In accordance with the requirements of the Privacy Act of 1974, the National Aeronautics and Space Administration is providing public notice of a modification to an existing sys...
National Aeronautics and Space Administration (NASA).
ACTION:
Notice of a Modified System of Records, Correction
SUMMARY:
In accordance with the requirements of the Privacy Act of 1974, the National Aeronautics and Space Administration is providing public notice of a modification to an existing system of records entitled NASA Core Financial Management Records (CFMR). Records in this system are used to process reimbursement payments to employees for travel, purchase of books or other miscellaneous items; and to process payments and collections in which an individual is reimbursing the Agency. The system of records is more
( printed page 49450)
fully described in the
SUPPLEMENTARY INFORMATION
section of this notice.
DATES:
Submit comments within 30 calendar days from the date of this publication. The proposed modification to this system will take effect at the end of that period if no significant adverse comments are received.
ADDRESSES:
Submit comments to Stayce Hoult, Privacy Act Officer, Office of the Chief Information Officer, Mary W. Jackson, NASA Headquarters, Washington, DC 20546-0001, 757-864-3292, or
NASA-PAOfficer@nasa.gov.
This system of records notice (SORN) is a correction to the Notice of a modified system of records; correction of February 3, 2026 FR Doc. 2026-02105, pages 4969-4970, the Routine Use section for additional coverage and extra clarity to the December 5, 2025, publication (90 FR 56183). It also updates the Privacy Act Officer and contact information. Finally, it also modifies the notice to make editorial changes.
In the
Federal Register
of December 5, 2025, in FR Doc. 2025-21971, on page 56184, in the second column, correct paragraph 2 in the ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND PURPOSES OF SUCH USES section to read:
To external entities (
e.g.,
organizers of symposiums, conferences and workshops), which have provided funds to NASA employees, to process payments and/or collections for activities undertaken in the performance of their duties (
e.g.,
attending conferences, travel, training, or other assignment for NASA).
Correct the citations in the HISTORY section to read:
(90 FR 56183, pp. 56183-56185) Published: 12/05/2025.
(88 FR 30171, pp. 30171-30173) Published: 05/10/2023.
Stayce Harris Hoult,
NASA Chief Privacy Officer.
SYSTEM NAME AND NUMBER
Core Financial Management Records, NASA 10CFMR.
SECURITY CLASSIFICATION
Unclassified.
SYSTEM LOCATION
George C. Marshall Space Flight Center, National Aeronautics and Space Administration, Marshall Space Flight Center, AL 35812
SYSTEM MANAGER(S)
Director, Agency Financial Systems Office, Mary W. Jackson NASA Headquarters, National Aeronautics and Space Administration, Washington, DC 20546-0001
IS90/Associate Chief Information Officer, Applications Division, George C. Marshall Space Flight Center, National Aeronautics and Space Administration, Marshall Space Flight Center, AL 35812
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND PURPOSES OF SUCH USES
Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The following are routine uses:
1. To the U.S. Department of the Treasury for financial reimbursement of individual expenses, such as travel, books, and other miscellaneous items.
2. To external entities (
e.g.,
organizers of symposiums, conferences and workshops), which have provided funds to NASA employees, to process payments and/or collections for activities undertaken in the performance of their duties (
e.g.,
attending conferences, travel, training, or other assignment for NASA).
3. To the U.S. Department of the Treasury when disclosure of the information is relevant to review payment and award eligibility through the Do Not Pay Working System for the purposes of identifying, preventing, or recouping improper payments to an applicant for, or recipient of, Federal funds, including funds disbursed by a state (meaning a state of the United States, the District of Columbia, a territory or possession of the United States, or a federally recognized Indian tribe) in a state-administered, federally funded program.
In addition, information may be disclosed under the following NASA Standard Routine Uses:
1.
Law Enforcement
—When a record on its face, or in conjunction with other information, indicates a violation or potential violation of law, whether civil, criminal or regulatory in nature, and whether arising by general statute or particular program statute, or by regulation, rule, or order, disclosure may be made to the appropriate agency, whether Federal, foreign, State, local, or tribal, or other public authority responsible for enforcing, investigating or prosecuting such violation or charged with enforcing or implementing the statute, or rule, regulation, or order, if NASA determines by careful review that the records or information are both relevant and necessary to any enforcement, regulatory, investigative or prosecutive responsibility of the receiving entity.
2.
Certain Disclosures to Other Agencies
—A record from this system of records (SOR) may be disclosed to a Federal, State, or local agency maintaining civil, criminal, or other relevant enforcement information or other pertinent information, such as current licenses, if necessary, to obtain information relevant to an agency decision concerning the hiring or retention of an employee, the issuance of a security clearance, the letting of a contract, or the issuance of a license, grant, or other benefit.
3.
Certain Disclosures to Other Federal Agencies
—A record from this SOR may be disclosed to a Federal agency, in response to its request, for a matter concerning the hiring or retention of an employee, the issuance of a security clearance, the reporting of an investigation of an employee, the letting of a contract, or the issuance of a license, grant, or other benefit by the requesting agency, to the extent that the information is relevant and necessary to the requesting agency's decision on the matter.
4.
Department of Justice
—A record from this SOR may be disclosed to the Department of Justice when a) NASA, or any component thereof; or b) any employee of NASA in his or her official capacity; or c) any employee of NASA in his or her individual capacity where the Department of Justice has agreed to represent the employee; or d) the United States, where NASA determines that litigation is likely to affect NASA or any of its components, is a party to litigation or has an interest in such litigation, and by careful review, the use of such records by the Department of Justice is deemed by NASA to be relevant and necessary to the litigation.
5.
Courts
—A record from this SOR may be disclosed in an appropriate proceeding before a court, grand jury, or administrative or adjudicative body, when NASA determines that the records are relevant and necessary to the proceeding; or in an appropriate proceeding before an administrative or adjudicative body when the adjudicator determines the records to be relevant and necessary to the proceeding.
6.
Response to an Actual or Suspected Compromise or Breach of Personally Identifiable Information
—A record from
( printed page 49451)
this SOR may be disclosed to appropriate agencies, entities, and persons when (1) NASA suspects or has confirmed that there has been a breach of the system of records; (2) NASA has determined that as a result of the suspected or confirmed breach there is a risk of harm to individuals, NASA (including its information systems, programs, and operations), the Federal Government, or national security; and (3) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with NASA's efforts to respond to the suspected or confirmed breach or to prevent, minimize, or remedy such harm.
7.
Contractors
—A record from this SOR may be disclosed to contractors (as defined in 5 U.S.C. 552a(m)), grantees, experts, consultants, students, volunteers, and others performing or working on a contract, service, grant, cooperative agreement, or other assignment for NASA, when necessary to accomplish a NASA function related to this SOR.
Contractors provided information under this routine use are subject to the same Privacy Act requirements and limitations on disclosure as are applicable to NASA employees.
8.
Members of Congress
—A record from this SOR may be disclosed to a Member of Congress or to a Congressional staff member in response to an inquiry of the Congressional office made at the written request of the constituent about whom the record is maintained.
9.
Disclosures to Other Federal Agencies in Response to an Actual or Suspected Compromise or Breach of Personally Identifiable Information
—A record from this SOR may be disclosed to another Federal agency or Federal entity, when NASA determines that information from this system of records is reasonably necessary to assist the recipient agency or entity in (1) responding to a suspected or confirmed breach or (2) preventing, minimizing, or remedying the risk of harm to individuals, the recipient agency or entity (including its information systems, programs, and operations), the Federal Government, or national security, resulting from a suspected or confirmed breach.
10.
National Archives and Records Administration
—A record from this SOR may be disclosed as a routine use to the officers and employees of the National Archives and Records Administration (NARA) pursuant to records management inspections being conducted under the authority of 44 U.S.C. 2904 and 2906.
11.
Audit
—NASA may release records to the NASA OIG or GAO during an audit or investigation, as authorized by law, where the release of such information to the entity is necessary to perform the audit or its oversight function.
POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
Records in this system are maintained on paper and electronic media.
POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
Records are retrieved from the system by name or SSN (Tax ID).
POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
Records are stored in the NASA Applications & Platform Services (APS) database and managed, retained and dispositioned in accordance with NASA Records Retention Schedules, Schedule 9, Items 11 and 16.
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
Electronic records are maintained on secure NASA servers and protected in accordance with all Federal standards and those established in NASA regulations at 14 CFR 1212.605. Additionally, server and data management environments employ infrastructure encryption technologies both in data transmission and at rest on servers. Electronic messages sent within and outside of the Agency that convey sensitive data are encrypted and transmitted by staff via pre-approved electronic encryption systems as required by NASA policy. Approved security plans are in place for information systems containing the records in accordance with the Federal Information Security Modernization Act of 2014 (FISMA) and OMB Circular No. A-130, Managing Information as a Strategic Resource. Only authorized personnel requiring information in the official discharge of their duties are authorized access to records through approved access or authentication methods. Access to electronic records is achieved only from workstations within the NASA Intranet or via a secure Virtual Private Network (VPN) connection that requires two-factor hardware token authentication or via employee Personal Identity Verification (PIV) badge authentication from NASA- issued computers. Non-electronic records are secured in locked rooms or locked file cabinets.
RECORD ACCESS PROCEDURES:
In accordance with 14 CFR part 1212, Privacy Act—NASA Regulations, information may be obtained by contacting in person or in writing the system or subsystem manager listed above at the location where the records are created and/or maintained. Requests must contain the identifying data concerning the requester,
e.g.,
first, middle and last name; date of birth; description and time periods of the records desired. NASA Regulations also address contesting contents and appealing initial determinations regarding records access.
CONTESTING RECORD PROCEDURES:
In accordance with 14 CFR part 1212, Privacy Act—NASA Regulations, information may be obtained by contacting in person or in writing the system or subsystem manager listed above at the location where the records are created and/or maintained. Requests must contain the identifying data concerning the requester,
e.g.,
first, middle and last name; date of birth; description and time periods of the records desired. NASA Regulations also address contesting contents and appealing initial determinations regarding records access.
NOTIFICATION PROCEDURES:
In accordance with 14 CFR part 1212, Privacy Act—NASA Regulations, information may be obtained by contacting in person or in writing the system or subsystem manager listed above at the location where the records are created and/or maintained. Requests must contain the identifying data concerning the requester,
e.g.,
first, middle and last name; date of birth; description and time periods of the records desired. NASA Regulations also address contesting contents and appealing initial determinations regarding records access.
Use this for formal legal and research references to the published document.
91 FR 49449
Web Citation
Suggested Web Citation
Use this when citing the archival web version of the document.
“Privacy Act of 1974; System of Records,” thefederalregister.org (August 4, 2026), https://thefederalregister.org/documents/2026-15738/privacy-act-of-1974-system-of-records.