81 FR 55241 - Privacy Act of 1974, Computer Matching Program-United States Postal Service and the Defense Manpower Data Center, Department of Defense

POSTAL SERVICE

Federal Register Volume 81, Issue 160 (August 18, 2016)

Page Range		55241-55245
FR Document		2016-19710
The United States Postal Service[supreg] (USPS[supreg]) plans to continue to participate as a recipient agency in a computer matching program with the Defense Manpower Data Center (DMDC), Department of Defense (DoD) as the source agency. The purpose of this program, and associated computer matching agreement (Agreement), is to enable the DMDC to determine whether members of the Ready Reserve, Standby Reserve, or the Retired Reserve of the Armed Forces of the United States are eligible for the TRICARE Reserve Select Program (TRS) or TRICARE Retired Reserve Program (TRR). Specifically, this program is intended to identify TRS and TRR recipients who are eligible for, or who are receiving, health coverage under Federal Employee Health Benefits (FEHB), and on the basis of these findings and subsequent investigation, to terminate TRS and TRR benefits if appropriate.
Federal Register, Volume 81 Issue 160 (Thursday, August 18, 2016)
[Federal Register Volume 81, Number 160 (Thursday, August 18, 2016)]
[Notices]
[Pages 55241-55245]
From the Federal Register Online  [www.thefederalregister.org]
[FR Doc No: 2016-19710]


-----------------------------------------------------------------------

POSTAL SERVICE


Privacy Act of 1974, Computer Matching Program--United States 
Postal Service and the Defense Manpower Data Center, Department of 
Defense

AGENCY: Postal Service.

ACTION: Notice of Computer Matching Program--United States Postal 
Service and the Defense Manpower Data Center, Department of Defense.

-----------------------------------------------------------------------

SUMMARY: The United States Postal Service[supreg] (USPS[supreg]) plans 
to continue to participate as a recipient agency in a computer matching 
program with the Defense Manpower Data Center (DMDC), Department of 
Defense (DoD) as the source agency. The purpose of this program, and 
associated computer matching agreement (Agreement), is to enable the 
DMDC to determine whether members of the Ready Reserve, Standby 
Reserve, or the Retired Reserve of the Armed Forces of the United 
States are eligible for the TRICARE Reserve Select Program (TRS) or 
TRICARE Retired Reserve Program (TRR). Specifically, this program is 
intended to identify TRS and TRR recipients who are eligible for, or 
who are receiving, health coverage under Federal Employee Health 
Benefits (FEHB), and on the basis of these findings and subsequent 
investigation, to terminate TRS and TRR benefits if appropriate.

DATES: The matching program will begin on the effective date of the 
Agreement. The effective date is the expiration of a 40-day review 
period by Office of Management and Budget (OMB) and Congress or 30 days 
after the date of publication of this notice, whichever is later. The 
matching program will be valid for a period of 18 months after this 
date.

ADDRESSES: Written comments on this proposal should be mailed or 
delivered to the Privacy and Records Office, United States Postal 
Service, 475 L'Enfant Plaza SW., Room 9431, Washington, DC 20260. 
Copies of all written comments will be available at the above address 
for public inspection and photocopying between 8 a.m. and 4 p.m., 
Monday through Friday.

FOR FURTHER INFORMATION CONTACT: Janine Castorina, Chief Privacy 
Officer, (202) 268-3069 or [email protected].

SUPPLEMENTARY INFORMATION: The Postal Service and DMDC have agreed to 
conduct a computer matching program under subsection (o) of the Privacy 
Act of 1974, 5 U.S.C. 552a. The Postal Service is undertaking this 
initiative to assist the DMDC in fulfilling a mandate issued under 
section 706 of the John Warner National Defense Authorization Act of 
2007 (NDAA of 2007) (Pub. L. 109-364), and section 705 of the National 
Defense Authorization Act for Fiscal Year 2010 (Pub. L. 111-84). These 
Acts exclude from program coverage those Selected Reserve and Retired 
Reserve members who are also eligible for Federal Employee Health 
Benefits (FEHB) under chapter 89 of title 5, U.S. Code.
    The Parties to this Agreement have determined that a computer 
matching program is the most efficient, expeditious, and effective 
means of obtaining the information needed by the DMDC to identify 
individuals ineligible to continue enrollment in the TRS and the TRR 
programs. If this semiannual identification is not accomplished by 
computer matching, but instead done manually, the burdensome process 
would be cost prohibitive and it is possible that not all individuals 
would be identified.
    The Postal Service has agreed to assist the DMDC in its efforts to 
identify individuals who are not entitled to receive health coverage 
under TRS or TRR. Currently, upon initial enrollment into TRS or TRR, 
service members must certify that they are not eligible for FEHB in 
order to purchase TRS or TRR

[[Page 55242]]

health care insurance coverage. The DMDC will provide semi-annual data 
to the Postal Service to be used in the match, including Social 
Security Numbers, names, and dates of birth for TRS-enrolled Selected 
Reservists or TRR-enrolled Retired Reservists. There are no other 
consolidated data sources available containing this type of 
information.
    The DMDC will provide the Postal Service an electronic file 
containing personally identifiable information from system of records 
DMDC 02, ``Defense Enrollment Eligibility Reporting System (DEERS)'' as 
amended by 80 FR 68304 (November 4, 2015).The Postal Service will 
compare the DMDC electronic file with its payroll files from system of 
records USPS 100.400, Personnel Compensation and Payroll Records, as 
amended by 80 FR11241 (March 2, 2015), routine use 7. Postal Service 
employee matches will be provided to the DMDC with the FEHB program 
eligibility and federal employment information necessary to either 
verify the eligibility to enroll or verify the continuing eligibility 
of enrolled service members.
    The DMDC will update System of Record DMDC 02 with the USPS FEHB 
eligibility information and will provide the matching results to the 
responsible Reserve Component. The Reserve Component is responsible for 
verifying the information and making final determinations as to 
positive identification and eligibility for TRS or TRR benefits.
    This computer match may have an adverse effect on individuals that 
are identified from the match. After verifying the accuracy of the 
matching information and determining ineligibility for coverage under 
TRS or TRR, the DoD will immediately notify individuals of their 
ineligibility for TRS or TRR and inform them at the same time about 
procedures for enrolling in FEHB. This process will help to alleviate 
or minimize any break in medical coverage.
    The privacy of employees will be safeguarded and protected. The 
Postal Service will manage all data in strict accordance with the 
Privacy Act and the terms of the matching agreement. Any verified data 
that is maintained will be managed within the parameters of Privacy Act 
System of Record USPS 100.400, Personnel Compensation and Payroll 
Records.
    The Postal Service will provide 40 days of advance notice to 
Congress and postal employee unions for each subsequent matching 
agreement. Set forth below are the terms of the matching agreement 
(exclusive of attachments), which provide information required by the 
Privacy Act of 1974, as amended (5 U.S.C. 552a); OMB Final Guidance 
Interpreting the Provisions of Public law 100-503, the Computer 
Matching and Privacy Protection Act of 1988, 54 FR 25818 (June 19, 
1989), and OMB Circular No. A-130, Appendix I, 65 FR 77677 (December 
12, 2000)).

Stanley F. Mires,
Attorney, Federal Compliance.

COMPUTER MATCHING AGREEMENT BETWEEN THE UNITED STATES POSTAL SERVICE 
AND THE DEPARTMENT OF DEFENSE

DEFENSE MANPOWER DATA CENTER

A. Supersedure

    This computer matching agreement supersedes all existing data 
exchange agreements or memorandums of understanding between the 
Department of Defense (DoD) and the United States Postal Service 
(USPS) applicable for determining the eligibility for the enrollment 
in premium based TRICARE health plans for Reserve Component (RC) 
Service members based on their eligibility for Federal Employees 
Health Benefits (FEHB) Program.

B. Purpose of the Computer Matching Agreement

    The purpose of this agreement is to establish the conditions, 
safeguards, and procedures under which the USPS, an independent 
establishment of the executive branch of the Government of the 
United States, section 201 of Title 39, United States Code (U.S.C.), 
as the recipient agency, will receive from the DoD, the source 
agency, personally identifiable information pertaining to members of 
the Ready Reserve, Standby Reserve, and Retired Reserve of the Armed 
Forces of the United States. Such information will be used in a 
matching program for the purpose of providing the DoD with the FEHB 
program eligibility and Federal employment information necessary to 
either verify the eligibility to enroll or verify the continuing 
eligibility of enrolled Service members for premium based TRICARE 
health plans such as the TRICARE Reserve Select (TRS) Program and 
the TRICARE Retired Reserve (TRR) Program.

C. Legal Authority

    This CMA is executed to comply with section 552a of Title 5 
U.S.C., as amended (the Privacy Act of 1974), Public Law (PL) 100-
503, the Computer Matching and Privacy Protection Act (CMPPA) of 
1988, the Office of Management and Budget (OMB) Circular A-130, 
titled ``Management of Federal Information Resources'' at 61 Federal 
Register (FR) 6435, February 20, 1996, and OMB guidelines pertaining 
to computer matching at 54 FR 25818, June 19, 1989. The Postal 
Service is authorized to enter into this agreement in accordance 
with section 411 of Title 39, U.S.C.
    Section 706 of PL 109-364, the John Warner National Defense 
Authorization Act of 2007, amended section 1076d of Title 10 U.S.C. 
to establish the enhanced TRS Program as of October 1, 2007. Section 
705 of PL 111-84, National Defense Authorization Act for Fiscal Year 
2010, amended section 1076e of Title 10 U.S.C. to establish the TRR 
Program as of October 29, 2009. RC Service members who have 
continuing eligibility for the FEHB Program pursuant to chapter 89 
of Title 5 U.S.C. are not eligible to enroll, or continue an 
enrollment, in the TRS or the TRR Program. This agreement implements 
the additional validation processes needed by DoD to insure RC 
Service members eligible for the FEHB Program may not enroll, or may 
not continue a current enrollment, in the TRS or the TRR Program.

D. Definitions

1. DoD--Department of Defense
2. USPS--United States Postal Service Payroll processing unit in 
Eagan, MN
3. FEHB Program--Federal Employees Health Benefits Program
4. TRS Program--TRICARE Reserve Select, a premium based TRICARE 
military health plan for members of the Selected Reserve of the 
Ready Reserve of the Armed Forces of the United States
5. TRR Program--TRICARE Retired Reserve, a premium based TRICARE 
military health plan for members of the Retired Reserve of the Armed 
Forces of the United States
6. DMDC--Defense Manpower Data Center
7. DEERS--Defense Enrollment Eligibility Reporting System
8. OASD(RA)--Office of the Assistant Secretary of Defense for 
Reserve Affairs
9. Recipient Agency--as defined by the Privacy Act (section 
552a(a)(9) of Title 5 U.S.C.), the agency receiving the records 
contained in a system of records from a source agency for use in a 
matching program. USPS is the recipient agency.
10. Source Agency--as defined by the Privacy Act (section 
552a(a)(11) of Title 5 U.S.C.), the agency which discloses records 
contained in a system of records to be used in a matching program. 
DoD DMDC is the source agency.
11. DHA--the Defense Health Agency

E. Description of the Match Records

    Under the terms of this matching agreement, the Defense Manpower 
Data Center (DMDC) will provide to USPS Payroll a file of records 
consisting of Social Security Number (SSN), date of birth (DOB), and 
the name of Service members of the Ready Reserve, Standby Reserve, 
and Retired Reserve of the Armed Forces of the United States. DMDC 
will update the Defense Enrollment Eligibility Reporting System 
(DEERS) record of those RC Service members with FEHB Program 
eligibility information from the USPS response file. The Office of 
the Assistant Secretary of Defense for Reserve Affairs (OASD(RA)) 
will be responsible for providing the verified information to the 
RCs to aid in processing of TRS and TRR eligibility determinations.
    USPS agrees to conduct two computer matches within a calendar 
year of the records of RC Service members provided by DMDC

[[Page 55243]]

matched with the information found in USPS Payroll system for 
permanent employees in a current pay status. USPS will validate the 
identification of the RC records that match with the name, SSN and 
DOB provided by DMDC. USPS Payroll will provide the Civilian Agency 
Indicator, the full FEHB Program Plan Code, a Multiple Record 
Indicator, and a DOB Match Indicator for those full-time employees 
in a current pay status. USPS Payroll will forward a response file 
to DMDC within 30 business days following the receipt of the initial 
finder file and for all subsequent files submitted.

F. Justification and Expected Results

    1. Justification. Service members of the Selected Reserve who 
are eligible for the FEHB Program are ineligible to enroll in the 
TRS Program. Once a Selected Reserve Service member enrolls in the 
TRS Program, he or she maintains continued coverage until enrolling 
in a non-premium based TRICARE Program, makes a decision to 
terminate TRS coverage, or leaves the Selected Reserve voluntarily. 
Service members of the Retired Reserve who are eligible for the FEHB 
Program are ineligible to enroll in the TRR Program. Once a Retired 
Reserve member enrolls in the TRR Program, he or she maintains 
continued coverage until they reach age 60, voluntarily makes a 
decision to terminate the coverage, or enrolls in a non-premium 
based TRICARE Program. In order to effectively administer the 
program, DoD has a requirement for a verified source of FEHB Program 
eligibility to administer the TRS and the TRR Programs.
    As a condition of enrollment into the TRS or the TRR Program, 
Service members certify they are not eligible for the FEHB Program. 
Since there is no mandatory termination date for TRS, and the 
mandatory termination date for TRR is age 60, DoD will validate the 
eligibility status of the member on a semiannual basis using data 
from the USPS Payroll. Absent the matching agreement, the enrolled 
RC population would be required to recertify their eligibility for 
the FEHB Program every year. This would be an onerous process for 
Service members as well as significant expense for DoD. The use of 
computer technology to transfer data between DMDC and USPS Payroll 
is faster and more efficient than the use of any other manual 
process to verify eligibility information for the FEHB Program.
    2. Expected Results. The data from USPS Payroll will identify 
Service members who are eligible for the FEHB Program and will be 
used to prevent an enrollment in the TRS or the TRR Program if 
warranted, and also to identify the FEHB Program eligibility of 
currently enrolled Service members in the TRS and the TRR Program. 
The computer match between the USPS Payroll system and the DEERS 
could have an adverse impact on those individuals who lose their 
entitlement for TRS or TRR Program; however, it will have a positive 
impact as well. Service members are notified of the pending 
termination of their enrollment for TRS or TRR Program and provided 
information for enrollment in the FEHB Program. This matching 
process will help to insure the member has no break in medical 
coverage.
    The derived benefits from this matching operation are primarily 
not quantifiable. DoD is responding to statute to exclude from the 
TRS and the TRR Programs Service members eligible for the FEHB 
Program. No savings will accrue to DoD as a result of this match. 
Eligible beneficiaries will receive care they are entitled to under 
the law.

G. Description of the Records

    1. Systems of Records (SOR). DoD will use the SOR identified as 
DMDC 02 DoD, entitled ``Defense Enrollment Eligibility Reporting 
Systems (DEERS) November 04, 2015, 80 FR 68304.'' The SSNs of RC 
Service members released to USPS pursuant to the routine use ``6'' 
set forth in the system notice DMDC 02 DoD. (A copy of the system 
notice is at Attachment 1).
    2. Systems of Records (SOR). USPS Payroll provides 
identification of the FEHB Program status of RC Service members to 
validate the eligibility for the statutory requirement of the TRS 
and the TRR Program. Therefore, eligibility information is 
maintained in the SOR identified as USPS 100.400 ``Personnel 
Compensation and Payroll Records,'' at 80 FR 11241, March 2, 2015, 
pursuant to routine use 6. (A copy of the system notice is at 
Attachment 2).
    3. Number of Records. DMDC will submit a finder file of 
approximately 1.4 million records containing the SSN, name, and DOB 
of RC Service members for matching against the USPS Payroll, and 
will submit subsequent finder files on a semiannual basis 
thereafter. USPS Payroll will provide a reply file containing all 
appropriate matched responses.
    4. Specified Data Elements. See Attachment 3 for a sample record 
format for the finder file and the reply file.
    5. Operational Time Factors. DMDC will forward the initial 
finder file of RC Service members to USPS Payroll after the 
Congressional and OMB review and public comment requirements, 
mandated by the Privacy Act, are satisfied. USPS Payroll will 
provide a reply file no later than 30 business days after receipt of 
the initial finder file. Subsequent finder files, submitted on a 
semiannual basis, will receive a response within approximately 30 
business days of receipt. USPS Payroll requires the reporting of the 
health plan semiannually: March and September, and the USPS Payroll 
system is usually available for use from 60 to 90 days after the end 
of the month. DMDC will send the finder file when the USPS Payroll 
system is ready to match, approximately 60 to 90 days after March 
and September.

H. Notice Procedures

    The Defense Health Agency, (DHA)TRICARE Management Activity 
(TMA) will inform all TRS and TRR sponsors of computer matching 
activities at the time of enrollment by means of the encounter 
statement on the DD Form 2896-1, ``RC Health Coverage Request 
Form.'' The DD Form 2896-1 is used to coordinate enrollment into the 
TRS Program or the TRR Program. RC Service members certify at the 
time of enrollment that they are not eligible for the FEHB Program. 
In order to provide direct notice to those Service members enrolled 
in TRS or TRR, DMDC will first need the information from USPS 
Payroll to identify TRS and TRR participants who are eligible for 
the FEHB Program. Once DMDC receives that information, Service 
members enrolled in TRS and TRR identified by the USPS Payroll 
matching result as FEHB eligible will be notified by their RC in 
writing of this status. The Service members enrolled in TRS or TRR 
are requested to terminate TRS or TRR coverage if the USPS Payroll 
information is correct or to seek RC assistance to determine their 
proper eligibility for the FEHB Program if the USPS Payroll data is 
incorrect. The RCs and DHA will also provide qualifying information 
for TRS and TRR to RC Service members through beneficiary handbooks, 
pamphlets, educational materials, press releases, briefings, and via 
the DHA Web site.
    Any deficiencies as to direct notice to the individual for the 
matching program are resolved by the indirect or constructive notice 
that is afforded the individual by agency publication in the FR of 
both the:
    1. Applicable routine use notice, as required by section 
552(e)(11) of Title 10 U.S.C. permitting the disclosure of the FEHB 
Program eligibility information for DoD TRS and TRR Program 
eligibility purposes.
    2. The proposed match notice, as required by section 
552(a)(e)(12) of Title 10 U.S.C., announcing an agency's intent to 
conduct computer matching for verification of FEHB Program 
eligibility for determining eligibility for TRS and TRR Program.

I. Verification and Opportunity to Contest Findings

    1. Verification. The RCs, in support of OASD(RA), are 
responsible for resolving FEHB Program eligibility based on the data 
provided by DMDC from the USPS Payroll reply file where 
inconsistencies exist. Any discrepancies as furnished by USPS 
Payroll, or developed as a result of the match, will be 
independently investigated and verified by the RCs, in support of 
OASD(RA), prior to any adverse action being taken against the 
individual.
    2. Opportunity to Contest Findings. Based on the DoD policy the 
RCs agree to provide written notice to each individual whom DoD 
believes is no longer eligible for the TRS or the TRR Program based 
on the USPS Payroll file match. If the individual fails to terminate 
coverage or notify the RC that the information is not accurate 
within 30 days from the date of the notice, DoD will forward the 
information to the RC Program Manager for final resolution of the 
TRS or the TRR enrollment.

J. Retention and Disposition of Identifiable Records

    The electronic data sent from DMDC to the USPS (``finder file'') 
in accordance with this matching program will remain the property of 
the DMDC. The USPS will destroy this finder file after the third 
consecutive day that it has not been accessed, when the next finder 
file is received, which ever date is earlier, or upon cancellation 
of the agreement. The electronic data that the USPS provides to DMDC 
resulting from the match will remain the property of the USPS. The

[[Page 55244]]

DMDC will destroy this file the date of the set-up of the next 
finder file, within 60 days of receiving the file from USPS, which 
ever date is earlier, or upon cancellation of the agreement. All 
destruction under this section will be accomplished by shredding, 
burning, or electronic erasure. Notwithstanding the preceding 
sentences, DMDC and USPS may retain the electronic data as needed to 
meet evidential requirements.

K. Security and Privacy Procedures

    1. DoD will comply with all Federal requirements relating to 
information security, information systems security, and privacy, 
including the Federal Information Security Modernization Act of 2014 
(FISMA), the E-Government Act of 2002, OMB memoranda related to 
privacy, and National Institute of Standards and Technology (NIST) 
directives in the Special Publications (SP) 800 series (e.g., NIST 
SP 800-53, Rev. 4, and NIST SP 800-37, Rev. 1). The Postal Service, 
as an independent establishment of the executive branch, is not 
required to follow the requirements identified in the preceding 
sentence, but will follow its security and privacy requirements and 
policies, including:
    a. Title 39, Code of Federal Regulations, Part 268;
    b. USPS Handbook AS-353--Guide to Privacy, the Freedom of 
Information Act, and Records Management (available at http://about.usps.com/handbooks/as353/welcome.htm);
    c. USPS Response Plan for Information Breaches Involving 
Personal Information;
    d. USPS Handbook AS-805, Information Technology and AS-805-H 
Cloud Security; and
    e. the official USPS Privacy Policy (available at www.usps.com/privacy).
    2. Each agency shall establish appropriate administrative, 
technical, and physical safeguards to assure the security and 
confidentiality of records and to protect against any anticipated 
threats or hazard to their security or integrity which could result 
in substantial harm, embarrassment, inconvenience, or unfairness to 
any individual on whom information is maintained.
    3. Data must be protected at the Moderate system certification 
criticality level according to Federal Information Processing 
Standards (FIPS) Publication 199, Standards for Security 
Categorization of Federal Information and Information Systems.
    4. DoD and USPS have completed the security authorization 
process and the certification and accreditation process respectively 
within the last 3 years, using the required NIST guidance, and have 
an Authorization to Operate (ATO) and accreditation letter with the 
appropriate signatures.
    5. FISMA requirements apply to all Federal contractors, 
organizations, or entities that possess or use Federal information, 
or that operate, use, or have access to Federal information systems 
on behalf of an agency. DoD and USPS agree that they are responsible 
for oversight and compliance of their own contractors and agents. 
DoD and USPS each reserve the right to conduct onsite inspections of 
any contractor or agent who has access to matched data in order to 
monitor compliance with FISMA regulations during the lifetime of 
this CMA.
    6. Access to the records matched and to any records created by 
the match will be restricted only to those authorized employees and 
officials who need it to perform their official duties in connection 
with the uses of the information authorized in this agreement. 
Further, all personnel who will have access to the data matched and 
to any data created by the match will be advised of the confidential 
nature of the data, the safeguards required to protect the data, and 
the civil and criminal sanctions for noncompliance contained in the 
applicable Federal laws.
    7. The records matched, and any records created by the match, 
will be processed under the immediate supervision and control of 
authorized personnel, to protect the confidentiality of the records 
in such a way that unauthorized persons cannot retrieve any such 
records by means of computer, remote terminal or other means.
    8. All personnel who will have access to the records exchanged 
and to any records created by this exchange are advised of the 
confidential nature of the information, the safeguards required to 
protect the information and the civil and criminal sanctions for 
noncompliance contained in applicable Federal Laws.
    9. USPS Payroll and DMDC may make onsite inspections, and may 
make other provisions to ensure that each agency is maintaining 
adequate safeguards.
    10. The Data Integrity Boards (DIB) of USPS and DoD reserve the 
right to monitor compliance of systems security requirements, 
including, if warranted, the right to make onsite inspections for 
purposes of auditing compliance, during the life of this Agreement, 
or its 12 month extension period.

L. Breach Notification

    1. DoD will follow PII breach notification policies and related 
procedures as required by OMB M-07-16, ``Safeguarding Against and 
Responding to the Breach of Personally Identifiable Information'' 
(May 22, 2007). Using established criteria, if in the event of a 
breach of PII within its control, DoD determines that the risk of 
harm to affected individuals or to the agency requires notification 
to affected individuals and/or other remedies, the DoD will carry 
out these remedies without cost to the Postal Service. USPS and DoD 
will also comply with the personally identifiable information (PII) 
breach reporting and security requirements as required by OMB M-06-
19, ``Reporting Incidents Involving Personally Identifiable 
Information and Incorporating the Cost for Security in Agency 
Information Technology Investments'', and OMB M-15-01, ``Fiscal Year 
2014-2015 Guidance on Improving Federal Information Security and 
Privacy Management Practices''.
    2. USPS will follow USPS breach notification policies and 
related procedures referenced in section K(1)(c): USPS Response Plan 
for Information Breaches Involving Personal Information.
    3. USPS and DoD also agree to notify each other as soon as 
possible, but no later than 24 hours, after the discovery of a 
suspected or actual breach involving PII. All incidents involving 
confirmed or suspected breaches of PII must be reported by DoD to 
the U.S. Computer Emergency Readiness Team (US-CERT) within one hour 
of discovering the incident.
    4. In addition, the agency experiencing the loss of PII will 
notify the other agency's Systems Security Contact named in Section 
S of this Agreement. If USPS is unable to speak with the DoD Systems 
Security Contact within 24 hours or if for some other reason 
notifying the DoD Systems Security Contact is not practicable (e.g., 
it is outside of the normal business hours), USPS will call the DoD 
at 831-583-4159. If DoD is unable to speak with USPS's Systems 
Security Contact within 24 hours, DoD will contact the USPS Computer 
Incident Response Team (USPSCIRT) via email at [email protected].

M. Records Usage, Duplication and Re-disclosure Restrictions

    1. The matching files exchanged under this agreement remain the 
property of the providing agency and as described in Section J.
    2. The data exchanged under this agreement will be used and 
accessed only for the purpose of determining eligibility for premium 
based TRICARE health plan such as the TRS and TRR Programs.
    3. Neither DoD nor USPS will extract information from the 
electronic data files concerning the individuals that are described 
therein for any purpose not stated in this agreement.
    4. Except as provided in this agreement, neither DoD nor USPS 
will duplicate or disseminate the data produced without the 
disclosing agency's permission. Neither agency shall give such 
permission unless the re-disclosure is required by law or essential 
to the conduct of the matching program. In such cases, DoD and USPS 
will specify in writing what records are being disclosed and the 
reasons that justify such disclosure.

N. Records Accuracy Assessments

    DMDC estimates that at least 99% of the information in the 
finder file is accurate based on their operational experience. USPS 
Payroll is a highly reliable source of statistical data on the 
Postal Service workforce. However, accuracy and completeness of each 
data element within the individual records that comprise this 
aggregate are not conclusive. Findings emanating from individual 
records warrant further examination and verification as to its 
accuracy, timeliness, and completeness with the data subject.

O. Reimbursements and Funding

    Expenses incurred by this data exchange will not involve any 
payments or reimbursements between USPS and DoD.

P. Approval and Duration of Agreement

    1. This matching agreement, as signed by representatives of both 
agencies and approved by the respective agency's Data Integrity 
Boards (DIB), shall be valid for a period of 18 months from the 
effective date of the agreement.

[[Page 55245]]

    2. When this agreement is approved and signed by the 
Chairpersons of the respective DIBs, the USPS, as the recipient 
agency, will submit the agreement and the proposed public notice of 
the match as attachments in duplicate via a transmittal letter to 
OMB and Congress for review. The time period for review begins as of 
the date of the transmittal letter.
    3. USPS will forward the public notice of the proposed matching 
program for publication in the Federal Register, in accordance with 
section 552(a)(e)(12) of Title 5 U.S.C., the transmittal letter to 
OMB and Congress. The matching notice will clearly identify the 
record systems and category of records being used and state that the 
program is subject to review by the OMB and Congress. A copy of the 
published notice shall be provided to the DoD.
    4. The effective date of the matching agreement and date when 
matching may actually begin shall be at the expiration of the 40 day 
review period for OMB and Congress, or 30 days after publication of 
the matching notice in the Federal Register, whichever is later. The 
parties to this agreement may assume OMB and Congressional 
concurrence if no comments are received within 40 days of the date 
of the transmittal letter. Both the 40 day OMB and Congressional 
review period, and the mandatory 30 day public comment period for 
the Federal Register publication of the notice will run 
concurrently.
    5. This agreement may be renewed for 12 months after the initial 
agreement period as long as the statutory requirement for the data 
match exists, subject to the Privacy Act, including certification by 
the participating agencies to the responsible DIBs that:
    a. The matching program will be conducted without change, and
    b. The matching program has been conducted in compliance with 
the original agreement.
    6. This agreement may be modified at any time by a written 
modification to this agreement. Any modification shall satisfy both 
parties and shall be approved by the DIB of each agency. In 
addition, any modification shall comply with the Privacy Act of 
1974, as amended, as well as guidance issued by the Office of 
Management and Budget.
    7. This agreement may be terminated at any time with the consent 
of both parties. If either party does not want to continue this 
program, it should notify the other party of its intention not to 
continue at least 90 days before the end of the then current period 
of the agreement. Either party may unilaterally terminate this 
agreement upon written notice to the other party requesting 
termination, in which case the termination shall be effective 90 
days after the date of the notice or at a later date specified in 
the notice provided the expiration date does not exceed the original 
or the extended completion date of the match.

Q. Waiver of Cost Benefit Analysis

    The purpose of this matching agreement is to verify eligibility 
of Service members enrolling or enrolled in the TRS or the TRR 
Programs. By statute, such coverage may be provided if the person is 
not eligible for the FEHB Program. FEHB Program eligibility can only 
be obtained from USPS, and without this information, a determination 
of continued eligibility cannot be made. Matching must occur 
regardless of the associated cost or anticipated benefits. 
Accordingly, the cost benefit is waived.

R. Comptroller General

    The Comptroller General may have access to all records of the 
USPS that the Comptroller General deems necessary in order to 
monitor or verify compliance with the agreement.

S. Persons To Contact

    The contacts on behalf of DoD are: Ms. Cindy Allard, Chief, 
Privacy, Civil Liberties, and Transparency Division, ODCMO, 
Directorate For Oversight And Compliance 4800 Mark Center Drive, 
Attn: DPCLTD, Mailbox# 24, Alexandria, VA 22350-1700, (703) 571-
0070; Mr. Matthew Dubois, Deputy Assistant Secretary of Defense 
(Reserve Integration), 1500 Defense Pentagon, Washington DC 20301-
1150, (703) 693-2232; Ms. Dena Colburn, DEERS Division, Defense 
Manpower Data Center, DoD Center Monterey Bay, 400 Gigling Rd., 
Seaside, CA. 93955-6771, (831) 583-2400 x4332; DMDC Security and 
Incident Response: Donna Naulivou, IA Branch Chief, Defense Manpower 
Data Center, 400 Gigling Road, Seaside, CA 93955-6771, 831-583-4159, 
[email protected].The contact on behalf of USPS is: Ms. 
Ms. Erica Hayton, Manager Benefits and Wellness Program, 475 
L'Enfant Plaza SW., Washington DC 20260-4101, (202) 268-3735, (202) 
268-3337 fax, [email protected];Ms. Christine Harris, 
Headquarters Payroll Accountant, 2825 Lone Oak Parkway, Eagan, MN 
55121-9500, (651) 406-2128, (651) 406-1212 fax, 
[email protected];USPS Security and Incident Response: 
USPS Computer Incident Response Team, 1-866-877-7247, 
[email protected].

T. Approvals

Department of Defense Program Officials

    The authorized program officials, whose signatures appear below, 
accept and expressly agree to the terms and conditions expressed 
herein, confirm that no verbal agreements of any kind shall be 
binding or recognized, and hereby commit their respective 
organizations to the terms of this agreement.
    Matthew Dubois, Deputy Assistant Secretary of Defense, (Reserve 
Affairs); Mary Snavely-Dixon, Director, Defense Manpower Data Center

Department of Defense Data Integrity Board

    The respective DIBs having reviewed this agreement and finding 
that it complies with applicable statutory and regulatory guidelines 
signify their respective approval thereof by the signature of the 
officials appearing below.
    Mr. Joo Y. Chung, Chair, Defense Data Integrity Board, 
Department of Defense

United States Postal Service Program Official

    Janine Castornina, (A) Chief Privacy Officer, Secretary, Data 
Integrity Board, United States Postal Service.

United States Postal Service Data Integrity Board

    The respective DIBs having reviewed this agreement and finding 
that it complies with applicable statutory and regulatory guidelines 
signify their respective approval thereof by the signature of the 
officials appearing below.
    Thomas J. Marshall, General Counsel and Executive Vice 
President, Chairperson, Data Integrity Board, United States Postal 
Service.

[FR Doc. 2016-19710 Filed 8-17-16; 8:45 am]
 BILLING CODE 7710-12-P
Federal Register / Vol. 81, No. 160 / Thursday, August 18, 2016 / Notices 55241

POSTAL SERVICE POSTAL SERVICE (FEHB), and on the basis of these
findings and subsequent investigation,
Product Change—Priority Mail Product Change—First-Class Package to terminate TRS and TRR benefits if
Negotiated Service Agreement Service Negotiated Service Agreement appropriate.
AGENCY: Postal ServiceTM. AGENCY: Postal ServiceTM. DATES: The matching program will begin
ACTION: Notice. ACTION: Notice. on the effective date of the Agreement.
The effective date is the expiration of a
SUMMARY: The Postal Service gives SUMMARY: The Postal Service gives 40-day review period by Office of
notice of filing a request with the Postal notice of filing a request with the Postal Management and Budget (OMB) and
Regulatory Commission to add a Regulatory Commission to add a Congress or 30 days after the date of
domestic shipping services contract to domestic shipping services contract to publication of this notice, whichever is
the list of Negotiated Service the list of Negotiated Service later. The matching program will be
Agreements in the Mail Classification Agreements in the Mail Classification valid for a period of 18 months after this
Schedule’s Competitive Products List. Schedule’s Competitive Products List. date.
DATES: Effective date: August 18, 2016. DATES: Effective date: August 18, 2016. ADDRESSES: Written comments on this
FOR FURTHER INFORMATION CONTACT: FOR FURTHER INFORMATION CONTACT: proposal should be mailed or delivered
Elizabeth A. Reed, 202–268–3179. Elizabeth A. Reed, 202–268–3179. to the Privacy and Records Office,
SUPPLEMENTARY INFORMATION: The SUPPLEMENTARY INFORMATION: The United States Postal Service, 475
United States Postal Service® hereby United States Postal Service® hereby L’Enfant Plaza SW., Room 9431,
gives notice that, pursuant to 39 U.S.C. gives notice that, pursuant to 39 U.S.C. Washington, DC 20260. Copies of all
3642 and 3632(b)(3), on August 12, 3642 and 3632(b)(3), on August 12, written comments will be available at
2016, it filed with the Postal Regulatory 2016, it filed with the Postal Regulatory the above address for public inspection
Commission a Request of the United Commission a Request of the United and photocopying between 8 a.m. and 4
States Postal Service to Add Priority States Postal Service to Add First-Class p.m., Monday through Friday.
Mail Contract 232 to Competitive Package Service Contract 60 to FOR FURTHER INFORMATION CONTACT:
Product List. Documents are available at Competitive Product List. Documents Janine Castorina, Chief Privacy Officer,
www.prc.gov, Docket Nos. MC2016–178, are available at www.prc.gov, Docket (202) 268–3069 or privacy@usps.gov.
CP2016–257. Nos. MC2016–176, CP2016–255. SUPPLEMENTARY INFORMATION: The Postal
Service and DMDC have agreed to
Stanley F. Mires, Stanley F. Mires,
conduct a computer matching program
Attorney, Federal Compliance. Attorney, Federal Compliance. under subsection (o) of the Privacy Act
[FR Doc. 2016–19707 Filed 8–17–16; 8:45 am] [FR Doc. 2016–19694 Filed 8–17–16; 8:45 am] of 1974, 5 U.S.C. 552a. The Postal
BILLING CODE 7710–12–P BILLING CODE 7710–12–P Service is undertaking this initiative to
assist the DMDC in fulfilling a mandate
issued under section 706 of the John
POSTAL SERVICE POSTAL SERVICE Warner National Defense Authorization
Act of 2007 (NDAA of 2007) (Pub. L.
Product Change—Priority Mail Express Privacy Act of 1974, Computer 109–364), and section 705 of the
Negotiated Service Agreement Matching Program—United States National Defense Authorization Act for
AGENCY: Postal ServiceTM. Postal Service and the Defense Fiscal Year 2010 (Pub. L. 111–84). These
Manpower Data Center, Department of Acts exclude from program coverage
ACTION: Notice. Defense those Selected Reserve and Retired
SUMMARY: The Postal Service gives AGENCY: Postal Service. Reserve members who are also eligible
notice of filing a request with the Postal for Federal Employee Health Benefits
ACTION: Notice of Computer Matching
Regulatory Commission to add a (FEHB) under chapter 89 of title 5, U.S.
Program—United States Postal Service
domestic shipping services contract to Code.
and the Defense Manpower Data Center,
the list of Negotiated Service The Parties to this Agreement have
Department of Defense.
Agreements in the Mail Classification determined that a computer matching
Schedule’s Competitive Products List. SUMMARY: The United States Postal program is the most efficient,
DATES: Effective date: August 18, 2016. Service® (USPS®) plans to continue to expeditious, and effective means of
FOR FURTHER INFORMATION CONTACT: participate as a recipient agency in a obtaining the information needed by the
Elizabeth A. Reed, 202–268–3179. computer matching program with the DMDC to identify individuals ineligible
SUPPLEMENTARY INFORMATION: The Defense Manpower Data Center to continue enrollment in the TRS and
United States Postal Service® hereby (DMDC), Department of Defense (DoD) the TRR programs. If this semiannual
gives notice that, pursuant to 39 U.S.C. as the source agency. The purpose of identification is not accomplished by
3642 and 3632(b)(3), on August 12, this program, and associated computer computer matching, but instead done
2016, it filed with the Postal Regulatory matching agreement (Agreement), is to manually, the burdensome process
Commission a Request of the United enable the DMDC to determine whether would be cost prohibitive and it is
States Postal Service to Add Priority members of the Ready Reserve, Standby possible that not all individuals would
Mail Express Contract 41 to Competitive Reserve, or the Retired Reserve of the be identified.
Product List. Documents are available at Armed Forces of the United States are The Postal Service has agreed to assist
rmajette on DSK2TPTVN1PROD with NOTICES

www.prc.gov, Docket Nos. MC2016–180, eligible for the TRICARE Reserve Select the DMDC in its efforts to identify
CP2016–259. Program (TRS) or TRICARE Retired individuals who are not entitled to
Reserve Program (TRR). Specifically, receive health coverage under TRS or
Stanley F. Mires, this program is intended to identify TRS TRR. Currently, upon initial enrollment
Attorney, Federal Compliance. and TRR recipients who are eligible for, into TRS or TRR, service members must
[FR Doc. 2016–19695 Filed 8–17–16; 8:45 am] or who are receiving, health coverage certify that they are not eligible for
BILLING CODE 7710–12–P under Federal Employee Health Benefits FEHB in order to purchase TRS or TRR

VerDate Sep<11>2014 15:05 Aug 17, 2016 Jkt 238001 PO 00000 Frm 00072 Fmt 4703 Sfmt 4703 E:\FR\FM\18AUN1.SGM 18AUN1
Federal Register / Vol. 81, No. 160 / Thursday, August 18, 2016 / Notices 55243

matched with the information found in USPS The derived benefits from this matching enrolled in TRS or TRR, DMDC will first
Payroll system for permanent employees in a operation are primarily not quantifiable. DoD need the information from USPS Payroll to
current pay status. USPS will validate the is responding to statute to exclude from the identify TRS and TRR participants who are
identification of the RC records that match TRS and the TRR Programs Service members eligible for the FEHB Program. Once DMDC
with the name, SSN and DOB provided by eligible for the FEHB Program. No savings receives that information, Service members
DMDC. USPS Payroll will provide the will accrue to DoD as a result of this match. enrolled in TRS and TRR identified by the
Civilian Agency Indicator, the full FEHB Eligible beneficiaries will receive care they USPS Payroll matching result as FEHB
Program Plan Code, a Multiple Record are entitled to under the law. eligible will be notified by their RC in writing
Indicator, and a DOB Match Indicator for of this status. The Service members enrolled
those full-time employees in a current pay G. Description of the Records
in TRS or TRR are requested to terminate
status. USPS Payroll will forward a response 1. Systems of Records (SOR). DoD will use TRS or TRR coverage if the USPS Payroll
file to DMDC within 30 business days the SOR identified as DMDC 02 DoD, entitled information is correct or to seek RC
following the receipt of the initial finder file ‘‘Defense Enrollment Eligibility Reporting assistance to determine their proper
and for all subsequent files submitted. Systems (DEERS) November 04, 2015, 80 FR eligibility for the FEHB Program if the USPS
68304.’’ The SSNs of RC Service members Payroll data is incorrect. The RCs and DHA
F. Justification and Expected Results
released to USPS pursuant to the routine use will also provide qualifying information for
1. Justification. Service members of the ‘‘6’’ set forth in the system notice DMDC 02 TRS and TRR to RC Service members through
Selected Reserve who are eligible for the DoD. (A copy of the system notice is at beneficiary handbooks, pamphlets,
FEHB Program are ineligible to enroll in the Attachment 1). educational materials, press releases,
TRS Program. Once a Selected Reserve 2. Systems of Records (SOR). USPS Payroll briefings, and via the DHA Web site.
Service member enrolls in the TRS Program, provides identification of the FEHB Program Any deficiencies as to direct notice to the
he or she maintains continued coverage until status of RC Service members to validate the individual for the matching program are
enrolling in a non-premium based TRICARE eligibility for the statutory requirement of the resolved by the indirect or constructive
Program, makes a decision to terminate TRS TRS and the TRR Program. Therefore, notice that is afforded the individual by
coverage, or leaves the Selected Reserve eligibility information is maintained in the agency publication in the FR of both the:
voluntarily. Service members of the Retired SOR identified as USPS 100.400 ‘‘Personnel 1. Applicable routine use notice, as
Reserve who are eligible for the FEHB Compensation and Payroll Records,’’ at 80 FR required by section 552(e)(11) of Title 10
Program are ineligible to enroll in the TRR 11241, March 2, 2015, pursuant to routine U.S.C. permitting the disclosure of the FEHB
Program. Once a Retired Reserve member use 6. (A copy of the system notice is at Program eligibility information for DoD TRS
enrolls in the TRR Program, he or she Attachment 2). and TRR Program eligibility purposes.
maintains continued coverage until they 3. Number of Records. DMDC will submit 2. The proposed match notice, as required
reach age 60, voluntarily makes a decision to a finder file of approximately 1.4 million by section 552(a)(e)(12) of Title 10 U.S.C.,
terminate the coverage, or enrolls in a non- records containing the SSN, name, and DOB announcing an agency’s intent to conduct
premium based TRICARE Program. In order of RC Service members for matching against computer matching for verification of FEHB
to effectively administer the program, DoD the USPS Payroll, and will submit Program eligibility for determining eligibility
has a requirement for a verified source of subsequent finder files on a semiannual basis for TRS and TRR Program.
FEHB Program eligibility to administer the thereafter. USPS Payroll will provide a reply
TRS and the TRR Programs. file containing all appropriate matched I. Verification and Opportunity to Contest
As a condition of enrollment into the TRS responses. Findings
or the TRR Program, Service members certify 4. Specified Data Elements. See 1. Verification. The RCs, in support of
they are not eligible for the FEHB Program. Attachment 3 for a sample record format for OASD(RA), are responsible for resolving
Since there is no mandatory termination date the finder file and the reply file. FEHB Program eligibility based on the data
for TRS, and the mandatory termination date 5. Operational Time Factors. DMDC will provided by DMDC from the USPS Payroll
for TRR is age 60, DoD will validate the forward the initial finder file of RC Service reply file where inconsistencies exist. Any
eligibility status of the member on a members to USPS Payroll after the discrepancies as furnished by USPS Payroll,
semiannual basis using data from the USPS Congressional and OMB review and public or developed as a result of the match, will
Payroll. Absent the matching agreement, the comment requirements, mandated by the be independently investigated and verified
enrolled RC population would be required to Privacy Act, are satisfied. USPS Payroll will by the RCs, in support of OASD(RA), prior
recertify their eligibility for the FEHB provide a reply file no later than 30 business to any adverse action being taken against the
Program every year. This would be an days after receipt of the initial finder file. individual.
onerous process for Service members as well Subsequent finder files, submitted on a 2. Opportunity to Contest Findings. Based
as significant expense for DoD. The use of semiannual basis, will receive a response on the DoD policy the RCs agree to provide
computer technology to transfer data between within approximately 30 business days of written notice to each individual whom DoD
DMDC and USPS Payroll is faster and more receipt. USPS Payroll requires the reporting believes is no longer eligible for the TRS or
efficient than the use of any other manual of the health plan semiannually: March and the TRR Program based on the USPS Payroll
process to verify eligibility information for September, and the USPS Payroll system is file match. If the individual fails to terminate
the FEHB Program. usually available for use from 60 to 90 days coverage or notify the RC that the
2. Expected Results. The data from USPS after the end of the month. DMDC will send information is not accurate within 30 days
Payroll will identify Service members who the finder file when the USPS Payroll system from the date of the notice, DoD will forward
are eligible for the FEHB Program and will is ready to match, approximately 60 to 90 the information to the RC Program Manager
be used to prevent an enrollment in the TRS days after March and September. for final resolution of the TRS or the TRR
or the TRR Program if warranted, and also to enrollment.
identify the FEHB Program eligibility of H. Notice Procedures
currently enrolled Service members in the The Defense Health Agency, J. Retention and Disposition of Identifiable
TRS and the TRR Program. The computer (DHA)TRICARE Management Activity (TMA) Records
match between the USPS Payroll system and will inform all TRS and TRR sponsors of The electronic data sent from DMDC to the
the DEERS could have an adverse impact on computer matching activities at the time of USPS (‘‘finder file’’) in accordance with this
those individuals who lose their entitlement enrollment by means of the encounter matching program will remain the property
rmajette on DSK2TPTVN1PROD with NOTICES

for TRS or TRR Program; however, it will statement on the DD Form 2896–1, ‘‘RC of the DMDC. The USPS will destroy this
have a positive impact as well. Service Health Coverage Request Form.’’ The DD finder file after the third consecutive day that
members are notified of the pending Form 2896–1 is used to coordinate it has not been accessed, when the next
termination of their enrollment for TRS or enrollment into the TRS Program or the TRR finder file is received, which ever date is
TRR Program and provided information for Program. RC Service members certify at the earlier, or upon cancellation of the
enrollment in the FEHB Program. This time of enrollment that they are not eligible agreement. The electronic data that the USPS
matching process will help to insure the for the FEHB Program. In order to provide provides to DMDC resulting from the match
member has no break in medical coverage. direct notice to those Service members will remain the property of the USPS. The

VerDate Sep<11>2014 15:05 Aug 17, 2016 Jkt 238001 PO 00000 Frm 00074 Fmt 4703 Sfmt 4703 E:\FR\FM\18AUN1.SGM 18AUN1
55244 Federal Register / Vol. 81, No. 160 / Thursday, August 18, 2016 / Notices

DMDC will destroy this file the date of the has access to matched data in order to or actual breach involving PII. All incidents
set-up of the next finder file, within 60 days monitor compliance with FISMA regulations involving confirmed or suspected breaches of
of receiving the file from USPS, which ever during the lifetime of this CMA. PII must be reported by DoD to the U.S.
date is earlier, or upon cancellation of the 6. Access to the records matched and to Computer Emergency Readiness Team (US–
agreement. All destruction under this section any records created by the match will be CERT) within one hour of discovering the
will be accomplished by shredding, burning, restricted only to those authorized employees incident.
or electronic erasure. Notwithstanding the and officials who need it to perform their 4. In addition, the agency experiencing the
preceding sentences, DMDC and USPS may official duties in connection with the uses of loss of PII will notify the other agency’s
retain the electronic data as needed to meet the information authorized in this agreement. Systems Security Contact named in Section
evidential requirements. Further, all personnel who will have access S of this Agreement. If USPS is unable to
to the data matched and to any data created speak with the DoD Systems Security Contact
K. Security and Privacy Procedures by the match will be advised of the within 24 hours or if for some other reason
1. DoD will comply with all Federal confidential nature of the data, the safeguards notifying the DoD Systems Security Contact
requirements relating to information security, required to protect the data, and the civil and is not practicable (e.g., it is outside of the
information systems security, and privacy, criminal sanctions for noncompliance normal business hours), USPS will call the
including the Federal Information Security contained in the applicable Federal laws. DoD at 831–583–4159. If DoD is unable to
Modernization Act of 2014 (FISMA), the E- 7. The records matched, and any records speak with USPS’s Systems Security Contact
Government Act of 2002, OMB memoranda created by the match, will be processed within 24 hours, DoD will contact the USPS
related to privacy, and National Institute of under the immediate supervision and control Computer Incident Response Team
Standards and Technology (NIST) directives of authorized personnel, to protect the (USPSCIRT) via email at USPSCIRT@
in the Special Publications (SP) 800 series confidentiality of the records in such a way usps.gov.
(e.g., NIST SP 800–53, Rev. 4, and NIST SP that unauthorized persons cannot retrieve
800–37, Rev. 1). The Postal Service, as an any such records by means of computer, M. Records Usage, Duplication and Re-
independent establishment of the executive remote terminal or other means. disclosure Restrictions
branch, is not required to follow the 8. All personnel who will have access to 1. The matching files exchanged under this
requirements identified in the preceding the records exchanged and to any records agreement remain the property of the
sentence, but will follow its security and created by this exchange are advised of the providing agency and as described in Section
privacy requirements and policies, including: confidential nature of the information, the J.
a. Title 39, Code of Federal Regulations, safeguards required to protect the 2. The data exchanged under this
Part 268; information and the civil and criminal agreement will be used and accessed only for
b. USPS Handbook AS–353—Guide to sanctions for noncompliance contained in the purpose of determining eligibility for
Privacy, the Freedom of Information Act, and applicable Federal Laws. premium based TRICARE health plan such as
Records Management (available at http:// 9. USPS Payroll and DMDC may make the TRS and TRR Programs.
about.usps.com/handbooks/as353/ onsite inspections, and may make other 3. Neither DoD nor USPS will extract
welcome.htm); provisions to ensure that each agency is information from the electronic data files
c. USPS Response Plan for Information maintaining adequate safeguards. concerning the individuals that are described
Breaches Involving Personal Information; 10. The Data Integrity Boards (DIB) of therein for any purpose not stated in this
d. USPS Handbook AS–805, Information USPS and DoD reserve the right to monitor agreement.
Technology and AS–805–H Cloud Security; compliance of systems security requirements, 4. Except as provided in this agreement,
and including, if warranted, the right to make neither DoD nor USPS will duplicate or
e. the official USPS Privacy Policy onsite inspections for purposes of auditing disseminate the data produced without the
(available at www.usps.com/privacy). compliance, during the life of this disclosing agency’s permission. Neither
2. Each agency shall establish appropriate Agreement, or its 12 month extension period. agency shall give such permission unless the
administrative, technical, and physical re-disclosure is required by law or essential
safeguards to assure the security and L. Breach Notification
to the conduct of the matching program. In
confidentiality of records and to protect 1. DoD will follow PII breach notification such cases, DoD and USPS will specify in
against any anticipated threats or hazard to policies and related procedures as required writing what records are being disclosed and
their security or integrity which could result by OMB M–07–16, ‘‘Safeguarding Against the reasons that justify such disclosure.
in substantial harm, embarrassment, and Responding to the Breach of Personally
inconvenience, or unfairness to any Identifiable Information’’ (May 22, 2007). N. Records Accuracy Assessments
individual on whom information is Using established criteria, if in the event of DMDC estimates that at least 99% of the
maintained. a breach of PII within its control, DoD information in the finder file is accurate
3. Data must be protected at the Moderate determines that the risk of harm to affected based on their operational experience. USPS
system certification criticality level according individuals or to the agency requires Payroll is a highly reliable source of
to Federal Information Processing Standards notification to affected individuals and/or statistical data on the Postal Service
(FIPS) Publication 199, Standards for other remedies, the DoD will carry out these workforce. However, accuracy and
Security Categorization of Federal remedies without cost to the Postal Service. completeness of each data element within the
Information and Information Systems. USPS and DoD will also comply with the individual records that comprise this
4. DoD and USPS have completed the personally identifiable information (PII) aggregate are not conclusive. Findings
security authorization process and the breach reporting and security requirements emanating from individual records warrant
certification and accreditation process as required by OMB M–06–19, ‘‘Reporting further examination and verification as to its
respectively within the last 3 years, using the Incidents Involving Personally Identifiable accuracy, timeliness, and completeness with
required NIST guidance, and have an Information and Incorporating the Cost for the data subject.
Authorization to Operate (ATO) and Security in Agency Information Technology
accreditation letter with the appropriate Investments’’, and OMB M–15–01, ‘‘Fiscal O. Reimbursements and Funding
signatures. Year 2014–2015 Guidance on Improving Expenses incurred by this data exchange
5. FISMA requirements apply to all Federal Federal Information Security and Privacy will not involve any payments or
contractors, organizations, or entities that Management Practices’’. reimbursements between USPS and DoD.
rmajette on DSK2TPTVN1PROD with NOTICES

possess or use Federal information, or that 2. USPS will follow USPS breach
operate, use, or have access to Federal notification policies and related procedures P. Approval and Duration of Agreement
information systems on behalf of an agency. referenced in section K(1)(c): USPS Response 1. This matching agreement, as signed by
DoD and USPS agree that they are Plan for Information Breaches Involving representatives of both agencies and
responsible for oversight and compliance of Personal Information. approved by the respective agency’s Data
their own contractors and agents. DoD and 3. USPS and DoD also agree to notify each Integrity Boards (DIB), shall be valid for a
USPS each reserve the right to conduct onsite other as soon as possible, but no later than period of 18 months from the effective date
inspections of any contractor or agent who 24 hours, after the discovery of a suspected of the agreement.

VerDate Sep<11>2014 15:05 Aug 17, 2016 Jkt 238001 PO 00000 Frm 00075 Fmt 4703 Sfmt 4703 E:\FR\FM\18AUN1.SGM 18AUN1
Federal Register / Vol. 81, No. 160 / Thursday, August 18, 2016 / Notices 55245

2. When this agreement is approved and FEHB Program. FEHB Program eligibility can United States Postal Service Data Integrity
signed by the Chairpersons of the respective only be obtained from USPS, and without Board
DIBs, the USPS, as the recipient agency, will this information, a determination of
The respective DIBs having reviewed this
submit the agreement and the proposed continued eligibility cannot be made.
public notice of the match as attachments in Matching must occur regardless of the agreement and finding that it complies with
duplicate via a transmittal letter to OMB and associated cost or anticipated benefits. applicable statutory and regulatory
Congress for review. The time period for Accordingly, the cost benefit is waived. guidelines signify their respective approval
review begins as of the date of the transmittal thereof by the signature of the officials
letter. R. Comptroller General appearing below.
3. USPS will forward the public notice of The Comptroller General may have access Thomas J. Marshall, General Counsel and
the proposed matching program for to all records of the USPS that the Executive Vice President, Chairperson, Data
publication in the Federal Register, in Comptroller General deems necessary in Integrity Board, United States Postal Service.
accordance with section 552(a)(e)(12) of Title order to monitor or verify compliance with
the agreement. [FR Doc. 2016–19710 Filed 8–17–16; 8:45 am]
5 U.S.C., the transmittal letter to OMB and
Congress. The matching notice will clearly S. Persons To Contact
BILLING CODE 7710–12–P
identify the record systems and category of
records being used and state that the program The contacts on behalf of DoD are: Ms.
is subject to review by the OMB and Cindy Allard, Chief, Privacy, Civil Liberties,
Congress. A copy of the published notice and Transparency Division, ODCMO,
Directorate For Oversight And Compliance
SECURITIES AND EXCHANGE
shall be provided to the DoD. COMMISSION
4. The effective date of the matching 4800 Mark Center Drive, Attn: DPCLTD,
agreement and date when matching may Mailbox# 24, Alexandria, VA 22350–1700,
actually begin shall be at the expiration of the (703) 571–0070; Mr. Matthew Dubois, Deputy [Release No. 34–78567; File No. SR–
40 day review period for OMB and Congress, Assistant Secretary of Defense (Reserve NASDAQ–2016–115]
or 30 days after publication of the matching Integration), 1500 Defense Pentagon,
notice in the Federal Register, whichever is Washington DC 20301–1150, (703) 693–2232; Self-Regulatory Organizations; The
later. The parties to this agreement may Ms. Dena Colburn, DEERS Division, Defense
Manpower Data Center, DoD Center NASDAQ Stock Market LLC; Notice of
assume OMB and Congressional concurrence Filing and Immediate Effectiveness of
if no comments are received within 40 days Monterey Bay, 400 Gigling Rd., Seaside, CA.
of the date of the transmittal letter. Both the 93955–6771, (831) 583–2400 x4332; DMDC Proposed Rule Change To Amend
40 day OMB and Congressional review Security and Incident Response: Donna Nasdaq Rule 7018
Naulivou, IA Branch Chief, Defense
period, and the mandatory 30 day public
Manpower Data Center, 400 Gigling Road, August 12, 2016.
comment period for the Federal Register
Seaside, CA 93955–6771, 831–583–4159,
publication of the notice will run Pursuant to Section 19(b)(1) of the
donna.m.maulivou.civ@mail.mil.The contact
concurrently. Securities Exchange Act of 1934
on behalf of USPS is: Ms. Ms. Erica Hayton,
5. This agreement may be renewed for 12 (‘‘Act’’),1 and Rule 19b–4 thereunder,2
Manager Benefits and Wellness Program, 475
months after the initial agreement period as
L’Enfant Plaza SW., Washington DC 20260– notice is hereby given that on August
long as the statutory requirement for the data
4101, (202) 268–3735, (202) 268–3337 fax, 10, 2016, The NASDAQ Stock Market
match exists, subject to the Privacy Act,
Erica.m.hayton@usps.gov;Ms. Christine LLC (‘‘Nasdaq’’ or ‘‘Exchange’’) filed
including certification by the participating
Harris, Headquarters Payroll Accountant,
agencies to the responsible DIBs that: 2825 Lone Oak Parkway, Eagan, MN 55121– with the Securities and Exchange
a. The matching program will be 9500, (651) 406–2128, (651) 406–1212 fax, Commission (‘‘SEC’’ or ‘‘Commission’’)
conducted without change, and christine.a.harris@usps.gov;USPS Security a proposed rule change as described in
b. The matching program has been and Incident Response: USPS Computer
conducted in compliance with the original
Items I, II and III below, which Items
Incident Response Team, 1–866–877–7247, have been prepared by the Exchange.
agreement. USPSCIRT@usps.gov.
6. This agreement may be modified at any The Commission is publishing this
time by a written modification to this T. Approvals notice to solicit comments on the
agreement. Any modification shall satisfy Department of Defense Program Officials proposed rule change from interested
both parties and shall be approved by the DIB persons.
of each agency. In addition, any modification The authorized program officials, whose
signatures appear below, accept and
shall comply with the Privacy Act of 1974,
expressly agree to the terms and conditions
I. Self-Regulatory Organization’s
as amended, as well as guidance issued by Statement of the Terms of the Substance
expressed herein, confirm that no verbal
the Office of Management and Budget. of the Proposed Rule Change
agreements of any kind shall be binding or
7. This agreement may be terminated at
recognized, and hereby commit their
any time with the consent of both parties. If Nasdaq is proposing to amend Nasdaq
respective organizations to the terms of this
either party does not want to continue this
agreement. Rule 7018(a) to add a new credit tier for
program, it should notify the other party of
its intention not to continue at least 90 days
Matthew Dubois, Deputy Assistant a combination of accessing and
Secretary of Defense, (Reserve Affairs); Mary providing liquidity in securities of all
before the end of the then current period of
Snavely-Dixon, Director, Defense Manpower three Tapes.3
the agreement. Either party may unilaterally
Data Center
terminate this agreement upon written notice The text of the proposed rule change
to the other party requesting termination, in Department of Defense Data Integrity Board
which case the termination shall be effective
is available at
The respective DIBs having reviewed this
90 days after the date of the notice or at a nasdaq.cchwallstreet.com, at Nasdaq’s
agreement and finding that it complies with
later date specified in the notice provided the applicable statutory and regulatory principal office, and at the
expiration date does not exceed the original guidelines signify their respective approval Commission’s Public Reference Room.
or the extended completion date of the thereof by the signature of the officials
rmajette on DSK2TPTVN1PROD with NOTICES

match. appearing below. 1 15 U.S.C. 78s(b)(1).
Q. Waiver of Cost Benefit Analysis Mr. Joo Y. Chung, Chair, Defense Data 2 17 CFR 240.19b–4.
Integrity Board, Department of Defense 3 There are three Tapes, which are based on the
The purpose of this matching agreement is listing venue of the security: Tape C securities are
to verify eligibility of Service members United States Postal Service Program Official
Nasdaq-listed; Tape A securities are New York
enrolling or enrolled in the TRS or the TRR Janine Castornina, (A) Chief Privacy Stock Exchange (‘‘NYSE’’)-listed; and Tape B
Programs. By statute, such coverage may be Officer, Secretary, Data Integrity Board, securities are listed on exchanges other than Nasdaq
provided if the person is not eligible for the United States Postal Service. and NYSE.

VerDate Sep<11>2014 15:05 Aug 17, 2016 Jkt 238001 PO 00000 Frm 00076 Fmt 4703 Sfmt 4703 E:\FR\FM\18AUN1.SGM 18AUN1
Document Created: 2016-08-17 23:46:03
Document Modified: 2016-08-17 23:46:03
Category		Regulatory Information
Collection		Federal Register
sudoc Class		AE 2.7: GS 4.107: AE 2.106:
Publisher		Office of the Federal Register, National Archives and Records Administration
Section		Notices
Action		Notice of Computer Matching Program--United States Postal Service and the Defense Manpower Data Center, Department of Defense.
Dates		The matching program will begin on the effective date of the Agreement. The effective date is the expiration of a 40-day review period by Office of Management and Budget (OMB) and Congress or 30 days after the date of publication of this notice, whichever is later. The matching program will be valid for a period of 18 months after this date.
Contact		Janine Castorina, Chief Privacy Officer, (202) 268-3069 or [email protected]
FR Citation		81 FR 55241