Privacy Act; Implementation

The Office of the Secretary of Defense (OSD) is amending its regulations to exempt portions of a system of records from certain provisions of the Privacy Act. Specifically, the Department proposes to exempt portions of DMDC 16 DoD, entitled ``Identity Management Engine for Security and Analysis (IMESA)'' from one or more provisions of the Privacy Act because of criminal, civil, and administrative enforcement requirements. In 2008, the U.S. Congress passed legislation that obligated the Secretary of Defense to develop access standards for visitors applicable to all military installations in the U.S. The Department of Defense (DoD) developed a visitor system to manage multiple databases that are capable of identifying individuals seeking access to DoD installations who may be criminal and/or security threats. The purpose of the vetting system is to screen individuals wishing to enter a DoD facility, to include those who have been previously given authority to access DoD installations, against the FBI National Crime Information Center (NCIC) Wanted Person File. The NCIC has a properly documented exemption rule and to the extent that portions of these exempt records may become part of IMESA, OSD hereby claims the same exemptions for the records as claimed at their source (JUSTICE/FBI-001, National Crime Information Center (NCIC)).