Source: https://www.ecfr.gov/cgi-bin/text-idx?mc=true&node=pt28.1.22&rgn=div5
Timestamp: 2020-08-06 13:41:33
Document Index: 363644576

Matched Legal Cases: ['art 22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22']

Title 28 → Chapter I → Part 22
§22.20 Applicability.
§22.21 Use of identifiable data.
§22.22 Revelation of identifiable data.
§22.23 Privacy certification.
§22.24 Information transfer agreement.
§22.25 Final disposition of identifiable materials.
§22.26 Requests for transfer of information.
§22.27 Notification.
§22.28 Use of data identifiable to a private person for judicial, legislative or administrative purposes.
(b) Private person means any person defined in §22.2(a) other than an agency, or department of Federal, State, or local government, or any component or combination thereof. Included as a private person is an individual acting in his or her official capacity.
(d) Research or statistical information means any information which is collected during the conduct of a research or statistical project and which is intended to be utilized for research or statistical purposes. The term includes information which is collected directly from the individual or obtained from any agency or individual having possession, knowledge, or control thereof.
(e) Information identifiable to a private person means information which either—
[41 FR 54846, Dec. 15, 1976, as amended at 43 FR 16974, Apr. 21, 1978; 51 FR 6400, Feb. 24, 1986]
(3) Persons or organizations for research or statistical purposes. Information may only be transferred for such purposes upon a clear demonstration that the standards of §22.26 have been met and that, except where information is transferred under paragraphs (a) (1) and (2) of this section, such transfers shall be conditioned on compliance with a §22.24 agreement.
(1) Data identifiable to a private person will not be used or revealed, except as authorized under §§22.21, 22.22.
(3) All subcontracts which require access to identifiable data will contain conditions meeting the requirements of §22.24.
(4) To the extent required by §22.27 any private persons from whom identifiable data are collected or obtained, either orally or by means of written questionnaire, shall be advised that the data will only be used or revealed for research or statistical purposes and that compliance with requests for information is not mandatory. Where the notification requirement is to be waived, pursuant to §22.27(c), a justification must be included in the Privacy Certificate.
(8) Project findings and reports prepared for dissemination will not contain information which can reasonably be expected to be identifiable to a private person except as authorized under §22.22.
(c) The applicant shall attach to the Privacy Certification a description of physical and/or administrative procedures to be followed to insure the security of the data to meet the requirements of §22.25.
(b) Information identifiable to a private person will not be revealed to any person for any purpose except where the information has already been included in research findings (and/or data bases) and is revealed on a need-to-know basis for research or statistical purposes, provided that such transfer is approved by the person providing information under the agreement, or authorized under §22.24(e).
(a) Requests for transfer of information identifiable to an individual shall be submitted to the person submitting the Privacy Certificate pursuant to §22.23.
Where BJA, OJJDP, BJS, NIJ, or OJP believes that a violation of section 812(a) of the Act or section 1407(d) of the Victims of Crime Act, these regulations, or any grant or contract conditions entered into thereunder has occurred, it may initiate administrative actions leading to termination of a grant or contract, commence appropriate personnel and/or other procedures in cases involving Federal employees, and/or initiate appropriate legal actions leading to imposition of a civil penalty not to exceed $10,000 for a violation occurring before September 29, 1999, and not to exceed $11,000 for a violation occurring on or after September 29, 1999 against any person responsible for such violations. For civil penalties assessed after August 1, 2016, whose associated violations occurred after November 2, 2015, see the civil penalty amount as provided in 28 CFR 85.5.
[Order No. 2249-99, 64 FR 47102, Aug. 30, 1999, as amended by AG Order 3690-2016, 81 FR 42499, June 30, 2016]