System Name: Users of Health Statistics, HHS/OASH/NCHS.
Security Classification: None.
System Location(s): National Center for Health Statistics, Centers for Disease Control, Presidential Building, Rm. 1140, 6525 Belcrest Road, Hyattsville, Maryland 20782.
Categories of Individuals Covered by the System: Persons who are past, present, or potential users of health statistics and would therefore have special interests in the programs conducted by NCHS, such as (1) persons who subscribe to NCHS publication series, (2) persons who purchase NCHS public use data tapes or publications, (3) persons who contact NCHS to request data or information on health statistics, (4) persons who attend health statistics conferences, and (5) persons known from their publications or otherwise to have a research, legislative, policy, or adminstrative interest in data produced by NCHS.
Categories of Records in the System: This system consists of information relating to the professional health statistical interests of health statistics users, such as their: Name, address, position, organization, education, memberships in professional organizations, special committee and task force assignments, offices held in organizations, publications, health statistics meetings attended, uses made of health statistics, health statistics projects, purchases of NCHS tapes or publications, and expressions of interests and concerns about health statistics.
Authority for Maintenance of the System: Public Health Service Act, section 308(g)(2) (42 U.S.C. 242m(g)(2), which authorizes the Secretary to take necessary action to assure that appropriate, high quality data are disseminated on as wide a basis as is practicable.
Purpose(s): NCHS uses the data in detemining how improvements can be made in (1) the content and methodology of its data programs, (2) its data publications, (3) dissemination of health statistics, and (4) meetings or other means for soliciting users' concerns and knowledge sharing.
Routine Uses of Records Maintained in the System, Including Categories of Users and the Purposes of such Uses:
1. The Department occasionally contracts with a private firm for the purpose of conducting surveys or collecting, analyzing, aggregating, otherwise refining, or evaluating data in this system. Relevant records are disclosed to such a contractor. The contractor is required to maintain Privacy Act safeguards with respect to such records.
2. Disclosure may be made to a congressional office from the record of an individual in response to an inquiry from the congressional office made at the request of that individual.
3. The Department of Health and Human Services (HHS) may disclose information from this system of records to the Department of Justice, or to a court or other tribunal, when
(a) HHS, or any component thereof; or
(b) Any HHS employee in his or her official capacity; or
(c) Any HHS employee in his or her individual capacity where the Department of Justice (or HHS, where it is authorized to do so) has agreed to represent the employee; or
(d) The United States or any agency thereof where HHS determines that the litigation is likely to affect HHS or any of its components,
is a party to litigation or has an interest in such litigation, and HHS determines that the use of such records by the Department of Justice, the court or other tribunal is relevant and necessary to the litigation and would help in the effective representation of the governmental party, provided, however, that in each case, HHS determines that such disclosure is compatible with the purpose for which the records were collected.
Records may be disclosed to student volunteers, individuals working under a personal services contract, and other individuals performing functions for PHS who do not technically have the status of agency employees, if they need the records in the performance of their agency functions.
Policies and Practices for Storing, Retrieving, Accessing, Retaining, and Disposing of Records in the System—
Storage: The information is contained on paper records and/or computer-readable tape.
Retrievability: Information is retrieved by name, and may also be retrievable by unique identifying number, address, specialty, or other identifying characteristics.
Safeguards: Measures to prevent unauthorized disclosures are implemented as appropriate for the particular records maintained in each project.
NCHS and its contractors implement personnel, physical, and procedural safeguards such as the following:
(1) Authorized Users: Employees who maintain records in this system are instructed to grant regular access only to authorized contractor personnel, the NCHS project officer, and NCHS employees whose duties require the use of such information. One-time and special access to the data is controlled by the System Manager, the NCHS Project Officer, and the Contract and/or Project Director. Furthermore, all employees of NCHS and contractor personnel with access to NCHS records are required, as a condition of employment, to sign an affidavit binding them to nondisclosure of identifiable individuals' information.
(2) Physical Safeguards: Records are stored in locked files or secured areas. Computer terminals are in secured areas. Computerized files are further protected by the Resources Access Control Facility ("RACF").
(3) Procedural Safeguards: Data stored in computers are accessed through the use of passwords/keywords known only to the principal investigators or authorized personnel. These passwords/keywords are changed frequently.
Contractors who maintain records in this system are instructed to make no further disclosure of the records except as authorized by the system manager and permitted by the Privacy Act. Privacy Act requirements are specifically included in contracts for research activities related to this system. The HHS project directors, contract officers, and project officers oversee compliance with these requirements.
The particular safeguards implemented in each project are developed in accordance with chapter 45-13, "Safeguarding Records Contained in Systems of Records," of the HHS General Administration Manual, supplementary chapter PHS hf. 45-13; Part 6, "ADP Systems Security," of the HHS Information Resources Manual; the National Bureau of Standards Federal Information Processing Standards (FIPS Pub. 41 and FIPS Pub 31).
Retention and Disposal: Records are retained for various periods of time depending upon how useful they are considered to be, in accordance with NCHS policy. Some records of users may be maintained indefinitely. Disposal methods include burning or shredding hard copy and erasing computer tapes and disks.
System Manager(s) and Address(es):
Director, National Center for Health Statistics, Centers for Disease Control, Presidential Building, Rm. 1140, 6525 Belcrest Road, Hyattsville, MD 20782.
Notification Procedure: To determine if a record exists, write to the System Manager. Information needed consists of name and address of individual.
Record Access Procedures: Same as notification procedures. Requestors should also reasonably specify the record contents being sought. Positive indentification is required from anyone seeking access. You may also request an accounting of disclosures that have been made of your record, if any.
Contesting Record Procedures: Write to the official at the address specified under notification procedures above, and reasonably identify the record and specify the information being contested, the corrective action sought, and your reasons for requesting the correction, along with supporting information to show how the record is inaccurate, incomplete, untimely, or irrelevant.
Record Source Categories: Records may be obtained from (1) order forms for publications or public use data tapes, (2) mailing lists, (3) registration forms of meeting (4) author information in books and journals, (5) reference citations, and (6) reports of colleagues.
Systems Exempted from Certain Provisions of the Act: None.
