Supporting Statement--0566(R)

Supporting Statement for the SSA-3288

Privacy and Disclosure of Official Records and Information;

Availability of Information and Records to the Public;

20 CFR 401 and 402

OMB No. 0960-0566

A. Justification

1. The Privacy Act of 1974, 5 U.S.C. 552a, Sections (b), (d)(1)-(2), (e)(2), and (f)(3) of the United States Code, provides the authority for the Commissioner to obtain information needed to access records, designation of a representative to receive an individual's medical records, information needed to amend or correct records, and consent statements from persons requesting information about an individual in Social Security Administration (SSA) records. These rules are also set forth under 20 CFR 401.40(b)&(c), 401.45, 401.55(b), 401.65(a), and 401.100(a) and (b) of the Code of Federal Regulations. The Freedom of Information Act, 5 U.S.C. 552, Sections (a)(3)(A) and (a)(4)(A)(iii), provides the authority for collecting information needed for record requests and fee waiver or reductions. These provisions are implemented under 20 CFR 402.130 and 20 CFR 402.185.

2. Under the Privacy and Disclosure of Official Records and Information, SSA has established methods in which the public can request the following: access to their SSA records; disclosure of SSA records; corrections/amendments to their SSA records; consent for release of records; records accessible through the Freedom of Information Act (FOIA); and waiver/reduction of fees normally charged for release of FOIA records. The information SSA requires for these requests is most often collected through a written letter, with the exception of the consent for release of records for which there is the Form SSA-3288. The respondents are individuals who request any of the following from SSA:

1. Access to Records - SSA has developed a procedure for records notification and access that requires individuals to provide data sufficient to identify themselves and their record(s), and authorize any requested third party access to their records. The intent is to provide access and at the same time safeguard against access by unauthorized persons or to someone else's records.

2. Designating a Representative for Disclosure of Medical Records - SSA has developed a special procedure for obtaining sensitive medical records that requires an individual to name a representative, preferably a qualified health professional, to receive the medical records on behalf of the individual. The representative reviews the complete medical records and determines whether all of the contents should be made available to the individual, such as sensitive psychological records that might have an adverse effect on the individual or a doctor/patient relationship. The designated representative makes the disclosure decisions on medical records.

3. Amendment of Records - SSA has developed a procedure for individuals who seek to amend or correct their data maintained in SSA systems of records. We request the individual to submit sufficient specified information to SSA to identify the individual, the data they wish to amend or correct, and to evaluate their request.

4. Consent for Release of Records - The required consent(s) are obtained (with certain exceptions specified by law) from anyone requesting information in SSA systems of records about another individual. Consents may be obtained on Form SSA-3288, "Consent for Release of Information" (attached for clearance), or on other non-SSA forms often used by large employers incorporating SSA approved consent language. SSA will not release information that is requested about an individual until the required consent is obtained from that individual. Under the Privacy Act (5 U.S.C. 552a (b)), an individual may give SSA written consent to disclose his or her personal information to a third party of his or her choosing. In addition, an individual may have multiple needs for the disclosure of his or her personal information, such as for qualification for a mortgage or pre-employment screenings.

5. FOIA Request for Records - SSA has developed a procedure for FOIA record requests which collects data needed to identify the requester, the record requested and an address where the record is to be sent. We only obtain the minimum amount of information needed to process the request.

6. Waiver/Reduction of Fees - SSA has developed a procedure for individuals who seek waiver or reduction of the fees normally charged for information sought from SSA records under the Freedom of Information Act. We collect data sufficient to determine if waiver or fee reduction is in the public interest as defined by law.

3. Currently, SSA has procedures by which the public can access and make corrections to their records online through the Request for Internet Services – Authentication (RISA) (0960-0596), items a and c above. However, this collection is used for other purposes, and, therefore, SSA has cleared it separately. Also, SSA has cleared an entirely electronic procedure by which the public can make FOIA requests and can request a waiver/reduction of fees for said requests through our eFOIA system (0960-0716), items e and f above.

The SSA-3288 is available to the public on the Internet in a PDF format which can be downloaded, printed out, filled in and sent to SSA for processing. However, since both the SSA-3288, Consent for Release of Information form, and any request to designate a representative for disclosure of medical records (items b and d above) are held under the Privacy Act laws, these actions currently require a wet signature under the law, and cannot be made electronic at this time.

4. The nature of the information being collected and the manner in which it is collected preclude duplication. While SSA collects data similar to that collected here using the eFOIA (0960-0716), that is an electronic-only collection and this is the paper version.

5. We have minimized the burden on small businesses or other small entities by requiring information for consents and FOIA record requests only to the extent required by law.

6. If this information were not collected, SSA would be unable to process any of these requests for the reasons stated here:

1. Access to Records - SSA cannot provide access to records under the Privacy Act without obtaining sufficient data to ensure that we have correctly identified the correct individual and the correct records. The Privacy Act contains strict penalties for individuals who obtain records of others without proper authorization and for officials who improperly disclose such records.

2. Disclosure of Medical Records to Designated Representative - Release of sensitive medical information in certain situations can adversely affect the individual or a doctor/patient relationship. The procedure for utilizing a designated representative is intended to avoid this and is in keeping with the intention of section 3(f) (3) of the Privacy Act.

3. Amendment of Records - SSA cannot amend or correct its records as required by law without obtaining adequate data to correctly identify the individual and evaluate the request.

4. Consent for Release of Records - Release of data without consent in situations in which consent is required by law is a felony under the Privacy Act.

5. FOIA Request for Records - SSA cannot process FOIA record requests as required by law unless we collect data sufficient to identify the requester, the record requested, and an address to which the requested record is to be sent.

6. Waiver/Reduction of Fees - SSA cannot grant waiver or reduction of required fees without obtaining data sufficient to evaluate the request.

Also, because this information is collected on an as needed basis, it cannot be collected less frequently. There are no technical or legal obstacles that prevent burden reduction.

7. There are no special circumstances that would cause this information collection to be conducted in a manner that is not consistent with 5 CFR 1320.5.

8. The 60-day advance Federal Register Notice was published on June 13, 2006 at 71 FR 34181, and SSA has received no public comments. The second Notice was published on September 11, 2006, at 71 FR 53485. There have been no outside consultations with members of the public.

9. SSA provides no payment or gifts to the respondents.

10. The information requested is protected and held confidential in accordance with 42 U.S.C. 1306, 20 CFR 401 and 402, 5 U.S.C. 552 (Freedom of Information Act), 5 U.S.C. 552a (Privacy Act of 1974) and OMB Circular No. A-130.

11. The information collection does not contain any questions of a sensitive nature.

12. Approximately 3,028,500 respondents request this information per year. The time burden per response varies for each type of information as listed below:

Type of Request	Number of Respondents	Frequency of Response	Average Burden Per Response	Estimated Annual Burden
(a) Access to Records	10,000	1	11 minutes	1,833 hours
(b) Designating a Representative for Disclosure of Records	3,000	1	2 hours	6,000 hours
(c) Amendment of Records	100	1	10	17 hours
(d) Consent of Release of Records	3,000,000	1	3 minutes	150,000 hours
(e) FOIA Requests for Records	15,000	1	5 minutes	1,250 hours
(f) Waiver/Reduction of Fees	400	1	5 minutes	33 hours
Totals	3,028,500			159,133 hours

1. Access to Records - There is no formal record of the number of requests to access records protected by the Privacy Act. SSA receives an estimated 40,000 annual requests to access earnings information on form SSA-7050 (0960-0525). We estimate that there are an additional 10,000 requests by letter for earnings information and other kinds of information. The estimated time for completion of the forms used to obtain earnings information using the SSA-7050 is 11 minutes. We have no reason to believe that it would take more time or less time to provide the data needed to process requests made by letter. Therefore, the estimated annual burden is (11 x 10,000 \ 60) 1,833 burden hours.

2. Designating a Representative for Disclosure of Records - There is no formal record of the number of designated representatives collected annually. An estimate of 3,000 is derived from estimates obtained from a sample of field and central office personnel who are involved with processing requests for medical records. The estimated burden for the data collection is 2 hours. This includes the approximate time required for the individual to provide the name of the person they want to act as a designated representative to SSA and the time spent by the representative reviewing the file and disclosing the information to the individual. The estimated annual burden is (2 x 3,000) 6,000 total hours.

3. Amendment of Records - There is no formal record of the number of formal requests to amend or correct records. Personnel who handle the requests estimate that about 10 percent are forwarded to the SSA Privacy Officer for formal disallowance. Routine record corrections (e.g., employer corrections of earnings reports) are not included. The Privacy Officer disallows about 10 formal requests a year. Estimated annual requests: 100. The estimated time for formal Privacy Act requests for record amendment or correction is 10 minutes. This is the approximate time required for an individual to write a letter to SSA formally requesting amendment or correction of records that contains the minimal amount of information SSA needs to evaluate the request. The estimated annual burden is (10 X 100 / 60) 17 hours.

4. Consent for Release of Records - There is no formal accounting of consents. An estimate of 200,000 is based on consultation with several SSA sources that deal with the consent process, as well as data on annual retirements and data on disclosures from SSA systems. In addition to the 200,000 normally processed in a year, there will be an estimated 2,800,000 consent forms completed. Under the Privacy Act (5 U.S.C. 552a (b)), an individual may give SSA written consent to disclose his or her personal information to a third party of his or her choosing. In addition, an individual may have multiple needs for the disclosure of his or her personal information. The estimated average time for consent collection is 2 to 3 minutes. This includes a low time of a few seconds to read and digest a simple consent statement incorporated into a retirement application, to up to 3 minutes for the more complex consent form SSA-3288 that incorporates additional identification data and/or data about the specific information in SSA files the requester is seeking. SSA used 3 minutes to compute the estimated annual burden of (3 X 3,000,000 / 60) 150,000 hours.

5. FOIA Requests for Records - SSA FOIA staff processes approximately 15,000 FOIA record requests annually. The estimated time to write a letter containing a FOIA record request is 5 minutes. This should fall within a range of 3 minutes for a simple request to 5 minutes for a longer request. SSA used 5 minutes to compute the burden of (5 X 15,000 / 60) 1,250 total hours.

6. Waiver/Reduction of Fees - SSA FOIA staff processes approximately 400 FOIA fee waiver/reduction requests annually. The estimated time to write a request for waiver or fee reduction is approximately 5 minutes for an estimated annual burden of (5 x 400 / 60) 33 hours.

Therefore, the total annual burden for each type of collection is 159,133 hours. The total burden is reflected as burden hours, and no separate cost burden has been calculated.

13. There is no known cost burden to the respondents.

14. Cost to the Federal Government of $1,120,000 is based on established net costs (gross costs less fees collected) of $140,000 for earnings record requests, $780,000 for FOIA processing, and an additional estimated 10,000 hours at an average of $20 per hour ($200,000) for all other collections.

15. The increase in the public reporting burden of from 111,175 to 159,133 is due to an increase in third party consents for verification and release of information.

16. The results of the information collection will not be published.

17. There is one form, SSA-3288, submitted for renewal. All other information is provided in written correspondence from individuals or in retirement applications from employers. OMB has granted SSA an exemption from the requirement that the expiration date for OMB approval be printed on its program forms. SSA produces millions of public-use forms, many of which have a life cycle longer than that of an OMB approval. SSA does not periodically revise and reprint its public-use forms (e.g., on an annual basis). This exemption was granted so that otherwise useable editions of forms would not be taken out of circulation because the expiration date had been reached. In addition, Government waste has been avoided because stocks of forms will not have to be destroyed and reprinted.

18. SSA is not requesting an exception to the certification requirements at 5 CFR 1320.9 and related provisions at 5 CFR 1320.8(b)(3).

B. Collection of Information Employing Statistical Methods

Statistical methods are not used for this information collection.

7