ML20022A256

From kanterella
Jump to navigation Jump to search
NRC 44 Employee Fitness Center Records Sorn
ML20022A256
Person / Time
Issue date: 12/27/2019
From:
NRC/OCIO
To:
Sally Hardy
References
Download: ML20022A256 (5)


Text

SYSTEM NAME AND NUMBER:

Employee Fitness Center RecordsNRC 44.

SECURITY CLASSIFICATION:

Unclassified SYSTEM LOCATION:

Primary systemFitness Center, NRC, Two White Flint North, 11545 Rockville Pike, Rockville, Maryland.

Duplicate systemRegional offices, listed in Addendum I, Part 2, only maintain lists of their employees who receive subsidy from NRC for off-site fitness center memberships.

SYSTEM MANAGER(S):

Office of Chief Human Capital Officer Contracting Officer Representative, Office of the Chief Human Capital Officer, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

5 U.S.C. 7901; Executive Order (E.O.) 9397, as amended by E.O. 13478.

PURPOSE(S) OF THE SYSTEM:

Maintaining membership for the NRC Fitness Center.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

NRC employees who apply for membership at the Fitness Center, including current and former members.

CATEGORIES OF RECORDS IN THE SYSTEM:

The system includes applications to participate in NRCs Fitness Center, information on an individuals degree of physical fitness and their fitness activities and goals; and various forms, memoranda, and correspondence related to Fitness Facilities membership and financial/payment matters. Specific information contained in the application for membership includes the employee applicant's name, gender, age, badge id, height, weight, and medical

information, including a history of certain medical conditions; the name of the individual's personal physician and any prescription or over-the-counter drugs taken on a regular basis; and the name and address of a person to be notified in case of emergency.

RECORD SOURCE CATEGORIES:

Information in this system of records is principally obtained from the subject individual.

Other sources of information include, but are not limited to, the NRC Fitness Center Director, staff physicians retained by the NRC, and the individuals personal physicians.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

In addition to the disclosures permitted under subsection (b) of the Privacy Act, the NRC may disclose information contained in this system of records without the consent of the subject individual if the disclosure is compatible with the purpose for which the record was collected under the following routine uses:

a. To the individual listed as an emergency contact, in the event of an emergency;
b. To the National Archives and Records Administration or to the General Services Administration for records management inspections conducted under 44 U.S.C. 2904 or 2906;
c. A record from this system of records which indicates a violation of civil or criminal law, regulation or order may be referred as a routine use to a Federal, State, local or foreign agency that has authority to investigate, enforce, implement or prosecute such laws. Further, a record from this system of records may be disclosed for civil or criminal law or regulatory enforcement purposes to another agency in response to a written request from that agencys head or an official who has been delegated such authority;
d. A record from this system of records may be disclosed as a routine use to a Federal, State, local, or foreign agency to obtain information relevant to an NRC decision concerning hiring or retaining an employee, letting a contract, or issuing a security clearance, license, grant or other benefit;
e. A record from this system of records may be disclosed as a routine use to a Federal, State, local, or foreign agency requesting a record that is relevant and necessary to its decision on a matter of hiring or retaining an employee, issuing a security clearance, reporting an investigation of an employee, letting a contract, or issuing a license, grant, or other benefit;
f. A record from this system of records may be disclosed as a routine use in the course of discovery; in presenting evidence to a court, magistrate, administrative tribunal, or grand jury or pursuant to a qualifying order from any of those; in alternative dispute resolution proceedings, such as arbitration or mediation; or in the course of settlement negotiations;
g. A record from this system of records may be disclosed as a routine use to a Congressional office from the record of an individual in response to an inquiry from the Congressional office made at the request of that individual;
h. A record from this system of records may be disclosed as a routine use to NRC-paid experts or consultants, and those under contract with the NRC on a "need-to-know" basis for a purpose within the scope of the pertinent NRC task. This access will be granted to an NRC contractor or employee of such contractor by a system manager only after satisfactory justification has been provided to the system manager;
i. A record from this system of records may be disclosed as a routine use to appropriate agencies, entities, and persons when (1) NRC suspects or has confirmed that there has been a breach of the system of records, (2) NRC has determined that as a result of the suspected or confirmed breach there is a risk of harm to individuals, NRC (including its information systems, programs, and operations), the Federal Government, or national security; and (3) the disclosure made to such agencies, entities, and persons is reasonably necessary to assist in connection with NRC efforts to respond to the suspected or confirmed breach or to prevent, minimize, or remedy such harm; and
j. A record from this system of records may be disclosed as a routine use to another Federal agency or Federal entity, when the NRC determines that information from this system of

records is reasonably necessary to assist the recipient agency or entity in (1) responding to a suspected or confirmed breach or (2) preventing, minimizing, or remedying the risk of harm to individuals, the recipient agency or entity (including its information systems, programs, and operations), the Federal Government, or national security, resulting from a suspected or confirmed breach.

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:

Records are maintained on paper and electronic media.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:

Information is indexed and accessed by an individuals name and/or NRC Badge ID number.

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS Fitness Center records are currently unscheduled and must be retained until the National Archives and Records Administration approves a records disposition schedule for this material. Non-occupational health and wellness program records are retained according to the National Archives and Records Administrations General Records Schedule 2.7: Employee Health and Safety Records, item 080. Destroy 3 years after the project/activity or transaction is completed or superseded, but longer retention is authorized if needed for business use.

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:

Records are maintained in a building where access is controlled by a security guard force. Access to the Fitness Center is controlled by keycard and bar code verification. Records in paper form are stored alphabetically by individuals names in lockable file cabinets maintained in the NRC where access to the records is limited to agency and Fitness Center personnel whose duties require access. The records are under visual control during duty hours.

Automated records are protected by screen saver. Access to automated data requires use of proper password and user identification codes. Only authorized personnel have access to areas in which information is stored.

RECORD ACCESS PROCEDURES:

Same as Notification procedures.

CONTESTING RECORD PROCEDURES:

Same as Notification procedures.

NOTIFICATION PROCEDURES:

Individuals seeking to determine whether this system of records contains information about them should write to the Freedom of Information Act or Privacy Act Officer, Office of the Chief Information Officer, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, and comply with the procedures contained in NRCs Privacy Act regulations, 10 CFR part 9.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.

DISCLOSURES TO CONSUMER REPORTING AGENCIES:

Disclosures Pursuant to 5 U.S.C. 552a(b)(12): Disclosures of information to a consumer reporting agency are not considered a routine use of records. Disclosures may be made from this system to consumer reporting agencies as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f) (1970)) or the Federal Claims Collection Act of 1966, as amended (31 U.S.C.

3701(a)(3) (1996)).