Voglio sapere a riguardo di…

6996

Federal Register / Vol. 86, No. 14 / Monday, January 25, 2021 / Notices
EXEMPTIONS PROMULGATED FOR THE SYSTEM:

None.
FR Doc. 202101526 Filed 12221; 8:45 am BILLING CODE 832001P

DEPARTMENT OF VETERANS
AFFAIRS
Privacy Act of 1974; System of Records AGENCY:

Department of Veterans Affairs
VA.
Notice of a Modified System of Records.

ACTION:

As required by the Privacy Act of 1974, notice is hereby given that the Department of Veterans Affairs VA
is amending the system of records entitled, The Revenue Program-Billing and Collections Records-VA
114VA10D. VA is amending the system of records by revising the System Number; System Location; Purpose of the System; Categories of Individuals Covered by the System; Record Source Categories; Routine Uses of Records Maintained in the System; Policies and Practices for Storage of Records; and Physical, Procedural and Administrative Safeguards. VA is republishing the system notice in its entirety.
DATES: Comments on this amended system of records must be received no later than February 24, 2021. If no public comment is received during the period allowed for comment or unless otherwise published in the Federal Register by the VA, the new system will become effective February 24, 2021.
ADDRESSES: Written comments may be submitted through www.Regulations.gov; by mail or handdelivery to Director, Regulation Policy and Management 00REG, Department of Veterans Affairs, 810 Vermont Avenue NW, Room 1064, Washington, DC 20420; or by fax to 202 2739026
Note: not a toll-free number.
Comments should indicate they are submitted in response to The Revenue Program-Billing and Collections Records-VA. Copies of comments received will be available for public inspection in the Office of Regulation Policy and Management, Room 1063B, between the hours of 8:00 a.m. and 4:30
p.m., Monday through Friday except holidays. Please call 202 4614902 for an appointment Note: not a toll-free number. In addition, comments may be viewed online at www.Regulations.gov.
FOR FURTHER INFORMATION CONTACT:
Stephania Griffin, Veterans Health Administration VHA Privacy Officer, Department of Veterans Affairs, 810
Vermont Avenue NW, Washington, DC

jbell on DSKJLSW7X2PROD with NOTICES

SUMMARY:

VerDate Sep<11>2014

18:31 Jan 22, 2021

Jkt 253001

20420; telephone 704 2452492 Note:
not a toll-free number.
SUPPLEMENTARY INFORMATION: The System Number is being updated from 114VA10D to 114VA10 to reflect the current VHA organizational routing symbol.
The System Location is being updated to reflect electronic records being located at contractor facilities, such as the Cerner Technology Centers CTC:
Primary Data Center in Kansas City, MO, and Continuity of Operations/
Disaster Recovery COOP/DR Data Center in Lees Summit, MO. Amazon Web Services, LLC, 13461 Sunrise Valley Drive, Herndon, VA 201713283.
The Purpose of the System is being amended to remove participation in pilot test of NPI enumeration system by the Centers for Medicare and Medicaid Services CMS. This section will add, CMS National Plan and Provider Enumeration System NPPES.
Categories of Individuals Covered by the System is being amended to add including those receiving or eligible to receive VA health care to item 2. Also, item 10, Caregivers, is being added.
The Record Source Categories is being amended to add Social Security Administration and Patient Medical Records-VA 24VA10A7. Also, 77VA10A4 is being changed to 77VA10E2E and 79VA10P2 is being changed to 79VA10A7.
The Routine Uses of Records Maintained in the System is amending Routine Use 10 to remove universal personal identification number.
Routine Use 13 is being amended to include 7332-protected information.
Routine Use 17 is being amended to replace CMS to test the enumeration system for the NPI and once the system is operational with National Plan and Provider Enumeration System NPPES.
Routine Use 20 has been amended by removing the language which states, this routine use permits disclosures by VA
to respond to a suspected or confirmed data breach, including the conduct of any risk analysis or provision of credit protection services as provided in 38
U.S.C. 5724, as the terms are defined in 38 U.S.C. 5727.
a. Effective Response. A Federal agencys ability to respond quickly and effectively in the event of a breach of Federal data is critical to its efforts to prevent or minimize any consequent harm. An effective response necessitates disclosure of information regarding the breach to those individuals affected by it, as well as to persons and entities in a position to cooperate, either by assisting in notification to affected individuals or playing a role in
PO 00000

Frm 00135

Fmt 4703

Sfmt 4703

preventing or minimizing harms from the breach.
b. Disclosure of Information. Often, the information to be disclosed to such persons and entities is maintained by Federal agencies and is subject to the Privacy Act 5 U.S.C 552a. The Privacy Act prohibits the disclosure of any record in a system of records by any means of communication to any person or agency absent the written consent of the subject individual, unless the disclosure falls within one of twelve statutory exceptions. In order to ensure an agency is in the best position to respond in a timely and effective manner, in accordance with 5 U.S.C
552ab3 of the Privacy Act, agencies should publish a routine use for appropriate systems specifically applying to the disclosure of information in connection with response and remedial efforts in the event of a data breach.
The language in Routine Use 21 is being amended. It previously stated that disclosure of the records to the Department of Justice DoJ is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. VA
may disclose records in this system of records in legal proceedings before a court or administrative body after determining that the disclosure of the records to the court or administrative body is a use of the information contained in the records that is compatible with the purpose for which VA collected the records. This routine use will now state that release of the records to the DoJ is limited to circumstances where relevant and necessary to the litigation. VA may disclose records in this system of records in legal proceedings before a court or administrative body after determining that release of the records to the court or administrative body is limited to circumstances where relevant and necessary to the litigation.
Policies and Practices for Storage of Records is being amended to include Records within this system is also hosted in Amazon Web Services AWS
Government Cloud GovCloud infrastructure as a service cloudcomputing environment that has been authorized at the high-impact level under the Federal Risk and Authorization Management Program FedRAMP.
The Physical, Procedural and Administrative Safeguards section is being amended to add, Access to Cerner Technology Centers is generally restricted to Cerner employees, contractors or associates with a Cerner issued ID badge and other security
E:FRFM25JAN1.SGM

25JAN1