16 August 1997
Source: http://www.access.gpo.gov/su_docs/aces/aaces002.html

NSA/CSS Privacy Act Rules are part of the Defense Department Rules:
http://jya.com/dod-par.txt (1.1MB)

Table of Contents


GNSA 01 NSA/CSS Access, Authority and Release of Information File.

GNSA 02 NSA/CSS Applicants.

GNSA 03 NSA/CSS Correspondence, Cases, Complaints, Visitors, Requests.

GNSA 04 NSA/CSS Military Reserve Personnel Data Base.

GNSA 05 NSA/CSS Equal Employment Opportunity Data.

GNSA 06 NSA/CSS Health, Medical and Safety Files.

GNSA 07 NSA/CSS Motor Vehicles and Carpools.

GNSA 08 NSA/CSS Payroll and Claims.

GNSA 09 NSA/CSS Personnel File.

GNSA 10 NSA/CSS Personnel Security Files.

GNSA 11 NSA/CSS Time, Attendance and Absence.

GNSA 12 NSA/CSS Training.

GNSA 13 NSA/CSS Archival Records.

GNSA 14 NSA/CSS Library Patron File Control System.

GNSA 15 NSA/CSS Computer Users Control System.

GNSA 16 NSA/CSS Drug Testing Program.

GNSA 17 NSA/CSS Employee Assistance Service (EAS) Case Records.

GNSA 18 NSA/CSS Operations Files.




From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-49]

GNSA 

System name: NSA/CSS Access, Authority and Release of
      Information File.

System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized Segments - Each staff, line, contract and field element
  as appropriate.
Categories of individuals covered by the system:
  NSA/CSS civilian employees, personnel under contract or appointment
  and military assignees.
Categories of records in the system:
  File may consist of authorizations to obtain keys; authorizations for
  access to specific sensitive information or areas; delegation of
  responsibility to authorize or request specific action, work projects
  or access; notification to report for duty in event of hazardous
  weather or other emergency; authorizations to officially release
  various types of communications; assignments to special activities;
  assignments as Agency representatives to department or other
  government committees, boards, task groups; assignments to special
  tasks in event of technical or national emergencies; assignments to
  duties as fire, safety, security officers, Combined Federal Campaign
  and blood donation workers; and assignments to other special or
  volunteer duties or activities.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 50 U.S.C. 831-835, (Pub. L. 88-290); 18 U.S.C. 798; E.O. 12333.
Purpose(s):
  To provide a means to rapidly determine who may have access to
  information, spaces, combinations or keys; who is required to report
  for duty in special circumstances; who has been authorized to release
  official communications; who has been assigned additional special
  tasks, voluntary duties or other duties.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To contractor employees to make determinations as noted in the purpose
  above; to investigatory authorities engaged in national security
  investigations and to intelligence authorities or other governmental
  entities with respect to specific assignments or when emergency action
  is required.
  The `Blanket Routine Uses' set forth at the beginning of the NSA's
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders, paper cards in file boxes, magnetic
  tapes, disks and other computer storage media, computer listings,
  microfilm.
Retrievability:
  By name.
Safeguards:
  For paper, computer listing, cards and microfilm - Secure limited
  access facilities, within those facilities secure limited access rooms
  and within those rooms lockable containers. Access to information is
  limited to authorized individuals only. For machine records stored on
  magnetic tape, disk or other computer storage media within the
  computer processing area- additional secure limited access facilities,
  specific processing requests from authorized persons only, specific
  authority to access stored records and delivery to authorized persons
  only. Where data elements are derived from the Personnel Security
  File-remote terminal inhibitions are in force with respect to access
  to complete file or data relating to persons not assigned to
  requesting organization using a remote terminal. Remote terminals are
  secured, are available to authorized persons only, and certain
  password and other identifying information available to authorized
  users only is required. Terminals are not available outside of
  headquarters area locations.
Retention and disposal:
  Retained until individual is no longer authorized access or release
  authority or assigned to specific additional duties. Computer files
  are purged and updated to reflect current status.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Requests from individual for notification shall be in writing
  addressed to the Chief, Office of Policy, National Security Agency/
  Central Security Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Requests from individuals for access shall be in writing addressed to
  the Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Applications and related forms requesting access, appointment or
  authorization, notifications of same, personnel records, personnel
  security records, and other sources as appropriate and required.
Exemptions claimed for the system:
  Portions of this system may be exempt pursuant to 5 U.S.C. 552a(k)(1)
  and (k)(5), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553 (b) (1), (2), and (3),
  (c) and (e) and published in 32 CFR part 322. For additional
  information contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-50]

GNSA 

System name: NSA/CSS Applicants.

System location:
  National Security Agency/Central Security Service, Ft. George G.
  Meade, MD 20755-6000.
Categories of individuals covered by the system:
  Applicants for employment with NSA/CSS.
Categories of records in the system:
  File contains forms, documents and correspondence providing personal
  and qualifications information submitted by individual applicants,
  educational institutions, past employers, references. Records include
  processing items, status reports, test results, interview reports,
  reports of reviewing organizations and other related information.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L.86-
  36); 50 U.S.C. 831-835, (Pub. L. 88-290); E.O. 10450; 5 U.S.C. and
  appropriate implementing Office of Personnel Management directives in
  the Federal Personnel Manual.
Purpose(s):
  To support the recruitment, selection, hire and placement of
  applicants. The file is used to document applicant processing, as a
  basis for selection decisions by individual agency elements and the
  personnel organization, and such other related uses as required.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To contractor employees and other government entities to make
  determinations as noted in the purpose above.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper in file folders, cards in containers, logs, computer listings,
  computer magnetic tape, disks and other computer storage media,
  microfilm.
Retrievability:
  By name, Social Security Number, and other appropriate data elements.
Safeguards:
  For paper, computer printouts and microfilm - Secure limited access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers. Access to information is
  limited to those individuals specifically authorized and granted
  access by the Deputy Director for Management Services. For machine
  records stored on magnetic tape, disk or other computer storage media
  within the computer processing area-additional secure limited access
  facilities, specific processing requests accepted from authorized
  persons only. Remote terminal inhibitions are in force with respect to
  access to computerized file or data relating to persons not assigned
  to the organization using a remote terminal. Remote terminals are
  secured, are available to authorized persons only, and certain
  password and other identifying information available to authorized
  users only is required. Terminals are not available outside of
  headquarters area locations.
Retention and disposal:
  For applicants who are subsequently hired, records are transferred to
  Personnel File or destroyed as appropriate. For applicants not hired,
  record are retained for a period not to exceed one year or until
  completion of legal proceedings involving issues pertaining to these
  records, whichever is later, unless employment requirements
  necessitate retention for a longer period.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Applicant, educational institutions, references, former employers
  including other governmental entities, interviewing and reviewing
  individuals including possible gaining organization, security and
  medical authorities and other sources as relevant and appropriate.
Exemptions claimed for the system:
  Portions of this system may be exempt pursuant to 5 U.S.C. 552a(k)(1)
  and (k)(5), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-51]

GNSA 

System name: NSA/CSS Correspondence, Cases, Complaints,
      Visitors, Requests.

System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized Segments - Each staff, line, contract and field element
  as authorized and appropriate.
Categories of individuals covered by the system:
  Persons calling or corresponding with NSA/CSS concerning congressional
  inquiries; job opportunities; Freedom of Information and Privacy Act
  requests; other information requests, suggestions or comments;
  registering complaints; requesting appropriate security clearance and
  permission to visit; requesting or requiring information relating to
  litigation or anticipated litigation; and employees or assignees
  registering complaints or requesting information with respect to Equal
  Employment Opportunities; requesting inquiry or investigation by the
  Inspector General; requesting advice, opinions, or assistance from the
  General Counsel or provided to the General Counsel with respect to
  conflict of interest issues.
Categories of records in the system:
  File contains correspondence from and to individuals, documents and
  memoranda related to the response, written material developed during
  or in anticipation of litigation or investigation of inquiries,
  complaints or grievances, written material developed in response to a
  request for advice or opinion from an individual, written material
  required by law, executive order, and regulations with respect to
  Equal Employment Opportunity investigations, Inspector General
  investigations, judicial branch subpoenas, orders and related actions.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 50 U.S.C. 831-835, (Pub. L. 88-290); 5 U.S.C. 552; Pub. L. 92-
  261; Pub. L. 93-259; E.O. 10450; E.O. 11222; E.O. 11478; and E.O.
  12356.
Purpose(s):
  To provide a record of the official responses and determinations of
  NSA/CSS to various inquiries for information, complaints or official
  actions of other governmental agencies and branches.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To contractor employees to make determinations as noted in the purpose
  above.
  To provide reports in summary or statistical form to the Office of
  Equal Employment Opportunity.
  To appropriate governmental agencies and the judicial branch where
  litigation or anticipated civil or criminal litigation is involved or
  where sensitive national security investigations related to protection
  of intelligence sources or methods are involved.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders.
Retrievability:
  By name, case, or subject and within subject by name.
Safeguards:
  Secure limited access facilities and within those facilities
  individual limited access offices. Files are stored in lockable
  containers and are only made available to individuals specifically
  authorized access or required to respond and individuals affected by
  actions taken or complaints received. Files related to sensitive
  investigations by the Equal Employment Opportunity Office, the
  Inspector General and General Counsel are additionally protected
  pursuant to appropriate statutes, executive orders or regulations and
  attorney-client privilege. In some cases records are sealed pursuant
  to sensitivity of subject matter or specific court order.
Retention and disposal:
  Records are retained on-site indefinitely.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Official correspondence, written materials developed in response to
  inquiries from executive branch departments and agencies, judicial
  branch elements, Congress, Congressional committees, individual
  Congressmen, other government and private entities as appropriate, and
  other sources as appropriate and required.
Exemptions claimed for the system:
  Individual records in this file may be exempt pursuant to 5 U.S.C.
  552a(k)(1), (k)(2), (k)(4), and (k)(5), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-52]

GNSA 

System name: NSA/CSS Military Reserve Personnel Data Base.

System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized Segments - Each staff, line, field element and military
  service as authorized and appropriate.
Categories of individuals covered by the system:
  Inactive duty military reserve personnel assigned to NSA mobilization
  billets, requesting to perform on-the-job training in NSA work
  centers, or scheduled to attend formal and resident courses of
  instruction under the auspices or sponsorship of NSA.
Categories of records in the system:
  File contains correspondence, papers, and forms relating to
  individual's service extracted from his/her military personnel records
  including but not limited to military service, enlistment or related
  service agreement/extension/orders, active duty records; duty status,
  reserve status; qualifications for active military duty assignments;
  clearance data; applications/nominations for assignments; pictures;
  military check-in/out sheets; military skill specialty evaluation
  data; active duty training; service record brief, military personnel
  utilization survey; correspondence courses, educational/academic
  records; applications for I.D.; efficiency or fitness records;
  application/prior service enlistment documents; work experiences;
  professionalization documentation; achievement certificates,
  suggestions; personnel screening and evaluation records;
  acknowledgement of service requirements; temporary disability record;
  change of name; documents relating to promotion or non-selection,
  transfers, leave, pay entitlements, financial records, awards, health
  or medical records, reports of proceedings of physical fitness boards,
  birth certificates, citizenship statements and status; passport,
  questionnaire/records of security clearances, language capability,
  language proficiency questionnaire; flight records, aviator flight
  records, instrument certification papers; reduction in grade release,
  retirement, temporary duty, record of retirement points;
  correspondence and/or orders relating to dependents, service action,
  federal recognition orders, correspondence relating to badges, medals,
  and unit awards, including foreign decorations; correspondence/
  letters/administrative reprimands/censures/admonitions relating to
  apprehensions/confinement and discipline.
Authority for maintenance of the system:
  National Security Act, 50 U.S.C. 402 note (Pub. L. 86-36); and Title
  10 U.S.C.
Purpose(s):
  To maintain current and accurate listings of reserve personnel
  designated to mobilize with the National Security Agency, offered as
  nominees for NSA Mobilization billets, requesting formal and resident
  training courses, or seeking on-the-job training in NSA work centers.
  To determine professional and technical qualifications of reservists
  to analyze their training needs and to ascertain the eligibility of
  reservists for promotions, awards, special duty assignments, and
  similar reasons.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Computer magnetic tapes, discs, electronic files, or other automated
  storage media, computer listings and other paper records.
Retrievability:
  By name, Social Security Numbers, mobilization billet, courses of
  training, and other professional qualifications.
Safeguards:
  Secure limited access facilities and within those facilities lockable
  containers. Records are accessible only to authorized personnel.
Retention and disposal:
  Records are permanent. They are reviewed periodically and updated at
  least annually for changes and corrections. Superseded records are
  destroyed when no longer useful for reference purposes.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Individual reservists and service reserve personnel files.
Exemptions claimed for the system:
  Individual records in this file may be exempt pursuant to 5 U.S.C.
  552a(k)(1) and (k)(5), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-53]

GNSA 

System name: NSA/CSS Equal Employment Opportunity Data.

System location:
  National Security Agency/Central Security Service, Ft. George G.
  Meade, MD 20755-6000.
Categories of individuals covered by the system:
  NSA/CSS civilian personnel and personnel under contract.
Categories of records in the system:
  File contains civilian personnel data and Agency organizational data
  to title, grade, date of birth, training, date of last promotion,
  educational attainments, Social Security Number, time of service,
  personnel codes, organization assignment.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); Pub. L. 92-261; Pub. L. 93-259; E.O. 11478; Chapter 713 of the
  Federal Personnel Manual.
Purpose(s):
  To ensure compliance with cited authorities with respect to equal
  employment opportunities.
  To compile such studies, research, statistics and reports necessary to
  ensure compliance with cited authorities.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To contractor employees to make determinations as noted in the purpose
  above. Reports, summaries and statistics may be made available to the
  Office of Equal Employment Opportunity, Congress, Department of
  Justice and judicial branch elements as required by cited authorities,
  requested pursuant to those authorities or ordered by specific
  judicial branch order.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Magnetic tape, disk or other computer storage media, computer
  listings, paper in file folders.
Retrievability:
  By name, Social Security Number, and specific subject matter data
  elements.
Safeguards:
  For paper, computer printouts and microfilm - Secure limited access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers. Access to information is
  limited to those individuals specifically authorized and granted
  access by EEO Director. For machine records stored on magnetic tape,
  disk or other computer storage media within the computer processing
  area-additional secure limited access facilities, specific processing
  requests from authorized persons only, specific authority to access
  stored records and delivery to authorized persons only. Where data
  elements are derived from the Personnel System, remote terminal
  inhibitions are in force with respect to access to complete file or
  data relating to persons not assigned to requesting organization using
  a remote terminal. Remote terminals are secure, are available to
  authorized persons only, and certain password and other identifying
  information available to authorized users only is required. Terminals
  are not available outside of headquarters area locations.
Retention and disposal:
  File is routinely updated and old data disposed of as required.
  Individual data is subject to retention and disposal requirements
  specified for records contained in the Personnel System.
System manager(s) and address:
  Director of Equal Employment Opportunity, National Security Agency/
  Central Security Service, Ft. George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Individuals themselves, organizational elements, personnel file, and
  other sources as appropriate and required.
Exemptions claimed for the system:
  Individual records and data elements in this file may be exempt
  pursuant to 5 U.S.C. 552a(k)(1), (k)(2), and (k)(4).
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-54]

GNSA 

System name: NSA/CSS Health, Medical and Safety Files.

System location:
  Primary System - National Security Agency/Central Security Service,
  Fort George G. Meade, MD 20755-6000.
  Decentralized Segments - Each staff, line, contract and field element
  as appropriate.
Categories of individuals covered by the system:
  NSA/CSS civilian employees, military assignees, applicants, retirees,
  building concessionaires, assigned GSA employees, certain contract
  employees, visitors requiring emergency treatment, in certain cases
  members of employees' families with prior approval of the employee,
  blood donors, designated Health and Safety Officers.
Categories of records in the system:
  File may consist of completed medical questionnaires, results of
  physical examinations and laboratory tests, records of medical
  treatment and services, x-rays, notices of injury, forms and
  correspondence including exchanges with Department of Labor related to
  injury and subsequent claims, correspondence with personal physician,
  NSA/CSS Medical Center reports, safety reports, absence and attendance
  records, medical evaluations, fitness for duty reports, `Log of
  Federal Occupational Injuries and Illnesses,' results of psychological
  assessment testing and interviews, psychiatric examination results and
  related reports, forms and notes, lists of blood donors.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); and Federal Employees Compensation Act of September 7, 1916, as
  amended, 5 U.S.C. and Office of Personnel Management implementation
  thereof as contained in Federal Personnel Manual. In addition, the
  Comprehensive Alcohol Abuse and Alcoholism Prevention, Treatment, and
  Rehabilitation Act of 1970, as amended (42 U.S.C. 4582) and Subchapter
  A of Chapter I, 42 CFR, E.O. 11807.
Purpose(s):
  To determine fitness for hiring, continued employment or assignment
  and reassignment; to process accident and compensation claims; correct
  hazardous conditions; determine eligibility for disability retirement;
  record names of blood donors; and to record participation in alcohol/
  rehabilitation programs.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To the Department of Labor in those cases involving compensation
  claims and to other government entities to make determinations as
  noted in the purpose above.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders, magnetic tape, disk or other computer
  storage media, computer listings.
Retrievability:
  By name, Social Security Number and specific subject matter data
  elements.
Safeguards:
  Secure, limited access facilities and within these facilities lockable
  containers. Records are accessible only to authorized personnel. For
  machine records stored on magnetic tape, disk or other computer
  storage within the computer processing area-additional secure limited
  access facilities, specific processing requests from authorized
  persons only, specific authority to access stored records and delivery
  to authorized persons only. Remote terminals are secured, are
  available to authorized person only, and certain password and other
  identifying information available to authorized users only is
  required. Terminals are not available outside of specific security
  offices at headquarters area locations.
Retention and disposal:
  Medical files and records on traumatic injury and occupational disease
  are transferred to official personnel folder upon separation;
  traumatic injury and occupational disease correspondence on civilian
  employees and retirees is retained indefinitely. Applicant medical
  files are retained for no more than one year or until date designated
  to individual; files on military assignees are forwarded to parent
  service upon reassignment from NSA/CSS; all other medical case files
  are destroyed upon termination of association with NSA/CSS.
  Psychological files on applicants are retained for no more than one
  year or until date designated to individual; all other files are
  retained for four years after end of individual's association with
  NSA/CSS. Decentralized segments are either transferred with employee
  or assignee, or retained for a period after separation as appropriate
  but not to exceed three years and are then destroyed. Alcohol abuse
  patient records retained and disposed of pursuant to cited statute and
  regulations.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Fort George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations may be obtained by written request addressed to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record source categories:
  Applicants, employees, assignees, official personnel folders, NSA
  Safety Officers and records, witnesses to accidents and injuries,
  medical and administrative personnel, blood donor personnel, members
  of employee's family with employee's permission and other sources as
  appropriate and required.
Exemptions claimed for the system:
  Individual records in this file may be exempt pursuant to 5 U.S.C.
  552a(k)(1), (k)(4), (k)(5) and (k)(6) and may also be subject to
  certain special access procedures established pursuant to 5 U.S.C.
  552a, subsection (f)(3).
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-55]

GNSA 

System name: NSA/CSS Motor Vehicles and Carpools.

System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized Segments - Each non-headquarters facility and field
  element as appropriate and required.
Categories of individuals covered by the system:
  NSA/CSS civilian employees, military assignees, other governmental
  employees or personnel under contract granted extended temporary or
  permanent access to an NSA/CSS facility.
Categories of records in the system:
  File may consist of machine-readable or regular paper cards, carpool
  or other transportation survey results, annotated machine listings,
  post motor vehicle violation reports, stolen vehicle reports, or other
  forms and correspondence related to parking privileges, transportation
  needs, local (parking lot) parking enforcement procedures, vehicle
  abuse and other related matters as appropriate and required.
Authority for maintenance of the system:
  40 U.S.C. 318a-b; 50 U.S.C. 797; and 41 CFR part 101-20.111 et seq.
Purpose(s):
  To provide data necessary to manage and enforce parking lot
  regulations, to assist employees with respect to vehicle abuse and
  stolen vehicles, provide carpool assistance, assure availability of
  adequate transportation and parking facilities and other related
  matters.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  Selected individual data limited to name, address and telephone number
  may be made available to commercial or private transportation entities
  where the individuals have indicated a desire to use or join a
  multiple-user transportation arrangement.
  To contractor employees to make determinations as noted in the
  purposes above.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders, machine-readable and other cards in
  appropriate containers, magnetic tape, disk or appropriate containers,
  magnetic tape, disk or other computer storage media, computer
  listings.
Retrievability:
  By name, motor vehicle identifier.
Safeguards:
  For paper, cards and computer listings - Secure limited access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers as appropriate. Access is
  limited to authorized users. For machine records stored on magnetic
  tape, disk or other computer storage media within the computer
  processing area-additional secure limited access facilities, specific
  processing requests accepted from authorized persons only, specific
  authority to access stored records and delivery granted to authorized
  persons only.
Retention and disposal:
  File is routinely updated and old data disposed of as required.
  Individual data is subject to retention and disposal requirements
  specified for records contained in the Personnel System.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Data provided by individuals, authorities in charge of parking
  facilities, local civil and military law enforcement entities and
  other related sources as appropriate and required.
Exemptions claimed for the system:
  Individual records and data elements in this file may be exempt
  pursuant to 5 U.S.C. 552a(k)(1).
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-56]

GNSA 

System name:

  NSA/CSS Payroll and Claims.
System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized elements of this system may be located at the Defense
  Intelligence Agency (DIA) Headquarters and DIA field elements, DoD
  activities supported by DIA, and NSA field elements as authorized and
  appropriate. For official mailing addresses for any of the
  decentralized system locations, write to the Deputy Director of
  Policy, National Security Agency/Central Security Service, Ft. George
  G. Meade, MD 20755-6000.
Categories of individuals covered by the system:
  Civilian employees and applicants, military assignees, contractors,
  reemployed annuitants, and personnel under contract or traveling on
  invitational travel orders employed by NSA/CSS, DIA, and DoD
  activities supported by DIA
Categories of records in the system:
  File may consist of records on time and attendance; overtime; shift
  and holiday work; absent without leave reports; payroll deductions,
  allotments and allowances; requests for leave; payments for travel
  performed in connection with permanent change of station, temporary
  duty, invitations, interviews, pre-employment interviews and initial
  entry on duty. Also included are Pay Adjustment Authorizations (DD
  Form 139) and Cash Collection Vouchers (DD Form 1131) and, in
  connection with pay claims, waivers, requests for waivers, documents,
  correspondence, background data, recommendations and decisions.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 50 U.S.C. App. 2160; Titles 5, 10, 31, and 37 of the U.S.C.;
  Titles 2, 4, 5, and 6 GAO Policy and Procedures Manual for Guidance of
  Federal Agencies.
Purpose(s):
  To maintain effective control over and accountability for all relevant
  appropriated funds; to provide accounting data to support budget
  requests and control the execution of budgets; to provide financial
  information required by the Office of Management and Budget; to
  provide financial information for agency management and payroll
  activities.'
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  In addition to those disclosures generally permitted under 5 U.S.C.
  552a(b) of the Privacy Act, these records or information contained
  therein may specifically be disclosed outside the DoD as a routine use
  pursuant to 5 U.S.C. 552a(b)(3) as follows:
  Disclosures from this system may also be made to other federal
  entities as necessary to effectuate repayment of debts owed the
  Government.
  To other governmental entities in connection with Social Security
  deductions, unemployment compensation claims, job-related injury and
  death benefits, tax audit and collections, claims or actions.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Disclosures to consumer reporting agencies:
  Disclosures pursuant to 5 U.S.C. 552a(b)(12) may be made from this
  system to 'consumer reporting agencies' as defined in the Fair Credit
  Reporting Act (15 U.S.C. 1681a (f) or the Federal Claims Collection
  Act of 1966 (31 U.S.C. 3701 (a) (3)). The purpose of this disclosure
  is to aid in the collection of outstanding debts owed to the Federal
  Government; typically, to provide an incentive for debtors to repay
  delinquent Federal Government debts by making these debts part of
  their credit records.
  Disclosure of records is limited to the individual's name, address,
  Social Security Number, and other information necessary to establish
  the individual's identify, the amount, status, and history of the
  claim; and the agency program under which the claim arose. This
  disclosure will be made only after the procedural requirement of 31
  U.S.C. 3711(f) has been followed.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders; file cards; computer paper printouts;
  machine-readable cards; computer magnetic tapes, disks and other
  computer storage media.
Retrievability:
  By name, Social Security Number.
Safeguards:
  For paper, computer printouts and microfilm - Secure limited access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers. Access to information is
  limited to authorized individuals. For machine records stored on
  magnetic tape, disk or other computer storage media within the
  computer processing area - additional secure limited access
  facilities, specific processing requests from authorized persons only,
  specific authority to access stored records and delivery to authorized
  persons only. Remote terminals are secured, are available to
  authorized persons only, and certain password and other identifying
  information available to authorized users only is required.
Retention and disposal:
  Records are reviewed annually and retired or destroyed as appropriate.
  Permanent records are retired to the St. Louis Federal Records Center
  after completion of audit. Computer records are purged and updated
  consistent with these retention policies.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Deputy Director of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Deputy Director
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Deputy Director of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Forms, cards, requests and other documentation submitted by
  individuals, supervisors, claims officers, Personnel File data, Time,
  Attendance and Access File data, and other sources as appropriate and
  required.
Exemptions claimed for the system:
  Individual records in this file may be exempt pursuant to 5 U.S.C.
  552a(k)(1) and (k)(2), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-57]

GNSA 

System name: NSA/CSS Personnel File.

System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized Segments - Each staff, line, contract and field element
  and supervisor as authorized and appropriate.
Categories of individuals covered by the system:
  Civilian employees, personnel under contract, military assignees,
  dependents of NSA/CSS personnel assigned to field elements,
  individuals integrated into the cryptologic career development
  program, custodial and commercial services personnel.
Categories of records in the system:
  File contains personnel papers and forms including but not limited to
  applications, transcripts, correspondence, notices of personnel
  action, performance appraisals, personnel summaries,
  professionalization documentation and correspondence, training forms,
  temporary duty, letters of reprimand, special assignment
  documentation, letters of commendation, promotion documentation, field
  assignment preference, requests for transfers, permanent change of
  station, passport, transportation, official orders, awards,
  suggestions, pictures, complaints, separation, retirement, time
  utilization, scholarship/fellowship or other school appointments,
  military service, reserve status, military check in/out sheets,
  military orders, security appraisal, career battery and other test
  results, language capability, military personnel utilization survey,
  work experience, notes and memoranda on individual aspects of
  performance, productivity and suitability, information on individual
  eligibility to serve on various boards and committees, emergency loan
  records, other information relevant to personnel management, housing
  information where required.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 5 U.S.C. and certain implementing Office of Personnel Management
  regulations in the Federal Personnel Manual; 10 U.S.C. 1124; 44 U.S.C.
  3101, and E.O. 11222.
Purpose(s):
  To support the personnel management program; personnel training and
  career development; personnel planning, staffing and counseling;
  administration and personnel supervision; workforce study and
  analysis; manpower requirements studies; emergency loan program; and
  training curricula planning and research.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To gaining employers or to financial institutions when individual has
  applied for credit; to contractor employees to make determinations as
  noted in the purpose above; to hearing examiners; the judicial branch
  or to other gaining government organization as required and
  appropriate; biographical information may be provided to the White
  House as required in support of the Senior Cryptologic Executive
  Service awards program.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders, file cards, machine-readable cards,
  computer printouts, computer magnetic tapes, disks and other computer
  storage media, and microfilm.
Retrievability:
  By name, Social Security Number and other items of relevant
  information.
Safeguards:
  For paper, computer printouts and microfilm - Secure limited access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers. Access to information is
  limited to those individuals authorized and responsible for personnel
  management or supervision. For records stored on magnetic tape, disk
  or other computer storage media within the computer processing area-
  additional secure limited access facilities, specific processing
  requests accepted from authorized persons only, specific authority to
  access stored records and delivery granted to authorized persons only.
  Where data elements are derived from the Personnel File, remote
  terminal inhibitions are in force with respect to access to complete
  file or data relating to persons not assigned to requesting
  organization using a remote terminal. Remote terminals are secured,
  are available to authorized persons only, and certain password and
  other identifying information available to authorized users only is
  required.
Retention and disposal:
  Primary System - Those forms, notices, reports and memoranda
  considered to be of permanent value or required by law or regulation
  to be preserved are retained for the period of employment or
  assignment and then forwarded to the gaining organization or retained
  indefinitely. If the action is separation or retirement, these items
  are forwarded to the Office of Personnel Management or retired to the
  Federal Records Center at St. Louis as appropriate. Those items
  considered to be relevant for a temporary period only are retained for
  that period and either transferred with the employee or assignee or
  destroyed either when they are no longer relevant or at time of
  separation or retirement. Computerized portion is purged and updated
  as appropriate. Records relating to adverse actions, grievances,
  excluding EEO complaints, and performance-based actions, except SF-
  50s, will be retained for four years. Personnel summary, training,
  testing and past activity segments retained permanently. All other
  portions deleted at end of tenure.
  Decentralized System - Files are transferred to gaining organization
  or destroyed upon separation as appropriate. Computer listings of
  personnel assigned to an organization are destroyed upon receipt of
  updated listings.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Forms used to collect and process individual for employment, access or
  assignment, forms and memoranda used to request personnel actions,
  training awards, professionalization, transfers, promotion,
  organization and supervisor reports and requests, educational
  institutions, references, Office of Personnel Management and other
  governmental entities as appropriate, and other sources as appropriate
  and required.
Exemptions claimed for the system:
  Portions of this file may be exempt pursuant to 5 U.S.C. 552a(k)(1),
  (k)(4), (k)(5), and (k)(6), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-58]

GNSA 

System name: NSA/CSS Personnel Security File.

System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized Segments - Each staff, line, contract and field element
  as appropriate.
Categories of individuals covered by the system:
  Applicants for employment with NSA/CSS; civilian employees; personnel
  under contract; military assignees; members of advisory groups;
  consultants; experts; other military personnel; federal employees;
  employees of contractors, and employees of services; other individuals
  who require access to NSA/CSS facilities or information and
  individuals who were formerly affiliated with NSA/CSS.
Categories of records in the system:
  File Folder - Photograph, fingerprint data, statement of personal
  history, agreements with respect to specific security processing
  procedures, security processing forms and records, investigative
  reports, contractor appeal records, incident and complaint reports,
  unsolicited information when relevant, reports by domestic law
  enforcement agencies when relevant, clearance data, access
  authorization, foreign travel data, security secrecy agreements,
  separation and retirement data and other information as required and
  relevant. Computer File - contains data elements representing a
  summary and index of the file folder data to include personal
  identifying data, relevant security processing data, clearance and
  access data, separation and retirement data.
Authority for maintenance of the system:
  50 U.S.C. 831-835 (Pub. L. 88-290); National Security Agency Act of
  1959, 50 U.S.C. 402 note (Pub. L. 86-36); 18 U.S.C. 798; 50 U.S.C. 403
  (d)(3); E.O.s 10450, 10865, 12333 and 12356.
Purpose(s):
  The file is used in determinations with respect to employment, access,
  assignment and reassignment, assignment to a board of appraisal or
  management promotion, foreign official and unofficial travel, and
  other personnel actions where security represents a relevant and valid
  element of the determination.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To agencies outside DoD, to include but not limited to other clearance
  holder agencies or agencies charged with making clearance
  determinations, government agencies involved with national security or
  clearance investigations, other government agencies and private
  contractors requiring clearance status information and authorized to
  receive same; the DCI and his General Counsel in the event of
  litigation or anticipated litigation with respect to unauthorized
  disclosures of classified intelligence or intelligence sources and
  methods and related court actions; judicial branch elements pursuant
  to specific court orders or litigation.
  In addition, other government agencies or private contractors may be
  informed of information developed by NSA which bears on assignee's or
  affiliate's status at NSA with regard to security considerations.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Magnetic tape, disk or other computer storage media, computer paper
  printouts, paper in file folders, microfilm.
Retrievability:
  By name or unique number assigned individual.
Safeguards:
  For paper, computer printouts and microfilm - Secure limited access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers. Access to information is
  limited to authorized individuals. For machine records stored on
  magnetic tape, disk or other computer storage media within the
  computer processing area-additional secure limited access facilities,
  specific processing requests accepted from authorized persons only,
  specific authority to access stored records and delivery granted to
  authorized persons only. Remote terminals are secured, are available
  to authorized persons only, and certain password and other identifying
  information available to authorized users only is required. Terminals
  are not available outside of specific security offices at headquarters
  area locations.
Retention and disposal:
  Files on all individuals assigned, employed, or granted access to NSA/
  CSS information or facilities or initiated on individuals requesting
  employment, assignment or access but never completed due to non-
  employment, non-assignment or withdrawal or denial of access are
  maintained a minimum of 15 years after the last security action
  reflected in the file, then destroyed. Computer records are purged and
  updated consistent with these retention policies.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Data provided by individual during employment and security processing;
  data provided by investigative service processing individual's
  background; data provided by references, educational institutions and
  other sources named by individual or developed during background
  investigation; unsolicited data from any source where relevant; data
  provided by the Office of Personnel Management and other agencies,
  departments, and governmental elements involved in the conduct of
  National Agency checks; the Federal Bureau of Investigation; data
  developed by appropriate governmental elements in the course of a
  national security investigation or investigation into alleged
  violations of criminal statutes related to unauthorized disclosure of
  intelligence or protection of intelligence sources and methods;
  documents furnished by agency element sponsoring individual for access
  to specific classified information.
Exemptions claimed for the system:
  Individual records in this file may be exempt pursuant to 5 U.S.C.
  552a(k)(1), (k)(2), (k)(5), and (k)(6), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-59]

GNSA 

System name: NSA/CSS Time, Attendance and Absence.

System location:
  Primary System - National Security Agency/Central Security Service,
  Ft. George G. Meade, MD 20755-6000.
  Decentralized Segments - Each staff, line, contract, and field element
  as authorized and appropriate.
Categories of individuals covered by the system:
  NSA/CSS civilian employees and personnel under contract.
Categories of records in the system:
  File contains request forms, time cards, authorization forms,
  notifications, locator cards and other correspondence or revisions
  thereof related to actions concerning time, attendance, absence,
  annual leave, sick leave, leave without pay, advance leave,
  administrative leave, exemplary use of leave, unauthorized leave and
  absences and other related matters.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 50 U.S.C. 831-835, (Pub. L. 88-290); section 113 of the Budget
  and Accounting Procedures Act of 1950, as amended; 31 U.S.C. 66a.
Purpose(s):
  To provide a means of accounting for all time, attendances and
  absences of NSA/CSS civilian employees and contract employees.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To contractor employees to make determinations as noted in the purpose
  above; to appropriate investigatory authorities engaged in national
  security investigations; hearing examiners and other authorized
  individuals with respect to grievances or adverse actions; and to
  those agencies identified in the NSA/CSS System of Records named
  `Payroll and Claims' as necessary to document payroll actions.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders, file cards, machine-readable cards,
  computer printouts, computer magnetic tapes, disks and other computer
  storage media, and microfilm.
Retrievability:
  May be retrieved by name and in some cases Social Security Number.
Safeguards:
  For paper, cards, printouts and microfilm - Secure limited-access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers as appropriate. Access by
  authorized individuals only. Current time cards are not secured with
  respect to individual employees within immediate working element. For
  machine-readable cards, computer magnetic tapes and disks and other
  computer storage media within the computer processing area additional
  secure limited-access facilities, specific processing requests from
  authorized persons only, specific authority to access stored cards,
  tapes or disk files.
Retention and disposal:
  Primary System - Records are reviewed annually and retired or
  destroyed as appropriate. Permanent records are retired to the St.
  Louis Federal Records Center after completion of audit. Computer
  records are purged and updated consistent with these retention
  policies.
  Decentralized Segments - Records are temporary, are retained for the
  period the individual is assigned to an element, or disposed of as
  appropriate. Time cards and other appropriate forms for pay and leave
  purposes are forwarded each pay period to the payroll office.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Time cards, request forms and related correspondence from individual
  employees and assignees, authorizations and notifications from
  authorizing officers, correspondence from supervisory personnel and
  investigating officers with respect to abuses of leave and attendance
  or unauthorized leave and absences, other records or reports related
  to either exemplary use of leave or abusive use of leave, and other
  sources as appropriate and required.
Exemptions claimed for the system:
  Individual records in this file may be exempt pursuant to 5 U.S.C.
  552a(k)(1), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-60]

GNSA 

System name: NSA/CSS Training.

System location:
  Primary System-National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
  Decentralized Segments-Each staff, line, contract and field element as
  authorized and appropriate.
Categories of individuals covered by the system:
  NSA/CSS employees, personnel under contract, military assignees and
  other government employees, designees and military personnel as
  required and appropriate who attend courses or receive training by or
  under NSA/CSS sponsorship.
Categories of records in the system:
  File contains forms, correspondence, memoranda, student and instructor
  surveys, requests and other information related to testing and
  training; tests and test results; test grades, course grades and other
  student and instructor evaluations; course and class rosters, rosters
  of individuals by specialty; attendance and time utilization reports
  for students and instructors; biographical sketches where required and
  appropriate; course and training histories; other course research and
  evaluation data; student disciplinary actions and complaints; waiver
  requests and responses; selected personal data including education
  level and scholastic achievements; course and training cost data where
  appropriate; reimbursement and service agreements where appropriate;
  and other records related to civilian and military training as
  required and appropriate.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 5 U.S.C., Chapter 41, E.O. 11348, and Office of Personnel
  Management implementing directives as contained in the Federal
  Personnel Manual.
Purpose(s):
  To maintain training records necessary to assure the equitable
  selection and approval of employees for NSA/CSS training or
  sponsorship; to provide documentation concerning military
  cryptolinguist resources and individual training, develop training
  requirements, refine training methods and techniques, and provide
  individual career and training counseling.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  Portions of these files are made available to other governmental and
  non-governmental entities in support of training requirements.
  To contractor employees to make determinations as noted in the
  purposes above.
  The `Blanket Routine Uses' set forth at the beginning of NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders, card files, binders, computer punch
  cards, computer listings, computer magnetic tapes, disks and other
  computer storage media, microfilm.
Retrievability:
  By name or Social Security Number.
Safeguards:
  For paper, computer printouts and microfilm - Secure limited access
  facilities, within those facilities secure limited access rooms and
  within those rooms lockable containers as appropriate. Access to
  information is limited to authorized individuals only. For machine
  records stored on magnetic tape, disk or other computer storage media
  within the computer processing area-additional secure limited access
  facilities, specific processing requests accepted from authorized
  persons only, specific authority to access stored records and delivery
  granted to authorized persons only. Where data elements are derived
  from the Personnel System, remote terminal inhibitions are in force
  with respect to access to complete file or data relating to persons
  not assigned to requesting organization using a remote terminal.
  Remote terminals are secured, available to authorized persons only,
  and certain password and other identifying information available to
  authorized users only is required. Terminals are not available outside
  of headquarters area locations.
Retention and disposal:
  Primary System - Records are reviewed annually and retained or
  destroyed as appropriate. Copies of items of significance with respect
  to the individual are included in the Personnel File and retention is
  in accordance with the retention policies for that system. Items used
  as the basis of statistical studies or other research efforts may be
  retained indefinitely. Computer listings and records are purged and
  updated as required and appropriate.
  Decentralized System - Records are reviewed annually and retained or
  destroyed as appropriate. Individual's file may be transferred to
  gaining organization if appropriate. Computer listings and records are
  purged and updated as required and appropriate.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Individual, supervisors, training counselors, instructors and other
  training personnel; other governmental entities nominating individuals
  for training; other training and educational institutions; Personnel
  File, and other sources as required and appropriate.
Exemptions claimed for the system:
  Individual records in this file may be exempt pursuant to 5 U.S.C.
  552a(k)(1), (k)(5) and (k)(6), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-61]

GNSA 

System name: NSA/CSS Archival Records.

System location:
  Primary System-National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
  Decentralized Segments-Each staff, line, contract and field element as
  authorized and appropriate.
Categories of individuals covered by the system:
  Individuals who have contributed to the cryptologic archives and
  individuals who are significant to the history of signals
  intelligence.
Categories of records in the system:
  Records include organizational files, correspondence, tape recorded
  interviews, forms, documents, reports, films, magnetic tapes, and
  media, microforms, photographs, and other related items of cryptologic
  archival interest, most of which are 20 or more years old and have
  been adjudged to be permanent U.S. Government records not yet
  declassified.
Authority for maintenance of the system:
  Pub. L. 90-620; Pub. L. 81-754; National Security Agency Act of 1959,
  50 U.S.C. 402 note (Pub. L. 86-36); 5 U.S.C. 552, E.O. 12333 and E.O.
  12356.
Purpose(s):
  To provide the history, records management, declassification, and
  archival staffs with a means for locating and quantifying materials
  that require processing, reference service, review, or evaluation for
  transmittal to the National Archives.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To enable the historian to locate source materials; permit systematic
  review of classified records; and provide a source from which response
  to public queries for NSA/CSS records can be more expeditiously
  handled and, if possible, declassified.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Hard copy, microforms, electronic storage media and pictures.
Retrievability:
  Generally by subject matter as to that material furnished by an
  individual or about an individual significant to the history of
  cryptology, by name, or other unique identifier significant to the
  subject matter and the individual.
Safeguards:
  Secure limited access facilities and within those facilities
  containers appropriate to the level of classification of particular
  records.
Retention and disposal:
  Records are permanent, as determined by disposition schedule approved
  by the Archivist of the United States. They are reviewed periodically
  for declassification, and records declassified are transferred to the
  National Archives.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Individual contributors and operational administrative files; other
  sources as appropriate.
Exemptions claimed for the system:
  Parts of this system may be exempt under 5 U.S.C. 552a(k)(1) and
  (k)(4), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-62]

GNSA 

System name: NSA/CSS Library Patron File Control System.

System location:
  National Security Agency/Central Security Service, Ft. George G.
  Meade, MD 20755-6000.
Categories of individuals covered by the system:
  Borrowers of library materials from NSA/CSS libraries.
Categories of records in the system:
  File consists of borrower's name, work organization, contracting
  sponsor's name, work telephone number, Social Security Number, and
  library materials borrowed.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 50 U.S.C. 831-835 (Pub. L. 88-290); 18 U.S.C. 798; and EOs. 9397
  and 12333.
Purpose(s):
  To track and administer the use of NSA/CSS library materials.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Computer database (floppy or hard drive or magnetic tape) or paper
  printout of stored information.
Retrievability:
  Records are retrieved by the borrower's name, Social Security Number,
  or the title of the library material borrowed.
Safeguards:
  Only the library staff has access to the retrieval system and to the
  passwords for operating this system. The system is logged off at the
  close of business.
Retention and disposal:
  Once a borrower has registered with the library, the borrower remains
  registered until he/she leaves the Agency. Disposal of records is
  accomplished by deletion from the database.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000. Inquiries should contain
  full name, Social Security Number, and mailing address.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000. The inquiry should include the
  individual's full name, Social Security Number and mailing address.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Contents of the record are obtained from the individual borrower and
  library staff.
Exemptions claimed for the system:
  Portions of this file may be exempt under 5 U.S.C. 552a(k)(1) and
  (k)(4), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-63]

GNSA 

System name: NSA/CSS Computer Users Control System.

System location:
  National Security Agency/Central Security Service, Ft. George G.
  Meade, MD 20755-6000.
Categories of individuals covered by the system:
  Users of National Security Agency/Central Security Service computers
  and software.
Categories of records in the system:
  The user's name, Social Security Number, an assigned identification
  (I.D.) code, organization, work phone number, terminal identification,
  system name, programs accessed or attempted to access, data files
  used, date and time logged onto and off the system.
Authority for maintenance of the system:
  National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
  36); 50 U.S.C. 831-835, (Pub. L. 88-290); 18 U.S.C. 798; and EOs 9397
  and 12333.
Purpose(s):
  To administer and monitor use of NSA/CSS computers, software, and data
  bases.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Computer data base (floppy or hard drive or magnetic tape) or paper
  printout of stored information.
Retrievability:
  Records are retrieved by the user's name, Social Security Number, or
  assigned identification (I.D.) code.
Safeguards:
  Records are kept in a secured and guarded area. Only authorized
  individuals have access to the retrieval system and to the passwords
  for operating the system.
Retention and disposal:
  Records are retained in the computer system as long as the individual
  has access to the materials. Computer records are disposed of by
  deleting the information from the data base; paper records may be
  disposed of by destruction.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
  Inquiries should contain the individual's full name, Social Security
  Number, and mailing address.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
  Inquiries should contain the individual's full name, Social Security
  Number and mailing address.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Contents of the record are obtained from the individual about whom the
  record pertains, from administrative personnel and computer system
  administrators, and a self-generated computer program.
Exemptions claimed for the system:
  Portions of this file may be exempt pursuant to 5 U.S.C. 552a (k)(1)
  and (k)(2), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-64]

GNSA 

System name: NSA/CSS Drug Testing Program.

System location:
  National Security Agency/Central Security Service, Ft. George G.
  Meade, MD 20755-6000.
Categories of individuals covered by the system:
  NSA/CSS applicants for employment and employees tested for the use of
  illegal drugs.
Categories of records in the system:
  The user's name, Social Security Number, an assigned identification
  (I.D.) code, organization, work phone number, and records relating to
  the selection, notification, and testing of covered individuals as
  well as urine specimens and drug test results and other related
  information.
Authority for maintenance of the system:
  5 U.S.C. 7301 and 7361; E.O. 12564, Drug-Free Federal Workplace and
  9397.
Purpose(s):
  The system is used to maintain NSA/CSS Drug Program Coordinator
  records on the selection, notification, and testing (i.e., urine
  specimens, drug test results, chain of custody records, etc.) of
  employees and applicants for employment for illegal drug use.
  Records contained in this system are also used by the employee's
  Medical Review Official; the administrator of any Employee Assistance
  Program in which the employee is receiving counseling or treatment or
  is otherwise participating; and supervisory or management officials
  within the employee's Agency having authority to take adverse
  personnel action against such employee.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  In order to comply with provisions of 5 U.S.C. 7301, NSA/CSS' `Blanket
  Routine Uses' do not apply to this system of records.
  To a court of competent jurisdiction where required by the United
  States Government to defend against any challenge against any adverse
  personnel action.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Computer database (floppy or hard drive or magnetic tape) or paper
  printout of stored information, microfilm or microfiche.
Retrievability:
  Records are retrieved by the user's name, Social Security Number, or
  assigned identification (I.D.) code.
Safeguards:
  For paper computer printouts and microfilm/microfiche-secured limited
  access facilities, within those facilities secure limited access rooms
  and within those rooms lockable containers. Access to information is
  limited to those individuals specifically authorized and granted
  access by the Deputy Director for Administration. For records on the
  computer system, access is controlled by a password and limited to
  authorized personnel only.
Retention and disposal:
  Records are retained for two years and then destroyed by shredding,
  burning or erasure in the case of magnetic media.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
  The inquiry should contain the individual's full name, Social Security
  Number and mailing address.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
  The inquiry should include the individual's full name, Social Security
  Number and mailing address.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Contents of the record are obtained from the individual about whom the
  record pertains, from laboratories that test urine specimens for the
  presence of illegal drugs, from supervisors and managers and other
  NSA/CSS employees, from confidential sources, and from other sources
  as appropriate and required.
Exemptions claimed for the system:
  Portions of this file may be exempt pursuant to 5 U.S.C. 552a(k)(1),
  as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-65]

GNSA 

System name: NSA/CSS Employee Assistance Service (EAS) Case
      Records.

System location:
  National Security Agency/Central Security Service, Ft. George G.
  Meade, MD 20755-6000.
Categories of individuals covered by the system:
  NSA/CSS civilian employees, military assignees, applicants, retirees,
  and family members who are referred, or voluntarily request
  counselling assistance. Civilian counselors to whom cases are
  referred.
Categories of records in the system:
  Files consist of the case records compiled by counselors,
  questionnaires completed by patients, questionnaires completed by
  private counselors to whom clients are referred, the records of
  medical treatment and services, correspondence with personal
  physicians, NSA/CSS Medical Center reports, results of psychological
  assessment testing and interviews, psychiatric examination results and
  related reports.
Authority for maintenance of the system:
  E.O. 12333; Pub. L. 86-36; 5 U.S.C. 7901; and E.O. 9397.
Purpose(s):
  Used by counselors to facilitate and record treatment, referral and
  follow-up on behalf of employees.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  NSA/CSS's `Blanket Routine Uses' do not apply to this system of
  records.
  To law enforcement agencies to carry out their functions when a record
  indicates a violation or potential violation of law, whether civil,
  criminal or regulatory in nature, and whether arising by general
  statute or by regulation, rule or order issued pursuant thereto, the
  relevant records in the system of records may be referred, as a
  routine use, to the appropriate agency, whether Federal, state, local,
  or foreign, charged with the responsibility of investigating or
  prosecuting such violation or charged with enforcing or implementing
  the statute, rule, regulation or order issued pursuant thereto.
  To a Federal, state, or local agency maintaining civil, criminal, or
  other relevant enforcement information or other pertinent information,
  such as current licenses, if necessary to obtain information relevant
  to a component decision concerning the hiring or retention of an
  employee, the issuance of a security clearance, the letting of a
  contract, or the issuance of a license, grant or other benefit.
  To a Federal agency, in response to its request, in connection with
  the hiring or retention of an employee, the issuance of a security
  clearance, the reporting of an investigation of an employee, the
  letting of a contract, or the issuance of a license, grant or other
  benefit by the requesting agency, to the extent that the information
  is relevant and necessary to the requesting agency's decision on the
  matter.
  To a Congressional office from the record of an individual in response
  to an inquiry from the Congressional office made at the request of
  that individual.
  To the Office of Personnel Management concerning information on pay
  and leave, benefits, retirement deductions, and any other information
  necessary for the Office of Personnel Management to carry out its
  legally authorized, Government-wide personnel management functions and
  studies.
  To any component of the Department of Justice for the purpose of
  representing the Department of Defense, or any office, employee or
  member of the Department in pending or potential litigation to which
  the record is pertinent.
  To the Merit Systems Protection Board, including the Office of the
  Special Counsel for the purpose of litigation, including
  administrative proceeding, appeals, special studies of the civil
  service and other merit systems, review of OPM or component rules and
  regulations, investigation of alleged or possible prohibited personnel
  practices; including administrative proceedings involving any
  individual subject of a DoD investigation, and such other functions,
  promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Paper records in file folders, magnetic tape, disk, or other computer
  storage media, computer listings and data bases.
Retrievability:
  Records are retrieved by the user's name, Social Security Number,
  assigned identification (I.D.) code or specific subject matter data
  element.
Safeguards:
  Secure limited access facilities and within these facilities lockable
  containers. Records are accessible only to authorized personnel. For
  machine records stored on magnetic tape, disk, or other computer
  storage, terminals are secured and require passwords only available to
  authorized users.
Retention and disposal:
  Records of clients will be retained at the Employee Assistance Service
  facility for three years after case closure, retained for five
  additional years in the Agency storage facility, then destroyed.
  Records of clients who retire or separate within three years of case
  closing will be retained at the Employee Assistance Service facility
  for a year after the date of separation or retirement, then stored for
  five years in the Agency storage facility, then destroyed.
  Records of counselors to whom cases are referred will be destroyed at
  the same time that the counselors are removed from the referral list.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
  The inquiry should contain the individual's full name, Social Security
  Number and mailing address.
Record access procedures:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
  The inquiry should include the individual's full name, Social Security
  Number, and mailing address.
Contesting record procedures:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Primary sources are EAS counselors, the client and the client's
  family. Other sources include other counselors, and other individuals
  within NSA/CSS.
Exemptions claimed for the system:
  Portions of this system may be exempt under 5 U.S.C. 552a (k)(1),
  (k)(2), (k)(4) and (k)(5), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.



From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
[DOCID:dod_othr-66]

GNSA 

System name: NSA/CSS Operations Files.

System location:
  National Security Agency/Central Security Service, Ft. George G.
  Meade, MD 20755-6000.
Categories of individuals covered by the system:
  Individuals identified in foreign intelligence or counterintelligence
  reports and supportive materials, including individuals involved in
  matters of foreign intelligence interest, information systems
  security, the compromise of classified information, or terrorism.
Categories of records in the system:
  Records include administrative information; biographic information;
  intelligence requirements, analysis, and reporting; operational
  records; articles, public-source data, and other published information
  on individuals and events of interest to NSA/CSS; actual or purported
  compromises of classified intelligence; countermeasures in connection
  therewith; and identification of classified source documents and
  distribution thereof.
Authority for maintenance of the system:
  National Security Act of 1947 as amended, 50 U.S.C. 403(d)(3) (Pub. L.
  80-253); E.O. 12333, 3 CFR part 200 (1981); E.O. 12356; E.O. 9397;
  section 506(a), Federal Records Act of 1950 (44 U.S.C. 3101).
Purpose(s):
  To maintain records on foreign intelligence and counterintelligence
  matters relating to the mission of the National Security Agency.
Routine uses of records maintained in the system, including categories
    of users and the purposes of such uses:
  To U.S. Government agencies, and in some instances foreign government
  agencies or their representatives, to provide foreign intelligence,
  counterintelligence, and other information.
  To U.S. Government officials regarding compromises of classified
  information including the document(s) apparently compromised,
  implications of disclosure of intelligence sources and methods,
  investigative data on compromises, and statistical and substantive
  analysis of the data.
  To any U.S. Government organization in order to facilitate any
  security, employment, detail, liaison, or contractual decision by any
  U.S. Government organization.
  Records may further be disclosed to agencies involved in the
  protection of intelligence sources and methods to facilitate such
  protection and to support intelligence analysis and reporting.
  The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
  compilation of systems of records notices apply to this system.
Policies and practices for storing, retrieving, accessing, retaining,
    and disposing of records in the system:
Storage:
  Magnetic tape, disk or other computer storage media, computer listings
  and databases, paper in file folders, audio recordings, microfilm or
  microfiche.
Retrievability:
  Information is retrieved by category of information contained therein,
  including by name, title, Social Security Number, or identification
  number.
Safeguards:
  For paper, computer printouts, audio recordings, and microfilm secure
  limited access facilities, within those facilities secure limited
  access rooms, and within those rooms lockable containers. Access to
  information is limited to those individuals specifically authorized
  and granted access by NSA/CSS regulations. For records on the computer
  system, access is controlled by passwords or physical protection and
  limited to authorized personnel only.
Retention and disposal:
  Records are reviewed for retention on a scheduled basis every 120 days
  to 5 years. Evidential, informational, and historical data are
  archived as permanent records. All other records are destroyed.
System manager(s) and address:
  Director, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Notification procedure:
  Individuals seeking to determine whether information about themselves
  is contained in this system should address written inquiries to the
  Chief, Office of Policy, National Security Agency/Central Security
  Service, Ft. George G. Meade, MD 20755-6000.
Record access procedure:
  Individuals seeking access to information about themselves contained
  in this system should address written inquiries to the Chief, Office
  of Policy, National Security Agency/Central Security Service, Ft.
  George G. Meade, MD 20755-6000.
Contesting record procedure:
  The NSA/CSS rules for contesting contents and appealing initial
  determinations are published at 32 CFR part 322 or may be obtained by
  written request addressed to the Chief, Office of Policy, National
  Security Agency/Central Security Service, Ft. George G. Meade, MD
  20755-6000.
Record source categories:
  Individuals themselves; U.S. agencies and organizations; media,
  including periodicals, newspapers, and broadcast transcripts; public
  and classified reporting, intelligence source documents, investigative
  reports, and correspondence.
Exemptions claimed for the system:
  Portions of this file may be exempt pursuant to 5 U.S.C. 552a (k)(1),
  (k)(2), and (k)(5), as applicable.
  An exemption rule for this record system has been promulgated
  according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
  and (e) and published in 32 CFR part 322. For additional information
  contact the system manager.

                          DEFENSE NUCLEAR AGENCY

                            REQUESTING RECORDS

   Records are retrieved by name or by some other personal identifier.
  It is therefore especially important for expeditious service when
  requesting a record that particular attention be provided to the
  Notification and/or Access Procedures of the particular record system
  involved so as to furnish the required personal identifiers, or any
  other pertinent personal information as may be required to locate and
  retrieve the record.

                           BLANKET ROUTINE USES

  Certain `blanket routine uses' of the records have been established
  that are applicable to every record system maintained within the
  Department of Defense unless specifically stated otherwise within a
  particular record system. These additional blanket routine uses of the
  records are published below only once in the interest of simplicity,
  economy and to avoid redundancy.

                       LAW ENFORCEMENT ROUTINE USE

  In the event that a system of records maintained by this component to
  carry out its functions indicates a violation or potential violation
  of law, whether civil, criminal or regulatory in nature, and whether
  arising by general statute or by regulation, rule or order issued
  pursuant thereto, the relevant records in the system of records may be
  referred, as a routine use, to the appropriate agency, whether
  Federal, state, local, or foreign, charged with the responsibility of
  investigating or prosecuting such violation or charged with enforcing
  or implementing the statute, rule, regulation or order issued pursuant
  thereto.

            DISCLOSURE WHEN REQUESTING INFORMATION ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed as a routine use to a Federal, state, or local agency
  maintaining civil, criminal, or other relevant enforcement information
  or other pertinent information, such as current licenses, if necessary
  to obtain information relevant to a component decision concerning the
  hiring or retention of an employee, the issuance of a security
  clearance, the letting of a contract, or the issuance of a license,
  grant or other benefit.

             DISCLOSURE OF REQUESTED INFORMATION ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed to a Federal agency, in response to its request, in
  connection with the hiring or retention of an employee, the issuance
  of a security clearance, the reporting of an investigation of an
  employee, the letting of a contract, or the issuance of a license,
  grant or other benefit by the requesting agency, to the extent that
  the information is relevant and necessary to the requesting agency's
  decision on the matter.

                   CONGRESSIONAL INQUIRIES ROUTINE USE

  Disclosure from a system of records maintained by this component may
  be made to a Congressional office from the record of an individual in
  response to an inquiry from the Congressional office made at the
  request of that individual.

                  PRIVATE RELIEF LEGISLATION ROUTINE USE

  Relevant information contained in all systems of records of the
  Department of Defense published on or before August 22, 1975, may be
  disclosed to the Office of Management and Budget in connection with
  the review of private relief legislation as set forth in OMB Circular
  A-19 at any stage of the legislative coordination and clearance
  process as set forth in that Circular.

       DISCLOSURES REQUIRED BY INTERNATIONAL AGREEMENTS ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed to foreign law enforcement, security, investigatory, or
  administrative authorities in order to comply with requirements
  imposed by, or to claim rights conferred in, international agreements
  and arrangements including those regulating the stationing and status
  in foreign countries of Department of Defense military and civilian
  personnel.

       DISCLOSURE TO STATE AND LOCAL TAXING AUTHORITIES ROUTINE USE

  Any information normally contained in IRS Form W-2 which is maintained
  in a record from a system of records maintained by this component may
  be disclosed to state and local taxing authorities with which the
  Secretary of the Treasury has entered into agreements pursuant to
  Title 5, U.S. Code, Sections 5516, 5517, 5520, and only to those state
  and local taxing authorities for which an employee or military member
  is or was subject to tax regardless of whether tax is or was withheld.
  This routine use is in accordance with Treasury Fiscal Requirements
  Manual Bulletin Number 76-07.

       DISCLOSURE TO THE OFFICE OF PERSONNEL MANAGEMENT ROUTINE USE

  A record from a system of records subject to the Privacy Act and
  maintained by this component may be disclosed to the Office of
  Personnel Management concerning information on pay and leave,
  benefits, retirement deductions, and any other information necessary
  for the Office of Personnel Management to carry out its legally
  authorized Government-wide personnel management functions and studies.

    DISCLOSURE TO THE DEPARTMENT OF JUSTICE FOR LITIGATION ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed as a routine use to any component of the Department of
  Justice for the purpose of representing the Department of Defense, or
  any officer, employee or member of the Department in pending or
  potential litigation to which the record is pertinent.

      DISCLOSURE TO MILITARY BANKING FACILITIES OVERSEAS ROUTINE USE

  Information as to current military addresses and assignments may be
  provided to military banking facilities who provide banking services
  overseas and who are reimbursed by the Government for certain checking
  and loan losses. For personnel separated, discharged, or retired from
  the Armed Forces, information as to last known residential or home of
  record address may be provided to the military banking facility upon
  certification by a banking facility officer that the facility has a
  returned or dishonored check negotiated by the individual or the
  individual has defaulted on a loan and that if restitution is not made
  by the individual, the U.S. Government will be liable for the losses
  the facility may incur.

    DISCLOSURE OF INFORMATION TO THE GENERAL SERVICES ADMINISTRATION
                               ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed as a routine use to the General Services Administration for
  the purpose of records management inspections conducted under
  authority of 44 U.S.C. 2904 and 2906.

     DISCLOSURE OF INFORMATION TO THE NATIONAL ARCHIVES AND RECORDS
                        ADMINISTRATION ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed as a routine use to the National Archives and Records
  Administration for the purpose of records management inspections
  conducted under authority of 44 U.S.C. 2904 and 2906.

       DISCLOSURE TO THE MERIT SYSTEMS PROTECTION BOARD ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed as a routine use to the Merit Systems Protection Board,
  including the Office of the Special Counsel for the purpose of
  litigation, including administrative proceedings, appeals, special
  studies of the civil service and other merit systems, review of OPM or
  component rules and regulations, investigation of alleged or possible
  prohibited personnel practices; including administrative proceedings
  involving any individual subject of a DOD investigation, and such
  other functions, promulgated in 5 U.S.C 1205 and 1206, or as may be
  authorized by law.

                 COUNTERINTELLIGENCE PURPOSES ROUTINE USE

  A record from a system of records maintained by this component may be
  disclosed as a routine use outside the DOD or the U.S. Government for
  the purpose of counterintelligence activities authorized by U.S. Law
  or Executive Order or for the purpose of enforcing laws which protect
  the national security of the United States.