Privacy Act of 1974; System of Records
Primary source
Metadata and text below are from the Federal Register, a public-domain U.S. government work. Always verify the official published version before relying on it for any legal matter.
Issuing agencies
Abstract
NSF proposes to establish Privacy Act systems of records to track and manage matters pertaining to the agency's awardee compliance program, reasonable accommodation program, and sexual assault and harassment prevention and response program. These systems support the agency's efforts to ensure that complaints and inquiries received or handled by these programs are timely and appropriately acknowledged, processed, and documented.
Full Text
<html>
<head>
<title>Federal Register, Volume 91 Issue 213 (Thursday, November 5, 2026)</title>
</head>
<body><pre>
[Federal Register Volume 91, Number 213 (Thursday, November 5, 2026)]
[Notices]
[Pages 69888-69894]
From the Federal Register Online via the Government Publishing Office [<a href="http://www.gpo.gov">www.gpo.gov</a>]
[FR Doc No: 2026-22540]
=======================================================================
-----------------------------------------------------------------------
NATIONAL SCIENCE FOUNDATION
Privacy Act of 1974; System of Records
AGENCY: National Science Foundation.
ACTION: Notice of a new system of records.
-----------------------------------------------------------------------
SUMMARY: NSF proposes to establish Privacy Act systems of records to
track and manage matters pertaining to the agency's awardee compliance
program, reasonable accommodation program, and sexual assault and
harassment prevention and response program. These systems support the
agency's efforts to ensure that complaints and inquiries received or
handled by these programs are timely and appropriately acknowledged,
processed, and documented.
DATES: Persons wishing to comment on these proposed agency systems may
do so on or before December 7, 2026. These new systems of records will
become final and effective without further notice on December 7, 2026
unless modified by subsequent notice to reflect public comments, if
any, on the proposed system(s).
ADDRESSES: You may submit comments on these proposed systems,
identified by ``NSF-84,'' ``NSF-85,'' and/or ``NSF-86,'' as applicable,
by any of the following methods:
<bullet> Federal eRulemaking Portal: <a href="http://www.regulations.gov">http://www.regulations.gov</a>.
Docket number NSF-2026-OTR-0067. Follow the instructions for submitting
comments.
<bullet> Email: Tom Boger, Acting Senior Agency Official for
Privacy (SAOP), <a href="/cdn-cgi/l/email-protection#e494968d9285879da48a9782ca838b92"><span class="__cf_email__" data-cfemail="fe8e8c97889f9d87be908d98d0999188">[email protected]</span></a>. Include ``NSF-84,'' ``NSF-85,'' and/or
``NSF-86,'' as applicable, in the subject line of the message.
<bullet> Mail: Tom Boger, Acting SAOP, Office of the Chief
Information Officer, NSF, 401 Dulany Street, Alexandria, VA 22314.
NSF intends to post all in-scope comments publicly. All comments
submitted in response to this Notice will become a matter of public
record. Do not include any information of a sensitive or confidential
nature about yourself or others.
FOR FURTHER INFORMATION CONTACT: For information regarding the proposed
Privacy Act systems of records, contact Tom Boger, Acting SAOP, Office
of the Chief Information Officer, NSF, 401 Dulany Street, Alexandria,
VA 22314, <a href="/cdn-cgi/l/email-protection#2656544f5047455f6648554008414950"><span class="__cf_email__" data-cfemail="d5a5a7bca3b4b6ac95bba6b3fbb2baa3">[email protected]</span></a>. For information regarding NSF's awardee
compliance contact NSF Office of Civil Rights, 401 Dulany Street,
Alexandria, VA 22314 <a href="/cdn-cgi/l/email-protection#3d7c7e7f7d534e5b135a524b"><span class="__cf_email__" data-cfemail="e3a2a0a1a38d9085cd848c95">[email protected]</span></a>, and for information on the reasonable
accommodation program, contact the NSF Office of Civil Rights, 401
Dulany Street, Alexandria, VA 22314, <a href="/cdn-cgi/l/email-protection#cfbdaebdaabebaaabcbbbc8fa1bca9e1a8a0b9"><span class="__cf_email__" data-cfemail="f587948790848090868186b59b8693db929a83">[email protected]</span></a>. For
information regarding NSF's sexual assault and harassment prevention
and response program, contact Ren[eacute]e Ferranti, Program Manager,
NSF, 401 Dulany Street, Alexandria, VA, <a href="/cdn-cgi/l/email-protection#b5c6d4d3d0c7c6d6dcd0dbd6d0f5dbc6d39bd2dac3"><span class="__cf_email__" data-cfemail="07746661627574646e626964624769746129606871">[email protected]</span></a>.
SUPPLEMENTARY INFORMATION: In accordance with the Privacy Act of 1974,
5 U.S.C. 552a, NSF is publishing a proposed Privacy Act system of
records notice (SORN) for the case management system in support of each
of the NSF administrative programs described below.
NSF-84: Awardee Compliance Case Management System
This SORN is intended to establish the NSF Office of Civil Rights
(OCR) electronic case management system (CMS) for receiving, tracking,
managing, and responding to complaints or reports received from
victims, witnesses, or other individuals alleging discrimination,
harassment, or retaliation in programs and activities that receive
financial assistance from NSF (e.g., NSF grants, cooperative
agreements). Individuals may file a complaint or report through the
online Web-based CMS by registering and creating a CMS user account.
(Witnesses or other third parties may also file a complaint or report
of discrimination, harassment, or retaliation on behalf of another
individual through the CMS, but only with that individual's consent.)
For Privacy Act purposes, all complaints, reports, or other records in
the CMS are to be treated as records ``about'' the subject individual
(i.e., victim of the alleged discrimination, harassment, or
retaliation), see 5 U.S.C. 552a(a)(4) (defining Privacy Act ``record'')
and are to be maintained and retrieved only by the case number or other
identifier personally assigned to the subject individual, and not by
any other third-party individual who may also be identified in such
records (e.g., alleged violator, witnesses).
To the extent the system's online form constitutes an information
collection activity subject to U.S. Office of Management & Budget (OMB)
approval under the Paperwork Reduction Act (PRA), the form was approved
by OMB and assigned Control No. 3145-0288 (National Science Foundation
Office of Civil Rights Case Management System) on April 8, 2026.
NSF-85: Reasonable Accommodation Request E-Filing System
This SORN is intended to establish the NSF OCR electronic filing
system pertaining to NSF employees, job applicants, and individuals
conducting business at NSF who have requested a ``reasonable
accommodation'' under applicable Federal law (e.g., assistive
technology, accessibility, support services, or other adjustments or
modifications to the work environment under the Rehabilitation Act of
1973, as amended). Individuals may initiate such a request
electronically by registering and creating an account in the online
Web-based e-filing system, which will then allow them to submit
information about their accommodation request, and to view the status
of any request that they originally created in the system.
[[Page 69889]]
Account registration data, reasonable accommodation requests, and other
system records collected by the program to process or track the status
of such requests are to be maintained and retrieved by the name, email,
or other personally assigned identifier of the subject individual for
whom the reasonable accommodation is being requested.
Information about reasonable accommodations may also be found in
health and safety records for NSF staff and visitors (NSF-78) and
administrative records compiled on users of NSF's health unit or other
NSF workplace health programs (NSF-79). See 86 FR 66340 (Nov. 22,
2021). Those record systems are separately managed by NSF's human
resources division, and OCR is not proposing to duplicate those records
in maintaining its own system to track, manage, or respond to
reasonable accommodation requests filed with OCR.
NSF-86: Sexual Assault and Harassment Prevention and Response Program
(SAHPR) Case Management Tracking System
This SORN is intended to establish an electronic CMS in support of
NSF's SAHPR program, which serves as a central agency point of contact
for coordinating the agency's response to sexual assault, sexual
harassment, and stalking incidents occurring in connection with NSF-
funded programs or activities, and for overseeing training and other
comprehensive practices to prevent such incidents. The SAHPR program
does not provide legal advice or conduct investigations but supports
individuals impacted by sexual assault, sexual harassment and stalking,
by providing information on how and where to report incidents and
available advocacy and supportive resources, helping them with
accessing support during investigative and medical processes, safety
planning, and assisting them with obtaining other related support or
service needs. Accordingly, the SAHPR system records may include notes
or information about the reported incident and how it was handled or
addressed. These notes or information may include, for example, whether
the matter was referred to: NSF OCR, if it involves a complaint or
report of harassment, discrimination, or retaliation handled and
reviewed by that office, see SORN NSF-84, discussed above; to the NSF's
Office of Inspector General (OIG), which maintains its own
investigatory records system, see NSF-52, 83 FR 8903 (Mar. 1, 2018); to
the individual's institution for investigation; or to law enforcement,
human resources, or other appropriate authorities. The SAHPR CMS
records are to be maintained by a case number assigned to the incident
or inquiry and retrieved from the system by that number or the name of
the impacted individual. Incident records may in some cases include
information about third parties (e.g., alleged offenders, witnesses)
but system records are not maintained or retrieved by those
individuals' names or any other personally assigned identifiers. Such
third-party information is collected and maintained in the impacted
individual's records only as needed to assist the SAHPR program in
tracking and coordinating the agency's response to the incident.
The agency's SAHPR system is separate from OIG's investigatory
records system and also separate from other systems of service records
that may be maintained by private organizations with whom NSF has
contracted or otherwise arranged to provide individuals with
confidential helpline support, personal counseling, and advocacy, or
other informational or support services. For the protection of privacy
and to ensure that individuals can access and utilize those services on
a confidential and/or anonymous basis, the third-party service records
are not part of NSF agency records, are not intended to be accessed or
maintained by or on behalf of NSF, and are not to be disclosed or
shared by these service providers unless required or authorized by law
(e.g., mandatory reporting to child or adult protective services, or
where the individual has consented to disclosure).
None of the proposed Privacy Act systems of records discussed above
is intended to duplicate or overlap with any other existing NSF or
Government-wide systems of records under the Privacy Act. In accordance
with subsection (r) the Privacy Act, at 5 U.S.C. 552a(r), and Office of
Management and Budget (OMB) Circular No. A-108, NSF, in addition to
publication of this notice in the Federal Register, is also submitting
notice of the establishment of these system of records to OMB and to
the appropriate Congressional committees. All NSF SORNs, including
these SORNs, once made final, may be viewed at <a href="http://www.nsf.gov/">www.nsf.gov/</a> privacy.
NSF-84
SYSTEM NAME AND NUMBER:
Awardee Compliance Case Management System, NSF-84.
SECURITY CLASSIFICATION:
Unclassified.
SYSTEM LOCATION:
U.S. National Science Foundation (NSF), 401 Dulany Street,
Alexandria, VA 22314. Records may also be electronically maintained in
remote locations by NSF or contractors on behalf of NSF, including in
cloud storage.
SYSTEM MANAGER(S):
Office Head, Office of Civil Rights (OCR), NSF.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
Title VI of the Civil Rights Act of 1964, 42 U.S.C. 2000d et seq.
(race, color, national origin discrimination in Federally assisted
programs and activities); Title IX of the Educational Amendments of
1972, 20 U.S.C. 1681 et seq. (sex discrimination); Section 504 of the
Rehabilitation Act of 1973, 29 U.S.C. 794 (disability discrimination);
Age Discrimination Act of 1975, 42 U.S.C. 6101 et seq.; Executive Order
13160 (Nondiscrimination in Federally Conducted Education & Training
Programs); 45 CFR parts 605, 606, 611, 617, and 618 (NSF implementing
regulations); 2 CFR 200.300 (statutory and national policy requirements
for Federal awards); and other authorities, as applicable.
PURPOSE(S) OF THE SYSTEM:
To receive, evaluate, process, investigate, and resolve complaints
or reports of alleged discrimination, harassment, or retaliation by
recipients of NSF awards or funds, including awardee institutions,
principal investigators (PIs), co-PIs or others in programs or
activities receiving NSF financial assistance. Records are used to
determine whether there is jurisdiction under applicable civil rights
statutes and NSF implementing regulations for NSF to investigate the
complaint and, if appropriate, require remedial or other action, or
whether to refer the matter to the agency's Office of Inspector General
(OIG), the relevant institution(s), and/or other agencies or entities
for investigation, mediation, or other appropriate action, if any.
Records may also be used in connection with conducting compliance
reviews or other relevant assessments, analyses, and audits; to produce
reports; and otherwise used to evaluate or ensure compliance by NSF
recipients with codes of conduct, notification, or other requirements
under award terms and conditions and applicable Federal
antidiscrimination, equal employment, disability, and related laws,
regulations, orders, and policies.
[[Page 69890]]
CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
Individuals who file complaints alleging discrimination,
harassment, or retaliation by awardee institutions, PIs, co-PIs, or
others in programs or activities receiving Federal financial assistance
from NSF. Records in this system are considered records about the
complainant (subject individual) and maintained and retrieved by that
individual's name or other personally assigned identifier (e.g., case
or tracking number), including records of complaints or reports that a
third-party individual may file on behalf of and with the consent of
the subject individual.
CATEGORIES OF RECORDS IN THE SYSTEM:
Name, email address, phone number, and other contact information of
the complainant (subject individual) and, where applicable, of third-
party individuals authorized to file a complaint or report in the
system on the subject individual's behalf, including the filing
individual's account-related data (e.g., password, system-generated
account activity log); description of the alleged discrimination,
harassment, or retaliation; the identity of individual(s) allegedly
engaged in or responsible for such conduct; the awardee (recipient)
institution(s); information about witnesses, if any; proposed or
requested action or remedies; whether the complaint has been filed in
any other forum; additional supporting documentation, if any; and
consent/release form(s) for NSF to investigate and/or disclose the
subject individual's records to awardee institution(s) or others. If
NSF determines that it has jurisdiction and the complaint is accepted
for investigation, additional information relevant to the case may be
collected, compiled, generated, and maintained as part of the complaint
record and case file.
RECORD SOURCE CATEGORIES:
Complainants (subject individuals), other individuals (e.g., legal
representative, family member) whom the subject individual has
authorized to file the complaint or report on the subject individual's
behalf; witnesses, other agencies or awardee institutions, affected
parties and/or respondents (investigatory targets), NSF employees,
contractors, publicly available information (e.g., online databases,
sites, news media), and other third-party sources.
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES
OF USERS AND PURPOSES OF SUCH USES:
The following NSF standard routine uses apply:
1. Members of Congress. Information from a system may be disclosed
to congressional offices in response to inquiries from the
congressional offices made at the request of the individual to whom the
record pertains.
2. Freedom of Information Act/Privacy Act Compliance. Information
from a system may be disclosed to the Department of Justice or the
Office of Management and Budget to obtain advice regarding NSF's
obligations under the Freedom of Information Act and the Privacy Act.
3. Counsel. Information from a system may be disclosed to NSF's
legal representatives, including the Department of Justice and other
outside counsel, where the agency is a party in litigation or has an
interest in litigation and the information is relevant and necessary to
such litigation, including when any of the following is a party to the
litigation or has an interest in such litigation: (a) NSF, or any
component thereof; (b) any NSF employee in his or her official
capacity; (c) any NSF employee in his or her individual capacity, where
the Department of Justice has agreed to, or is considering a request
to, represent the employee; or (d) the United States, where NSF
determines that litigation is likely to affect the agency or any of its
components.
4. National Archives and Records Administration (NARA). Information
from a system may be disclosed to representatives of the National
Archives and Records Administration (NARA) during records management
inspections conducted under the authority of 44 U.S.C. 2904 and 2906.
5. Response to an Actual or Suspected Compromise or Breach of
Personally Identifiable Information. NSF may disclose information from
the system:
a. to appropriate agencies, entities, and persons when (1) NSF
suspects or has confirmed that there has been a breach of the system of
records; (2) NSF has determined that as a result of the suspected or
confirmed breach there is a risk of harm to individuals, NSF (including
its information systems, programs, and operations), the Federal
Government, or national security; and (3) the disclosure made to such
agencies, entities, and persons is reasonably necessary to assist in
connection with NSF efforts to respond to the suspected or confirmed
breach or to prevent, minimize, or remedy such harm.
b. to another Federal agency or Federal entity, when NSF determines
that information from this system of records is reasonably necessary to
assist the recipient agency or entity in (1) responding to a suspected
or confirmed breach or (2) preventing, minimizing, or remedying the
risk of harm to individuals, the recipient agency or entity (including
its information systems, programs, and operations), the Federal
Government, or national security, resulting from a suspected or
confirmed breach.
6. Courts. Information from a system may be disclosed to the
Department of Justice or other agencies in the event of a pending court
or formal administrative proceeding, when the information is relevant
and necessary to that proceeding, for the purpose of representing the
government, or in the course of presenting evidence, or the information
may be produced to parties or counsel involved in the proceeding in the
course of pre-trial discovery.
7. Contractors. Information from a system may be disclosed to
contractors, agents, experts, consultants, or others performing work on
a contract, service, cooperative agreement, job, or other activity for
NSF and who have a need to access the information in the performance of
their duties or activities for NSF.
8. Audit. Information from a system may be disclosed to government
agencies and other entities authorized to perform audits, including
financial and other audits, of the agency and its activities.
9. Law Enforcement. Information from a system may be disclosed,
where the information indicates a violation or potential violation of
civil or criminal law, including any rule, regulation or order issued
pursuant thereto, to appropriate Federal, State, or local agencies
responsible for investigating, prosecuting, enforcing, or implementing
such statute, rule, regulation, or order.
10. Disclosure When Requesting Information. Information from a
system may be disclosed to Federal, State, or local agencies which
maintain civil, criminal, or other relevant enforcement information or
other pertinent information, such as current licenses, if necessary, to
obtain information relevant to an agency decision concerning the hiring
or retention of an employee, the issuance of a security clearance, the
letting of a contract, or the issuance of a license, grant, or other
benefit.
11. To the news media and the public when: (1) a matter has become
public knowledge, (2) the NSF Office of the Director determines that
disclosure is
[[Page 69891]]
necessary to preserve confidence in the integrity of NSF or is
necessary to demonstrate the accountability of NSF's officers,
employees, or individuals covered by this system, or (3) the Office of
the Director determines that there exists a legitimate public interest
in the disclosure of the information, except to the extent that the
Office of the Director determines in any of these situations that
disclosure of specific information in the context of a particular case
would constitute an unwarranted invasion of personal privacy.
In addition to the above standard NSF routine uses, the following
routine uses apply to this system, i.e., records may also be disclosed:
To the awardee institution or other institution(s) or
organization(s) subject to investigation in order to gather information
necessary for the agency, law enforcement officials, and/or other
authorized authorities to make a compliance determination with respect
to the complaint allegations or to conduct compliance monitoring in
connection with a resolution agreement.
POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
Records are maintained in electronic form, including electronic
storage media, and may also be electronically maintained in remote
locations by NSF or contractors on behalf of NSF, including in cloud
storage. In the conduct of agency business, copies may also be printed
or maintained in paper format.
POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
Records may be maintained by the subject individual's name and
retrieved by personally assigned identifier, such as case tracking
number. If a subject individual authorizes a third-party individual to
file a complaint or report on the subject individual's behalf, such
records will be maintained and retrieved by the same assigned case
tracking number or other identifier. Records in this system are not
maintained or retrieved by the name or other personally assigned
identifier of any third-party individuals who may be identified in such
system records (e.g., witnesses, individuals engaged in the alleged
conduct).
POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
Records will be maintained and destroyed in accordance with
applicable records schedules issued or approved by NARA.
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
Records in this system are safeguarded in accordance with
applicable Federal law, rules, and policies, including all applicable
NSF automated systems security and access policies. Strict controls
have been imposed to minimize the risk of compromising the information
that is being stored. Access to the computer system containing the
records in this system is limited to those individuals who have a need
to know the information for the performance of their official duties.
All users are required to take annual NSF IT Security and Privacy
Awareness Training, which covers the procedures for handling Controlled
Unclassified Information (CUI), including personally identifiable
information (PII) subject to the Privacy Act of 1974. Electronic
records are maintained in a secure password-protected environment.
Permission-level assignments will allow internal agency users access
only to those functions for which they are authorized. Paper copies, if
any, of system records are maintained in secure, access-controlled
areas or buildings, and stored in a locked drawer, behind a locked
door, or at a secure offsite location.
RECORD ACCESS PROCEDURES:
Individuals seeking to access records about themselves in this
system must follow the procedures found at 45 CFR part 613 (NSF Privacy
Act Regulations). Individuals who register and create a user account to
file a complaint or report in the system may access status information
or certain other system data pertaining to their complaint without the
need to file a formal written Privacy Act access request under 45 CFR
part 613.
CONTESTING RECORD PROCEDURES:
Follow the procedures found at 45 CFR part 613. Individuals who
register and create a user account in the system to file a complaint in
the system may access and update or modify certain system records
pertaining to their complaint without the need to file a formal written
Privacy Act amendment request under 45 CFR part 613.
NOTIFICATION PROCEDURES:
See 45 CFR part 613.
EXEMPTIONS PROMULGATED FOR THE SYSTEM:
None.
HISTORY:
None.
NSF-85
SYSTEM NAME AND NUMBER:
NSF-85, Reasonable Accommodation Request E-Filing System.
SECURITY CLASSIFICATION:
Unclassified.
SYSTEM LOCATION:
U.S. National Science Foundation (NSF), 401 Dulany Street,
Alexandria, VA 22314. Records may also be electronically maintained in
remote locations by NSF or contractors on behalf of NSF, including in
cloud storage.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
29 U.S.C. 791 et seq.; 42 U.S.C. 2000e et seq.; 42 U.S.C. 12101 et
seq.; E.O. 11478; E.O. 13164; 29 CFR parts 1605, 1614, and 1630.
PURPOSE(S) OF THE SYSTEM:
This system is maintained for the purpose of receiving,
considering, deciding, and implementing requests for reasonable
accommodation made by NSF employees, applicants for NSF employment, and
other individuals conducting business at NSF.
CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
NSF employees, applicants for employment, and other individuals
conducting business at NSF who have requested a reasonable
accommodation under applicable Federal law, regulation, and policy.
CATEGORIES OF RECORDS IN THE SYSTEM:
Records may include, but are not limited to, user account and
profile data (e.g., name, email address, phone), requests for
reasonable accommodation and supporting documents, information
concerning the nature of the disability or other reason for the
requested accommodation, medical records or other substantiating
documentation, notes or records made during evaluation of such
requests, including the agency's determination on the request, requests
for reconsideration or internal agency appeals; and disposition of all
requests and appeals.
RECORD SOURCE CATEGORIES:
Individuals requesting a reasonable accommodation; NSF managers,
supervisors, or staff, where applicable; health care providers or
others requested to provide supporting documentation.
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES
OF USERS AND PURPOSES OF SUCH USES:
The following NSF standard routine uses apply:
[[Page 69892]]
1. Members of Congress. Information from a system may be disclosed
to congressional offices in response to inquiries from the
congressional offices made at the request of the individual to whom the
record pertains.
2. Freedom of Information Act/Privacy Act Compliance. Information
from a system may be disclosed to the Department of Justice or the
Office of Management and Budget to obtain advice regarding NSF's
obligations under the Freedom of Information Act and the Privacy Act.
3. Counsel. Information from a system may be disclosed to NSF's
legal representatives, including the Department of Justice and other
outside counsel, where the agency is a party in litigation or has an
interest in litigation and the information is relevant and necessary to
such litigation, including when any of the following is a party to the
litigation or has an interest in such litigation: (a) NSF, or any
component thereof; (b) any NSF employee in his or her official
capacity; (c) any NSF employee in his or her individual capacity, where
the Department of Justice has agreed to, or is considering a request
to, represent the employee; or (d) the United States, where NSF
determines that litigation is likely to affect the agency or any of its
components.
4. National Archives and Records Administration (NARA). Information
from a system may be disclosed to representatives of NARA during
records management inspections conducted under the authority of 44
U.S.C. 2904 and 2906.
5. Response to an Actual or Suspected Compromise or Breach of
Personally Identifiable Information. NSF may disclose information from
the system:
a. to appropriate agencies, entities, and persons when (1) NSF
suspects or has confirmed that there has been a breach of the system of
records; (2) NSF has determined that as a result of the suspected or
confirmed breach there is a risk of harm to individuals, NSF (including
its information systems, programs, and operations), the Federal
Government, or national security; and (3) the disclosure made to such
agencies, entities, and persons is reasonably necessary to assist in
connection with NSF's efforts to respond to the suspected or confirmed
breach or to prevent, minimize, or remedy such harm.
b. to another Federal agency or Federal entity, when NSF determines
that information from this system of records is reasonably necessary to
assist the recipient agency or entity in (1) responding to a suspected
or confirmed breach, or (2) preventing, minimizing, or remedying the
risk of harm to individuals, the recipient agency or entity (including
its information systems, programs, and operations), the Federal
Government, or national security, resulting from a suspected or
confirmed breach.
6. Courts. Information from a system may be disclosed to the
Department of Justice or other agencies in the event of a pending court
or formal administrative proceeding, when the information is relevant
and necessary to that proceeding, for the purpose of representing the
government, or in the course of presenting evidence, or the information
may be produced to parties or counsel involved in the proceeding in the
course of pre-trial discovery.
7. Contractors. Information from a system may be disclosed to
contractors, agents, experts, consultants, or others performing work on
a contract, service, cooperative agreement, job, or other activity for
NSF and who have a need to access the information in the performance of
their duties or activities for NSF.
8. Audit. Information from a system may be disclosed to government
agencies and other entities authorized to perform audits, including
financial and other audits, of the agency and its activities.
9. Law Enforcement. Information from a system may be disclosed,
where the information indicates a violation or potential violation of
civil or criminal law, including any rule, regulation or order issued
pursuant thereto, to appropriate Federal, State, or local agencies
responsible for investigating, prosecuting, enforcing, or implementing
such statute, rule, regulation, or order.
10. Disclosure When Requesting Information. Information from a
system may be disclosed to Federal, State, or local agencies which
maintain civil, criminal, or other relevant enforcement information or
other pertinent information, such as current licenses, if necessary, to
obtain information relevant to an agency decision concerning the hiring
or retention of an employee, the issuance of a security clearance, the
letting of a contract, or the issuance of a license, grant, or other
benefit.
11. To the news media and the public when: (1) a matter has become
public knowledge, (2) the NSF Office of the Director determines that
disclosure is necessary to preserve confidence in the integrity of NSF
or is necessary to demonstrate the accountability of NSF's officers,
employees, or individuals covered by this system, or (3) the Office of
the Director determines that there exists a legitimate public interest
in the disclosure of the information, except to the extent that the
Office of the Director determines in any of these situations that
disclosure of specific information in the context of a particular case
would constitute an unwarranted invasion of personal privacy.
In addition to the above standard NSF routine uses, the following
routine uses apply to this system, i.e., records may also be disclosed:
12. To an authorized appeal grievance examiner, formal complaints
examiner, administrative judge, equal employment opportunity
investigator, arbitrator or other duly authorized official engaged in
investigation or settlement of a grievance, complaint, or appeal filed
by the individual requesting the accommodation.
13. To first aid and safety personnel, when appropriate, if the
disability might require emergency treatment;
14. To Federal Government officials or any of their assignees
charged with the responsibility of investigating NSF's compliance with
the Rehabilitation Act of 1973, as amended, or other applicable
authorities.
15. To the U.S. Office of Management and Budget (OMB), Department
of Labor (DOL), Office of Personnel Management (OPM), Equal Employment
Opportunity Commission (EEOC), or Office of Special Counsel (OSC) to
obtain advice regarding statutory, regulatory, policy, and other
requirements related to reasonable accommodation.
POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
Records are maintained in electronic form, including electronic
storage media, and may also be electronically maintained in remote
locations by NSF or contractors on behalf of NSF, including in cloud
storage. In the conduct of agency business, copies may also be printed
or maintained in paper format.
POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
Records may be maintained by the subject individual's name and
retrieved by personally assigned identifier, such as case tracking
number.
POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
Records will be maintained and destroyed in accordance with
applicable records schedules issued or approved by NARA. See, e.g.,
General Records Schedule 2.3, Item 020 (reasonable or religious
accommodation case files).
[[Page 69893]]
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
Records in this system are safeguarded in accordance with
applicable Federal law, rules, and policies, including all applicable
NSF automated systems security and access policies. Strict controls
have been imposed to minimize the risk of compromising the information
that is being stored. Access to the computer system containing the
records in this system is limited to those individuals who have a need
to know the information for the performance of their official duties.
All users are required to take annual NSF IT Security and Privacy
Awareness Training, which covers the procedures for handling Controlled
Unclassified Information (CUI), including personally identifiable
information (PII) subject to the Privacy Act of 1974. Electronic
records are maintained in a secure password-protected environment.
Permission-level assignments will allow internal agency users access
only to those functions for which they are authorized. Paper copies, if
any, of system records are maintained in secure, access-controlled
areas or buildings, and stored in a locked drawer, behind a locked
door, or at a secure offsite location.
RECORD ACCESS PROCEDURES:
Individuals seeking to access records about themselves in this
system must follow the procedures found at 45 CFR part 613 (NSF Privacy
Act Regulations). Individuals who register and create a user account to
file a reasonable accommodation in the system may access status or
certain other information about their request directly from the system,
without the need to file a formal written Privacy Act access request
under 45 CFR part 613.
CONTESTING RECORD PROCEDURES:
Follow the procedures found at 45 CFR part 613.
NOTIFICATION PROCEDURES:
See 45 CFR part 613.
EXEMPTIONS PROMULGATED FOR THE SYSTEM:
None.
HISTORY:
None.
NSF-86
SYSTEM NAME AND NUMBER:
NSF-86, Sexual Assault and Harassment Prevention and Response
Program (SAHPR) Case Management Tracking System.
SECURITY CLASSIFICATION:
Unclassified.
SYSTEM LOCATION:
U.S. National Science Foundation (NSF), 401 Dulany Street,
Alexandria, VA 22314. Records may also be electronically maintained in
remote locations by NSF or contractors on behalf of NSF, including in
cloud storage.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
5 U.S.C. 2302(b); 29 U.S.C. 206(d); 29 U.S.C. 621 et seq.; 29
U.S.C. 791; 42 U.S.C. 1861 et seq.; 42 U.S.C. 2000e-16 et seq.; 42
U.S.C. 2000ff et seq.; 42 U.S.C. 12101 et seq.; Pub. L. 107-174, as
amended; E.O. 11478; E.O. 14021; 2 CFR 200.300 and 200.303; and other
authorities, as applicable.
PURPOSE(S) OF THE SYSTEM:
To log, track, and coordinate the agency's response to reported
incidents of sexual assault, harassment and stalking in NSF-funded
programs and activities, and other inquiries received through the SAHPR
program office; to provide information (e.g., about available support
resources or training); to make referrals to appropriate officials,
agencies, and entities; to enhance compilation and accuracy of
statistical data and management reports; to assess the program's
effectiveness; to help develop or update procedures and training; or to
recommend other action by the agency or others to help prevent alleged
sexual assault, sexual harassment, and stalking, as applicable.
CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
The system covers individuals who have formally reported to NSF's
Office of the Inspector General or other investigative entity that they
were the alleged victim or target of sexual assault, sexual harassment
or stalking, or who have been identified as an alleged victim or target
in a report filed with the investigative entity by a third party. The
system also covers other individuals who may directly contact the SAHPR
program office for information on how or where to report sexual
assault, sexual harassment or stalking or for other information or
support services relating to such incidents in NSF-funded programs and
activities. Covered individuals may include, but are not limited to,
NSF employees, contractors, participants in research or infrastructure
projects or operations funded by an NSF award.
CATEGORIES OF RECORDS IN THE SYSTEM:
Records may include, but are not limited to, name, email address,
and/or other contact information of the individual identified as an
alleged victim or target of sexual assault, harassment, or stalking in
a formal report with NSF's Office of Inspector General or other
investigative entity, or individuals who directly contact the SAHPR
program office; date that the inquiry was received; date the case
record was initially created in the system; assigned case number; type
of incident; location (site) of incident; information regarding third
parties, as applicable (e.g., alleged offender(s), witness(es)); notes
regarding the program office's handling or disposition of the matter
(e.g., informational response, referral, related investigational case
numbers).
RECORD SOURCE CATEGORIES:
Individuals who contact the SAHPR program office regarding the
alleged incident; reports filed by the subject individual or third-
party individuals (e.g., witnesses) with NSF's Office of Inspector
General or other entities (e.g., the impacted individual's institution,
law enforcement).
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES
OF USERS AND PURPOSES OF SUCH USES:
The following NSF standard routine uses apply:
1. Members of Congress. Information from a system may be disclosed
to congressional offices in response to inquiries from the
congressional offices made at the request of the individual to whom the
record pertains.
2. Freedom of Information Act/Privacy Act Compliance. Information
from a system may be disclosed to the Department of Justice or the
Office of Management and Budget to obtain advice regarding NSF's
obligations under the Freedom of Information Act and the Privacy Act.
3. Counsel. Information from a system may be disclosed to NSF's
legal representatives, including the Department of Justice and other
outside counsel, where the agency is a party in litigation or has an
interest in litigation and the information is relevant and necessary to
such litigation, including when any of the following is a party to the
litigation or has an interest in such litigation: (a) NSF, or any
component thereof; (b) any NSF employee in his or her official
capacity; (c) any NSF employee in his or her individual capacity, where
the Department of Justice has agreed to, or is considering a request
to, represent the employee; or (d) the United States, where NSF
determines that litigation is likely to affect the agency or any of its
components.
4. National Archives and Records Administration (NARA). Information
[[Page 69894]]
from a system may be disclosed to representatives of NARA during
records management inspections conducted under the authority of 44
U.S.C. 2904 and 2906.
5. Response to an Actual or Suspected Compromise or Breach of
Personally Identifiable Information. NSF may disclose information:
a. to appropriate agencies, entities, and persons when (1) NSF
suspects or has confirmed that there has been a breach of the system of
records; (2) NSF has determined that as a result of the suspected or
confirmed breach there is a risk of harm to individuals, NSF (including
its information systems, programs, and operations), the Federal
Government, or national security; and (3) the disclosure made to such
agencies, entities, and persons is reasonably necessary to assist in
connection with NSF's efforts to respond to the suspected or confirmed
breach or to prevent, minimize, or remedy such harm.
b. to another Federal agency or Federal entity, when NSF determines
that information from this system of records is reasonably necessary to
assist the recipient agency or entity in (1) responding to a suspected
or confirmed breach or (2) preventing, minimizing, or remedying the
risk of harm to individuals, the recipient agency or entity (including
its information systems, programs, and operations), the Federal
Government, or national security, resulting from a suspected or
confirmed breach.
6. Courts. Information from a system may be disclosed to the
Department of Justice or other agencies in the event of a pending court
or formal administrative proceeding, when the information is relevant
and necessary to that proceeding, for the purpose of representing the
government, or in the course of presenting evidence, or the information
may be produced to parties or counsel involved in the proceeding in the
course of pre-trial discovery.
7. Contractors. Information from a system may be disclosed to
contractors, agents, experts, consultants, or others performing work on
a contract, service, cooperative agreement, job, or other activity for
NSF and who have a need to access the information in the performance of
their duties or activities for NSF.
8. Audit. Information from a system may be disclosed to government
agencies and other entities authorized to perform audits, including
financial and other audits, of the agency and its activities.
9. Law Enforcement. Information from a system may be disclosed,
where the information indicates a violation or potential violation of
civil or criminal law, including any rule, regulation or order issued
pursuant thereto, to appropriate Federal, State, or local agencies
responsible for investigating, prosecuting, enforcing, or implementing
such statute, rule, regulation, or order.
10. Disclosure When Requesting Information. Information from a
system may be disclosed to Federal, State, or local agencies which
maintain civil, criminal, or other relevant enforcement information or
other pertinent information, such as current licenses, if necessary, to
obtain information relevant to an agency decision concerning the hiring
or retention of an employee, the issuance of a security clearance, the
letting of a contract, or the issuance of a license, grant, or other
benefit.
11. To the news media and the public when: (1) a matter has become
public knowledge, (2) the NSF Office of the Director determines that
disclosure is necessary to preserve confidence in the integrity of NSF
or is necessary to demonstrate the accountability of NSF's officers,
employees, or individuals covered by this system, or (3) the Office of
the Director determines that there exists a legitimate public interest
in the disclosure of the information, except to the extent that the
Office of the Director determines in any of these situations that
disclosure of specific information in the context of a particular case
would constitute an unwarranted invasion of personal privacy.
In addition to the above standard NSF routine uses, the following
routine uses apply to this system, i.e., records may also be disclosed:
12. To other appropriate non-NSF officials, agencies, or entities
in order to investigate the alleged sexual harassment or to take action
to address the matter. In such cases, the SAHPR program office may
obtain the individual's written consent before making such a referral.
POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
Records are maintained in electronic form, including electronic
storage media, and may also be electronically maintained in remote
locations by NSF or contractors on behalf of NSF, including in cloud
storage. In the conduct of agency business, copies may also be printed
or maintained in paper format.
POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
Records may be maintained by the subject individual's name and
retrieved by personally assigned identifier, such as case tracking
number.
POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
Records will be maintained and destroyed in accordance with
applicable records schedules issued or approved by NARA. See, e.g.,
General Records Schedule 2.3, Item 050 (harassment complaint case
files).
ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
Records in this system are safeguarded in accordance with
applicable Federal law, rules, and policies, including all applicable
NSF automated systems security and access policies. Strict controls
have been imposed to minimize the risk of compromising the information
that is being stored. Access to the computer system containing the
records in this system is limited to those individuals who have a need
to know the information for the performance of their official duties.
All users are required to take annual NSF IT Security and Privacy
Awareness Training, which covers the procedures for handling Controlled
Unclassified Information (CUI), including personally identifiable
information (PII) subject to the Privacy Act of 1974. Electronic
records are maintained in a secure password-protected environment.
Permission-level assignments will allow internal agency users access
only to those functions for which they are authorized. Paper copies, if
any, of system records are maintained in secure, access-controlled
areas or buildings, and stored in a locked drawer, behind a locked
door, or at a secure offsite location.
RECORD ACCESS PROCEDURES:
Individuals seeking to access records about themselves in this
system must follow the procedures found at 45 CFR part 613 (NSF Privacy
Act Regulations).
CONTESTING RECORD PROCEDURES:
Follow the procedures found at 45 CFR part 613.
NOTIFICATION PROCEDURES:
See 45 CFR part 613.
EXEMPTIONS PROMULGATED FOR THE SYSTEM:
None.
HISTORY:
None.
Thomas A. Boger,
Acting Senior Agency Official for Privacy, U.S. National Science
Foundation.
[FR Doc. 2026-22540 Filed 11-4-26; 8:45 am]
BILLING CODE 7555-01-P
</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.