Source: https://www.federalregister.gov/documents/2015/03/10/2015-05374/dcaa-privacy-act-program
Timestamp: 2018-04-23 00:20:34
Document Index: 49015688

Matched Legal Cases: ['art 317', 'ART 317', 'art 317', 'art 310', '§\u2009317', '§\u2009317', '§\u2009317', '§\u2009317']

Federal Register :: DCAA Privacy Act Program
A Rule by the Defense Department on 03/10/2015
80 FR 12558
12558-12561 (4 pages)
DOD-2008-OS-0068
0790-AJ23
Defense Contract Audit Agency (DCAA) Privacy Act Program
0790-AI31
I. Purpose of This Regulatory Action
II. Summary of the Major Provisions of This Regulatory Action
III. Costs and Benefits of This Regulatory Action
List of Subjects in 32 CFR Part 317
PART 317—DCAA PRIVACY ACT PROGRAM
https://www.federalregister.gov/d/2015-05374 https://www.federalregister.gov/d/2015-05374
The Defense Contract Audit Agency (DCAA) is amending the DCAA Privacy Act Program Regulation. Specifically, DCAA is adding an exemption section to include an exemption for RDCAA 900.1, DCAA Internal Review Case Files. This rule Start Printed Page 12559provides policies and procedures for the DCAA's implementation of the Privacy Act of 1974, as amended.
Mr. Keith Mastromichalis, FOIA/PA Management Analyst, DCAA HQ, 703-767-1022.
The revisions to this rule are part of DoD's retrospective plan under EO 13563 completed in August 2011. DoD's full plan can be accessed at http://www.regulations.gov/​#!docketBrowser;​rpp=​25;​po=​0;​dct=​N%252BFR%252BPR%252BO;​D=​DOD-2011-OS-0036.
a. This rule provides policies and procedures for DCAA's implementation of the Privacy Act of 1974, as amended.
b. Authority: Privacy Act of 1974, Pub. L. 93-579, Stat. 1896 (5 U.S.C. 552a).
DCAA is adding an exemption section to include an exemption for RDCAA 900.1, DCAA Internal Review Case Files.
This regulatory action imposes no monetary costs to the Agency or public. The benefit to the public is the accurate reflection of the Agency's Privacy Program to ensure that policies and procedures are known to the public.
On Thursday, February 6, 2014 (79 FR 7114-7117), the Department of Defense published a proposed rule requesting public comment. No comments were received on the proposed rule, and no changes have been made in the final rule.
It has been determined that this rule is not a significant regulatory action under these Executive Orders. This rule does not (1) Have an annual effect on the economy of $100 million or more or adversely affect in a material way the economy; a sector of the economy; productivity; competition; jobs; the environment; public health or safety; or State, local, or tribal governments or communities; (2) Create a serious inconsistency or otherwise interfere with an action taken or planned by another Agency; (3) Materially alter the budgetary impact of entitlements, grants, user fees, or loan programs, or the rights and obligations of recipients thereof; or (4) Raise novel legal or policy issues arising out of legal mandates, the President's priorities, or the principles set forth in these Executive Orders.
It has been certified that this rule does not have significant economic impact on a substantial number of small entities because it is concerned only with the administration of Privacy Act within the Department of Defense.
It has been determined that this rule imposes no information collection requirements on the public under the Paperwork Reduction Act of 1995.
It has been determined that this rule does not involve a Federal mandate that may result in the expenditure by State, local and tribal governments, in the aggregate, or by the private sector, of $100 million or more and that such rulemaking will not significantly or uniquely affect small governments.
Accordingly 32 CFR part 317 is revised to read as follows:
This part provides policies and procedures for the Defense Contract Audit Agency's (DCAA) implementation of the Privacy Act of 1974 (5 U.S.C. 552a) and 32 CFR part 310, and is intended to promote uniformity within DCAA.
§ 317.3
(4) Ensure that records used in making determinations about individuals and those containing personal information are accurate, Start Printed Page 12560relevant, timely, and complete for the purposes for which they are being maintained before making them available to any recipients outside of DoD, other than a Federal agency, unless the disclosure is made under DCAA Regulation 5410.8, DCAA Freedom of Information Act Program.
§ 317.4
(b) The Chief, Administrative Management Division under the direction of the Assistant Director, Resources, shall:
(c) The DCAA Privacy Act Advisor under the supervision of the Chief, Administrative Management Division shall:
(5) Prepare promptly any required new, amended, or altered system notices for systems of records subject to the Privacy Act and submit them to the Defense Privacy Office for subsequent publication in the Federal Register.
(6) Conduct training on the Privacy Act program for Agency personnel.
(6) Providing the appropriate documents, along with a written justification for any denial, in whole or in part, of a request for records to the DCAA Privacy Act Advisor. Those portions to be excised should be bracketed in red pencil, and the specific exemption or exemptions cites which provide the basis for denying the requested records.
(e) The General Counsel is responsible for:
(f) Each Regional Director is responsible for the overall management of the Privacy Act program within their respective regions. Under his/her direction, the Regional Resources Manager is responsible for the management and staff supervision of the program and for designating a Regional Privacy Act Officer. Regional Directors will, as designee of the Director, make the initial determination to deny an individual's written Privacy Act request for access to or amendment of documents filed in Privacy Act systems of records. This authority cannot be delegated.
(g) Regional Privacy Act Officers will:Start Printed Page 12561
(2) Ensure that the collection, maintenance, use, or dissemination of records of identifiable personal information is in compliance with this part to assure that such action is for a necessary and lawful purpose; that the information is timely and accurate for its intended use; and that adequate safeguards are provided to prevent misuse of such information.
(5) Provide recommendations to the Regional Director through the Regional Resources Manager regarding the releasability of DCAA records to members of the public.
(h) Managers, Field Audit Offices (FAOs) will:
(4) Provide recommendation to the Regional Privacy Act Officer regarding the releasability of DCAA records to members of the public, along with the responsive documents.
(5) Provide the appropriate documents, along with a written justification for any denial, in whole or in part, of a request for records to the Regional Privacy Act Officer. Those portions to be excised should be bracketed in red pencil, and the specific exemption or exemptions cited which provide the basis for denying the requested records.
(i) DCAA Employees will:
§ 317.5
§ 317.6
(a) General information. There are two types of exemptions, general and specific. The general exemption authorizes the exemption of a system of records from all but a few requirements of the Privacy Act. The specific exemption authorizes exemption of a system of records or portion thereof, from only a few specific requirements. If a new system of records originates for which an exemption is proposed, or an additional or new exemption for an existing system of records is proposed, the exemption shall be submitted with the system of records notice. No exemption of a system of records shall be considered automatic for all records in the system. The systems manager shall review each requested record and apply the exemptions only when this will serve significant and legitimate Government purposes.
(b) Specific exemptions. (1) System identifier and name: RDCAA 900.1, DCAA Internal Review Case Files
[FR Doc. 2015-05374 Filed 3-9-15; 8:45 am]