Notice2025-21971
Privacy Act of 1974; System of Records
Primary source
Metadata and text below are from the Federal Register, a public-domain U.S. government work. Always verify the official published version before relying on it for any legal matter.
Published
December 5, 2025
Issuing agencies
National Aeronautics and Space Administration
Abstract
In accordance with the requirements of the Privacy Act of 1974, the National Aeronautics and Space Administration is providing public notice of a modification to an existing system of records entitled NASA Core Financial Management Records (CFMR). The notice updates the Routine Use section to include two additional routine uses . The system of records is more fully described in the SUPPLEMENTARY INFORMATION section of this notice.
Full Text
<html>
<head>
<title>Federal Register, Volume 90 Issue 232 (Friday, December 5, 2025)</title>
</head>
<body><pre>
[Federal Register Volume 90, Number 232 (Friday, December 5, 2025)]
[Notices]
[Pages 56183-56185]
From the Federal Register Online via the Government Publishing Office [<a href="http://www.gpo.gov">www.gpo.gov</a>]
[FR Doc No: 2025-21971]
=======================================================================
-----------------------------------------------------------------------
NATIONAL AERONAUTICS AND SPACE ADMINISTRATION
[Notice: (25-045)]
Privacy Act of 1974; System of Records
AGENCY: National Aeronautics and Space Administration (NASA).
ACTION: Notice of a modified system of records.
-----------------------------------------------------------------------
SUMMARY: In accordance with the requirements of the Privacy Act of
1974,
[[Page 56184]]
the National Aeronautics and Space Administration is providing public
notice of a modification to an existing system of records entitled NASA
Core Financial Management Records (CFMR). The notice updates the
Routine Use section to include two additional routine uses . The system
of records is more fully described in the SUPPLEMENTARY INFORMATION
section of this notice.
DATES: Submit comments within 30 calendar days from the date of this
publication. The proposed system will take effect at the end of that
period if no significant adverse comments are received.
ADDRESSES: Submit comments to Stayce Hoult, Privacy Act Officer, Office
of the Chief Information Officer, Mary W. Jackson NASA Headquarters,
Washington, DC 20546-0001, 757-864-3292, or <a href="/cdn-cgi/l/email-protection#a4eae5f7e589f4e5ebc2c2cdc7c1d6e4cac5d7c58ac3cbd2"><span class="__cf_email__" data-cfemail="e7a9a6b4a6cab7a6a881818e848295a789869486c9808891">[email protected]</span></a>.
FOR FURTHER INFORMATION CONTACT: NASA Privacy Act Officer, Stayce
Hoult, 256-544-7705, or <a href="/cdn-cgi/l/email-protection#9bd5dac8dab6cbdad4fdfdf2f8fee9dbf5fae8fab5fcf4ed"><span class="__cf_email__" data-cfemail="f7b9b6a4b6daa7b6b891919e949285b799968496d9909881">[email protected]</span></a>.
SUPPLEMENTARY INFORMATION: This system of records notice (SORN) is
modified to incorporate Routine Use section with two additional routine
uses (1) as mandated by Executive Order 14249, Protecting America's
Bank Account Against Fraud, Waste and Abuse and Office of Management
and Budget (OMB) M-25-32, ``Preventing Improper Payments and Protecting
Privacy Through Do Not Pay'' and (2) providing for additional coverage
and extra clarity. It also updates the Privacy Act Officer and contact
information. Finally, it is also modified to make editorial changes.
Stayce D. Hoult,
NASA Chief Privacy Officer.
SYSTEM NAME AND NUMBER:
Core Financial Management Records, NASA 10CFMR.
SECURITY CLASSIFICATION:
This system is categorized in accordance with OMB Circular A-11 as
a Special Management Attention Major Information System. A security
plan for this system has been established in accordance with OMB
Circular A-130, Management of Federal Information Resources.
SYSTEM LOCATION:
George C. Marshall Space Flight Center, National Aeronautics and
Space Administration, Marshall Space Flight Center, AL 35812.
SYSTEM MANAGER(S):
<bullet> Director, Agency Financial Systems Office, Mary W. Jackson
NASA Headquarters, National Aeronautics and Space Administration,
Washington, DC 20546-0001.
<bullet> IS90/Associate Chief Information Officer, Applications
Division, George C. Marshall Space Flight Center, National Aeronautics
and Space Administration, Marshall Space Flight Center, AL 35812.
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES
OF USERS AND PURPOSES OF SUCH USES:
Any disclosures of information will be compatible with the purpose
for which the Agency collected the information. The following are
routine uses:
1. Furnish data to the Department of Treasury for financial
reimbursement of individual expenses, such as travel, books, and other
miscellaneous items.
2. Process payments and collections in which an individual is
reimbursing the Agency.
3. Ongoing administration and maintenance of the records, which is
performed by authorized NASA employees, both civil servants and
contractors.
4. To the U.S. Department of the Treasury when disclosure of the
information is relevant to review payment and award eligibility through
the Do Not Pay Working System for the purposes of identifying,
preventing, or recouping improper payments to an applicant for, or
recipient of, Federal funds, including funds disbursed by a state
(meaning a state of the United States, the District of Columbia, a
territory or possession of the United States, or a federally recognized
Indian tribe) in a state-administered, federally funded program.
In addition, information may be disclosed under the following NASA
Standard Routine Uses:
1. Law Enforcement--When a record on its face, or in conjunction
with other information, indicates a violation or potential violation of
law, whether civil, criminal or regulatory in nature, and whether
arising by general statute or particular program statute, or by
regulation, rule, or order, disclosure may be made to the appropriate
agency, whether Federal, foreign, State, local, or tribal, or other
public authority responsible for enforcing, investigating or
prosecuting such violation or charged with enforcing or implementing
the statute, or rule, regulation, or order, if NASA determines by
careful review that the records or information are both relevant and
necessary to any enforcement, regulatory, investigative or prosecutive
responsibility of the receiving entity.
2. Certain Disclosures to Other Agencies--A record from this SOR
may be disclosed to a Federal, State, or local agency maintaining
civil, criminal, or other relevant enforcement information or other
pertinent information, such as current licenses, if necessary, to
obtain information relevant to an agency decision concerning the hiring
or retention of an employee, the issuance of a security clearance, the
letting of a contract, or the issuance of a license, grant, or other
benefit.
3. Certain Disclosures to Other Federal Agencies--A record from
this SOR may be disclosed to a Federal agency, in response to its
request, for a matter concerning the hiring or retention of an
employee, the issuance of a security clearance, the reporting of an
investigation of an employee, the letting of a contract, or the
issuance of a license, grant, or other benefit by the requesting
agency, to the extent that the information is relevant and necessary to
the requesting agency's decision on the matter.
4. Department of Justice--A record from this SOR may be disclosed
to the Department of Justice when (a) NASA, or any component thereof;
or (b) any employee of NASA in his or her official capacity; or (c) any
employee of NASA in his or her individual capacity where the Department
of Justice has agreed to represent the employee; or (d) the United
States, where NASA determines that litigation is likely to affect NASA
or any of its components, is a party to litigation or has an interest
in such litigation, and by careful review, the use of such records by
the Department of Justice is deemed by NASA to be relevant and
necessary to the litigation.
5. Courts--A record from this SOR may be disclosed in an
appropriate proceeding before a court, grand jury, or administrative or
adjudicative body, when NASA determines that the records are relevant
to the proceeding; or in an appropriate proceeding before an
administrative or adjudicative body when the adjudicator determines the
records to be relevant to the proceeding.
6. Response to an Actual or Suspected Compromise or Breach of
Personally Identifiable Information--A record from this SOR may be
disclosed to appropriate agencies, entities, and persons when (1) NASA
suspects or has confirmed that there has been a breach of the system of
records; (2) NASA has determined that as a result of the suspected or
confirmed breach there is a risk of harm to individuals, NASA
(including its information systems,
[[Page 56185]]
programs, and operations), the Federal Government, or national
security; and (3) the disclosure made to such agencies, entities, and
persons is reasonably necessary to assist in connection with NASA's
efforts to respond to the suspected or confirmed breach or to prevent,
minimize, or remedy such harm.
7. Contractors--A record from this SOR may be disclosed to
contractors, grantees, experts, consultants, students, volunteers, and
others performing or working on a contract, service, grant, cooperative
agreement, or other assignment for the Federal Government, when
necessary to accomplish a NASA function related to this SOR.
Individuals provided information under this routine use are subject
to the same Privacy Act requirements and limitations on disclosure as
are applicable to NASA employees.
8. Members of Congress--A record from this SOR may be disclosed to
a Member of Congress or to a Congressional staff member in response to
an inquiry of the Congressional office made at the written request of
the constituent about whom the record is maintained.
9. Disclosures to Other Federal Agencies in Response to an Actual
or Suspected Compromise or Breach of Personally Identifiable
Information--A record from this SOR may be disclosed to another Federal
agency or Federal entity, when NASA determines that information from
this system of records is reasonably necessary to assist the recipient
agency or entity in (1) responding to a suspected or confirmed breach
or (2) preventing, minimizing, or remedying the risk of harm to
individuals, the recipient agency or entity (including its information
systems, programs, and operations), the Federal Government, or national
security, resulting from a suspected or confirmed breach.
10. National Archives and Records Administration--A record from
this SOR may be disclosed as a routine use to the officers and
employees of the National Archives and Records Administration (NARA)
pursuant to records management inspections being conducted under the
authority of 44 U.S.C. 2904 and 2906.
11. Audit--A record from this SOR may be disclosed to another
agency, or organization for purpose of performing audit or oversight
operations as authorized by law, but only such information as is
necessary and relevant to such audit or oversight function.
POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
Records in this system are maintained on electronic media.
POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
Records are retrieved from the system by name or SSN (Tax ID).
POICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
Records are stored in the NASA Applications & Platform Services
(APS) database and managed, retained and dispositioned in accordance
with NASA Records Retention Schedules, Schedule 9, Items 11 and 16.
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
Electronic records are maintained on secure NASA servers and
protected in accordance with all Federal standards and those
established in NASA regulations at 14 CFR 1212.605. Additionally,
server and data management environments employ infrastructure
encryption technologies both in data transmission and at rest on
servers. Electronic messages sent within and outside of the Agency that
convey sensitive data are encrypted and transmitted by staff via pre-
approved electronic encryption systems as required by NASA policy.
Approved security plans are in place for information systems containing
the records in accordance with the Federal Information Security
Management Act of 2002 (FISMA) and OMB Circular A-130, Management of
Federal Information Resources. Only authorized personnel requiring
information in the official discharge of their duties are authorized
access to records through approved access or authentication methods.
Access to electronic records is achieved only from workstations within
the NASA Intranet or via a secure Virtual Private Network (VPN)
connection that requires two-factor hardware token authentication or
via employee PIV badge authentication from NASA-issued computers. Non-
electronic records are secured in locked rooms or locked file cabinets.
RECORD ACCESS PROCEDURES:
In accordance with 14 CFR part 1212, Privacy Act--NASA Regulations,
information may be obtained by contacting in person or in writing the
system or subsystem manager listed above at the location where the
records are created and/or maintained. Requests must contain the
identifying data concerning the requester, e.g., first, middle and last
name; date of birth; description and time periods of the records
desired. NASA Regulations also address contesting contents and
appealing initial determinations regarding records access.
CONTESTING RECORD PROCEDURES:
In accordance with 14 CFR part 1212, Privacy Act--NASA Regulations,
information may be obtained by contacting in person or in writing the
system or subsystem manager listed above at the location where the
records are created and/or maintained. Requests must contain the
identifying data concerning the requester, e.g., first, middle and last
name; date of birth; description and time periods of the records
desired. NASA Regulations also address contesting contents and
appealing initial determinations regarding records access.
NOTIFICATION PROCEDURES:
In accordance with 14 CFR part 1212, Privacy Act--NASA Regulations,
information may be obtained by contacting in person or in writing the
system or subsystem manager listed above at the location where the
records are created and/or maintained. Requests must contain the
identifying data concerning the requester, e.g., first, middle and last
name; date of birth; description and time periods of the records
desired. NASA Regulations also address contesting contents and
appealing initial determinations regarding records access.
EXEMPTIONS PROMULGATED FOR THE SYSTEM:
None.
HISTORY:
<bullet> (15-115, 80 FR 246, pp. 79937-79947).
<bullet> (15-068, 80 FR 193, pp. 60410-60411).
<bullet> (11-091, 76 FR 200, pp. 64112-64114).
[FR Doc. 2025-21971 Filed 12-4-25; 8:45 am]
BILLING CODE 7510-13-P
</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>Indexed from Federal Register on December 5, 2025.
This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.