Privacy Act of 1974; Privacy Act System of Records

AGENCY:

National Aeronautics And Space Administration (NASA).

ACTION:

Notice of proposed revisions to existing Privacy Act systems of records.

SUMMARY:

Pursuant to the provisions of the Privacy Act of 1974 (5 U.S.C. 552a), the National Aeronautics and Space Administration is issuing public notice of its proposal to modify its previously noticed system of records. This notice publishes updates of those systems of records as set forth below under the caption SUPPLEMENTARY INFORMATION.

DATES:

Submit comments within 30 calendar days from the date of this publication.

ADDRESSES:

Patti F. Stockman, Privacy Act Officer, Office of the Chief Information Officer, National Aeronautics and Space Administration Headquarters, Washington, DC 20546-0001, (202) 358-4787, NASA-PAOfficer@nasa.gov.

FOR FURTHER INFORMATION CONTACT:

NASA Privacy Act Officer, Patti F. Stockman, (202) 358-4787, NASA-PAOfficer@nasa.gov.

SUPPLEMENTARY INFORMATION:

Minor modifications of the NASA systems of records include: Updates of locations as well as system and subsystem managers; addition of routine uses; and correction of previous typographical errors. Changes for specific NASA systems of records are set forth below:

NASA Freedom of Information Act System/NASA 10FOIA: Change “GOIA” to “FOIA” under Routine Uses; update the Safeguards section.

History Archives Biographical Collection/NASA 10HABC: Add Standard Routine Uses and refine the System Manager title.

Human Experimental and Research Data Records/NASA 10HERD: Refine system locations and corresponding subsystem managers; update the Safeguards section.

Health Information Management System/NASA 10HIMS: Refine system locations and corresponding subsystem managers; update the Safeguards section.

Inspector General Investigations Case Files/NASA 10IGIC: Delete a location where records are not maintained; update authorities for maintenance of the system; clarify some and add other routine uses; update the Safeguards section.

NASA 10FOIA

SYSTEM NAME:

NASA Freedom of Information Act System.

SECURITY CLASSIFICATION:

None.

SYSTEM LOCATION:

Locations 1-11 and 18, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

Individuals or their representatives who have submitted Freedom of Information Act (FOIA)/Privacy Act (PA) requests for records and/or FOIA administrative appeals with NASA; individuals whose requests for records have been referred to the Agency by other agencies; individuals who are the subject of such requests, appeals; and/or the NASA personnel assigned to handle such requests and appeals.

CATEGORIES OF RECORDS IN THE SYSTEM:

This system consists of records created or compiled in response to FOIA, FOIA/PA or PA requests for records or subsequent administrative appeals and may include: The requester's name, address, telephone number, email address; the original requests and administrative appeals; responses to such requests and appeals; all related memoranda, correspondence, notes and other related or supporting documentation, and in some instances copies of requested records and records under administrative appeal.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

51 U.S.C. 20113; 44 U.S.C. 3101; 5 U.S.C. 552; 14 CFR part 1206.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

This system is maintained for the purpose of processing and tracking access requests and administrative appeals under the FOIA; for the purpose of maintaining a FOIA administrative record regarding Agency action on such requests and appeals; and for the Agency in carrying out any other responsibilities under the FOIA and applicable executive orders. Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The records and information in these records may be disclosed in accordance with a NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained in paper files; copies may also be maintained in electronic format.

RETRIEVABILITY:

Information is retrieved by FOIA case file numbers.

SAFEGUARDS:

Records are maintained on a secure NASA server and protected in accordance with all Federal standards and those established in NASA regulations at 14 CFR 1212.605. Additionally, the server and data management environments employ infrastructure encryption technologies both in data transmission and at rest on servers. An approved security plan is in place for the system containing the records in accordance with OMB Circular A-130, Management of Federal Information Resources. Only authorized personnel requiring information in the official discharge of their duties are authorized access to records through approved access or authentication methods. Access to electronic records is achieved only from workstations within the NASA Intranet or via a secure Virtual Private Network (VPN) connection that requires two-factor hardware token authentication. Non-electronic records are secured in locked rooms or files.

RETENTION AND DISPOSAL:

Records are retained and disposed of in accordance with guidelines defined in the NASA Procedural Requirements (NPR) 1441.1D, NASA Records Retention Schedules (NRRS), Schedule 1, Item 49.

SYSTEM MANAGER AND ADDRESS:

System Manager: Principal Agency FOIA Officer, Office of Communications, Location 1, as set forth in Appendix A. Subsystem Managers: Center FOIA Officers, located within locations 2-11 and 18, as set forth in Appendix A.

NOTIFICATION PROCEDURE:

Individuals interested in inquiring about their records should notify the system manager or subsystem manager at the appropriate NASA Center, as set forth in Appendix A.

RECORD ACCESS PROCEDURES:

Individuals seeking to access their FOIA case file should submit their request in writing to the system manager or subsystem manager at the appropriate NASA Center, as set forth in Appendix A. The request envelope should be clearly marked, “PRIVACY ACT REQUEST FOR ACCESS.” The request should include a general description of the records sought, FOIA case file number, and must include your full name, current address, and the date. The request must be signed and either notarized or submitted under penalty of perjury. The system manager may require a notarized signature. Some information may be exempt from access in accordance with FOIA regulations.

CONTESTING RECORD PROCEDURES:

The NASA regulations governing access to records, procedures for contesting the content and for appealing initial determinations are set forth in Title 14, Code of Federal Regulations, Part 1212.

RECORD SOURCE CATEGORIES:

Information is collected directly from individuals making Freedom of Information Act requests.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.

NASA 10HABC

SYSTEM NAME:

History Archives Biographical Collection.

SECURITY CLASSIFICATION:

None.

SYSTEM LOCATION:

Location 1 and 11 as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on individuals who are of historical significance in aeronautics, astronautics, space science, and other concerns of NASA.

CATEGORIES OF RECORDS IN THE SYSTEM:

Biographical data; speeches and articles by an individual; correspondence, interviews, and various other tapes and transcripts of program activities.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

51 U.S.C. 20112(a)(3) and 44 U.S.C. 3101.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSE OF SUCH USES:

The following are routine uses:

1. Disclosure to scholars (historians and other disciplines) or any other interested individuals for research in writing dissertations, articles, and books, for government, commercial, and nonprofit publication or developing material for other media use.

2. NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained as hard-copy documents and on electronic media.

RETRIEVABILITY:

The records are retrieved from the system by the individual's name.

SAFEGUARDS:

Because these records are archive material and, therefore, a matter of public information, there are no special safeguard procedures required.

RETENTION AND DISPOSAL:

Records are retained indefinitely in Agency reference collections in history offices, but may be destroyed when no longer needed in accordance with NASA Records Retention Schedules, Schedule 1 Item 10.

SYSTEM MANAGERS AND ADDRESSES:

Chief Archivist, Location 1.

Subsystem Manager: Public Affairs Officer, Location 11 as set forth in Appendix A.

NOTIFICATION PROCEDURE:

Information may be obtained from the system manager listed above.

RECORD ACCESS PROCEDURE:

Requests from individuals should be addressed to same address as stated in the Notification section above.

CONTESTING RECORD PROCEDURES:

The NASA regulations for access to records and for contesting contents and appealing initial determinations by the individual concerned appear at 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

Press releases, newspapers, journals, copies of internal Agency records, and the individuals themselves.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.

NASA 10HERD

SYSTEM NAME:

Human Experimental and Research Data Records.

SECURITY CLASSIFICATION:

None.

SYSTEM LOCATION:

Locations 2, 5, 6, and 8, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

The information in this system of records is obtained from individuals who have been involved in space flight, aeronautical research flight, and/or participated in NASA tests or experimental or research programs; civil service employees, military, employees of other government agencies, contractor employees, students, human subjects (volunteer or paid), and other volunteers on whom information is collected as part of an experiment or study.

CATEGORIES OF RECORDS IN THE SYSTEM:

This system of records contains data obtained in the course of an experiment, test, or research medical data from in-flight records, other information collected in connection with an experiment, test, or research.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

51 U.S.C. 20113(a) and 44 U.S.C. 3101.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. Records and information in this system may be disclosed: (1) To other individuals or organizations, including Federal, State, or local agencies, and nonprofit, educational, or private entities, who are participating in NASA programs or are otherwise furthering the understanding or application of biological, physiological, and behavioral phenomena as reflected in the data contained in this system of records; (2) To external biomedical professionals and independent entities to support internal and external reviews for purposes of research quality assurance; (3) To agency contractors or other Federal agencies, as necessary for the purpose of assisting NASA in the efficient administration of its programs; (4) To a Congressional office in response to an inquiry from that office made at the request of the subject of the record; and; and (5) In accordance with standard routine uses set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, AND DISPOSITIONING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are stored as paper documents, electronic media, micrographic media, photographs, or motion pictures film, and various medical recordings such as electrocardiograph tapes, stripcharts, and x-rays.

RETRIEVABILITY:

Records are retrieved by the individual's name, experiment or test; arbitrary experimental subject number; flight designation; or crewmember designation on a particular space or aeronautical flight.

SAFEGUARDS:

Records are maintained on secure NASA servers and protected in accordance with all Federal standards and those established in NASA regulations at 14 CFR 1212.605. Additionally, server and data management environments employ infrastructure encryption technologies both in data transmission and at rest on servers. Approved security plans are in place for systems containing the records in accordance with OMB Circular A-130, Management of Federal Information Resources. Only authorized personnel requiring information in the official discharge of their duties are authorized access to records through approved access or authentication methods. Access to electronic records is achieved only from workstations within the NASA Intranet or via a secure Virtual Private Network (VPN) connection that requires two-factor hardware token authentication. Non-electronic records are secured in locked rooms or files.

RETENTION AND DISPOSAL:

Records are maintained in Agency files for varying periods of time depending on the need for use of the records and destroyed when no longer needed in accordance with NASA Records Retention Schedules, Schedule 7 Item 16.

SYSTEM MANAGER(S) AND ADDRESS(ES)

Chief Health and Medical Officer, Location 1.

Subsystem Managers: Director Life Sciences Directorate, Chief Space Medicine Division, and Program Scientist Human Research Program, all at Location 5; Institutional Review Board (IRB) Chairs at Locations 2, 6, and 8, as set forth in Appendix A.

NOTIFICATION PROCEDURE:

Information may be obtained by contacting the cognizant system or subsystem manager listed above. Requests must contain the identifying data concerning the requester, e.g., first, middle and last name; date of birth; and Social Security Number.

RECORD ACCESS PROCEDURES:

Requests from individuals should be addressed to the same address as stated above.

CONTESTING RECORD PROCEDURES:

The NASA regulations for access to records and for contesting and appealing initial determinations by the individual concerned appear at 14 CFR part 1212.

RECORD SOURCE CATEGORIES:

Information in this system is obtained from experimental test subjects, physicians and other health care providers, principal investigators and other researchers, and previous experimental test or research records.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.

NASA 10HIMS

SYSTEM NAME:

Health Information Management System.

SECURITY CLASSIFICATION:

None

SYSTEM LOCATION:

Medical Clinics/Units and Environmental Health Offices at Locations 1 through 14 inclusive, and 19, as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on NASA civil service employees and applicants; other Agency civil service and military employees working at NASA; astronauts and their families; International Space Partners astronauts, their families, or other space flight personnel on temporary or extended duty at NASA; onsite contractor personnel who receive job-related examinations under the NASA Occupational Health Program, have work-related mishaps or accidents, or come to clinic for emergency or first-aid treatment; visitors to NASA Centers who come to the clinic for emergency or first-aid treatment.

CATEGORIES OF RECORDS IN THE SYSTEM:

This system contains general medical records of medical care, first aid, emergency treatment, examinations (e.g., surveillance, hazardous workplace, certification, flight, special purpose and health maintenance), exposures (e.g., hazardous materials and ionizing radiation), and consultations by non-NASA physicians.

Information resulting from physical examinations, laboratory and other tests, and medical history forms; treatment records; screening examination results; immunization records; administration of medications prescribed by private/personal or NASA flight surgeon physicians; consultation records; and hazardous exposure and other health hazard/abatement data.

Medical records, behavioral health records, and physical examination records of Astronauts and their families.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

51 U.S.C. 2475 20113(a); 44 U.S.C. 3101; 42 CFR part 2.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES

Any disclosures of information will be compatible with the purpose for which the Agency collected the information. The records and information in this system may be disclosed: (1) To external medical professionals and independent entities to support internal and external reviews for purposes of medical quality assurance; (2) To private or other government health care providers for consultation or referral; (3) To the Office of Personnel Management, Occupational Safety and Health Administration, and other Federal or State agencies as required in accordance with the Federal agency's special program responsibilities; (4) To insurers for reimbursement; (5) To employers of non-NASA personnel in support of the Mission Critical Space Systems Personnel Reliability Program; (6) pursuant to NASA Space Act agreements to international partners for mission support and continuity of care for their employees; (7) To non-NASA personnel performing research, studies, or other activities through arrangements or agreements with NASA and for mutual benefit; (8) To the public of pre-space flight information having mission impact concerning an individual crewmember, limited to the crewmember's name and the fact that a medical condition exists; (9) To public, limited to the crewmember's name and the fact that a medical condition exists, if a flight crewmember is, for medical reasons, unable to perform a scheduled public event during the time period following Space Shuttle landing and concluding with completion of the post space flight return to duty medical evaluation; (10) To the public of medical conditions arising from accidents, consistent with NASA regulations; (11) To agency contractors or other Federal agencies, as necessary for the purpose of assisting NASA in the efficient administration of its programs; (12) To a Congressional office in response to an inquiry from that office made at the request of the subject of the record; and (13) In accordance with standard routine uses 1-7 as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, AND DISPOSITIONING OF RECORDS IN THE SYSTEM:

STORAGE:

Records are stored in multiple formats including paper, digital, micrographic, photographic, and as medical recordings such as electrocardiograph tapes, x-rays and strip charts.

RETRIEVABILITY:

Records are retrieved from the system by the individual's name, date of birth, and/or Social Security or other assigned Number.

SAFEGUARDS:

Records are maintained on secure NASA servers and protected in accordance with all Federal standards and those established in NASA regulations at 14 CFR 1212.605. Additionally, server and data management environments employ infrastructure encryption technologies both in data transmission and at rest on servers. Approved security plans are in place for systems containing the records in accordance with OMB Circular A-130, Management of Federal Information Resources. Only authorized personnel requiring information in the official discharge of their duties are authorized access to records through approved access or authentication methods. Access to electronic records is achieved only from workstations within the NASA Intranet or via a secure Virtual Private Network (VPN) connection that requires two-factor hardware token authentication. Non-electronic records are secured in locked rooms or files.

RETENTION AND DISPOSAL:

Records are maintained in Agency files and destroyed by series in accordance with NASA Records Retention Schedule 1, Item 126, and NASA Records Retention Schedule 8, Item 57.

SYSTEM MANAGER(S) AND ADDRESS(ES):

Chief Health and Medical Officer at Location 1.

Subsystem Managers: Director Occupational Health at Location 1; Chief, Space Medicine Division at Location 5; Occupational Health Contracting Officers Technical Representatives at Locations 2-4, 6-14, and 19. Locations are as set forth in Appendix A.

NOTIFICATION PROCEDURE:

Information may be obtained by contacting the cognizant system or subsystem manager listed above. Requests must contain the identifying data concerning the requester, e.g., first, middle and last name; date of birth; and Social Security Number.

RECORD ACCESS PROCEDURES:

Individual written requests for information shall be addressed to the System Manager at Location 1 or the subsystem manager at the appropriate NASA Center.

CONTESTING RECORD PROCEDURES:

The NASA regulations for access to records and for contesting contents and appealing initial determinations by the individual concerned appear in 14 CFR part 1212.

RECORD SOURCE PROCEDURES:

The information in this system of records is obtained from individuals, physicians, and previous medical records of individuals.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.

NASA 10IGIC

SYSTEM NAME:

Inspector General Investigations Case Files.

SECURITY CLASSIFICATION:

Some of the material contained in the system has been classified in the interests of national security pursuant to Executive Order 11652.

SYSTEM LOCATION:

Locations 1, 2, 4 through 11, 14, 16 and 17 as set forth in Appendix A.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

This system maintains information on current and former employees of NASA, contractors, and subcontractors, and others whose actions have affected NASA.

CATEGORIES OF RECORDS IN THE SYSTEM:

Case files pertaining to matters including, but not limited to, the following classifications of cases: (1) Fraud against the Government, (2) theft of Government property, (3) bribery, (4) lost or stolen lunar samples, (5) misuse of Government property, (6) conflict of interest, (7) waiver of claim for overpayment of pay, (8) leaks of Source Evaluation Board information, (9) improper personal conduct, (10) irregularities in awarding contracts, (11) computer crimes, (12) research misconduct, and (13) whistleblower protection investigations under various statutes and regulations.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

51 U.S.C. 20113; 51 U.S.C. 20114; 44 U.S.C. 3101; Inspector General Act of 1978, as amended, 5 U.S.C. Appendix 3.

PURPOSES:

Information in this system of records is collected in the course of investigating alleged crimes and other violations of law or regulations that affect NASA. The information is used by prosecutors, Agency managers, law enforcement agencies, Congress, NASA contractors, and others to address the crimes and other misconduct discovered during investigations.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

The following are routine uses: (1) Responding to the White House, the Office of Management and Budget, and other organizations in the Executive Office of the President regarding matters inquired of; (2) disclosure to a congressional office from the record of an individual in response to a written inquiry from the congressional office made at the request of that individual; (3) providing data to Federal intelligence elements; (4) providing data to any source from which information is requested in the course of an investigation, and to identify the type of information requested; (5) providing personal identifying data to Federal, State, local, or foreign law enforcement representatives seeking confirmation of identity of persons under investigations; (6) disclosing, as necessary, to a contractor, subcontractor, or grantee firm or institution, to the extent that the disclosure is in NASA's interest and is relevant and necessary in order that the contractor, subcontractor, or grantee is able to take administrative or corrective action; (7) disclosing to any official (including members of the Council of Inspectors General on Integrity and Efficiency (CIGIE) and staff and authorized officials of the Department of Justice and Federal Bureau of Investigation) charged with the responsibility to conduct qualitative assessment reviews of internal safeguards and management procedures employed in Office of Inspector General (OIG) operations; (8) disclosing to members of the CIGIE for the preparation of reports to the President and Congress on the activities of the Inspectors General; (9) disclosing to the public when: The matter under investigation has become public knowledge, or when the Inspector General determines that such disclosure is necessary to preserve confidence in the integrity of the OIG investigative process, or to demonstrate the accountability of NASA officers, or employees, or other individuals covered by this system, unless the Inspector General determines that disclosure of the specific information in the context of a particular case would constitute an unwarranted invasion of personal privacy; (10) disclosing to the news media and public when there exists a legitimate public interest (e.g., to provide information on events in the criminal process, such as indictments), or when necessary for protection from imminent threat to life or property; (11) disclosing to any individual or entity when necessary to elicit information that will assist an OIG investigation or audit; (12) disclosing to complainants and/or victims to the extent necessary to provide such persons with information and explanations concerning the progress and/or results of the investigation or case arising from the matters of which they complained and/or of which they were a victim; (13) disclosing to contractors, grantees, experts, consultants, students, and others performing or working on a contract, service, grant, cooperative agreement, or other assignment for the Federal Government, who have a need to know such information in order to accomplish an agency function; (14) NASA standard routine uses as set forth in Appendix B.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Records in this system are maintained as hard-copy documents and on electronic media.

RETRIEVABILITY:

Each OIG investigation is assigned a case number and all records relating to a particular investigation are filed and retrieved by that case number. Records may also be retrieved from the system by the name of an individual.

SAFEGUARDS:

Records are maintained on secure NASA servers and protected in accordance with all Federal standards and those established in NASA regulations at 14 CFR 1212.605. Additionally, server and data management environments employ infrastructure encryption technologies both in data transmission and at rest on servers. Approved security plans are in place for systems containing the records in accordance with OMB Circular A-130, Management of Federal Information Resources. Only authorized personnel requiring information in the official discharge of their duties are authorized access to records through approved access or authentication methods. Access to electronic records is achieved only from workstations within the NASA Intranet or via a secure Virtual Private Network (VPN) connection that requires two-factor hardware token authentication. Non-electronic records are secured in locked rooms or files.

RETENTION AND DISPOSAL:

Records are maintained in Agency files and destroyed in accordance with NASA Procedural Requirements (NPR) 1441.1, NASA Records Retention Schedules, Schedule 9. Files containing information of an investigative nature but not related to a specific investigation are destroyed in accordance with NPR 1441.1. Significant case files are scheduled for disposition with the National Archives and Records Administration when closed. All other case files are destroyed 10 years after file is closed.

SYSTEM MANAGER AND ADDRESS:

Assistant Inspector General for Investigations, Location 1.

Subsystem Managers Special and Resident Agents in Charge, Location 2, 4 through 11 inclusive, 14, 16, and 17 as set forth in Appendix A.

NOTIFICATION PROCEDURE:

None. System is exempt (see below).

RECORD ACCESS PROCEDURES:

None. System is exempt (see below).

CONTESTING RECORD PROCEDURES:

None. System is exempt (see below).

RECORD SOURCE CATEGORIES:

Exempt.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

(1) The Inspector General Investigations Case Files system of records is exempt from any part of the Privacy Act (5 U.S.C. 552a), EXCEPT the following subsections: (b) relating to conditions of disclosure; (c)(1) and (2) relating to keeping and maintaining a disclosure accounting; (e)(4)(A)-(F) relating to publishing a system notice setting forth name, location, categories of individuals and records, routine uses, and policies regarding storage, retrievability, access controls, retention and disposal of the records; (e)(6), (7), (9), (10), and (11) relating to the dissemination and maintenance of records; (i) relating to criminal penalties. This exemption applies to those records and information contained in the system of records pertaining to the enforcement of criminal laws.

(2) To the extent that there may exist noncriminal investigative files within this system of records, the Inspector General Investigations Case Files system of records is exempt from the following subsections of the Privacy Act (5 U.S.C. 552a): (c)(3) relating to access to disclosure accounting, (d) relating to access to reports, (e)(1) relating to the type of information maintained in the records; (e)(4)(G), (H), and (I) relating to publishing the system notice information as to agency procedures for access and amendment and information as to the categories of sources of records, and (f) relating to developing agency rules for gaining access and making corrections. The determination to exempt this system of records has been made by the Administrator of NASA in accordance with 5 U.S.C.552a(j) and (k) and subpart 5 of the NASA regulations appearing in 14 CFR part 1212, for the reason that a component of the Office of Inspector General, NASA, performs as its principal function activities pertaining to the enforcement of criminal laws, within the meaning of 5 U.S.C. 552a(j)(2).