Federal Register - July 8, 2021
Versione di testo Cosa è?Dateas è un sito indipendente non affiliato a entità governative. La fonte dei documenti PDF che pubblichiamo qui è l'entità governativa indicata in ciascuno di essi. Le versioni in testo sono trascrizioni che realizziamo per facilitare l'accesso e la ricerca di informazioni, ma possono contenere errori o non essere complete.
Source: Federal Register
36126
Federal Register / Vol. 86, No. 128 / Thursday, July 8, 2021 / Notices
RECORD SOURCE CATEGORIES:
The military spouse and/or sponsor;
transcripts and/or evaluations from schools and test results from testing agencies; the Defense Enrollment Eligibility Reporting System DEERS.
lotter on DSK11XQN23PROD with NOTICES1
ROUTINE USES OF RECORDS MAINTAINED IN THE
SYSTEM, INCLUDING CATEGORIES OF USERS AND
THE PURPOSES OF SUCH USES:
In addition to those disclosures generally permitted under 5 U.S.C.
552ab of the Privacy Act of 1974, as amended, the records contained herein may specifically be disclosed outside the DoD as a routine use pursuant to 5
U.S.C. 552ab3 as follows:
A. To contractors, grantees, experts, consultants, students, and others performing or working on a contract, service, grant, cooperative agreement, or other assignment for the federal government when necessary to accomplish an agency function related to this system of records.
B. To the appropriate federal, state, local, territorial, tribal, or foreign, or international law enforcement authority or other appropriate entity where a record, either alone or in conjunction with other information, indicates a violation or potential violation of law, whether criminal, civil, or regulatory in nature.
C. To any component of the Department of Justice for the purpose of representing the DoD, or its components, officers, employees, or members in pending or potential litigation to which the record is pertinent.
D. In an appropriate proceeding before a court, grand jury, or administrative or adjudicative body or official, when the DoD or other Agency representing the DoD determines that the records are relevant and necessary to the proceeding; or in an appropriate proceeding before an administrative or adjudicative body when the adjudicator determines the records to be relevant to the proceeding.
E. To the National Archives and Records Administration for the purpose of records management inspections conducted under authority of 44 U.S.C.
2904 and 2906.
F. To a Member of Congress or staff acting upon the Members behalf when the Member or staff requests the information on behalf of, and at the request of, the individual who is the subject of the record.
G. To appropriate agencies, entities, and persons when 1 the DoD suspects or confirms a breach of the system of records; 2 the DoD determines as a result of the suspected or confirmed breach there is a risk of harm to
VerDate Sep<11>2014
16:47 Jul 07, 2021
Jkt 253001
individuals, the DoD including its information systems, programs, and operations, the Federal Government, or national security; and 3 the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with the DoDs efforts to respond to the suspected or confirmed breach or to prevent, minimize, or remedy such harm.
H. To another Federal agency or Federal entity, when the DoD
determines that information from this system of records is reasonably necessary to assist the recipient agency or entity in 1 responding to a suspected or confirmed breach or 2
preventing, minimizing, or remedying the risk of harm to individuals, the recipient agency or entity including its information systems, programs and operations, the Federal Government, or national security, resulting from a suspected or confirmed breach.
I. To such recipients and under such circumstances and procedures as are mandated by Federal statute or treaty.
J. To authorized DoD contractors and grantees for the purpose of supporting research studies concerned with the education of military spouses participating in DoD-funded spousal education programs in non-identifiable form.
K. To civilian educational institutions where the participant is enrolled, for the purposes of ensuring correct enrollment and billing information.
L. To the Department of Veterans Affairs, to the Department of Education, Consumer Financial Protection Bureau, and the Department of Justice for the purpose of ensuring prospective students are provided appropriate information regarding their options under, eligibility for, and costs associated with Federal military and veterans educational benefits programs.
POLICIES AND PRACTICES FOR STORAGE OF
RECORDS:
Records are maintained in electronic storage media. Electronic records may be stored in agency-owned cloud environments; or in vendor Cloud Service Offerings certified under the Federal Risk and Authorization Management Program FedRAMP.
POLICIES AND PRACTICES FOR RETRIEVAL OF
RECORDS:
Information in this system may be retrieved by name, DoD ID number, or MyCAA profile number.
POLICIES AND PRACTICES FOR RETENTION AND
DISPOSAL OF RECORDS:
A. SECO user accounts and records are deleted after 3 consecutive years of inactivity.
PO 00000
Frm 00052
Fmt 4703
Sfmt 4703
B. MyCAA records are destroyed 10
years after notification of separation, retirement, or discharge of the spouses sponsor/service member.
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL
SAFEGUARDS:
Unauthorized access to records is low due to the system being hosted on a DoD
Risk Management Framework lifecycle cybersecurity infrastructure. Electronic records are maintained on a military installation in a secure building in a controlled area accessible only to authorized personnel. Physical entry is restricted by the use of locks and passwords and administrative procedures which are changed periodically. The system is designed with access controls, comprehensive intrusion detection, and virus protection. Access to personally identifiable information is role based and restricted to those requiring the data in the performance of their official duties and upon completing annual information assurance and privacy training. Records are encrypted during transmission to protect session information and at rest. Encrypted random tokens are implemented to protect against session hijacking attempts.
RECORD ACCESS PROCEDURES:
Individuals seeking access to their records should follow the procedures in 32 CFR part 310. Individuals should address written inquires to the Office of the Secretary of Defense/Joint Staff Freedom of Information Act Requester Service Center, 1155 Defense Pentagon, Washington, DC 203011155. Signed, written requests should include the individuals full name, DoD ID number, current address, and telephone number and this system of records notice number. In addition, the requester must provide either a notarized signature or an unsworn declaration made in accordance with 28 U.S.C. 1746, in the following format:
If executed outside the United States:
I declare or certify, verify, or state under penalty of perjury under the laws of the United States of America that the foregoing is true and correct. Executed on date. Signature.
If executed within the United States, its territories, possessions, or commonwealths: I declare or certify, verify, or state under penalty of perjury that the foregoing is true and correct.
Executed on date. Signature.
CONTESTING RECORD PROCEDURES:
The DoD rules for accessing records, contesting contents, and appealing initial agency determinations are contained in 32 CFR part 310.
E:FRFM08JYN1.SGM
08JYN1