Voglio sapere a riguardo di…

Federal Register / Vol. 86, No. 156 / Tuesday, August 17, 2021 / Notices
khammond on DSKJM1Z7X2PROD with NOTICES

programs, or other functions of the Commission as authorized by law.
9. FLRA
VA may disclose information to the Federal Labor Relations Authority FLRA in connection with: the investigation and resolution of allegations of unfair labor practices, the resolution of exceptions to arbitration awards when a question of material fact is raised; matters before the Federal Service Impasses Panel; and the investigation of representation petitions and the conduct or supervision of representation elections.
10. MSPB
VA may disclose information to the Merit Systems Protection Board MSPB
and the Office of the Special Counsel in connection with appeals, special studies of the civil service and other merit systems, review of rules and regulations, investigation of alleged or possible prohibited personnel practices, and such other functions promulgated in 5
U.S.C. 1205 and 1206, or as authorized by law.
11. NARA
VA may disclose information to NARA in records management inspections conducted under 44 U.S.C.
2904 and 2906, or other functions authorized by laws and policies governing NARA operations and VA
records management responsibilities.
12. Health Care Providers, for Referral by VA
VA may disclose information to: 1 A
federal agency or health care provider when VA refers a patient for medical and other health services, or authorizes a patient to obtain such services and the information is needed by the federal agency or health care provider to perform the services; or 2 a federal agency or to health care provider under the provisions of 38 U.S.C. 513, 7409, 8111, or 8153, when treatment is rendered by VA under the terms of such contract or agreement or the issuance of an authorization, and the information is needed for purposes of medical treatment or follow-up, determination of eligibility for benefits, or recovery by VA of the costs of the treatment.

VerDate Sep<11>2014

17:08 Aug 16, 2021

Jkt 253001

13. Health Care Provider, for Referral to VA
VA may disclose information to a non-VA health care provider when that health care provider has referred the individual to VA for medical or other health services.
POLICIES AND PRACTICES FOR STORAGE OF
RECORDS:

CCRA relies on information in VistA, and only collects information related to referrals. Referral information is maintained as part of the individuals electronic health care record in accordance with the rules applied to those records. The CCRA system is hosted in Amazon Web Services AWS
Government Cloud GovCloud infrastructure as a service cloud computing environment that has been authorized at the high-impact level under the Federal Risk and Authorization Management Program FedRAMP. The secure site-to-site encrypted network connection is limited to access via the VA trusted internet connection TIC.
POLICIES AND PRACTICES FOR RETRIEVAL OF
RECORDS:

Records are retrieved by name, social security number or other assigned identifiers of the individuals on whom they are maintained.
POLICIES AND PRACTICES FOR RETENTION AND
DISPOSAL OF RECORDS:

These patient appointment and appointment schedules records shall be maintained per Record Control Schedule RCS 101 item; 2201.1.
According to General Records Schedule GRS 5.1 item 010, DAAGRS2017
00030001, temporary destroy transitory records, messages coordinating schedules, appointments, and events when no longer needed for business use, or according to agency predetermined time or business rule.
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL
SAFEGUARDS:

1. CCRA has physical controls and securely stores digital and non-digital media defined within the latest revision of NIST SP 80088, Guidelines for
PO 00000

Frm 00148

Fmt 4703

Sfmt 9990

46099

Media Sanitization, and VA 6500, within controlled areas; and protects information system media until the media is destroyed or sanitized using approved equipment, techniques, and procedures.
2. The CCRA system is hosted in Amazon Web Services AWS
Government Cloud GovCloud infrastructure as a service cloud computing environment that has been authorized at the high-impact level under the Federal Risk and Authorization Management Program FedRAMP. The secure site-to-site encrypted network connection is limited to access via the VA trusted internet connection TIC.
RECORD ACCESS PROCEDURES:

Individuals seeking information regarding access to and contesting of records in this system may write, call or visit the VA facility location where medical care was provided or VHA
Office of Community Care.
CONTESTING RECORD PROCEDURES:

See Record Access Procedures above.
NOTIFICATION PROCEDURES:

An individual who wishes to determine whether a record is being maintained in this system under his or her name or other personal identifier, or wants to review the contents of such record, should submit a written request or apply in person to the last VA health care facility where care was rendered.
All inquiries must reasonably describe the portion of the medical record involved and the place and approximate date that medical care was provided.
Inquiries should include the patients full name, social security number, and return address.
EXEMPTIONS PROMULGATED FOR THE SYSTEM:

None.
HISTORY:

Federal Register 83 FR 64935/Vol. 83, No. 242/Tuesday, December 18, 2018.
FR Doc. 202117527 Filed 81621; 8:45 am BILLING CODE P

E:FRFM17AUN1.SGM

17AUN1