SUPPLEMENTARY INFORMATION:

Request for Comments

For the FTC to consider a comment, we must receive it on or before September 8, 2026. Your comment, including your name and your State, will be placed on the public record of this proceeding, including the www.regulations.gov website.

You can file a comment online or on paper. Due to heightened security screening, postal mail addressed to the Commission will be subject to delay. We encourage you to submit your comments online through the www.regulations.gov website.

If you file your comment on paper, write “Privacy Act of 1974; System of Records: FTC File No. P072104,” on your comment and on the envelope, and mail it to the following address: Federal Trade Commission, Office of the Secretary, 600 Pennsylvania Avenue NW, Mail Stop H-144 (Annex S), Washington, DC 20580.

Because your comment will become publicly available at www.regulations.gov, you are solely responsible for making sure that your comment does not include any sensitive or confidential information. In particular, your comment should not include any sensitive personal information, such as your or anyone else's Social Security number; date of birth; driver's license number or other State identification number, or foreign country equivalent; passport number; financial account number; or credit or debit card number. You are also solely responsible for making sure that your comment does not include any sensitive health information, such as medical records or other individually identifiable health information. In addition, your comment should not include any “trade secret or any commercial or financial information which . . . is privileged or confidential”—as provided by section 6(f) of the FTC Act, 15 U.S.C. 46(f), and FTC Rule 4.10(a)(2), 16 CFR 4.10(a)(2)—including, in particular, competitively sensitive information, such as costs, sales statistics, inventories, formulas, patterns, devices, manufacturing processes, or customer names.

Comments containing material for which confidential treatment is requested must (1) be filed in paper form, (2) be clearly labeled “Confidential,” and (3) comply with FTC Rule 4.9(c). In particular, the written request for confidential treatment that accompanies the comment must include the factual and legal basis for the request, and must identify the specific portions of the comment to be withheld from the public record. See FTC Rule 4.9(c). Your comment will be kept confidential only if the General Counsel grants your request in accordance with the law and the public interest. Once your comment has been posted publicly at www.regulations.gov, we cannot redact or remove your comment unless you submit a confidentiality request that meets the requirements for such treatment under FTC Rule 4.9(c), and the General Counsel grants that request.

The FTC Act and other laws that the Commission administers permit the collection of public comments to consider and use in this proceeding as appropriate. The Commission will consider all timely and responsive public comments that it receives on or before September 8, 2026. For information on the Commission's privacy policy, including routine uses permitted by the Privacy Act, see www.ftc.gov/​site-information/​privacy-policy.

Analysis To Aid Public Comment

In accordance with the Privacy Act of 1974, 5 U.S.C. 552a, this document provides public notice that the FTC is proposing to add one new routine use to the SORNs for FTC-III-2—Travel Management System, FTC-III-3—Financial Management System, FTC-III-4—Automated Acquisitions System, and FTC-III-5—Employee Transportation Program Records, to comply with E.O. 14249. The Privacy Act authorizes the agency to adopt routine uses that are compatible with the purpose for which the information is collected. 5 U.S.C. 552a(b)(3); see also5 U.S.C. 552a(a)(7).

On March 28, 2025, President Trump issued E.O. 14249, “Protecting America's Bank Account Against Fraud, Waste, and Abuse,” ^[1] which states in relevant part ^[2] that—

Within 90 days of the date of this order [ i.e., by June 23, 2025], agency heads shall review and modify, as applicable, their relevant system of records notices under the Privacy Act of 1974 to include a `routine use' that allows for the disclosure of records to the Department of the Treasury for the purposes of identifying, preventing, or recouping fraud and improper payments, to the extent permissible by law.

On August 20, 2025, Russell T. Vought, the Director of OMB, issued guidance that advised ^[3] each Senior Agency Official for Privacy, in consultation with the agency's Chief Financial Officer and Chief Information Officer, to consider adding a routine use that includes the following language:

To the U.S. Department of the Treasury when disclosure of the information is relevant to review payment and award eligibility through the Do Not Pay Working System for the purposes of identifying, preventing, or recouping improper payments to an applicant for, or recipient of, Federal funds, including funds disbursed by a state (meaning a state of the United States, the District of Columbia, a territory or possession of the United States, or a federally recognized Indian tribe) in a state-administered, federally funded program.

After completing the required review of agency Privacy Act systems and to ensure compliance with E.O. 14249, the Commission proposes to add a new routine use applicable to four agency Privacy Act SORNs using the language set out immediately above from the OMB guidance. This includes FTC-III-2—Travel Management System, FTC-III-3—Financial Management System, FTC-III-4—Automated Acquisitions System, and FTC-III-5—Employee Transportation Program Records.

The FTC believes that it is compatible with the collection of information pertaining to individuals to disclose Privacy Act records about them when, in doing so, it will help with Administration priorities to help identify, prevent, or recoup fraud and improper payments, to the extent permissible by law. E.O. 14249 specifically directs the FTC and other agencies to ensure that sharing for such purposes is authorized by the agencies' Privacy Act systems' routine uses. The FTC believes the proposed routine use should not affect the privacy protections ( printed page 50840) of individuals. Adding this routine use to four specific SORNs is a reasonable step to help the Administration, the FTC, and the Department of Treasury identify, prevent, or recoup fraud or improper payments, and is compatible with the purpose of the collection. In addition, the proposed routine use cannot override statutory restrictions on sharing information.^[4] Accordingly, the Commission concludes that it is authorized under the Privacy Act to adopt the proposed routine use permitting disclosure of Privacy Act records for the purposes described above.

In accordance with the Privacy Act, see5 U.S.C. 552a(e)(4) and (11), the FTC is publishing notice of the proposed routine use and giving the public a 30-day period to comment before adopting them as final. The FTC has provided advance notice of this proposed system notice amendment to OMB and Congress, as required by the Act, 5 U.S.C. 552a(r), and OMB Circular A-108 (2016). The Commission proposes that the new routine uses become effective on October 5, 2026, unless the Commission amends or revokes the routine uses on the basis of any comments received.

Additionally, the FTC is making technical changes to three of these SORNs. For Travel Management System—FTC (FTC-III-2), the FTC is replacing a reference within the routine use section that previously stated the applicable routine uses were those routine uses associated with GSA/GOVT-4, or any successor system notice for that system, with language from ten specific routine uses from GSA/GOVT-4. For Financial Management System—FTC (FTC-III-3), the FTC is replacing a reference within the routine use section to the routine uses associated with Treasury.009 (Treasury Financial Management Systems), or any successor system notice for that system, with language from ten specific routine uses from Treasury.009 (Treasury Financial Management Systems). For Employee Transportation Program Records-FTC (FTC-III-5), the FTC is revising the language of routine use #1 relating to the disclosure to the U.S. Department of Transportation (DOT) for purposes of processing and distributing subsidies to FTC employees and verifying employee compliance with program rules to delete any reference to how DOT may then disclose these records under the applicable DOT routine uses.

Accordingly, the FTC hereby proposes to amend its Systems of Records Notices as follows:

FTC Systems of Records Notices

III. Federal Trade Commission Financial Systems of Records

SYSTEM NAME AND NUMBER:

Travel Management System—FTC (FTC-III-2).

SECURITY CLASSIFICATION:

Unclassified.

SYSTEM LOCATION:

Financial Management Office, Federal Trade Commission, 600 Pennsylvania Ave. NW, Washington, DC 20580. This system of records is principally operated and maintained off-site for the FTC under an interagency agreement with the Department of the Treasury's Administrative Resource Center, which is part of the Bureau of Fiscal Services, although this system is also intended to include any miscellaneous official FTC travel data that may be maintained on-site by individual FTC offices and retrieved by name or other personally assigned identifier about individuals on official FTC travel. For other locations where records may be maintained or accessed, see Appendix III (Locations of FTC Buildings and Regional Offices), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacyact-systems and 87 FR 57698 (Sept. 21, 2022).

SYSTEM MANAGER(S):

Chief Financial Officer, Financial Management Office, Federal Trade Commission, 600 Pennsylvania Ave. NW, Washington, DC 20580, email: SORNs@ftc.gov.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Records in this system may be disclosed:

1. To another Federal agency, Travel Management Center (TMC), online booking engine suppliers and the airlines that are required to support the DHS/TSA Secure Flight program. In this program, DHS/TSA assumes the function of conducting pre-flight comparisons of airline passenger information to Federal Government watch lists. In order to supply the appropriate information, these mentioned parties are responsible for obtaining new data fields consisting of personal information for date of birth, gender, redress number, and known traveler number. At this time, the redress number is optional and the known traveler number is for future programs. They may be required to be stored in another phase of the Secure Flight program.

2. To a credit card company for billing purposes, including collection of past due amounts.

3. To a Federal agency by the contractor in the form of itemized statements or invoices, and reports of all transactions, including refunds and adjustments to enable audits of charges to the Federal Government.

4. To a Federal agency in connection with the hiring or retention of an employee; the issuance of a security clearance; the reporting of an investigation; the letting of a contract; or the issuance of a grant, license, or other benefit to the extent that the information is relevant and necessary to a decision.

5. To an authorized appeal or grievance examiner, formal complaints examiner, equal employment opportunity investigator, arbitrator, or other duly authorized official engaged in investigation or settlement of a grievance, complaint, or appeal filed by an employee to whom the information pertains.

6. To the Office of Personnel Management (OPM), the Office of Management and Budget (OMB), or the Government Accountability Office (GAO) when the information is required for program evaluation purposes.

7. To officials of labor organizations recognized under 5 U.S.C. chapter 71 when relevant and necessary to their duties of exclusive representation concerning personnel policies, practices, and matters affecting working conditions.

8. To a travel services provider for billing and refund purposes.

9. To a carrier or an insurer for settlement of an employee claim for loss of or damage to personal property incident to service under 31 U.S.C. 3721, or to a party involved in a tort claim against the Federal Government resulting from an accident involving a traveler.

10. To a credit reporting agency or credit bureau, as allowed and authorized by law, for the purpose of adding to a credit history file when it has been determined that an individual's account with a creditor with input to the system is delinquent.

11. To the U.S. Department of the Treasury when disclosure of the information is relevant to review payment and award eligibility through the Do Not Pay Working System for the purposes of identifying, preventing, or recouping improper payments to an applicant for, or recipient of, Federal funds, including funds disbursed by a ( printed page 50841) State (meaning a State of the United States, the District of Columbia, a territory or possession of the United States, or a federally recognized Indian tribe) in a State-administered, federally funded program.

For other ways that the Privacy Act permits the FTC to use or disclose system records outside the agency, see Appendix I (Authorized Disclosures and Routine Uses Applicable to All FTC Privacy Act Systems of Records), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacy-act-systems and at 83 FR 55541, 55542-55543 (Nov. 6, 2018).

HISTORY:

82 FR 50872-50882 (November 2, 2017); 75 FR 52749-52751 (August 27, 2010); 73 FR 33591-33634 (June 12, 2008).

SYSTEM NAME AND NUMBER:

Financial Management System—FTC (FTC-III-3).

SECURITY CLASSIFICATION:

Unclassified.

SYSTEM LOCATION:

Financial Management Office, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. This system of records is principally operated and maintained off-site for the FTC under interagency agreement with the Department of the Treasury's Administrative Resource Center (ARC), which is part of the Bureau of Fiscal Services. For other locations where records may be maintained or accessed, see Appendix III (Locations of FTC Buildings and Regional Offices), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacy-act-systems and 87 FR 57698 (Sept. 21, 2022).

SYSTEM MANAGER(S):

(1) Chief Financial Officer, Financial Management Office, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580, email: SORNs@ftc.gov; (2) The following system manager has overall responsibility for the Federal Financial System: Fiscal Accounting, Assistant Commissioner, Department of the Treasury's Administrative Resource Center (ARC).

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Records in this system may be disclosed:

1. To a Federal, State, local, or other public authority maintaining civil, criminal or other relevant enforcement information or other pertinent information, which has requested information relevant to or necessary to the requesting agency's, bureau's, or authority's hiring or retention of an individual, or issuance of a security clearance, license, contract, grant, or other benefit;

2. To the news media in accordance with guidelines contained in 28 CFR 50.2 which pertain to an agency's functions relating to civil and criminal proceedings;

3. Through a computer matching program, information on individuals owing debts to the Department of the Treasury, or any of its components, to other Federal agencies for the purpose of determining whether the debtor is a Federal employee or retiree receiving payments which may be used to collect the debt through administrative or salary offset;

4. To other Federal agencies to effect salary or administrative offset for the purpose of collecting debts, except that addresses obtained from the IRS shall not be disclosed to other agencies;

5. To a consumer reporting agency, including mailing addresses obtained from the Internal Revenue Service, to obtain credit reports;

6. To a debt collection agency, including mailing addresses obtained from the Internal Revenue Service, for debt collection services;

7. To unions recognized as exclusive bargaining representatives under the Civil Service Reform Act of 1978, 5 U.S.C. 7111 and 7114, the Merit Systems Protection Board, arbitrators, the Federal Labor Relations Authority, and other parties responsible for the administration of the Federal labor-management program for the purpose of processing any corrective actions, or grievances, or conducting administrative hearings or appeals, or if needed in the performance of other authorized duties;

8. To a public or professional auditing organization for the purpose of conducting financial audit and/or compliance audits;

9. To insurance companies or other appropriate third parties, including common carriers and warehousemen, in the course of settling an employee's claim for lost or damaged property filed with the Commission;

10. To the IRS for any applicable tax reporting purposes;

11. May be disclosed to the U.S. Department of the Treasury when disclosure of the information is relevant to review payment and award eligibility through the Do Not Pay Working System for the purposes of identifying, preventing, or recouping improper payments to an applicant for, or recipient of, Federal funds, including funds disbursed by a State (meaning a State of the United States, the District of Columbia, a territory or possession of the United States, or a federally recognized Indian tribe) in a State-administered, federally funded program; and

12. To the extent they pertain to FTC acquisition activities, to the General Service Administration's Federal Procurement Data System, a central repository for statistical information on Government contracting, for purposes of providing public access to Government-wide data about agency contract actions.

For other ways that the Privacy Act permits the FTC to use or disclose system records outside the agency, see Appendix I (Authorized Disclosures and Routine Uses Applicable to All FTC Privacy Act Systems of Records), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacy-act-systems and at 83 FR 55542- 55543 (Nov. 6, 2018).

HISTORY:

85 FR 16349-16360 (March 23, 2020); 80 FR 9460-9465 (February 23, 2015); 73 FR 33591-33634 (June 12, 2008).

SYSTEM NAME AND NUMBER:

Automated Acquisitions System—FTC (FTC-III-4).

SECURITY CLASSIFICATION:

Unclassified.

SYSTEM LOCATION:

Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. This system of records is principally operated and maintained off-site for the FTC under interagency agreement with the Department of the Treasury's Administrative Resource Center (ARC), which is part of the Bureau of Fiscal Services. For other locations where records may be maintained or accessed, see Appendix III (Locations of FTC Buildings and Regional Offices), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacy-act-systems and at 87 FR 57698 (Sept. 21, 2022). ( printed page 50842)

SYSTEM MANAGER(S):

Chief, Acquisitions Branch, Financial Management Office, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580, email: SORNs@ftc.gov.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

1. Records in this system pertaining to FTC acquisition activities may be transmitted or disclosed to the General Service Administration's Federal Procurement Data System, a central repository for statistical information on Government contracting, for purposes of providing public access to Government-wide data about agency contract actions.

2. Records in this system may be disclosed to the U.S. Department of the Treasury when disclosure of the information is relevant to review payment and award eligibility through the Do Not Pay Working System for the purposes of identifying, preventing, or recouping improper payments to an applicant for, or recipient of, Federal funds, including funds disbursed by a State (meaning a State of the United States, the District of Columbia, a territory or possession of the United States, or a federally recognized Indian tribe) in a State-administered, federally funded program.

For other ways that the Privacy Act permits the FTC to use or disclose system records outside the agency, see Appendix I (Authorized Disclosures and Routine Uses Applicable to All FTC Privacy Act Systems of Records), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacy-act-systems and at 83 FR 55542- 55543 (Nov. 6, 2018).

HISTORY:

73 FR 33591-33634 (June 12, 2008).

SYSTEM NAME AND NUMBER:

Employee Transportation Program Records—FTC (FTC-III-5).

SECURITY CLASSIFICATION:

Unclassified.

SYSTEM LOCATION:

Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580. For other locations where records may be maintained or accessed, see Appendix III (Locations of FTC Buildings and Regional Offices), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacy-act-systems and 87 FR 57698 (Sept. 21, 2022).

SYSTEM MANAGER(S):

Chief Administrative Services Officer, Office of the Chief Administrative Services Officer, Office of the Executive Director, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580, email: SORNs@ftc.gov.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Records in this system:

1. May be disclosed to the U.S. Department of Transportation (DOT) for purposes of processing and distributing subsidies to FTC employees and verifying employee compliance with program rules;

2. May be disclosed to the U.S. Department of the Treasury when disclosure of the information is relevant to review payment and award eligibility through the Do Not Pay Working System for the purposes of identifying, preventing, or recouping improper payments to an applicant for, or recipient of, Federal funds, including funds disbursed by a State (meaning a State of the United States, the District of Columbia, a territory or possession of the United States, or a federally recognized Indian tribe) in a State-administered, federally funded program; and

3. May be disclosed to other investigatory or law enforcement authorities, where necessary, to investigate, prosecute, discipline, or pursue other appropriate action against suspected program fraud or abuse, if any.

For other ways that the Privacy Act permits the FTC to use or disclose system records outside the agency, see Appendix I (Authorized Disclosures and Routine Uses Applicable to All FTC Privacy Act Systems of Records), available on the FTC's website at www.ftc.gov/​about-ftc/​foia/​foia-reading-rooms/​privacy-act-systems and at 83 FR 55542-55543 (Nov. 6, 2018).

HISTORY:

87 FR 964-974 (January 7, 2022); 82 FR 50871-50882 (November 2, 2017); 73 FR 33591-33634 (June 12, 2008).

91 FR 50838