Privacy Act System of Records: Correspondence Management System, EPA-22
[excerpted from: Federal Register: October 14, 2004 (Volume 69, Number 198)]
System Name: Correspondence Management System.
Security Classification: None.
System Location: National Computer Center, U.S. Environmental Protection Agency Main Campus, 109 T.W. Alexander Drive, Research Triangle Park, North Carolina 27709.
Categories of Individuals Covered by the System: Individuals who write to the U.S. Environmental Protection Agency or any of its employees in their official capacity; all individuals to whom correspondence is addressed by EPA or any of its employees in their official capacity; and individuals whose correspondence is referred to EPA by the President, the Vice President, or another federal agency. (Note: Two categories of correspondence that will not, in most cases, be logged into the system are (1) comments to a docket, and (2) Freedom of Information and Privacy Act requests. The Agency maintains separate applications, EPA Dockets and FOIAXPress, respectively, to log and track such correspondence.)
Categories of Records in the System: Correspondence generated by anyone in the public, private, or government sectors and addressed to the U.S. Environmental Protection Agency or any of its employees in their official capacity. Correspondence generated by any employee of the U.S. Environmental Protection Agency in his or her official capacity. Complete records may include metadata about the correspondence that facilitates tracking and record retrieval, a scanned image or electronic copy of the incoming communication, draft(s) of the response document, supporting documents or other attachments, and a scanned image or electronic copy of the outgoing signed response. Pre-decisional draft responses will not be included as part of the final record. Maintenance of physical records is the responsibility of each office in accordance with the Agency's records management guidelines.
Authority for Maintenance of the System: 5 U.S.C. 301.
Purpose(s): To track, route, and store incoming and outgoing Agency correspondence from and to members of the public, private, and governmental sectors.
Routine Uses of Records Maintained in the System: The following General Routine Uses of EPA Systems of Records apply to this application: A, B, C, D, E, F, G, H, I, J, and K. Records may also be disclosed to a federal, state, or local governmental agency when it is determined that a response by that agency is more appropriate than a response by the U.S. Environmental Protection Agency.
Policies and Practices for Storing, Retrieving, Retaining, and Disposing of Records in the System:
Storage: Computer database and paper files (until the Agency implements a National Archives and Records Administration-certified electronic records management system).
Retrievability: All CMS records are full-text indexed and are searchable by any data element.
Safeguards: CMS resides on servers located in a secure, access-controlled room at the EPA National Computer Center at the main EPA campus in Research Triangle Park, North Carolina. No unauthorized individuals may access the physical equipment on which the system resides. Electronic access to CMS is available only through the EPA intranet via a Single Socket Layer-encrypted connection. All users must have a password-protected account that defines their level of access to data stored in the system. Accounts can only be created by the System Administrator or Assistant System Administrators. Paper records are maintained in lockable file cabinets in secure, access-controlled rooms, areas, or buildings.
Retention and Disposal: Paper and electronic record copies are retained and disposed of according to National Archives and Records Administration guidelines and the U.S. Environmental Protection Agency Records Control Schedule.
System Manager(s) and Address(es): Director, Office of the Executive Secretariat, U.S. Environmental Protection Agency, 1200 Pennsylvania Avenue, NW., Washington, DC 20460; Correspondence Management System Administrator, Office of the Executive Secretariat, 1200 Pennsylvania Avenue, NW., Washington, DC 20460.
Notification Procedure: Any individual, or his or her duly authorized representative, who (1) is desirous of knowing if information of any kind about him or her is maintained in the Correspondence Management System; (2) wishes to access the information, if any, maintained about him or her in the Correspondence Management System; or (3) wants to formally contest the contents of a record maintained in the Correspondence Management System, should make his or her request in writing to the System Manager(s).
Record Access Procedures: At a minimum, requestors will be required to provide adequate identification (e.g., driver license, military identification card, employee badge or identification card) and, if necessary, proof of authority. Additional identity verification procedures may be required as warranted. Copies of records that are responsive to the individual's request will be mailed or delivered by reasonable alternate means, if requested. Fees may be incurred if copies are made and mailed in accordance with 16.4 of current regulations.
Contesting Records Procedures: Individuals requesting correction of or amendment to records must reasonably and accurately identify the record in question, specify the information they are contesting, and detail the corrective action sought. Complete U.S. Environmental Protection Agency Privacy Act procedures are set out in 40 CFR Part 16.
Record Source Categories: Sources include individuals who address correspondence to the Agency or any of its employees in their official capacities; Agency employees preparing responses to incoming correspondence or who generate original correspondence in their official capacities; and the White House and other federal agencies (referrals to the Agency).
System Exempted from Certain Provisions of the Act: None.