Notice2026-17929
Agency Information Collection Activities: Comment Request
Primary source
Metadata and text below are from the Federal Register, a public-domain U.S. government work. Always verify the official published version before relying on it for any legal matter.
Published
September 2, 2026
Issuing agencies
Agriculture DepartmentEconomic Research Service
Abstract
In accordance with the Paperwork Reduction Act of 1995, this notice announces the intention of the Economic Research Service (ERS) to request an extension of a currently approved information collection titled "Data Security Requirements for Accessing Confidential Data." ERS plans to collect information from the public to fulfill its data security requirements when providing access to restricted use data for the purpose of evidence building. ERS's data security agreements and other paperwork along with the corresponding security protocols allow ERS to maintain careful controls on confidentiality and privacy, as required by law.
Full Text
<html>
<head>
<title>Federal Register, Volume 91 Issue 169 (Wednesday, September 2, 2026)</title>
</head>
<body><pre>
[Federal Register Volume 91, Number 169 (Wednesday, September 2, 2026)]
[Notices]
[Pages 56415-56417]
From the Federal Register Online via the Government Publishing Office [<a href="http://www.gpo.gov">www.gpo.gov</a>]
[FR Doc No: 2026-17929]
========================================================================
Notices
Federal Register
________________________________________________________________________
This section of the FEDERAL REGISTER contains documents other than rules
or proposed rules that are applicable to the public. Notices of hearings
and investigations, committee meetings, agency decisions and rulings,
delegations of authority, filing of petitions and applications and agency
statements of organization and functions are examples of documents
appearing in this section.
========================================================================
Federal Register / Vol. 91, No. 169 / Wednesday, September 2, 2026 /
Notices
[[Page 56415]]
DEPARTMENT OF AGRICULTURE
Economic Research Service
Agency Information Collection Activities: Comment Request
AGENCY: Economic Research Service, U.S. Department of Agriculture
(USDA).
ACTION: Notice and request for comments.
-----------------------------------------------------------------------
SUMMARY: In accordance with the Paperwork Reduction Act of 1995, this
notice announces the intention of the Economic Research Service (ERS)
to request an extension of a currently approved information collection
titled ``Data Security Requirements for Accessing Confidential Data.''
ERS plans to collect information from the public to fulfill its data
security requirements when providing access to restricted use data for
the purpose of evidence building. ERS's data security agreements and
other paperwork along with the corresponding security protocols allow
ERS to maintain careful controls on confidentiality and privacy, as
required by law.
DATES: Written comments on this notice must be received by November 2,
2026 to be assured of consideration.
ADDRESSES: Address all comments concerning this notice to
<a href="/cdn-cgi/l/email-protection#b1d4c3c29fc1c3d0f1c4c2d5d09fd6dec7"><span class="__cf_email__" data-cfemail="6d081f1e431d1f0c2d181e090c430a021b">[email protected]</span></a> identified by docket number 0536-0079.
FOR FURTHER INFORMATION CONTACT: Requests for additional information or
copies of this information collection should be directed to
<a href="/cdn-cgi/l/email-protection#4f2a3d3c613f3d2e0f3a3c2b2e61282039"><span class="__cf_email__" data-cfemail="d9bcabaaf7a9abb899acaabdb8f7beb6af">[email protected]</span></a>.
SUPPLEMENTARY INFORMATION:
Title of Collection: Data Security Requirements for Accessing
Confidential Data.
OMB Control Number: 0536-0079.
Expiration Date of Current Approval: March 31, 2027.
Type of Request: Intent to extend a currently approved information
collection for 3 years.
Abstract: Title III of the Foundations for Evidence-Based
Policymaking Act of 2018 (hereafter referred to as the Evidence Act)
mandates that OMB establish a Standard Application Process (SAP) for
requesting access to certain confidential data assets. Specifically,
the Evidence Act requires OMB to establish a common application process
through which agencies, the Congressional Budget Office, State, local,
and Tribal governments, researchers, and other individuals, as
appropriate, may apply for access to confidential data assets
collected, accessed, or acquired by a statistical agency or unit. This
new process will be implemented while maintaining stringent controls to
protect confidentiality and privacy, as required by law.
Data collected, accessed, or acquired by statistical agencies and
units is vital for developing evidence on conditions, characteristics,
and behaviors of the public and on the operations and outcomes of
public programs and policies. This evidence can benefit the
stakeholders in the programs, the broader public, as well as
policymakers and program managers at the local, State, Tribal, and
National levels. The many benefits of access to data for evidence
building notwithstanding, ERS is required by law to maintain careful
controls that allow it to minimize disclosure risk while protecting
confidentiality and privacy.
The fulfillment of ERS's data security requirements places a degree
of burden on the public, which is outlined below.
The SAP Portal is a web-based application for the public to request
access to confidential data assets from federal statistical agencies
and units. The objective of the SAP Portal is to increase public access
to confidential data for the purposes of evidence building and reduce
the burden of applying for confidential data. Once an individual's
application in the SAP Portal has received a positive determination,
the data-owning agency(ies) or unit(s) will begin the process of
collecting information to fulfill their data security requirements.
The paragraphs below outline the SAP Policy, the steps to complete
an application through the SAP Portal, and the process for agencies to
collect information fulfilling their data security requirements.
The SAP Policy
At the recommendation of the ICSP, the SAP Policy establishes the
SAP to be implemented by statistical agencies and units and
incorporates directives from the Evidence Act. The policy is intended
to provide guidance as to the application and review processes using
the SAP Portal, setting forth clear standards that enable statistical
agencies and units to implement a common application form and a uniform
review process. The SAP Policy renewal was submitted to the public for
comment in June 2025 (90 FR 25380). The renewal policy was approved and
has a current expiration date of 12-31-2028.
The SAP Portal
The SAP Portal is an application interface connecting applicants
seeking data with a catalog of data assets owned by the federal
statistical agencies and units. The SAP Portal is not a new data
repository or warehouse; confidential data assets will continue to be
stored in secure data access facilities owned and hosted by the federal
statistical agencies and units. The SAP Portal will provide a
streamlined application process across agencies, reducing redundancies
in the application process. This single SAP Portal will improve the
process for applicants, tracking and communicating the application
process throughout its lifecycle. This reduces redundancies and burden
on applicants that request access to data from multiple agencies. The
SAP Portal will automate key tasks to save resources and time and will
bring agencies into compliance with the Evidence Act statutory
requirements.
Data Discovery
Individuals begin the process of accessing restricted use data by
discovering confidential data assets through the SAP data catalog,
maintained by federal statistical agencies at <a href="http://www.sap.nsf.gov">www.sap.nsf.gov</a>.
Potential applicants can search by agency, topic, or keyword to
identify data of interest or relevance. Once they have identified data
of interest, applicants can view metadata outlining the title,
description or abstract, scope and coverage, and detailed methodology
related to a specific data asset to determine its relevance to their
research.
While statistical agencies and units shall endeavor to include
metadata in the SAP data catalog on all confidential
[[Page 56416]]
data assets for which they accept applications, it may not be feasible
to include metadata for some data assets (e.g., potential curated
versions of administrative data). A statistical agency or unit may
still accept an application even if the requested data asset is not
listed in the SAP data catalog.
SAP Application Process
Individuals who have identified and wish to access confidential
data assets will be able to apply for access through the SAP Portal.
Applicants must create an account and follow all steps to complete the
application. Applicants begin by entering their personal, contact, and
institutional information, as well as the personal, contact, and
institutional information of all individuals on their research team.
Applicants proceed to provide summary information about their proposed
project, to include project title, duration, funding, timeline, and
other details including the data asset(s) they are requesting and any
proposed linkages to data not listed in the SAP data catalog, including
non-federal data sources. Applicants then proceed to enter detailed
information regarding their proposed project, including a project
abstract, research question(s), literature review, project scope,
research methodology, project products, and anticipated output.
Applicants must demonstrate a need for confidential data, outlining why
their research question cannot be answered using publicly available
information.
Submission for Review
Upon submission of their application, applicants will receive a
notification that their application has been received and is under
review by the data owning agency or agencies (in the event where data
assets are requested from multiple agencies). At this point, applicants
will also be notified that application approval does not alone grant
access to confidential data, and that, if approved, applicants must
comply with the data-owning agency's security requirements outside of
the SAP Portal.
In accordance with the Evidence Act and the direction of the ICSP,
agencies will approve or reject an application within a prompt
timeframe. In some cases, agencies may determine that additional
clarity, information, or modification is needed and request the
applicant to ``revise and resubmit'' their application.
Data discovery, the SAP application process, and the submission for
review are planned to take place within the web-based SAP Portal. As
noted above, the renewal notice to collect information through the SAP
Portal has been published separately (90 FR 25380).
Access to Restricted Use Data
In the event of a positive determination, the applicant will be
notified that their proposal has been accepted. The positive or final
adverse determination concludes the SAP Portal process. In the instance
of a positive determination, the data-owning agency (or agencies) will
contact the applicant to provide instructions on the agency's security
requirements that must be completed to gain access to the confidential
data. The completion and submission of the agency's security
requirements will take place outside of the SAP Portal.
Collection of Information for Data Security Requirements
In the instance of a positive determination for an application
requesting access to an ERS confidential data asset, ERS will contact
the applicant(s) to initiate the process of collecting information to
fulfill their security requirements. These include additional
requirements necessary for the statistical agency or unit to place the
applicant(s) in a trusted category that may include the applicant's
successful completion of identity verification, confidentiality
training, nondisclosure, inspection of the site the confidential data
will be accessed, and data use agreements.
ERS's data security requirements include the collection of the
following information:
<bullet> CIPSEA Training: ERS personnel provide a Security Briefing
to all applicants who were approved access to restricted data. The
Briefing includes information on the Confidential Information
Protection and Statistical Efficiency Act of 2018, Title III of Public
Law 115-435, codified in 44 U.S.C. Ch. 35 and other applicable Federal
laws that protect the restricted data. Researchers will be asked to
fill out the CIPSEA Review Form to verify that they reviewed the
training.
<bullet> Completion of form Certification and Restrictions on the
Use of Confidential ERS Data. This form is required to be signed by
researchers who have been approved to access unpublished ERS data
(alternatively, some approved researchers complete on-line training in
lieu of completing this form). The form contains excerpts of the
various laws that apply to the unpublished data being provided to the
researcher. The form explains the restrictions associated with the
unpublished data and includes a place for the research to sign the
form, thereby acknowledging the restrictions and agreeing to abide by
them.
<bullet> Completion of ERS Site Inspection Checklist. Researchers
approved to access unpublished ERS data do so using a secure data
enclave environment accessible at their own location. An ERS employee
performs a site inspection (either in-person or via a video call) of
the researcher's location prior to the researcher being granted access
to the unpublished data. During the site inspection, the ERS employee
administers the form ERS Site Inspection Checklist, which asks
questions pertaining to the suitability of the location for restricted
data access and some of the policies associated with accessing the
restricted data. The form also collects information about the computer
the researcher will use to access the ERS data enclave.
<bullet> Completion of ERS Memorandum of Understanding (MOU).
Researchers approved to access unpublished ERS data need to complete a
Memorandum of Understanding Agreement between the Economic Research
Service and their university, institution, or agency. The form
establishes data access protocols and party responsibilities. If
necessary, researchers may request an extension to their MOU using the
Extension of MOU Request Form.
<bullet> If a researcher wishes to add a new researcher to their
previously approved project, they can fill out the Amendment for New
Collaborators. If a researcher wishes to change the scope of a
previously approved project, they may fill out the Request for Amended
Project Agreement Form. For administrative changes such as personnel,
additional versions of the data, and time extensions, the researcher
can fill out the Addendum to Access Agreement.
Specifically, researchers will be required to complete the OF-306
(Declaration for Federal Employment) to support onboarding into USDA's
human capital management system. This step is necessary to establish a
formal relationship between ERS and the researcher and to ensure
compliance with federal identity verification and personnel tracking
requirements. The OF-306 collects administrative PII such as Social
Security Number (SSN), date of birth, sex, and citizenship. This
information will be submitted directly to REE Onboarding and will not
be retained or processed by ERS. The collection and maintenance of this
data are governed by USDA's Privacy Act System of Records Notice (SORN)
OCFO/NFC-1--Systems for Personnel, Payroll, and Time & Attendance (89
FR 5481, January 29, 2024). The OF-306 is
[[Page 56417]]
approved under OMB Control No. 3206-0182. As such, burden associated
with completing the OF-306 is not included in this ICR.
Estimate of Burden: The amount of time to complete the agreements
and other paperwork that comprise ERS's security requirements will vary
based on the confidential data assets requested and the access
modality. To obtain access to ERS confidential data assets, it is
estimated that the average time to complete and submit ERS data
security agreements and other paperwork is 110 minutes. This estimate
does not include the time needed to complete and submit an application
within the SAP Portal. All efforts related to SAP Portal applications
occur prior to and separate from ERS's effort to collect information
related to data security requirements.
The expected number of applications in the SAP Portal that receive
a positive determination from ERS in a given year may vary. Overall,
per year, ERS estimates it will collect data security information for
20 application submissions that received a positive determination
within the SAP Portal. ERS estimates that the total burden for the
collection of information for data security requirements over the
course of the three-year OMB clearance will be about 110 hours and, as
a result, an average annual burden of 37 hours.
Below we provide projected average estimates for the next three
years:
Total Requests: 20.
Frequency of Request: Once per request.
Average Minutes per Request: 110 minutes.
Total Estimated Burden Hours: 37.
Comments: Comments are invited on (a) whether the proposed
collection of information is necessary for the proper performance of
the functions of ERS, including whether the information will have
practical utility; (b) the accuracy of ERS's estimate of the burden of
the proposed collection of information; (c) ways to enhance the
quality, use, and clarity of the information for respondents, including
through the use of automated collection techniques or other forms of
information technology; and (d) ways to minimize the burden of the
collection of information on those who are to respond, including
through the use of appropriate automated, electronic, mechanical, or
other technological collection techniques or other forms of information
technology.
Kelly Maguire,
Administrator, Economic Research Service, United States Department of
Agriculture.
[FR Doc. 2026-17929 Filed 9-1-26; 8:45 am]
BILLING CODE 3410-18-P
</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>Indexed from Federal Register on September 2, 2026.
This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.