81 FR 57912 - Privacy Act of 1974; Notice of an Updated System of Records of Records

GENERAL SERVICES ADMINISTRATION

Federal Register Volume 81, Issue 164 (August 24, 2016)

Page Range		57912-57914
FR Document		2016-20191
GSA proposes a new system of records subject to the Privacy Act of 1974, as amended, 5 U.S.C. 552a.
Federal Register, Volume 81 Issue 164 (Wednesday, August 24, 2016)
[Federal Register Volume 81, Number 164 (Wednesday, August 24, 2016)]
[Notices]
[Pages 57912-57914]
From the Federal Register Online  [www.thefederalregister.org]
[FR Doc No: 2016-20191]


-----------------------------------------------------------------------

GENERAL SERVICES ADMINISTRATION

[Notice-ISP-2016-02; Docket 2016-0002; Sequence 22]


Privacy Act of 1974; Notice of an Updated System of Records of 
Records

AGENCY: General Services Administration (GSA).

ACTION: Notice; New system.

-----------------------------------------------------------------------

SUMMARY: GSA proposes a new system of records subject to the Privacy 
Act of 1974, as amended, 5 U.S.C. 552a.

DATES: Effective: September 23, 2016.

ADDRESSES: GSA Privacy Act Officer (ISP), General Services 
Administration, 1800 F Street NW., Washington, DC 20405.

FOR FURTHER INFORMATION CONTACT: Call or email the GSA Privacy Act 
Officer: Telephone 571-388-6570; email [email protected].

SUPPLEMENTARY INFORMATION: GSA proposes to establish a new system of 
records subject to the Privacy Act of 1974, 5 U.S.C. 552a. The system 
is a citizen-centric platform for delivering government services 
through a centralized single sign-on platform. The platform will 
leverage personal information to provide identity proofing to partner 
agencies, as well as data and resources associated with the user's 
account. Based on a successful user login and identity proofing, the 
partner agency will grant access to the user.
    In order to facilitate access, information must be collected to 
authenticate an individual's identity at the requisite level of 
assurance for the purpose of obtaining a credential or electronically 
authorizing access to an agency application or service. Identity 
proofing is the process by which an identity service provider collects 
and verifies personally identifiable information (PII) about an 
individual for the purpose of issuing credentials to that individual.
    Third-party identity service providers used by Login.gov use a 
variety of verification techniques. Users will be authenticated and 
proofed at the level required by the partner agency for accessing 
specific services and records. When a user attempts to access an agency 
service or record, the individual will be directed to Login.gov. The 
information requested by the system and asserted back to the agency 
will be only what is necessary to establish Level of Access (LOA)1 or 
LOA3 as appropriate. For access to services or records that require 
LOA1, the user will

[[Page 57913]]

be asked for email, password, and phone number.
    For access to services or records that require LOA3, the user will 
be asked for PII that will be used for identity proofing, and then 
maintained in the system. Attributes requested for the proofing process 
are full name, date of birth, address, phone number, and social 
security number (SSN). The identity proofer will also ask the user 
credit and financial related questions. Login.gov does not have access 
to or retain the commercial identity verification information, 
questions asked of a user or the responses provided thereto.
    Once proofed, the attribute bundle will be given a meaningless, but 
unique identifier number (MBUN) to identify the user in the system. The 
MBUN and attribute bundle will be asserted to the partner agency. The 
partner agency is granted access to user information only when the user 
logs in or specifically gives permission to transmit their information. 
The information in the system is contributed voluntarily by the user 
and cannot be accessed by the government without explicit consent of 
the user, except as provided in this notice.
    Information is not shared between government agencies, except when 
the user gives explicit consent to share his or her information, except 
as provided in this notice.

Pranjali Desai,
Director, Office of Information Management, General Services 
Administration.
GSA/GOVT-10

SYSTEM NAME:
    Login.gov.

SYSTEM LOCATION:
    The system is maintained for GSA under contract. Contact the System 
Manager for additional information.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    Anyone is able to create an account.

CATEGORIES OF RECORDS IN THE SYSTEM:
    Records may include, but are not limited to: Biographical data such 
as name, address, email, password, phone number, birth date, social 
security number. Use of the system, and contribution of personal 
information, is completely voluntary.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    E-Government Act of 2002 (P.L. 107-347, 44 U.S.C. 3501 note)

PURPOSES:
    To enable users to control how government interacts with them and 
their personal information, and to aid and assist users in interacting 
with the government. Users interacting with local, state, or federal 
agency developed applications may be asked to authorize the application 
to access system resources, such as their personal profile information. 
If a user authorizes use of his or her information, the agency 
application will be given programmatic access to the user's account 
resources. Profile, usage, and system information may be accessed by 
system managers, technical support and designated analysts in the 
course of their official duties.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM INCLUDING CATEGORIES 
OF USERS AND THE PURPOSES OF SUCH USES:
    Information from this system also may be disclosed as a routine 
use:
    a. In any legal proceeding, where pertinent, to which GSA, a GSA 
employee, or the United States is a party before a court or 
administrative body.
    b. To a Federal, State, local, or foreign agency responsible for 
investigating, prosecuting, enforcing, or carrying out a statute, rule, 
regulation, or order when GSA becomes aware of a violation or potential 
violation of civil or criminal law or regulation.
    c. To a Member of Congress or his or her staff on behalf of and at 
the request of the individual who is the subject of the record.
    d. To the Office of Personnel Management (OPM), the Office of 
Management and Budget (OMB), and the Government Accountability Office 
(GAO) in accordance their responsibilities for evaluating Federal 
programs.
    e. To an expert, consultant, or contractor of GSA in the 
performance of a Federal duty to which the information is relevant.
    f. To the National Archives and Records Administration (NARA) for 
records management purposes.
    g. To a Federal agency in connection with the hiring or retention 
of an employee; the issuance of a security clearance; the reporting of 
an investigation; the letting of a contract; or the issuance of a 
grant, license, or other benefit to the extent that the information is 
relevant and necessary to a decision.
    h. To appropriate agencies, entities, and persons when (1) the 
Agency suspects or has confirmed that the security or confidentiality 
of information in the system of records has been compromised; (2) The 
Agency has determined that as a result of the suspected or confirmed 
compromise there is a risk of harm to economic or property interests, 
identity theft or fraud, or harm to the security or integrity of this 
system or other systems or programs (whether maintained by GSA or 
another agency or entity) that rely upon the compromised information; 
and (3) the disclosure made to such agencies, entities, and persons is 
reasonably necessary to assist in connection with GSA's efforts to 
respond to the suspected or confirmed compromise and prevent, minimize, 
or remedy such harm.
    i. To federal, state, or local government agencies or entities for 
purposes of complying with any legally authorized order or request of 
such an entity that is made in carrying out the entity's official 
responsibilities.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING 
AND DISPOSING OF RECORDS IN THE SYSTEM:
Storage:
    All records are stored electronically in a database. Personally 
Identifiable Information (PII) is encrypted.

RETRIEVABILITY:
    Records are retrieved using an authorization protocol. A user of 
the system grants explicit authorization to an application or 
government agency to access his or her profile.

SAFEGUARDS:
    Access to the database is maintained behind a firewall certified in 
accordance with National Institute of Standards and Technology 
standards and information in the database is encrypted.
    Records access is limited to authorized individuals and protected 
with two-factor authentication, and databases are behind a firewall. 
PII is encrypted at rest, and all transmissions of any information over 
external networks are encrypted. All passwords, encryption algorithms 
and firewalls are compliant with National Institute of Standards and 
Technology standards.

RETENTION AND DISPOSAL:
    System records are retained and disposed of according to GSA 
records maintenance and disposition schedules and the requirements of 
the National Archives and Records Administration. The initial 
implementation of this has a limited scope of users. The option for 
users to delete their own information will be functional in a future 
version of the application. Physical records are disposed of by cross-
cut shredding or burning as scheduled in the handbook, GSA Records 
Maintenance and Disposition System (CIO P. 1820.1).

SYSTEM MANAGER AND ADDRESS:
    Director, Login.gov, General Services Administration, 1800 F Street 
NW.,

[[Page 57914]]

Washington, DC 20405; ATTN: https://www.login.gov.

NOTIFICATION PROCEDURE:
    Individuals or users maintain their own information. Inquires can 
be made via the Web site at https://login.gov/ or at the above address 
under `System Manager and Address'.

RECORD ACCESS PROCEDURES:
    Individuals or users wishing to access their own records may do so 
by password or by contacting the system administrator at the above 
address.

CONTESTING RECORD PROCEDURES:
    Individuals or users of the system may amend their own records 
online.

RECORD SOURCE CATEGORIES:
    The sources for information in the system are the individuals (or 
system users) for whom the records are maintained, and third-party 
applications which the user has authorized to contribute information to 
his or her account.

[FR Doc. 2016-20191 Filed 8-23-16; 8:45 am]
 BILLING CODE 6820-34-P
57912 Federal Register / Vol. 81, No. 164 / Wednesday, August 24, 2016 / Notices

Administration, Regulatory Secretariat become standard practice in many GENERAL SERVICES
Division (MVCB), 1800 F Street NW., industries, and companies are ADMINISTRATION
Washington, DC 20405. ATTN: Ms. increasingly asking their own suppliers
Flowers/IC 3090–00XX, Alliant2 about their GHG management practices. [Notice-ISP–2016–02; Docket 2016–0002;
Greenhouse Gas Disclosure. More than 4,000 companies provided Sequence 22]
Instructions: Please submit comments public disclosure through third-party
only and cite Information Collection Privacy Act of 1974; Notice of an
organization CDP (formerly the Carbon Updated System of Records of
3090–00XX; Alliant2 Greenhouse Gas Disclosure Project) in 2015. Performing
Disclosure, in all correspondence Records
a GHG inventory provides insight into
related to this collection. Comments operations and opportunities for energy AGENCY: General Services
received generally will be posted Administration (GSA).
and operational savings that can result
without change to http://
in both environmental and financial ACTION: Notice; New system.
www.regulations.gov, including any
benefits.
personal and/or business confidential SUMMARY: GSA proposes a new system
information provided. To confirm The Allliant2 GHG disclosure of records subject to the Privacy Act of
receipt of your comment(s), please requirement will require the 1974, as amended, 5 U.S.C. 552a.
check www.regulations.gov, unrestricted (large and medium-sized)
DATES: Effective: September 23, 2016.
approximately two to three days after Alliant2 contractors to inventory, and
submission to verify posting (except publicly disclose their operational GHG ADDRESSES: GSA Privacy Act Officer
allow 30 days for posting of comments emissions, set targets for reducing those (ISP), General Services Administration,
submitted by mail). emissions, and report progress toward 1800 F Street NW., Washington, DC
20405.
FOR FURTHER INFORMATION CONTACT: meeting their targets. This will be an
Dana Arnold, Director, Federal annual requirement. FOR FURTHER INFORMATION CONTACT: Call
Acquisition Service Office of or email the GSA Privacy Act Officer:
Acquisition Management, Special B. Annual Reporting Burden Telephone 571–388–6570; email
Programs Branch at telephone 703–605– Respondents: 60. gsa.privacyact@gsa.gov.
0534 or via email to dana.arnold@ SUPPLEMENTARY INFORMATION: GSA
gsa.gov. Responses per Respondent: 1.
proposes to establish a new system of
SUPPLEMENTARY INFORMATION:
Total Annual Responses: 60. records subject to the Privacy Act of
Hours per Response: 80. 1974, 5 U.S.C. 552a. The system is a
A. Purpose citizen-centric platform for delivering
Total Burden Hours: 4800.
President Obama has made government services through a
Greenhouse Gas (GHG) emissions C. Public Comments centralized single sign-on platform. The
reduction nationwide and in the Federal platform will leverage personal
community a priority. The President’s Public comments are particularly information to provide identity proofing
Executive Order 13693, Planning for invited on: Whether this collection of to partner agencies, as well as data and
Federal Sustainability in the Next information is necessary, whether it will resources associated with the user’s
Decade, published in the Federal have practical utility; whether our account. Based on a successful user
Register at 80 FR 15871, on March 25, estimate of the public burden of this login and identity proofing, the partner
2015], requires the seven largest collection of information is accurate, agency will grant access to the user.
procuring agencies to implement and based on valid assumptions and In order to facilitate access,
procurements that take into methodology; ways to enhance the information must be collected to
consideration contractor GHG emissions quality, utility, and clarity of the authenticate an individual’s identity at
and GHG management practices. information to be collected; and ways in the requisite level of assurance for the
GSA has selected the Alliant2 which we can minimize the burden of purpose of obtaining a credential or
Government-wide Acquisition Contract the collection of information on those electronically authorizing access to an
(GWAC) acquisition for inclusion of who are to respond, through the use of agency application or service. Identity
contractor GHG emissions disclosure appropriate technological collection proofing is the process by which an
requirements. Alliant, GSA’s premier techniques or other forms of information identity service provider collects and
enterprise GWAC, provides flexible technology. verifies personally identifiable
access to customized IT solutions from information (PII) about an individual for
a large, diverse pool of industry Obtaining Copies of Proposals: the purpose of issuing credentials to
partners. Alliant2 offers both large and Requesters may obtain a copy of the that individual.
small contractors. It is GSA’s intent to information collection documents from Third-party identity service providers
require the large (unrestricted) Alliant2 the General Services Administration, used by Login.gov use a variety of
contractors to inventory and publicly Regulatory Secretariat Division (MVCB), verification techniques. Users will be
disclose their operational GHG 1800 F Street NW., Washington, DC authenticated and proofed at the level
emissions, set targets for reducing those 20405, telephone 202–501–4755. Please required by the partner agency for
emissions, and disclose progress toward cite OMB Control No. 3090–00XX, accessing specific services and records.
meeting their targets. Of the current Alliant2 Greenhouse Gas Disclosure, in When a user attempts to access an
Alliant2 contractors, approximately 40 agency service or record, the individual
mstockstill on DSK3G9T082PROD with NOTICES

all correspondence.
percent already publicly disclose their will be directed to Login.gov. The
Dated: August 18, 2016.
GHG emissions in response to requests information requested by the system
David A. Shive, and asserted back to the agency will be
from their non-government customers,
investors, insurers, and corporate Chief Information Officer. only what is necessary to establish Level
sustainability policies. [FR Doc. 2016–20314 Filed 8–23–16; 8:45 am] of Access (LOA)1 or LOA3 as
Public disclosure of GHG emissions BILLING CODE 6820–34–P appropriate. For access to services or
and GHG reduction goals or targets has records that require LOA1, the user will

VerDate Sep<11>2014 20:16 Aug 23, 2016 Jkt 238001 PO 00000 Frm 00036 Fmt 4703 Sfmt 4703 E:\FR\FM\24AUN1.SGM 24AUN1
57914 Federal Register / Vol. 81, No. 164 / Wednesday, August 24, 2016 / Notices

Washington, DC 20405; ATTN: https:// Programs Division, Office of Civil Federal financial assistance is extended
www.login.gov. Rights, at telephone 202–603–1645 or under laws administered in whole, or in
via email to evelyn.britton@gsa.gov. part, by GSA.
NOTIFICATION PROCEDURE:
ADDRESSES: Submit comments regarding These mission responsibilities
Individuals or users maintain their
own information. Inquires can be made this burden estimate or any other aspect generate the requirement to request and
via the Web site at https://login.gov/ or of this collection of information, obtain certain data from recipients of
at the above address under ‘System including suggestions for reducing this Federal surplus property for the purpose
Manager and Address’. burden to: Office of Information and of determining compliance, such as the
Regulatory Affairs of OMB, Attention: number of individuals, based on race
RECORD ACCESS PROCEDURES: Desk Officer for GSA, Room 10236, and ethnic origin, of the recipient’s
Individuals or users wishing to access NEOB, Washington, DC 20503. eligible and actual serviced population;
their own records may do so by Additionally submit a copy to GSA by race and national origin of those denied
password or by contacting the system any of the following methods: participation in the recipient’s
administrator at the above address. • Regulations.gov: http:// program(s); non-English languages
www.regulations.gov. Submit comments encountered by the recipient’s
CONTESTING RECORD PROCEDURES:
via the Federal eRulemaking portal by program(s) and how the recipient is
Individuals or users of the system searching the OMB control number. addressing meaningful access for
may amend their own records online. Select the link ‘‘Submit a Comment’’ individuals that are Limited English
RECORD SOURCE CATEGORIES: that corresponds with ‘‘Information Proficient; whether there has been
The sources for information in the Collection 3090–XXXX, complaints or lawsuits filed against the
system are the individuals (or system Nondiscrimination in Federal Financial recipient based on prohibited
users) for whom the records are Assistance Programs, GSA 3702’’. discrimination and whether there has
maintained, and third-party Follow the instructions provided at the been any findings; and whether the
applications which the user has ‘‘Submit a Comment’’ screen. Please recipient’s facilities are accessible to
authorized to contribute information to include your name, company name (if qualified individuals with disabilities.
his or her account. any), and ‘‘Information Collection 3090–
XXXX, Nondiscrimination in Federal B. Annual Reporting Burden
[FR Doc. 2016–20191 Filed 8–23–16; 8:45 am]
Financial Assistance Programs, GSA Respondents: 1,200.
BILLING CODE 6820–34–P
3702’’ on your attached document.
• Mail: General Services Responses per Respondent: 1.
Administration, Regulatory Secretariat Total Responses: 1,200.
GENERAL SERVICES
Division (MVCB), 1800 F Street NW., Hours per Response: 2.
ADMINISTRATION
Washington, DC 20405. ATTN: Ms.
[OMB Control No. 3090–XXXX; Docket Flowers/IC 3090–0228, Total Burden Hours: 2,400.
2016–0001; Sequence 9] Nondiscrimination in Federal Financial C. Public Comments
Assistance Programs, GSA 3702.
Submission for OMB Review; Instructions: Please submit comments Public comments are particularly
Nondiscrimination in Federal Financial only and cite Information Collection invited on: Whether this collection of
Assistance Programs, GSA Form 3702 3090–XXXX, Nondiscrimination in information will have practical utility;
AGENCY: Office of Civil Rights, General Federal Financial Assistance Programs, whether our estimate of the public
Services Administration (GSA). GSA 3702, in all correspondence related burden of this collection of information
ACTION: Notice of request for comments to this collection. Comments received is accurate, and based on valid
regarding a new request for an OMB generally will be posted without change assumptions and methodology; ways to
clearance. to http://www.regulations.gov, including enhance the quality, utility, and clarity
any personal and/or business of the information to be collected; and
SUMMARY: Under the provisions of the confidential information provided. To ways in which we can minimize the
Paperwork Reduction Act, the confirm receipt of your comment(s), burden of the collection of information
Regulatory Secretariat Division will be please check www.regulations.gov, on those who are to respond, through
submitting to the Office of Management approximately two to three days after the use of appropriate technological
and Budget (OMB) a request to review submission to verify posting (except collection techniques or other forms of
and approve a new information allow 30 days for posting of comments information technology.
collection requirement regarding OMB submitted by mail). Obtaining Copies of Proposals:
Control No: 3090–XXXX; SUPPLEMENTARY INFORMATION: Requesters may obtain a copy of the
Nondiscrimination in Federal Financial
A. Purpose information collection documents from
Assistance Programs, GSA 3702. This
the General Services Administration,
information is needed to facilitate GSA has mission responsibilities Regulatory Secretariat Division (MVCB),
nondiscrimination in GSA’s Federal related to monitoring and enforcing 1800 F Street NW., Washington, DC
Financial Assistance Programs, compliance with Federal civil rights 20405, telephone 202–501–4755. Please
consistent with Federal civil rights laws laws and regulations that apply to cite OMB Control No. 3090–XXXX,
and regulations that apply to recipients Federal financial assistance programs Nondiscrimination in Federal Financial
of Federal financial assistance. A notice administered by GSA. Specifically,
mstockstill on DSK3G9T082PROD with NOTICES

Assistance Programs, GSA 3702, in all
was published in the Federal Register at those laws provide that no person on correspondence.
81 FR 36541 on June 7, 2016. No the ground of race, color, national
comments were received. Dated: August 18, 2016.
origin, disability, sex or age shall be
DATES: Submit comments on or before: excluded from participation in, be David A. Shive,
September 23, 2016. denied the benefits of, or be otherwise Chief Information Officer.
FOR FURTHER INFORMATION CONTACT: subjected to discrimination under any [FR Doc. 2016–20319 Filed 8–23–16; 8:45 am]
Evelyn Britton, Director, External program in connection with which BILLING CODE 6820–34–P

VerDate Sep<11>2014 20:16 Aug 23, 2016 Jkt 238001 PO 00000 Frm 00038 Fmt 4703 Sfmt 9990 E:\FR\FM\24AUN1.SGM 24AUN1
Document Created: 2016-08-24 03:03:06
Document Modified: 2016-08-24 03:03:06
Category		Regulatory Information
Collection		Federal Register
sudoc Class		AE 2.7: GS 4.107: AE 2.106:
Publisher		Office of the Federal Register, National Archives and Records Administration
Section		Notices
Action		Notice; New system.
Dates		Effective: September 23, 2016.
Contact		Call or email the GSA Privacy Act Officer: Telephone 571-388-6570; email [email protected]
FR Citation		81 FR 57912