regard to 10 CFR 73.56(n)(1), the NRC uses the term “nominally” which allows a 25 percent margin, consistent with the definition of nominal in 10 CFR Part 26.5, which provides a limited flexibility in meeting the scheduled due date for completing this recurrent activity. Completing a recurrent activity at a nominal frequency means that the activity may be completed within a period that is 25 percent longer (30 months) or shorter (18 months) than the period required, with the next scheduled due date no later than the current scheduled due date plus the required frequency for completing the activity. Licensees or applicants shall establish, implement, and develop independence of audit team members. Personnel who conduct audits will possess the requisite knowledge to evaluate the holistic implications of individual requirements or the complexities associated with meeting the rule’s performance objective and, therefore, can adequately evaluate program effectiveness, and are