82_FR_61266 82 FR 61020 - Privacy Act of 1974; System of Records: Understanding Rapid Re-Housing Study

82 FR 61020 - Privacy Act of 1974; System of Records: Understanding Rapid Re-Housing Study

DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT

Federal Register Volume 82, Issue 246 (December 26, 2017)

Page Range61020-61023
FR Document2017-27767

For the Understanding Rapid Re-housing Study, the Department of Housing and Urban Development's (HUD) Office of Policy Development and Research (PD&R) is partnering with an external research team to collect new data to analyze the current status of the rapid re-housing (RRH) programs and the experiences of RRH participants. The project will provide HUD with a deeper understanding of how RRH programs operate and the experiences of households that use them. The Understanding Rapid Re-housing Study will synthesize existing research on RRH programs, extend the analysis of data from the Family Options Study (2016), provide a detailed examination of all rapid re-housing programs nationwide, and conduct qualitative research with a small sample of families and individuals who receive RRH. The study will collect contact information from Continuums of Care (CoCs) for RRH programs, as well as personal information from participating RRH households. In accordance with the Privacy Act of 1974, HUD/PD&R proposes to establish a new system of records titled, ``HUD/Understanding Rapid Re- housing.'' This system of records allows HUD/PD&R to collect and maintain records on rapid re-housing program participants who volunteer to participate in the study as well as Continuums of Care and rapid re- housing program staff. This newly established system will be included in HUD's inventory of systems.

Federal Register, Volume 82 Issue 246 (Tuesday, December 26, 2017) 
[Federal Register Volume 82, Number 246 (Tuesday, December 26, 2017)]
[Notices]
[Pages 61020-61023]
From the Federal Register Online  [www.thefederalregister.org]
[FR Doc No: 2017-27767]


-----------------------------------------------------------------------

DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT

[Docket No. FR-6009-N-06]


Privacy Act of 1974; System of Records: Understanding Rapid Re-
Housing Study

AGENCY: Office of Policy Development and Research, HUD.

ACTION: Notice of a new system of records.

-----------------------------------------------------------------------

SUMMARY: For the Understanding Rapid Re-housing Study, the Department 
of Housing and Urban Development's (HUD) Office of Policy Development 
and Research (PD&R) is partnering with an external research team to 
collect new data to analyze the current status of the rapid re-housing 
(RRH) programs and the experiences of RRH participants. The project 
will provide HUD with a deeper understanding of how RRH programs 
operate and the experiences of households that use them. The 
Understanding Rapid Re-housing Study will synthesize existing research 
on RRH programs, extend the analysis of data from the Family Options 
Study (2016), provide a detailed examination of all rapid re-housing 
programs nationwide, and conduct qualitative research with a small 
sample of families and individuals who receive RRH. The study will 
collect contact information from Continuums of Care (CoCs) for RRH 
programs, as well as personal information from participating RRH 
households.
    In accordance with the Privacy Act of 1974, HUD/PD&R proposes to 
establish a new system of records titled, ``HUD/Understanding Rapid Re-
housing.'' This system of records allows HUD/PD&R to collect and 
maintain records on rapid re-housing program participants who volunteer 
to participate in the study as well as Continuums of Care and rapid re-
housing program staff. This newly established system will be included 
in HUD's inventory of systems.

DATES: January 25, 2018.

ADDRESSES: Interested persons are invited to submit comments regarding 
this notice to the Rules Docket Clerk, Office of General Counsel, 
Department of Housing and Urban Development, 451 Seventh Street SW, 
Room 10276, Washington, DC 20410. Comments may be filed electronically 
by accessing: www.regulations.gov. Regulations.gov provides clear 
instructions on how to submit a public comment on a rule. 
Communications should refer to the above docket number and title. Faxed 
comments are not accepted. A copy of each communication submitted will 
be available for public inspection and copying between 8 a.m. and 5 
p.m. weekdays at the above address.

FOR FURTHER INFORMATION CONTACT: For general questions please contact: 
The Privacy Office, 451 Seventh Street SW, Room 10139, Washington, DC 
20410, telephone number 202-708-3054. Individuals who are hearing- and 
speech-impaired may access this number via TTY by calling the Federal 
Relay Service at 800-877-8339 (this is a toll-free number).

SUPPLEMENTARY INFORMATION:

I. Background

    In accordance with the Privacy Act of 1974, 5 U.S.C. 552a, HUD/PD&R 
proposes to establish a new HUD system of records titled ``HUD/
Understanding Rapid Re-housing.''
    The new system--the Understanding Rapid Re-housing study--is not 
required by a new rulemaking being published.
    The Understanding Rapid Re-housing (RRH) Study is being conducted 
by Abt Associates, an independent research firm, under the authority of 
the Secretary of HUD, through the Office of Policy Development and 
Research. The study is meant to undertake programs of research, 
studies, testing, and demonstration related to HUD's mission and 
programs (12 U.S.C. 1701z-1 et seq.).
    This study provides an opportunity to address unanswered questions 
about RRH assistance and to gain an understanding of the status of RRH 
programs nationwide, as well as the experiences of RRH participants. At 
the program level, the new data collection and analysis will assess the 
current scale of RRH, document the predominant models in place for RRH 
programs, determine the extent to which programs use progressive 
engagement service approaches, and examine the way RRH programs 
function in rental markets with varying costs and vacancy rates.
    Researchers will collect program-level data from Continuums of Care 
(CoCs) and RRH programs via a web-based survey and will subsequently 
collect further data through in-depth telephone interviews with several 
RRH programs. This data will be analyzed by Abt Associates and reported 
to HUD in a final report. Abt study staff will conduct in-person 
interviews and meetings with 16 RRH program participants. Data from 
these meetings will be collected via electronic recordings and paper 
protocols, and analyzed and reported by the researchers in the final 
report to HUD. All data will be de-identified for reporting purposes, 
so no person or program will be able to be identified in the final 
published study.
    This study has undergone Institutional Review Board (IRB) and 
Information Security reviews to identify privacy risks, compliance, and 
legal risks to HUD.
    Consistent with HUD's information-sharing mission, information 
stored in the HUD/Understanding Rapid Re-housing system may be shared 
with other HUD components that have a need to know the information to 
carry out their national security, law enforcement, immigration, 
intelligence, or other homeland security functions. In addition, 
information may be shared with appropriate federal, state, local, 
tribal, territorial, foreign, or international government agencies 
consistent with the routine uses set forth in this system of records 
notice.

SYSTEM NAME AND NUMBER:
    HUD/Understanding Rapid Re-housing--

SECURITY CLASSIFICATION:
    Unclassified.

SYSTEM LOCATION:
    Abt Associates, 4550 Montgomery Avenue, Suite 800 North, Bethesda, 
MD. A list of additional contractor sites where records under this 
system are maintained is available upon request to the system manager.

SYSTEM MANAGER(S):
    Mindy Ault, Social Science Analyst, Program Evaluation Division, 
U.S. Department of Housing and Urban Development, 451 7th St. SW, Room 
8120, Washington, DC 20410.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    The authority for the collection of the data and the maintenance of 
this system can be found at Sec. 501, 502, Housing and Urban 
Development Act of 1970 (Pub. L. 91-609), 12 U.S.C. 1701z-1, 1701z-2. 
One part of HUD's established mission and responsibilities is to

[[Page 61021]]

monitor family housing conditions and options. To evaluate the 
effectiveness of the programs that affect the conditions and options, 
HUD needs to collect participant data over time which includes the 
necessary contact and tracking information.

PURPOSE(S) OF THE SYSTEM:
    This system is meant to provide HUD with a more in-depth 
understanding of the efficacy of RRH programs nationwide at both the 
program and participant levels.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    Individuals covered by the system are voluntary participants in 
HUD-funded rapid re-housing programs and Continuums of Care and rapid 
re-housing program staff.

CATEGORIES OF RECORDS IN THE SYSTEM:
    The specific types of records collected from study participants and 
maintained will include: Names, birth dates, home addresses, telephone 
numbers, personal email addresses, demographic information, income 
information, housing history, mental and physical health, and family 
status information.

RECORD SOURCE CATEGORIES:
    This project includes five instruments for data collection: (1) Web 
Census for CoCs and Rapid Re-Housing Programs, (2) Interview Guide for 
Rapid Re-Housing Programs, (3) Rapid Re-housing Participant Interview 
Guide, (4) Rapid Re-housing Participant Follow-up Interview Guide, and 
(5) Quarterly Household Tracking Guide for Ethnographic Panel. Of 
these, the first two are program-level data collections and as such 
will include minimal personally identifiable information (PII), 
including only the name and contact information for the CoC 
Collaborative Applicant and RRH program staff person completing the 
survey. The Rapid Re-Housing Participant Interview Guide, Rapid Re-
housing Participant Follow-up Interview Guide, and Quarterly Household 
Tracking Guide will collect information from participants via interview 
questions asked in person and recorded for this study. This information 
will be collected after obtaining written consent regarding 
participation and will be de-identified in the report. All of the data 
collection records containing PII will be destroyed at the end of the 
study period.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND PURPOSES OF SUCH USES:
    In addition to those disclosures generally permitted under 5 U.S.C. 
Section 552a(b) of the Privacy Act, all or a portion of the records or 
information contained in this system may be disclosed outside HUD as a 
routine use pursuant to 5 U.S.C. 552a(b)(3) as follows:
    To appropriate agencies, entities, and persons for disclosures 
compatible with the purpose for which the records in this system were 
collected, as set forth by Appendix I--HUD's Routine Use Inventory 
Notice, 80 FR 81837 (December 31, 2015).
    1. To the National Archives and Records Administration or to the 
General Services Administration for records having enough historical or 
other value to warrant continued preservation by the United States 
Government, or for inspection under Title 44 U.S.C. 2904 and 2906.
    2. To a congressional office from the record of an individual, in 
response to an inquiry from that congressional office made at the 
request of that individual.
    3. To contractors performing or working under a contract with HUD, 
when necessary to accomplish an agency function related to this system 
of records. Disclosure requirements are limited to only those data 
elements considered relevant to accomplishing an agency function. 
Individuals provided information under these routine use conditions are 
subject to Privacy Act requirements and disclosure limitations imposed 
on the Department.
    4. To the Department of Justice (DOJ) when seeking legal advice for 
a HUD initiative or in response to DOJ's request for the information, 
after either HUD or DOJ determine that such information relates to 
DOJ's representation of the United States or any other components in 
legal proceedings before a court or adjudicative body, provided that, 
in each case, the agency also determines prior to disclosure that 
disclosure of the records to DOJ is a use of the information in the 
records that is compatible with the purpose for which HUD collected the 
records. HUD on its own may disclose records in this system of records 
in legal proceedings before a court or administrative body after 
determining that the disclosure of the records to the court or 
administrative body is a use of the information contained in the 
records that is compatible with the purpose for which HUD collected the 
records.
    5. To contractors, grantees, experts, consultants, Federal 
agencies, and non-Federal entities including but not limited to state 
and local governments, with whom HUD has a contract, service agreement, 
grant, or cooperative agreement for statistical analysis to advance the 
goals of the nation's federal strategic plan to prevent and end 
homelessness. The records may not be used to make decisions concerning 
the rights, benefits, or privileges of specific individuals, or 
providers of services with respect to a homeless individual's efforts.
    6. To appropriate agencies, entities, and persons when: (a) HUD 
suspects or has confirmed that the security or confidentiality of 
information in a system of records has been compromised; (b) HUD has 
determined that, as a result of the suspected or confirmed compromise, 
there is a risk of harm to economic or property interests, identity 
theft or fraud, or harm to the security or integrity of systems or 
programs (whether maintained by HUD or another agency or entity) that 
rely upon the compromised information; and (c) the disclosure made to 
such agencies, entities, and persons is reasonably necessary to assist 
in connection with HUD's efforts to respond to the suspected or 
confirmed compromise and prevent, minimize, or remedy such harm for 
purposes of facilitating responses and remediation efforts in the event 
of a data breach.

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
    Abt has implemented full disk encryption (FIPS 140-2 compliant) 
software in our environment to protect the storage of data, as well as 
a file transfer application (also FIPS 140-2 compliant), Huddle, for 
the secure, encrypted transmission of sensitive data such as PII and 
PHI to and from our clients and subcontractors. Huddle offers secure 
content collaboration to share data and is FedRAMP certified. Huddle 
encrypts data in-transit using TLS (128-bit or 256-bit encryption) and 
at rest with 256-bit AES.
    Abt has also implemented anti-malware software in its environment 
and updates definitions daily on each workstation. For boundary 
protection, Abt has implemented Cisco ASA Firewalls.
    Hard copy notes and other materials that are collected as part of 
the ethnographic work in Task 8 will be securely stored in locked file 
cabinets when not in use.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
    During the course of the study, program-level records may be 
retrieved by program name or assigned unique identifier; participant-
level records may be retrieved by assigned unique identifier.

[[Page 61022]]

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
    Abt Associates will retain all data collected over the life of the 
study and any analysis files generated with those data under conditions 
specified in the study protocol. At the end of the contract, Abt will 
destroy all PII per the contract terms. The retention and disposal 
procedures are in keeping with HUD's records management policies as 
described in 44 U.S.C. 3101 and 44 U.S.C. 3303. Abt Associates will 
submit all de-identified data to HUD at the end of the contract. The 
retention and disposal procedures are in keeping with HUD's records 
management policies as described in 44 U.S.C. 3101 and 44 U.S.C. 3303. 
Study participant PII to be retained for the length of the study (and 
then destroyed at the end of the contract period, in October 2019) 
includes the following:

 Name
 Birth date
 Home address
 Telephone number
 Personal email address

    The retention and disposal procedures are in keeping with HUD's 
records management policies as described in section below: 2225.6 REV-
1, Appendix 67, Records Disposition Schedule 67 PD&R, Item No. 5.
    Disposition: Project case files reflecting a complete history of 
each project from initiation through research, development, design, 
testing, and demonstration will be retired to a Federal Records Center 
three years after satisfactory close of the project. Files will be 
destroyed six years after satisfactory close of the project (NARA Job 
NCl-207-78-6, Item 5). https://portal.hud.gov/hudportal/documents/huddoc?id=22256x67ADMH.pdf.

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
    The contractor, Abt Associates, has a dedicated Analytic Computing 
Environment (ACE3) for storing ONLY sensitive information such as PII 
and PHI. Only authorized personnel can access this environment through 
a Virtual Private Network (VPN). Authentication to the system is done 
via Active Directory and DUO multi-factor authentication. Users connect 
to the system via remote desktop sessions (RDS). ACE3 is FISMA and FIPS 
140-2 compliant.
    To ensure data privacy and security, the Abt Confirmit Horizons web 
survey platform that will be used for the CoC and RRH program web 
survey allows for tight control over sampling, respondent recruitment, 
and data acquisition while addressing both data security and 
confidentiality concerns. Confirmit invests considerable time updating 
the software to ensure it has the latest technologies to boost 
security, performance, and reliability. Respondents will access the RRH 
web survey through Abt's website, where they are protected by Abt's 
strict data security system. HTTPS is enforced for transmission of all 
Confirmit Horizons credentials by Abt at the user level. All user 
accounts are named users linked to individual email addresses except 
for a translation account with extremely limited rights that is 
provided by the software vendor. Strong password policies are enforced, 
including minimum length, mixed case, special characters, and a 
password expiry after a set number of days. A password history is also 
kept to prevent passwords from being continuously reused. Accounts are 
locked by the system after 5 consecutive failed login attempts. Upon 
entering the 7-digit PIN assigned by the software, the respondent moves 
to a non-public directory inaccessible through the internet.
    As data are entered, they are stored on a second non-public 
directory accessible only to the Abt system administrator. Partial 
responses are saved in this way. Once respondents finish the census and 
press the ``Submit'' button on the screen, the ID number used to access 
the survey becomes invalid and the instrument cannot be accessed again 
with that number. The SQL server databases that store respondent/
response data are behind the firewall and data can only be accessed 
through the Horizons application by our named users. No application 
users can access the database directly, the servers are only accessible 
by our database administrators. Confirmit surveys are stateless and 
session-less. No user identifiable information is required when 
transmitting information between page submissions. A combination of 
hidden form fields and system generated identifiers can identify a 
respondent and the correct state when moving from page to page. Pages 
use metadata code to prevent them from being cached, and no information 
is stored on a respondent's computer when the browser is closed.
    Abt takes every precaution to ensure that data collected on the 
internet remain both secure and confidential. All Abt data collection 
servers are housed in an AT&T Network Operations Center (NOC) with 
redundant power, expandable bandwidth, and a high level of physical 
security. All study staff are required to sign a confidentiality pledge 
stating that no data will be released to unauthorized personnel. In 
addition, all electronic data for the study are stored on the ACE3 
system (described above).
    Abt complies with the Privacy Act of 1974, Health Insurance 
Portability and Accountability Act of 1996 (HIPAA), and the E-
Government Act of 2002, including Title III: Federal Information 
Security Management Act (FISMA), which covers site security, security 
control documentation, access control, change management, incident 
response, and risk management. Abt has implemented full disk encryption 
(FIPS 140-2 compliant) software in its environment to protect the 
storage of data, as well as a file transfer application (also FIPS 140-
2 compliant), Huddle, for the secure, encrypted transmission of 
sensitive data such as PII and PHI to and from our clients and 
subcontractors. Huddle offers secure content collaboration to share 
data and is FedRAMP certified. Huddle encrypts data in-transit using 
TLS (128-bit or 256-bit encryption) and at rest with 256-bit AES.
    Abt has also implemented anti-malware software in its environment 
and update definitions daily on each workstation. For boundary 
protection, Abt has implemented Cisco ASA Firewalls.
    Hard copy notes and other materials that are collected as part of 
the ethnographic work in Task 8 will be securely stored in locked file 
cabinets when not in use.

RECORD ACCESS PROCEDURES:
    For information, assistance, or inquiry about records, contact 
Marcus Smallwood, Acting, Chief Privacy Officer 451 Seventh Street SW, 
Room 10139, Washington, DC 20410, telephone number (202) 708-3054. When 
seeking records about yourself from this system of records or any other 
Housing and Urban Development (HUD) system of records, your request 
must conform with the Privacy Act regulations set forth in 24 CFR part 
16. You must first verify your identity, meaning that you must provide 
your full name, address, and date and place of birth. You must sign 
your request, and your signature must either be notarized or submitted 
under 28 U.S.C. 1746, a law that permits statements to be made under 
penalty of perjury as a substitute for notarization. In addition, your 
request should:
    a. Explain why you believe HUD would have information on you.
    b. Identify which Office of HUD you believe has the records about 
you.
    c. Specify when you believe the records would have been created.

[[Page 61023]]

    d. Provide any other information that will help the Freedom of 
Information Act (FOIA), staff determine which HUD office may have 
responsive records.
    If your request is seeking records pertaining to another living 
individual, you must include a statement from that individual 
certifying their agreement for you to access their records. Without the 
above information, the HUD FOIA Office may not conduct an effective 
search, and your request may be denied due to lack of specificity or 
lack of compliance with regulations.

CONTESTING RECORD PROCEDURES:
    The Department's rules for contesting contents of records and 
appealing initial denials appear in 24 CFR part 16, Implementation of 
the Privacy Act of 1974. Additional assistance may be obtained by 
contacting Helen Goff Foster, Chief Privacy Officer, 451 Seventh Street 
SW, Room number 10139, Washington, DC 20410. Individuals desiring to 
contest records may also refer to the HUD Privacy Act Handbook 
available on the website: https://portal.hud.gov/hudportal/HUD?src=/program_offices/administration/hudclips/handbooks/admh/1325.1.

NOTIFICATION PROCEDURES:
    Individuals wishing to determine whether this system of records 
contains information about them may do so by contacting HUD's Privacy 
Office or Freedom of Information Act Office at the addresses above.

EXEMPTIONS PROMULGATED FOR THE SYSTEM:
    None

HISTORY:
    Not applicable. This is a new SORN.

    Dated: December 11, 2017.
Helen Goff Foster
Senior Agency Official for Privacy.
[FR Doc. 2017-27767 Filed 12-22-17; 8:45 am]
 BILLING CODE 4210-67-P

61020 Federal Register / Vol. 82, No. 246 / Tuesday, December 26, 2017 / Notices found on the MTW Demonstration’s DATES: January 25, 2018. Researchers will collect program-level expansion web page at: http:// ADDRESSES: Interested persons are data from Continuums of Care (CoCs) portal.hud.gov/hudportal/HUD?src=/ invited to submit comments regarding and RRH programs via a web-based program_offices/public_indian_ this notice to the Rules Docket Clerk, survey and will subsequently collect housing/programs/ph/mtw/expansion. Office of General Counsel, Department further data through in-depth telephone Dated: December 14, 2017. of Housing and Urban Development, interviews with several RRH programs. Dominique Blom, 451 Seventh Street SW, Room 10276, This data will be analyzed by Abt Washington, DC 20410. Comments may Associates and reported to HUD in a General Deputy Assistant, Secretary for Public and Indian Housing. be filed electronically by accessing: final report. Abt study staff will conduct www.regulations.gov. Regulations.gov in-person interviews and meetings with Todd Richardson, provides clear instructions on how to 16 RRH program participants. Data from Acting General Deputy Assistant Secretary these meetings will be collected via for Policy Development and Research. submit a public comment on a rule. Communications should refer to the electronic recordings and paper [FR Doc. 2017–27766 Filed 12–22–17; 8:45 am] above docket number and title. Faxed protocols, and analyzed and reported by BILLING CODE 4210–67–P the researchers in the final report to comments are not accepted. A copy of each communication submitted will be HUD. All data will be de-identified for available for public inspection and reporting purposes, so no person or DEPARTMENT OF HOUSING AND copying between 8 a.m. and 5 p.m. program will be able to be identified in URBAN DEVELOPMENT weekdays at the above address. the final published study. [Docket No. FR–6009–N–06] FOR FURTHER INFORMATION CONTACT: For This study has undergone general questions please contact: The Institutional Review Board (IRB) and Privacy Act of 1974; System of Information Security reviews to identify Privacy Office, 451 Seventh Street SW, Records: Understanding Rapid Re- privacy risks, compliance, and legal Room 10139, Washington, DC 20410, Housing Study risks to HUD. telephone number 202–708–3054. Individuals who are hearing- and Consistent with HUD’s information- AGENCY: Office of Policy Development speech-impaired may access this sharing mission, information stored in and Research, HUD. number via TTY by calling the Federal the HUD/Understanding Rapid Re- ACTION: Notice of a new system of housing system may be shared with records. Relay Service at 800–877–8339 (this is a toll-free number). other HUD components that have a need SUMMARY: For the Understanding Rapid to know the information to carry out SUPPLEMENTARY INFORMATION: Re-housing Study, the Department of their national security, law enforcement, Housing and Urban Development’s I. Background immigration, intelligence, or other (HUD) Office of Policy Development homeland security functions. In In accordance with the Privacy Act of and Research (PD&R) is partnering with addition, information may be shared 1974, 5 U.S.C. 552a, HUD/PD&R an external research team to collect new with appropriate federal, state, local, proposes to establish a new HUD system data to analyze the current status of the tribal, territorial, foreign, or of records titled ‘‘HUD/Understanding rapid re-housing (RRH) programs and international government agencies Rapid Re-housing.’’ the experiences of RRH participants. The new system—the Understanding consistent with the routine uses set The project will provide HUD with a Rapid Re-housing study—is not forth in this system of records notice. deeper understanding of how RRH required by a new rulemaking being SYSTEM NAME AND NUMBER: programs operate and the experiences of published. HUD/Understanding Rapid Re- households that use them. The The Understanding Rapid Re-housing housing— Understanding Rapid Re-housing Study (RRH) Study is being conducted by Abt will synthesize existing research on Associates, an independent research SECURITY CLASSIFICATION: RRH programs, extend the analysis of firm, under the authority of the Unclassified. data from the Family Options Study Secretary of HUD, through the Office of SYSTEM LOCATION: (2016), provide a detailed examination Policy Development and Research. The of all rapid re-housing programs study is meant to undertake programs of Abt Associates, 4550 Montgomery nationwide, and conduct qualitative research, studies, testing, and Avenue, Suite 800 North, Bethesda, MD. research with a small sample of families demonstration related to HUD’s mission A list of additional contractor sites and individuals who receive RRH. The and programs (12 U.S.C. 1701z–1 et where records under this system are study will collect contact information seq.). maintained is available upon request to from Continuums of Care (CoCs) for This study provides an opportunity to the system manager. RRH programs, as well as personal address unanswered questions about SYSTEM MANAGER(S): information from participating RRH RRH assistance and to gain an Mindy Ault, Social Science Analyst, households. understanding of the status of RRH Program Evaluation Division, U.S. In accordance with the Privacy Act of programs nationwide, as well as the Department of Housing and Urban 1974, HUD/PD&R proposes to establish experiences of RRH participants. At the Development, 451 7th St. SW, Room a new system of records titled, ‘‘HUD/ program level, the new data collection 8120, Washington, DC 20410. Understanding Rapid Re-housing.’’ This and analysis will assess the current system of records allows HUD/PD&R to scale of RRH, document the AUTHORITY FOR MAINTENANCE OF THE SYSTEM: ethrower on DSK3G9T082PROD with NOTICES collect and maintain records on rapid predominant models in place for RRH The authority for the collection of the re-housing program participants who programs, determine the extent to which data and the maintenance of this system volunteer to participate in the study as programs use progressive engagement can be found at Sec. 501, 502, Housing well as Continuums of Care and rapid service approaches, and examine the and Urban Development Act of 1970 re-housing program staff. This newly way RRH programs function in rental (Pub. L. 91–609), 12 U.S.C. 1701z–1, established system will be included in markets with varying costs and vacancy 1701z–2. One part of HUD’s established HUD’s inventory of systems. rates. mission and responsibilities is to VerDate Sep<11>2014 20:21 Dec 22, 2017 Jkt 244001 PO 00000 Frm 00073 Fmt 4703 Sfmt 4703 E:\FR\FM\26DEN1.SGM 26DEN1

Federal Register / Vol. 82, No. 246 / Tuesday, December 26, 2017 / Notices 61021 monitor family housing conditions and Section 552a(b) of the Privacy Act, all or strategic plan to prevent and end options. To evaluate the effectiveness of a portion of the records or information homelessness. The records may not be the programs that affect the conditions contained in this system may be used to make decisions concerning the and options, HUD needs to collect disclosed outside HUD as a routine use rights, benefits, or privileges of specific participant data over time which pursuant to 5 U.S.C. 552a(b)(3) as individuals, or providers of services includes the necessary contact and follows: with respect to a homeless individual’s tracking information. To appropriate agencies, entities, and efforts. persons for disclosures compatible with 6. To appropriate agencies, entities, PURPOSE(S) OF THE SYSTEM: the purpose for which the records in This system is meant to provide HUD and persons when: (a) HUD suspects or this system were collected, as set forth has confirmed that the security or with a more in-depth understanding of by Appendix I—HUD’s Routine Use the efficacy of RRH programs confidentiality of information in a Inventory Notice, 80 FR 81837 system of records has been nationwide at both the program and (December 31, 2015). participant levels. compromised; (b) HUD has determined 1. To the National Archives and that, as a result of the suspected or Records Administration or to the CATEGORIES OF INDIVIDUALS COVERED BY THE confirmed compromise, there is a risk of SYSTEM: General Services Administration for records having enough historical or harm to economic or property interests, Individuals covered by the system are other value to warrant continued identity theft or fraud, or harm to the voluntary participants in HUD-funded preservation by the United States security or integrity of systems or rapid re-housing programs and Government, or for inspection under programs (whether maintained by HUD Continuums of Care and rapid re- Title 44 U.S.C. 2904 and 2906. or another agency or entity) that rely housing program staff. 2. To a congressional office from the upon the compromised information; and record of an individual, in response to (c) the disclosure made to such CATEGORIES OF RECORDS IN THE SYSTEM: an inquiry from that congressional office agencies, entities, and persons is The specific types of records collected reasonably necessary to assist in made at the request of that individual. from study participants and maintained connection with HUD’s efforts to 3. To contractors performing or will include: Names, birth dates, home respond to the suspected or confirmed working under a contract with HUD, addresses, telephone numbers, personal when necessary to accomplish an compromise and prevent, minimize, or email addresses, demographic agency function related to this system of remedy such harm for purposes of information, income information, records. Disclosure requirements are facilitating responses and remediation housing history, mental and physical limited to only those data elements efforts in the event of a data breach. health, and family status information. considered relevant to accomplishing an agency function. Individuals provided POLICIES AND PRACTICES FOR STORAGE OF RECORD SOURCE CATEGORIES: RECORDS: This project includes five instruments information under these routine use for data collection: (1) Web Census for conditions are subject to Privacy Act Abt has implemented full disk CoCs and Rapid Re-Housing Programs, requirements and disclosure limitations encryption (FIPS 140–2 compliant) (2) Interview Guide for Rapid Re- imposed on the Department. software in our environment to protect Housing Programs, (3) Rapid Re-housing 4. To the Department of Justice (DOJ) the storage of data, as well as a file Participant Interview Guide, (4) Rapid when seeking legal advice for a HUD transfer application (also FIPS 140–2 Re-housing Participant Follow-up initiative or in response to DOJ’s request compliant), Huddle, for the secure, Interview Guide, and (5) Quarterly for the information, after either HUD or encrypted transmission of sensitive data Household Tracking Guide for DOJ determine that such information such as PII and PHI to and from our Ethnographic Panel. Of these, the first relates to DOJ’s representation of the clients and subcontractors. Huddle two are program-level data collections United States or any other components offers secure content collaboration to and as such will include minimal in legal proceedings before a court or share data and is FedRAMP certified. personally identifiable information (PII), adjudicative body, provided that, in Huddle encrypts data in-transit using including only the name and contact each case, the agency also determines TLS (128-bit or 256-bit encryption) and information for the CoC Collaborative prior to disclosure that disclosure of the at rest with 256-bit AES. Applicant and RRH program staff records to DOJ is a use of the Abt has also implemented anti- person completing the survey. The information in the records that is malware software in its environment Rapid Re-Housing Participant Interview compatible with the purpose for which and updates definitions daily on each Guide, Rapid Re-housing Participant HUD collected the records. HUD on its workstation. For boundary protection, Follow-up Interview Guide, and own may disclose records in this system Abt has implemented Cisco ASA Quarterly Household Tracking Guide of records in legal proceedings before a Firewalls. will collect information from court or administrative body after determining that the disclosure of the Hard copy notes and other materials participants via interview questions that are collected as part of the asked in person and recorded for this records to the court or administrative body is a use of the information ethnographic work in Task 8 will be study. This information will be securely stored in locked file cabinets collected after obtaining written consent contained in the records that is compatible with the purpose for which when not in use. regarding participation and will be de- identified in the report. All of the data HUD collected the records. POLICIES AND PRACTICES FOR RETRIEVAL OF 5. To contractors, grantees, experts, ethrower on DSK3G9T082PROD with NOTICES collection records containing PII will be RECORDS: consultants, Federal agencies, and non- destroyed at the end of the study period. Federal entities including but not During the course of the study, ROUTINE USES OF RECORDS MAINTAINED IN THE limited to state and local governments, program-level records may be retrieved SYSTEM, INCLUDING CATEGORIES OF USERS AND with whom HUD has a contract, service by program name or assigned unique PURPOSES OF SUCH USES: agreement, grant, or cooperative identifier; participant-level records may In addition to those disclosures agreement for statistical analysis to be retrieved by assigned unique generally permitted under 5 U.S.C. advance the goals of the nation’s federal identifier. VerDate Sep<11>2014 20:21 Dec 22, 2017 Jkt 244001 PO 00000 Frm 00074 Fmt 4703 Sfmt 4703 E:\FR\FM\26DEN1.SGM 26DEN1

61022 Federal Register / Vol. 82, No. 246 / Tuesday, December 26, 2017 / Notices POLICIES AND PRACTICES FOR RETENTION AND recruitment, and data acquisition while stating that no data will be released to DISPOSAL OF RECORDS: addressing both data security and unauthorized personnel. In addition, all Abt Associates will retain all data confidentiality concerns. Confirmit electronic data for the study are stored collected over the life of the study and invests considerable time updating the on the ACE3 system (described above). any analysis files generated with those software to ensure it has the latest Abt complies with the Privacy Act of data under conditions specified in the technologies to boost security, 1974, Health Insurance Portability and study protocol. At the end of the performance, and reliability. Accountability Act of 1996 (HIPAA), contract, Abt will destroy all PII per the Respondents will access the RRH web and the E-Government Act of 2002, contract terms. The retention and survey through Abt’s website, where including Title III: Federal Information disposal procedures are in keeping with they are protected by Abt’s strict data Security Management Act (FISMA), HUD’s records management policies as security system. HTTPS is enforced for which covers site security, security described in 44 U.S.C. 3101 and 44 transmission of all Confirmit Horizons control documentation, access control, U.S.C. 3303. Abt Associates will submit credentials by Abt at the user level. All change management, incident response, all de-identified data to HUD at the end user accounts are named users linked to and risk management. Abt has of the contract. The retention and individual email addresses except for a implemented full disk encryption (FIPS disposal procedures are in keeping with translation account with extremely 140–2 compliant) software in its HUD’s records management policies as limited rights that is provided by the environment to protect the storage of described in 44 U.S.C. 3101 and 44 software vendor. Strong password data, as well as a file transfer U.S.C. 3303. Study participant PII to be policies are enforced, including application (also FIPS 140–2 retained for the length of the study (and minimum length, mixed case, special compliant), Huddle, for the secure, then destroyed at the end of the contract characters, and a password expiry after encrypted transmission of sensitive data period, in October 2019) includes the a set number of days. A password such as PII and PHI to and from our following: history is also kept to prevent clients and subcontractors. Huddle passwords from being continuously offers secure content collaboration to • Name reused. Accounts are locked by the share data and is FedRAMP certified. • Birth date system after 5 consecutive failed login • Home address Huddle encrypts data in-transit using attempts. Upon entering the 7-digit PIN TLS (128-bit or 256-bit encryption) and • Telephone number assigned by the software, the respondent • Personal email address at rest with 256-bit AES. moves to a non-public directory Abt has also implemented anti- The retention and disposal inaccessible through the internet. malware software in its environment procedures are in keeping with HUD’s As data are entered, they are stored on and update definitions daily on each records management policies as a second non-public directory accessible workstation. For boundary protection, described in section below: 2225.6 only to the Abt system administrator. Abt has implemented Cisco ASA REV–1, Appendix 67, Records Partial responses are saved in this way. Firewalls. Disposition Schedule 67 PD&R, Item Once respondents finish the census and Hard copy notes and other materials No. 5. press the ‘‘Submit’’ button on the that are collected as part of the Disposition: Project case files screen, the ID number used to access the ethnographic work in Task 8 will be reflecting a complete history of each survey becomes invalid and the securely stored in locked file cabinets project from initiation through research, instrument cannot be accessed again when not in use. development, design, testing, and with that number. The SQL server demonstration will be retired to a databases that store respondent/ RECORD ACCESS PROCEDURES: Federal Records Center three years after response data are behind the firewall For information, assistance, or inquiry satisfactory close of the project. Files and data can only be accessed through about records, contact Marcus will be destroyed six years after the Horizons application by our named Smallwood, Acting, Chief Privacy satisfactory close of the project (NARA users. No application users can access Officer 451 Seventh Street SW, Room Job NCl-207–78–6, Item 5). https:// the database directly, the servers are 10139, Washington, DC 20410, portal.hud.gov/hudportal/documents/ only accessible by our database telephone number (202) 708–3054. huddoc?id=22256x67ADMH.pdf. administrators. Confirmit surveys are When seeking records about yourself stateless and session-less. No user from this system of records or any other ADMINISTRATIVE, TECHNICAL, AND PHYSICAL identifiable information is required Housing and Urban Development (HUD) SAFEGUARDS: when transmitting information between system of records, your request must The contractor, Abt Associates, has a page submissions. A combination of conform with the Privacy Act dedicated Analytic Computing hidden form fields and system regulations set forth in 24 CFR part 16. Environment (ACE3) for storing ONLY generated identifiers can identify a You must first verify your identity, sensitive information such as PII and respondent and the correct state when meaning that you must provide your full PHI. Only authorized personnel can moving from page to page. Pages use name, address, and date and place of access this environment through a metadata code to prevent them from birth. You must sign your request, and Virtual Private Network (VPN). being cached, and no information is your signature must either be notarized Authentication to the system is done via stored on a respondent’s computer or submitted under 28 U.S.C. 1746, a Active Directory and DUO multi-factor when the browser is closed. law that permits statements to be made authentication. Users connect to the Abt takes every precaution to ensure under penalty of perjury as a substitute system via remote desktop sessions that data collected on the internet for notarization. In addition, your ethrower on DSK3G9T082PROD with NOTICES (RDS). ACE3 is FISMA and FIPS 140– remain both secure and confidential. All request should: 2 compliant. Abt data collection servers are housed a. Explain why you believe HUD To ensure data privacy and security, in an AT&T Network Operations Center would have information on you. the Abt Confirmit Horizons web survey (NOC) with redundant power, b. Identify which Office of HUD you platform that will be used for the CoC expandable bandwidth, and a high level believe has the records about you. and RRH program web survey allows for of physical security. All study staff are c. Specify when you believe the tight control over sampling, respondent required to sign a confidentiality pledge records would have been created. VerDate Sep<11>2014 20:21 Dec 22, 2017 Jkt 244001 PO 00000 Frm 00075 Fmt 4703 Sfmt 4703 E:\FR\FM\26DEN1.SGM 26DEN1

Federal Register / Vol. 82, No. 246 / Tuesday, December 26, 2017 / Notices 61023 d. Provide any other information that the Principal Deputy Assistant regulations as published in 25 CFR part will help the Freedom of Information Secretary—Indian Affairs, exercising the 83, revised as of April 1, 1994, as Act (FOIA), staff determine which HUD authority of the Assistant Secretary— permitted in 83.7(b) of the 2015 Federal office may have responsive records. Indian Affairs has determined that the acknowledgment regulations. This FD is If your request is seeking records Georgia Tribe of Eastern Cherokee issued in accord with that request. pertaining to another living individual, (GTEC) is not an Indian Tribe within the Publication of notice of the PF in the you must include a statement from that meaning of Federal law. This notice is Federal Register initiated the 180-day individual certifying their agreement for based on a determination that affirms comment period provided in the you to access their records. Without the the reasoning, analysis, and conclusions regulations at § 83.10(i). Neither GTEC above information, the HUD FOIA in the Proposed Finding (PF) that the nor other parties asked the AS–IA to Office may not conduct an effective petitioner does not satisfy the seven hold an on-the-record technical search, and your request may be denied mandatory criteria for acknowledgment assistance meeting under § 83.10(j)(2). due to lack of specificity or lack of set forth in the applicable regulations. After two 180-day extensions and one compliance with regulations. Therefore, it does not meet the 90-day extension requested by the requirements for a government-to- petitioner, the comment period closed CONTESTING RECORD PROCEDURES: government relationship with the and GTEC submitted its comments on The Department’s rules for contesting United States. Based on the limited August 7, 2017. Principal Chief Bill contents of records and appealing initial nature and extent of comments, and John Baker of the Cherokee Nation, P.O. denials appear in 24 CFR part 16, consistent with prior practices, the Box 948, Tahlequah, Oklahoma 74465, Implementation of the Privacy Act of Government is not producing a separate submitted a two-page letter dated 1974. Additional assistance may be detailed report or other summary under November 12, 2016, to OFA and obtained by contacting Helen Goff the criteria to accompany this Final provided a copy to GTEC, as required by Foster, Chief Privacy Officer, 451 Determination (FD), because neither the the regulations per § 83.10(i). Chief Seventh Street SW, Room number petitioner nor interested parties have Baker’s letter supported the 10139, Washington, DC 20410. submitted significant new evidence or Department’s PF not to acknowledge Individuals desiring to contest records analysis that changes the conclusions in GTEC, but it did not contain new may also refer to the HUD Privacy Act the PF. The PF, as supplemented by this evidence or analysis. Handbook available on the website: notice, is affirmed. This notice The acknowledgment regulations at https://portal.hud.gov/hudportal/ constitutes the FD. § 83.10(k) provide a petitioner 60 days HUD?src=/program_offices/ DATES: This FD is final and will become to respond to comments on the PF from administration/hudclips/handbooks/ effective on March 26, 2018, unless the interested or informed parties. The admh/1325.1. petitioner or an interested party files a petitioner’s attorney submitted a request for reconsideration pursuant to response to Chief Baker’s comments in NOTIFICATION PROCEDURES: the form of a letter postmarked October 25 CFR 83.11. Individuals wishing to determine 2, 2017, within the regulatory deadline FOR FURTHER INFORMATION CONTACT: whether this system of records contains ending October 6, 2017. In a letter dated information about them may do so by Holly Reckord, Acting Director, Office October 11, 2017, OFA informed the contacting HUD’s Privacy Office or of Federal Acknowledgment (OFA), petitioner that it would move forward Freedom of Information Act Office at (202) 513–7650. with the FD per § 83.10(1) on the addresses above. SUPPLEMENTARY INFORMATION: Pursuant Wednesday, October 18, 2017, and issue to 25 CFR 83.10(h), the Department a FD on or before Monday, December EXEMPTIONS PROMULGATED FOR THE SYSTEM: publishes this notice in the exercise of 18, 2017. The publication of this FD in None authority delegated by the Secretary of the form of a Federal Register notice the Interior to the Principal Deputy complies with that letter. HISTORY: Assistant Secretary—Indian Affairs The petitioner submitted one three- Not applicable. This is a new SORN. (PDAS–IA) by 209 DM 8. The ring binder containing its comments on Dated: December 11, 2017. Department issued a PF not to the PF. It included narratives, Helen Goff Foster acknowledge the Georgia Tribe of chronologies arranged under the seven Senior Agency Official for Privacy. Eastern Cherokee (GTEC), Petitioner mandatory criteria, photocopies of [FR Doc. 2017–27767 Filed 12–22–17; 8:45 am] #41, on May 6, 2016, and published Georgia laws, one oral history transcript, notice of the PF in the Federal Register and a photograph of unnamed school BILLING CODE 4210–67–P on May 13, 2016. This FD affirms the PF children. These materials made that the Georgia Tribe of Eastern reference to ‘‘supplement folders . . . Cherokee, P.O. Box 1411, Dahlonega, included in the original petition,’’ DEPARTMENT OF THE INTERIOR GA 30533, c/o Mr. Coleman J. Seabolt, received in OFA February 14, 2002, and Bureau of Indian Affairs does not meet the seven mandatory already evaluated in the PF. The binder criteria for acknowledgment as an also included a single page of eleven [189A2100DD/AAKC001030/ Indian Tribe. The petitioner seeks names of spouses either of current A0A501010.999900253G] Federal acknowledgment as an Indian members or of ancestors. It claimed Tribe under 25 CFR part 83, these spouses had Cherokee ancestry Final Determination Against Federal ‘‘Procedures for Federal from ‘‘Cherokee bloodlines’’ that were Acknowledgment of the Georgia Tribe Acknowledgment of Indian tribes,’’ different from the Cherokee lines of ethrower on DSK3G9T082PROD with NOTICES of Eastern Cherokee dated July 1, 2015. The petitioner was descent analyzed in the PF. GTEC did AGENCY: Bureau of Indian Affairs, under active consideration when the not submit vital records, charts, or other Interior. revised rule was published. It chose by genealogical evidence and analysis ACTION: Notice. letter of October 24, 2015, signed by its tracing these eleven spouses generation governing body, to have its petition by generation to Indian ancestors in the SUMMARY: The Department of the evaluation completed under the Cherokee Nation before the final Interior (Department) gives notice that superseded Federal acknowledgment Removal in 1838, nor did the petitioner VerDate Sep<11>2014 20:21 Dec 22, 2017 Jkt 244001 PO 00000 Frm 00076 Fmt 4703 Sfmt 4703 E:\FR\FM\26DEN1.SGM 26DEN1


Document Created: 2017-12-23 03:07:42
Document Modified: 2017-12-23 03:07:42
CategoryRegulatory Information
CollectionFederal Register
sudoc ClassAE 2.7:
GS 4.107:
AE 2.106:
PublisherOffice of the Federal Register, National Archives and Records Administration
SectionNotices
ActionNotice of a new system of records.
DatesJanuary 25, 2018.
ContactFor general questions please contact: The Privacy Office, 451 Seventh Street SW, Room 10139, Washington, DC 20410, telephone number 202-708-3054. Individuals who are hearing- and speech-impaired may access this number via TTY by calling the Federal Relay Service at 800-877-8339 (this is a toll-free number).
FR Citation82 FR 61020 
2025 Federal Register | Disclaimer | Privacy Policy
USC | CFR | eCFR