Privacy Act of 1974; System of Records

AGENCY:

Social Security Administration (SSA).

ACTION:

Notice of a modified system of records.

SUMMARY:

In accordance with the Privacy Act, we are issuing public notice of our intent to modify our existing systems of records listed below under the System Name and Number section. This notice publishes details of the modification as set forth under the caption, SUPPLEMENTARY INFORMATION.

DATES:

This routine use is effective December 3, 2018. We invite public comment on the addition of this routine use. In accordance with 5 U.S.C. 552a(e)(4) and (e)(11), the public is given a 30-day period in which to submit comments. Therefore, please submit any comments by December 3, 2018.

ADDRESSES:

The public, OMB, and Congress may comment on this publication by writing to the Executive Director, Office of Privacy and Disclosure, Office of the General Counsel, SSA, Room G-401 West High Rise, 6401 Security Boulevard, Baltimore, Maryland 21235-6401, or through the Federal e-Rulemaking Portal at http://www.regulations.gov;; please reference docket number SSA-2018-0059. All comments we receive will be available for public inspection at the above address and we will post them to http://www.regulations.gov.

FOR FURTHER INFORMATION CONTACT:

Elizabeth Boorstein, Government Information Specialist, Privacy Implementation Division, Office of Privacy and Disclosure, Office of the General Counsel, SSA, Room G-401 West High Rise, 6401 Security Boulevard, Baltimore, Maryland 21235-6401, telephone: (410) 966-2824, email: Elizabeth.Boorstein@ssa.gov.

SUPPLEMENTARY INFORMATION:

The Office of Management and Budget (OMB) Memorandum 17-12 (M-17-12), Preparing for and Responding to a Breach of Personally Identifiable Information (January 3, 2017) requires Federal agencies to publish a routine use in its systems of records that authorizes disclosure of records that may reasonably be needed by a Federal agency or Federal entity in connection with the response and remedial efforts in the event of a breach. The proposed routine use permits SSA to disclose records that may reasonably be needed by another Federal agency or Federal entity in its efforts to respond and remediate a breach of personally identifiable information. Such a routine use will serve to protect the interests of the people whose information is at risk by allowing SSA to assist another Federal agency or Federal entity to take appropriate steps to facilitate a timely and effective response to a confirmed or suspected breach. It will also help SSA improve its ability to prevent, minimize, or remedy any harm that may result from a compromise of data maintained in SSA's systems of records. Such a use is in the best interest of both the individual whose record is at issue and the public.

To satisfy the routine use requirements in OMB M-17-12, SSA is adding the following routine use to our Privacy Act systems of records:

To another Federal agency or Federal entity, when SSA determines that information from this system of records is reasonably necessary to assist the recipient agency or entity in:

(a) responding to a suspected or confirmed breach; or

(b) preventing, minimizing, or remedying the risk of harm to individuals, the recipient agency or entity (including its information systems, programs, and operations), the Federal Government, or national security, resulting from a suspected or confirmed breach.

SYSTEM NAME AND NUMBER

SSA will establish the new routine use listed above in the following systems of records:

SSA is not republishing the system of records notices in their entirety. Instead, SSA is republishing only the identification number, the name of the system of record, the number of the new routine use, and the issue of the Federal Register in which the system notice was last published in full, including the subsequent modification to the system of records notice's publication date and page number.

SECURITY CLASSIFICATION:

Unclassified.

SYSTEM LOCATION:

SSA provides the address of the component and system manager responsible for each system in the Federal Register notice listed above.

SYSTEM MANAGER(S):

SSA provides the title, business address, and contact information of the agency official who is responsible for the system in the Federal Register notice listed above.

HISTORY:

SSA provides the citation to the last full Federal Register notice, as well as last subsequent modification notice to the system of records notice above.

In accordance with 5 U.S.C. 552a(r), SSA provided a report to OMB and Congress on this modification to our system of records.