16 August 1997
Source: http://www.access.gpo.gov/su_docs/aces/aaces002.html

NSA/CSS Privacy Act Rules are part of the Defense Department Rules:
http://jya.com/dod-par.txt (1.1MB)

    Table of Contents

    GNSA 01 NSA/CSS Access, Authority and Release of Information File.

    GNSA 02 NSA/CSS Applicants.

    GNSA 03 NSA/CSS Correspondence, Cases, Complaints, Visitors, Requests.

    GNSA 04 NSA/CSS Military Reserve Personnel Data Base.

    GNSA 05 NSA/CSS Equal Employment Opportunity Data.

    GNSA 06 NSA/CSS Health, Medical and Safety Files.

    GNSA 07 NSA/CSS Motor Vehicles and Carpools.

    GNSA 08 NSA/CSS Payroll and Claims.

    GNSA 09 NSA/CSS Personnel File.

    GNSA 10 NSA/CSS Personnel Security Files.

    GNSA 11 NSA/CSS Time, Attendance and Absence.

    GNSA 12 NSA/CSS Training.

    GNSA 13 NSA/CSS Archival Records.

    GNSA 14 NSA/CSS Library Patron File Control System.

    GNSA 15 NSA/CSS Computer Users Control System.

    GNSA 16 NSA/CSS Drug Testing Program.

    GNSA 17 NSA/CSS Employee Assistance Service (EAS) Case Records.

    GNSA 18 NSA/CSS Operations Files.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-49]

    GNSA 01

    System name: NSA/CSS Access, Authority and Release of
          Information File.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized Segments - Each staff, line, contract and field element
      as appropriate.
    Categories of individuals covered by the system:
      NSA/CSS civilian employees, personnel under contract or appointment
      and military assignees.
    Categories of records in the system:
      File may consist of authorizations to obtain keys; authorizations for
      access to specific sensitive information or areas; delegation of
      responsibility to authorize or request specific action, work projects
      or access; notification to report for duty in event of hazardous
      weather or other emergency; authorizations to officially release
      various types of communications; assignments to special activities;
      assignments as Agency representatives to department or other
      government committees, boards, task groups; assignments to special
      tasks in event of technical or national emergencies; assignments to
      duties as fire, safety, security officers, Combined Federal Campaign
      and blood donation workers; and assignments to other special or
      volunteer duties or activities.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 50 U.S.C. 831-835, (Pub. L. 88-290); 18 U.S.C. 798; E.O. 12333.
    Purpose(s):
      To provide a means to rapidly determine who may have access to
      information, spaces, combinations or keys; who is required to report
      for duty in special circumstances; who has been authorized to release
      official communications; who has been assigned additional special
      tasks, voluntary duties or other duties.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To contractor employees to make determinations as noted in the purpose
      above; to investigatory authorities engaged in national security
      investigations and to intelligence authorities or other governmental
      entities with respect to specific assignments or when emergency action
      is required.
      The `Blanket Routine Uses' set forth at the beginning of the NSA's
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders, paper cards in file boxes, magnetic
      tapes, disks and other computer storage media, computer listings,
      microfilm.
    Retrievability:
      By name.
    Safeguards:
      For paper, computer listing, cards and microfilm - Secure limited
      access facilities, within those facilities secure limited access rooms
      and within those rooms lockable containers. Access to information is
      limited to authorized individuals only. For machine records stored on
      magnetic tape, disk or other computer storage media within the
      computer processing area- additional secure limited access facilities,
      specific processing requests from authorized persons only, specific
      authority to access stored records and delivery to authorized persons
      only. Where data elements are derived from the Personnel Security
      File-remote terminal inhibitions are in force with respect to access
      to complete file or data relating to persons not assigned to
      requesting organization using a remote terminal. Remote terminals are
      secured, are available to authorized persons only, and certain
      password and other identifying information available to authorized
      users only is required. Terminals are not available outside of
      headquarters area locations.
    Retention and disposal:
      Retained until individual is no longer authorized access or release
      authority or assigned to specific additional duties. Computer files
      are purged and updated to reflect current status.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Requests from individual for notification shall be in writing
      addressed to the Chief, Office of Policy, National Security Agency/
      Central Security Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Requests from individuals for access shall be in writing addressed to
      the Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Applications and related forms requesting access, appointment or
      authorization, notifications of same, personnel records, personnel
      security records, and other sources as appropriate and required.
    Exemptions claimed for the system:
      Portions of this system may be exempt pursuant to 5 U.S.C. 552a(k)(1)
      and (k)(5), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553 (b) (1), (2), and (3),
      (c) and (e) and published in 32 CFR part 322. For additional
      information contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-50]

    GNSA 02

    System name: NSA/CSS Applicants.

    System location:
      National Security Agency/Central Security Service, Ft. George G.
      Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      Applicants for employment with NSA/CSS.
    Categories of records in the system:
      File contains forms, documents and correspondence providing personal
      and qualifications information submitted by individual applicants,
      educational institutions, past employers, references. Records include
      processing items, status reports, test results, interview reports,
      reports of reviewing organizations and other related information.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L.86-
      36); 50 U.S.C. 831-835, (Pub. L. 88-290); E.O. 10450; 5 U.S.C. and
      appropriate implementing Office of Personnel Management directives in
      the Federal Personnel Manual.
    Purpose(s):
      To support the recruitment, selection, hire and placement of
      applicants. The file is used to document applicant processing, as a
      basis for selection decisions by individual agency elements and the
      personnel organization, and such other related uses as required.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To contractor employees and other government entities to make
      determinations as noted in the purpose above.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper in file folders, cards in containers, logs, computer listings,
      computer magnetic tape, disks and other computer storage media,
      microfilm.
    Retrievability:
      By name, Social Security Number, and other appropriate data elements.
    Safeguards:
      For paper, computer printouts and microfilm - Secure limited access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers. Access to information is
      limited to those individuals specifically authorized and granted
      access by the Deputy Director for Management Services. For machine
      records stored on magnetic tape, disk or other computer storage media
      within the computer processing area-additional secure limited access
      facilities, specific processing requests accepted from authorized
      persons only. Remote terminal inhibitions are in force with respect to
      access to computerized file or data relating to persons not assigned
      to the organization using a remote terminal. Remote terminals are
      secured, are available to authorized persons only, and certain
      password and other identifying information available to authorized
      users only is required. Terminals are not available outside of
      headquarters area locations.
    Retention and disposal:
      For applicants who are subsequently hired, records are transferred to
      Personnel File or destroyed as appropriate. For applicants not hired,
      record are retained for a period not to exceed one year or until
      completion of legal proceedings involving issues pertaining to these
      records, whichever is later, unless employment requirements
      necessitate retention for a longer period.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Applicant, educational institutions, references, former employers
      including other governmental entities, interviewing and reviewing
      individuals including possible gaining organization, security and
      medical authorities and other sources as relevant and appropriate.
    Exemptions claimed for the system:
      Portions of this system may be exempt pursuant to 5 U.S.C. 552a(k)(1)
      and (k)(5), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-51]

    GNSA 03

    System name: NSA/CSS Correspondence, Cases, Complaints,
          Visitors, Requests.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized Segments - Each staff, line, contract and field element
      as authorized and appropriate.
    Categories of individuals covered by the system:
      Persons calling or corresponding with NSA/CSS concerning congressional
      inquiries; job opportunities; Freedom of Information and Privacy Act
      requests; other information requests, suggestions or comments;
      registering complaints; requesting appropriate security clearance and
      permission to visit; requesting or requiring information relating to
      litigation or anticipated litigation; and employees or assignees
      registering complaints or requesting information with respect to Equal
      Employment Opportunities; requesting inquiry or investigation by the
      Inspector General; requesting advice, opinions, or assistance from the
      General Counsel or provided to the General Counsel with respect to
      conflict of interest issues.
    Categories of records in the system:
      File contains correspondence from and to individuals, documents and
      memoranda related to the response, written material developed during
      or in anticipation of litigation or investigation of inquiries,
      complaints or grievances, written material developed in response to a
      request for advice or opinion from an individual, written material
      required by law, executive order, and regulations with respect to
      Equal Employment Opportunity investigations, Inspector General
      investigations, judicial branch subpoenas, orders and related actions.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 50 U.S.C. 831-835, (Pub. L. 88-290); 5 U.S.C. 552; Pub. L. 92-
      261; Pub. L. 93-259; E.O. 10450; E.O. 11222; E.O. 11478; and E.O.
      12356.
    Purpose(s):
      To provide a record of the official responses and determinations of
      NSA/CSS to various inquiries for information, complaints or official
      actions of other governmental agencies and branches.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To contractor employees to make determinations as noted in the purpose
      above.
      To provide reports in summary or statistical form to the Office of
      Equal Employment Opportunity.
      To appropriate governmental agencies and the judicial branch where
      litigation or anticipated civil or criminal litigation is involved or
      where sensitive national security investigations related to protection
      of intelligence sources or methods are involved.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders.
    Retrievability:
      By name, case, or subject and within subject by name.
    Safeguards:
      Secure limited access facilities and within those facilities
      individual limited access offices. Files are stored in lockable
      containers and are only made available to individuals specifically
      authorized access or required to respond and individuals affected by
      actions taken or complaints received. Files related to sensitive
      investigations by the Equal Employment Opportunity Office, the
      Inspector General and General Counsel are additionally protected
      pursuant to appropriate statutes, executive orders or regulations and
      attorney-client privilege. In some cases records are sealed pursuant
      to sensitivity of subject matter or specific court order.
    Retention and disposal:
      Records are retained on-site indefinitely.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Official correspondence, written materials developed in response to
      inquiries from executive branch departments and agencies, judicial
      branch elements, Congress, Congressional committees, individual
      Congressmen, other government and private entities as appropriate, and
      other sources as appropriate and required.
    Exemptions claimed for the system:
      Individual records in this file may be exempt pursuant to 5 U.S.C.
      552a(k)(1), (k)(2), (k)(4), and (k)(5), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-52]

    GNSA 04

    System name: NSA/CSS Military Reserve Personnel Data Base.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized Segments - Each staff, line, field element and military
      service as authorized and appropriate.
    Categories of individuals covered by the system:
      Inactive duty military reserve personnel assigned to NSA mobilization
      billets, requesting to perform on-the-job training in NSA work
      centers, or scheduled to attend formal and resident courses of
      instruction under the auspices or sponsorship of NSA.
    Categories of records in the system:
      File contains correspondence, papers, and forms relating to
      individual's service extracted from his/her military personnel records
      including but not limited to military service, enlistment or related
      service agreement/extension/orders, active duty records; duty status,
      reserve status; qualifications for active military duty assignments;
      clearance data; applications/nominations for assignments; pictures;
      military check-in/out sheets; military skill specialty evaluation
      data; active duty training; service record brief, military personnel
      utilization survey; correspondence courses, educational/academic
      records; applications for I.D.; efficiency or fitness records;
      application/prior service enlistment documents; work experiences;
      professionalization documentation; achievement certificates,
      suggestions; personnel screening and evaluation records;
      acknowledgement of service requirements; temporary disability record;
      change of name; documents relating to promotion or non-selection,
      transfers, leave, pay entitlements, financial records, awards, health
      or medical records, reports of proceedings of physical fitness boards,
      birth certificates, citizenship statements and status; passport,
      questionnaire/records of security clearances, language capability,
      language proficiency questionnaire; flight records, aviator flight
      records, instrument certification papers; reduction in grade release,
      retirement, temporary duty, record of retirement points;
      correspondence and/or orders relating to dependents, service action,
      federal recognition orders, correspondence relating to badges, medals,
      and unit awards, including foreign decorations; correspondence/
      letters/administrative reprimands/censures/admonitions relating to
      apprehensions/confinement and discipline.
    Authority for maintenance of the system:
      National Security Act, 50 U.S.C. 402 note (Pub. L. 86-36); and Title
      10 U.S.C.
    Purpose(s):
      To maintain current and accurate listings of reserve personnel
      designated to mobilize with the National Security Agency, offered as
      nominees for NSA Mobilization billets, requesting formal and resident
      training courses, or seeking on-the-job training in NSA work centers.
      To determine professional and technical qualifications of reservists
      to analyze their training needs and to ascertain the eligibility of
      reservists for promotions, awards, special duty assignments, and
      similar reasons.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Computer magnetic tapes, discs, electronic files, or other automated
      storage media, computer listings and other paper records.
    Retrievability:
      By name, Social Security Numbers, mobilization billet, courses of
      training, and other professional qualifications.
    Safeguards:
      Secure limited access facilities and within those facilities lockable
      containers. Records are accessible only to authorized personnel.
    Retention and disposal:
      Records are permanent. They are reviewed periodically and updated at
      least annually for changes and corrections. Superseded records are
      destroyed when no longer useful for reference purposes.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Individual reservists and service reserve personnel files.
    Exemptions claimed for the system:
      Individual records in this file may be exempt pursuant to 5 U.S.C.
      552a(k)(1) and (k)(5), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-53]

    GNSA 05

    System name: NSA/CSS Equal Employment Opportunity Data.

    System location:
      National Security Agency/Central Security Service, Ft. George G.
      Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      NSA/CSS civilian personnel and personnel under contract.
    Categories of records in the system:
      File contains civilian personnel data and Agency organizational data
      to title, grade, date of birth, training, date of last promotion,
      educational attainments, Social Security Number, time of service,
      personnel codes, organization assignment.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); Pub. L. 92-261; Pub. L. 93-259; E.O. 11478; Chapter 713 of the
      Federal Personnel Manual.
    Purpose(s):
      To ensure compliance with cited authorities with respect to equal
      employment opportunities.
      To compile such studies, research, statistics and reports necessary to
      ensure compliance with cited authorities.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To contractor employees to make determinations as noted in the purpose
      above. Reports, summaries and statistics may be made available to the
      Office of Equal Employment Opportunity, Congress, Department of
      Justice and judicial branch elements as required by cited authorities,
      requested pursuant to those authorities or ordered by specific
      judicial branch order.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Magnetic tape, disk or other computer storage media, computer
      listings, paper in file folders.
    Retrievability:
      By name, Social Security Number, and specific subject matter data
      elements.
    Safeguards:
      For paper, computer printouts and microfilm - Secure limited access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers. Access to information is
      limited to those individuals specifically authorized and granted
      access by EEO Director. For machine records stored on magnetic tape,
      disk or other computer storage media within the computer processing
      area-additional secure limited access facilities, specific processing
      requests from authorized persons only, specific authority to access
      stored records and delivery to authorized persons only. Where data
      elements are derived from the Personnel System, remote terminal
      inhibitions are in force with respect to access to complete file or
      data relating to persons not assigned to requesting organization using
      a remote terminal. Remote terminals are secure, are available to
      authorized persons only, and certain password and other identifying
      information available to authorized users only is required. Terminals
      are not available outside of headquarters area locations.
    Retention and disposal:
      File is routinely updated and old data disposed of as required.
      Individual data is subject to retention and disposal requirements
      specified for records contained in the Personnel System.
    System manager(s) and address:
      Director of Equal Employment Opportunity, National Security Agency/
      Central Security Service, Ft. George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Individuals themselves, organizational elements, personnel file, and
      other sources as appropriate and required.
    Exemptions claimed for the system:
      Individual records and data elements in this file may be exempt
      pursuant to 5 U.S.C. 552a(k)(1), (k)(2), and (k)(4).
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-54]

    GNSA 06

    System name: NSA/CSS Health, Medical and Safety Files.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Fort George G. Meade, MD 20755-6000.
      Decentralized Segments - Each staff, line, contract and field element
      as appropriate.
    Categories of individuals covered by the system:
      NSA/CSS civilian employees, military assignees, applicants, retirees,
      building concessionaires, assigned GSA employees, certain contract
      employees, visitors requiring emergency treatment, in certain cases
      members of employees' families with prior approval of the employee,
      blood donors, designated Health and Safety Officers.
    Categories of records in the system:
      File may consist of completed medical questionnaires, results of
      physical examinations and laboratory tests, records of medical
      treatment and services, x-rays, notices of injury, forms and
      correspondence including exchanges with Department of Labor related to
      injury and subsequent claims, correspondence with personal physician,
      NSA/CSS Medical Center reports, safety reports, absence and attendance
      records, medical evaluations, fitness for duty reports, `Log of
      Federal Occupational Injuries and Illnesses,' results of psychological
      assessment testing and interviews, psychiatric examination results and
      related reports, forms and notes, lists of blood donors.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); and Federal Employees Compensation Act of September 7, 1916, as
      amended, 5 U.S.C. and Office of Personnel Management implementation
      thereof as contained in Federal Personnel Manual. In addition, the
      Comprehensive Alcohol Abuse and Alcoholism Prevention, Treatment, and
      Rehabilitation Act of 1970, as amended (42 U.S.C. 4582) and Subchapter
      A of Chapter I, 42 CFR, E.O. 11807.
    Purpose(s):
      To determine fitness for hiring, continued employment or assignment
      and reassignment; to process accident and compensation claims; correct
      hazardous conditions; determine eligibility for disability retirement;
      record names of blood donors; and to record participation in alcohol/
      rehabilitation programs.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To the Department of Labor in those cases involving compensation
      claims and to other government entities to make determinations as
      noted in the purpose above.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders, magnetic tape, disk or other computer
      storage media, computer listings.
    Retrievability:
      By name, Social Security Number and specific subject matter data
      elements.
    Safeguards:
      Secure, limited access facilities and within these facilities lockable
      containers. Records are accessible only to authorized personnel. For
      machine records stored on magnetic tape, disk or other computer
      storage within the computer processing area-additional secure limited
      access facilities, specific processing requests from authorized
      persons only, specific authority to access stored records and delivery
      to authorized persons only. Remote terminals are secured, are
      available to authorized person only, and certain password and other
      identifying information available to authorized users only is
      required. Terminals are not available outside of specific security
      offices at headquarters area locations.
    Retention and disposal:
      Medical files and records on traumatic injury and occupational disease
      are transferred to official personnel folder upon separation;
      traumatic injury and occupational disease correspondence on civilian
      employees and retirees is retained indefinitely. Applicant medical
      files are retained for no more than one year or until date designated
      to individual; files on military assignees are forwarded to parent
      service upon reassignment from NSA/CSS; all other medical case files
      are destroyed upon termination of association with NSA/CSS.
      Psychological files on applicants are retained for no more than one
      year or until date designated to individual; all other files are
      retained for four years after end of individual's association with
      NSA/CSS. Decentralized segments are either transferred with employee
      or assignee, or retained for a period after separation as appropriate
      but not to exceed three years and are then destroyed. Alcohol abuse
      patient records retained and disposed of pursuant to cited statute and
      regulations.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Fort George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations may be obtained by written request addressed to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record source categories:
      Applicants, employees, assignees, official personnel folders, NSA
      Safety Officers and records, witnesses to accidents and injuries,
      medical and administrative personnel, blood donor personnel, members
      of employee's family with employee's permission and other sources as
      appropriate and required.
    Exemptions claimed for the system:
      Individual records in this file may be exempt pursuant to 5 U.S.C.
      552a(k)(1), (k)(4), (k)(5) and (k)(6) and may also be subject to
      certain special access procedures established pursuant to 5 U.S.C.
      552a, subsection (f)(3).
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-55]

    GNSA 07

    System name: NSA/CSS Motor Vehicles and Carpools.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized Segments - Each non-headquarters facility and field
      element as appropriate and required.
    Categories of individuals covered by the system:
      NSA/CSS civilian employees, military assignees, other governmental
      employees or personnel under contract granted extended temporary or
      permanent access to an NSA/CSS facility.
    Categories of records in the system:
      File may consist of machine-readable or regular paper cards, carpool
      or other transportation survey results, annotated machine listings,
      post motor vehicle violation reports, stolen vehicle reports, or other
      forms and correspondence related to parking privileges, transportation
      needs, local (parking lot) parking enforcement procedures, vehicle
      abuse and other related matters as appropriate and required.
    Authority for maintenance of the system:
      40 U.S.C. 318a-b; 50 U.S.C. 797; and 41 CFR part 101-20.111 et seq.
    Purpose(s):
      To provide data necessary to manage and enforce parking lot
      regulations, to assist employees with respect to vehicle abuse and
      stolen vehicles, provide carpool assistance, assure availability of
      adequate transportation and parking facilities and other related
      matters.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      Selected individual data limited to name, address and telephone number
      may be made available to commercial or private transportation entities
      where the individuals have indicated a desire to use or join a
      multiple-user transportation arrangement.
      To contractor employees to make determinations as noted in the
      purposes above.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders, machine-readable and other cards in
      appropriate containers, magnetic tape, disk or appropriate containers,
      magnetic tape, disk or other computer storage media, computer
      listings.
    Retrievability:
      By name, motor vehicle identifier.
    Safeguards:
      For paper, cards and computer listings - Secure limited access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers as appropriate. Access is
      limited to authorized users. For machine records stored on magnetic
      tape, disk or other computer storage media within the computer
      processing area-additional secure limited access facilities, specific
      processing requests accepted from authorized persons only, specific
      authority to access stored records and delivery granted to authorized
      persons only.
    Retention and disposal:
      File is routinely updated and old data disposed of as required.
      Individual data is subject to retention and disposal requirements
      specified for records contained in the Personnel System.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Data provided by individuals, authorities in charge of parking
      facilities, local civil and military law enforcement entities and
      other related sources as appropriate and required.
    Exemptions claimed for the system:
      Individual records and data elements in this file may be exempt
      pursuant to 5 U.S.C. 552a(k)(1).
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-56]

    GNSA 08

    System name:

      NSA/CSS Payroll and Claims.
    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized elements of this system may be located at the Defense
      Intelligence Agency (DIA) Headquarters and DIA field elements, DoD
      activities supported by DIA, and NSA field elements as authorized and
      appropriate. For official mailing addresses for any of the
      decentralized system locations, write to the Deputy Director of
      Policy, National Security Agency/Central Security Service, Ft. George
      G. Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      Civilian employees and applicants, military assignees, contractors,
      reemployed annuitants, and personnel under contract or traveling on
      invitational travel orders employed by NSA/CSS, DIA, and DoD
      activities supported by DIA
    Categories of records in the system:
      File may consist of records on time and attendance; overtime; shift
      and holiday work; absent without leave reports; payroll deductions,
      allotments and allowances; requests for leave; payments for travel
      performed in connection with permanent change of station, temporary
      duty, invitations, interviews, pre-employment interviews and initial
      entry on duty. Also included are Pay Adjustment Authorizations (DD
      Form 139) and Cash Collection Vouchers (DD Form 1131) and, in
      connection with pay claims, waivers, requests for waivers, documents,
      correspondence, background data, recommendations and decisions.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 50 U.S.C. App. 2160; Titles 5, 10, 31, and 37 of the U.S.C.;
      Titles 2, 4, 5, and 6 GAO Policy and Procedures Manual for Guidance of
      Federal Agencies.
    Purpose(s):
      To maintain effective control over and accountability for all relevant
      appropriated funds; to provide accounting data to support budget
      requests and control the execution of budgets; to provide financial
      information required by the Office of Management and Budget; to
      provide financial information for agency management and payroll
      activities.'
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      In addition to those disclosures generally permitted under 5 U.S.C.
      552a(b) of the Privacy Act, these records or information contained
      therein may specifically be disclosed outside the DoD as a routine use
      pursuant to 5 U.S.C. 552a(b)(3) as follows:
      Disclosures from this system may also be made to other federal
      entities as necessary to effectuate repayment of debts owed the
      Government.
      To other governmental entities in connection with Social Security
      deductions, unemployment compensation claims, job-related injury and
      death benefits, tax audit and collections, claims or actions.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Disclosures to consumer reporting agencies:
      Disclosures pursuant to 5 U.S.C. 552a(b)(12) may be made from this
      system to 'consumer reporting agencies' as defined in the Fair Credit
      Reporting Act (15 U.S.C. 1681a (f) or the Federal Claims Collection
      Act of 1966 (31 U.S.C. 3701 (a) (3)). The purpose of this disclosure
      is to aid in the collection of outstanding debts owed to the Federal
      Government; typically, to provide an incentive for debtors to repay
      delinquent Federal Government debts by making these debts part of
      their credit records.
      Disclosure of records is limited to the individual's name, address,
      Social Security Number, and other information necessary to establish
      the individual's identify, the amount, status, and history of the
      claim; and the agency program under which the claim arose. This
      disclosure will be made only after the procedural requirement of 31
      U.S.C. 3711(f) has been followed.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders; file cards; computer paper printouts;
      machine-readable cards; computer magnetic tapes, disks and other
      computer storage media.
    Retrievability:
      By name, Social Security Number.
    Safeguards:
      For paper, computer printouts and microfilm - Secure limited access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers. Access to information is
      limited to authorized individuals. For machine records stored on
      magnetic tape, disk or other computer storage media within the
      computer processing area - additional secure limited access
      facilities, specific processing requests from authorized persons only,
      specific authority to access stored records and delivery to authorized
      persons only. Remote terminals are secured, are available to
      authorized persons only, and certain password and other identifying
      information available to authorized users only is required.
    Retention and disposal:
      Records are reviewed annually and retired or destroyed as appropriate.
      Permanent records are retired to the St. Louis Federal Records Center
      after completion of audit. Computer records are purged and updated
      consistent with these retention policies.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Deputy Director of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Deputy Director
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Deputy Director of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Forms, cards, requests and other documentation submitted by
      individuals, supervisors, claims officers, Personnel File data, Time,
      Attendance and Access File data, and other sources as appropriate and
      required.
    Exemptions claimed for the system:
      Individual records in this file may be exempt pursuant to 5 U.S.C.
      552a(k)(1) and (k)(2), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-57]

    GNSA 09

    System name: NSA/CSS Personnel File.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized Segments - Each staff, line, contract and field element
      and supervisor as authorized and appropriate.
    Categories of individuals covered by the system:
      Civilian employees, personnel under contract, military assignees,
      dependents of NSA/CSS personnel assigned to field elements,
      individuals integrated into the cryptologic career development
      program, custodial and commercial services personnel.
    Categories of records in the system:
      File contains personnel papers and forms including but not limited to
      applications, transcripts, correspondence, notices of personnel
      action, performance appraisals, personnel summaries,
      professionalization documentation and correspondence, training forms,
      temporary duty, letters of reprimand, special assignment
      documentation, letters of commendation, promotion documentation, field
      assignment preference, requests for transfers, permanent change of
      station, passport, transportation, official orders, awards,
      suggestions, pictures, complaints, separation, retirement, time
      utilization, scholarship/fellowship or other school appointments,
      military service, reserve status, military check in/out sheets,
      military orders, security appraisal, career battery and other test
      results, language capability, military personnel utilization survey,
      work experience, notes and memoranda on individual aspects of
      performance, productivity and suitability, information on individual
      eligibility to serve on various boards and committees, emergency loan
      records, other information relevant to personnel management, housing
      information where required.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 5 U.S.C. and certain implementing Office of Personnel Management
      regulations in the Federal Personnel Manual; 10 U.S.C. 1124; 44 U.S.C.
      3101, and E.O. 11222.
    Purpose(s):
      To support the personnel management program; personnel training and
      career development; personnel planning, staffing and counseling;
      administration and personnel supervision; workforce study and
      analysis; manpower requirements studies; emergency loan program; and
      training curricula planning and research.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To gaining employers or to financial institutions when individual has
      applied for credit; to contractor employees to make determinations as
      noted in the purpose above; to hearing examiners; the judicial branch
      or to other gaining government organization as required and
      appropriate; biographical information may be provided to the White
      House as required in support of the Senior Cryptologic Executive
      Service awards program.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders, file cards, machine-readable cards,
      computer printouts, computer magnetic tapes, disks and other computer
      storage media, and microfilm.
    Retrievability:
      By name, Social Security Number and other items of relevant
      information.
    Safeguards:
      For paper, computer printouts and microfilm - Secure limited access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers. Access to information is
      limited to those individuals authorized and responsible for personnel
      management or supervision. For records stored on magnetic tape, disk
      or other computer storage media within the computer processing area-
      additional secure limited access facilities, specific processing
      requests accepted from authorized persons only, specific authority to
      access stored records and delivery granted to authorized persons only.
      Where data elements are derived from the Personnel File, remote
      terminal inhibitions are in force with respect to access to complete
      file or data relating to persons not assigned to requesting
      organization using a remote terminal. Remote terminals are secured,
      are available to authorized persons only, and certain password and
      other identifying information available to authorized users only is
      required.
    Retention and disposal:
      Primary System - Those forms, notices, reports and memoranda
      considered to be of permanent value or required by law or regulation
      to be preserved are retained for the period of employment or
      assignment and then forwarded to the gaining organization or retained
      indefinitely. If the action is separation or retirement, these items
      are forwarded to the Office of Personnel Management or retired to the
      Federal Records Center at St. Louis as appropriate. Those items
      considered to be relevant for a temporary period only are retained for
      that period and either transferred with the employee or assignee or
      destroyed either when they are no longer relevant or at time of
      separation or retirement. Computerized portion is purged and updated
      as appropriate. Records relating to adverse actions, grievances,
      excluding EEO complaints, and performance-based actions, except SF-
      50s, will be retained for four years. Personnel summary, training,
      testing and past activity segments retained permanently. All other
      portions deleted at end of tenure.
      Decentralized System - Files are transferred to gaining organization
      or destroyed upon separation as appropriate. Computer listings of
      personnel assigned to an organization are destroyed upon receipt of
      updated listings.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Forms used to collect and process individual for employment, access or
      assignment, forms and memoranda used to request personnel actions,
      training awards, professionalization, transfers, promotion,
      organization and supervisor reports and requests, educational
      institutions, references, Office of Personnel Management and other
      governmental entities as appropriate, and other sources as appropriate
      and required.
    Exemptions claimed for the system:
      Portions of this file may be exempt pursuant to 5 U.S.C. 552a(k)(1),
      (k)(4), (k)(5), and (k)(6), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-58]

    GNSA 10

    System name: NSA/CSS Personnel Security File.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized Segments - Each staff, line, contract and field element
      as appropriate.
    Categories of individuals covered by the system:
      Applicants for employment with NSA/CSS; civilian employees; personnel
      under contract; military assignees; members of advisory groups;
      consultants; experts; other military personnel; federal employees;
      employees of contractors, and employees of services; other individuals
      who require access to NSA/CSS facilities or information and
      individuals who were formerly affiliated with NSA/CSS.
    Categories of records in the system:
      File Folder - Photograph, fingerprint data, statement of personal
      history, agreements with respect to specific security processing
      procedures, security processing forms and records, investigative
      reports, contractor appeal records, incident and complaint reports,
      unsolicited information when relevant, reports by domestic law
      enforcement agencies when relevant, clearance data, access
      authorization, foreign travel data, security secrecy agreements,
      separation and retirement data and other information as required and
      relevant. Computer File - contains data elements representing a
      summary and index of the file folder data to include personal
      identifying data, relevant security processing data, clearance and
      access data, separation and retirement data.
    Authority for maintenance of the system:
      50 U.S.C. 831-835 (Pub. L. 88-290); National Security Agency Act of
      1959, 50 U.S.C. 402 note (Pub. L. 86-36); 18 U.S.C. 798; 50 U.S.C. 403
      (d)(3); E.O.s 10450, 10865, 12333 and 12356.
    Purpose(s):
      The file is used in determinations with respect to employment, access,
      assignment and reassignment, assignment to a board of appraisal or
      management promotion, foreign official and unofficial travel, and
      other personnel actions where security represents a relevant and valid
      element of the determination.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To agencies outside DoD, to include but not limited to other clearance
      holder agencies or agencies charged with making clearance
      determinations, government agencies involved with national security or
      clearance investigations, other government agencies and private
      contractors requiring clearance status information and authorized to
      receive same; the DCI and his General Counsel in the event of
      litigation or anticipated litigation with respect to unauthorized
      disclosures of classified intelligence or intelligence sources and
      methods and related court actions; judicial branch elements pursuant
      to specific court orders or litigation.
      In addition, other government agencies or private contractors may be
      informed of information developed by NSA which bears on assignee's or
      affiliate's status at NSA with regard to security considerations.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Magnetic tape, disk or other computer storage media, computer paper
      printouts, paper in file folders, microfilm.
    Retrievability:
      By name or unique number assigned individual.
    Safeguards:
      For paper, computer printouts and microfilm - Secure limited access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers. Access to information is
      limited to authorized individuals. For machine records stored on
      magnetic tape, disk or other computer storage media within the
      computer processing area-additional secure limited access facilities,
      specific processing requests accepted from authorized persons only,
      specific authority to access stored records and delivery granted to
      authorized persons only. Remote terminals are secured, are available
      to authorized persons only, and certain password and other identifying
      information available to authorized users only is required. Terminals
      are not available outside of specific security offices at headquarters
      area locations.
    Retention and disposal:
      Files on all individuals assigned, employed, or granted access to NSA/
      CSS information or facilities or initiated on individuals requesting
      employment, assignment or access but never completed due to non-
      employment, non-assignment or withdrawal or denial of access are
      maintained a minimum of 15 years after the last security action
      reflected in the file, then destroyed. Computer records are purged and
      updated consistent with these retention policies.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Data provided by individual during employment and security processing;
      data provided by investigative service processing individual's
      background; data provided by references, educational institutions and
      other sources named by individual or developed during background
      investigation; unsolicited data from any source where relevant; data
      provided by the Office of Personnel Management and other agencies,
      departments, and governmental elements involved in the conduct of
      National Agency checks; the Federal Bureau of Investigation; data
      developed by appropriate governmental elements in the course of a
      national security investigation or investigation into alleged
      violations of criminal statutes related to unauthorized disclosure of
      intelligence or protection of intelligence sources and methods;
      documents furnished by agency element sponsoring individual for access
      to specific classified information.
    Exemptions claimed for the system:
      Individual records in this file may be exempt pursuant to 5 U.S.C.
      552a(k)(1), (k)(2), (k)(5), and (k)(6), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-59]

    GNSA 11

    System name: NSA/CSS Time, Attendance and Absence.

    System location:
      Primary System - National Security Agency/Central Security Service,
      Ft. George G. Meade, MD 20755-6000.
      Decentralized Segments - Each staff, line, contract, and field element
      as authorized and appropriate.
    Categories of individuals covered by the system:
      NSA/CSS civilian employees and personnel under contract.
    Categories of records in the system:
      File contains request forms, time cards, authorization forms,
      notifications, locator cards and other correspondence or revisions
      thereof related to actions concerning time, attendance, absence,
      annual leave, sick leave, leave without pay, advance leave,
      administrative leave, exemplary use of leave, unauthorized leave and
      absences and other related matters.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 50 U.S.C. 831-835, (Pub. L. 88-290); section 113 of the Budget
      and Accounting Procedures Act of 1950, as amended; 31 U.S.C. 66a.
    Purpose(s):
      To provide a means of accounting for all time, attendances and
      absences of NSA/CSS civilian employees and contract employees.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To contractor employees to make determinations as noted in the purpose
      above; to appropriate investigatory authorities engaged in national
      security investigations; hearing examiners and other authorized
      individuals with respect to grievances or adverse actions; and to
      those agencies identified in the NSA/CSS System of Records named
      `Payroll and Claims' as necessary to document payroll actions.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders, file cards, machine-readable cards,
      computer printouts, computer magnetic tapes, disks and other computer
      storage media, and microfilm.
    Retrievability:
      May be retrieved by name and in some cases Social Security Number.
    Safeguards:
      For paper, cards, printouts and microfilm - Secure limited-access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers as appropriate. Access by
      authorized individuals only. Current time cards are not secured with
      respect to individual employees within immediate working element. For
      machine-readable cards, computer magnetic tapes and disks and other
      computer storage media within the computer processing area additional
      secure limited-access facilities, specific processing requests from
      authorized persons only, specific authority to access stored cards,
      tapes or disk files.
    Retention and disposal:
      Primary System - Records are reviewed annually and retired or
      destroyed as appropriate. Permanent records are retired to the St.
      Louis Federal Records Center after completion of audit. Computer
      records are purged and updated consistent with these retention
      policies.
      Decentralized Segments - Records are temporary, are retained for the
      period the individual is assigned to an element, or disposed of as
      appropriate. Time cards and other appropriate forms for pay and leave
      purposes are forwarded each pay period to the payroll office.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Time cards, request forms and related correspondence from individual
      employees and assignees, authorizations and notifications from
      authorizing officers, correspondence from supervisory personnel and
      investigating officers with respect to abuses of leave and attendance
      or unauthorized leave and absences, other records or reports related
      to either exemplary use of leave or abusive use of leave, and other
      sources as appropriate and required.
    Exemptions claimed for the system:
      Individual records in this file may be exempt pursuant to 5 U.S.C.
      552a(k)(1), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-60]

    GNSA 12

    System name: NSA/CSS Training.

    System location:
      Primary System-National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
      Decentralized Segments-Each staff, line, contract and field element as
      authorized and appropriate.
    Categories of individuals covered by the system:
      NSA/CSS employees, personnel under contract, military assignees and
      other government employees, designees and military personnel as
      required and appropriate who attend courses or receive training by or
      under NSA/CSS sponsorship.
    Categories of records in the system:
      File contains forms, correspondence, memoranda, student and instructor
      surveys, requests and other information related to testing and
      training; tests and test results; test grades, course grades and other
      student and instructor evaluations; course and class rosters, rosters
      of individuals by specialty; attendance and time utilization reports
      for students and instructors; biographical sketches where required and
      appropriate; course and training histories; other course research and
      evaluation data; student disciplinary actions and complaints; waiver
      requests and responses; selected personal data including education
      level and scholastic achievements; course and training cost data where
      appropriate; reimbursement and service agreements where appropriate;
      and other records related to civilian and military training as
      required and appropriate.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 5 U.S.C., Chapter 41, E.O. 11348, and Office of Personnel
      Management implementing directives as contained in the Federal
      Personnel Manual.
    Purpose(s):
      To maintain training records necessary to assure the equitable
      selection and approval of employees for NSA/CSS training or
      sponsorship; to provide documentation concerning military
      cryptolinguist resources and individual training, develop training
      requirements, refine training methods and techniques, and provide
      individual career and training counseling.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      Portions of these files are made available to other governmental and
      non-governmental entities in support of training requirements.
      To contractor employees to make determinations as noted in the
      purposes above.
      The `Blanket Routine Uses' set forth at the beginning of NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders, card files, binders, computer punch
      cards, computer listings, computer magnetic tapes, disks and other
      computer storage media, microfilm.
    Retrievability:
      By name or Social Security Number.
    Safeguards:
      For paper, computer printouts and microfilm - Secure limited access
      facilities, within those facilities secure limited access rooms and
      within those rooms lockable containers as appropriate. Access to
      information is limited to authorized individuals only. For machine
      records stored on magnetic tape, disk or other computer storage media
      within the computer processing area-additional secure limited access
      facilities, specific processing requests accepted from authorized
      persons only, specific authority to access stored records and delivery
      granted to authorized persons only. Where data elements are derived
      from the Personnel System, remote terminal inhibitions are in force
      with respect to access to complete file or data relating to persons
      not assigned to requesting organization using a remote terminal.
      Remote terminals are secured, available to authorized persons only,
      and certain password and other identifying information available to
      authorized users only is required. Terminals are not available outside
      of headquarters area locations.
    Retention and disposal:
      Primary System - Records are reviewed annually and retained or
      destroyed as appropriate. Copies of items of significance with respect
      to the individual are included in the Personnel File and retention is
      in accordance with the retention policies for that system. Items used
      as the basis of statistical studies or other research efforts may be
      retained indefinitely. Computer listings and records are purged and
      updated as required and appropriate.
      Decentralized System - Records are reviewed annually and retained or
      destroyed as appropriate. Individual's file may be transferred to
      gaining organization if appropriate. Computer listings and records are
      purged and updated as required and appropriate.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Individual, supervisors, training counselors, instructors and other
      training personnel; other governmental entities nominating individuals
      for training; other training and educational institutions; Personnel
      File, and other sources as required and appropriate.
    Exemptions claimed for the system:
      Individual records in this file may be exempt pursuant to 5 U.S.C.
      552a(k)(1), (k)(5) and (k)(6), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-61]

    GNSA 13

    System name: NSA/CSS Archival Records.

    System location:
      Primary System-National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
      Decentralized Segments-Each staff, line, contract and field element as
      authorized and appropriate.
    Categories of individuals covered by the system:
      Individuals who have contributed to the cryptologic archives and
      individuals who are significant to the history of signals
      intelligence.
    Categories of records in the system:
      Records include organizational files, correspondence, tape recorded
      interviews, forms, documents, reports, films, magnetic tapes, and
      media, microforms, photographs, and other related items of cryptologic
      archival interest, most of which are 20 or more years old and have
      been adjudged to be permanent U.S. Government records not yet
      declassified.
    Authority for maintenance of the system:
      Pub. L. 90-620; Pub. L. 81-754; National Security Agency Act of 1959,
      50 U.S.C. 402 note (Pub. L. 86-36); 5 U.S.C. 552, E.O. 12333 and E.O.
      12356.
    Purpose(s):
      To provide the history, records management, declassification, and
      archival staffs with a means for locating and quantifying materials
      that require processing, reference service, review, or evaluation for
      transmittal to the National Archives.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To enable the historian to locate source materials; permit systematic
      review of classified records; and provide a source from which response
      to public queries for NSA/CSS records can be more expeditiously
      handled and, if possible, declassified.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Hard copy, microforms, electronic storage media and pictures.
    Retrievability:
      Generally by subject matter as to that material furnished by an
      individual or about an individual significant to the history of
      cryptology, by name, or other unique identifier significant to the
      subject matter and the individual.
    Safeguards:
      Secure limited access facilities and within those facilities
      containers appropriate to the level of classification of particular
      records.
    Retention and disposal:
      Records are permanent, as determined by disposition schedule approved
      by the Archivist of the United States. They are reviewed periodically
      for declassification, and records declassified are transferred to the
      National Archives.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Individual contributors and operational administrative files; other
      sources as appropriate.
    Exemptions claimed for the system:
      Parts of this system may be exempt under 5 U.S.C. 552a(k)(1) and
      (k)(4), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-62]

    GNSA 14

    System name: NSA/CSS Library Patron File Control System.

    System location:
      National Security Agency/Central Security Service, Ft. George G.
      Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      Borrowers of library materials from NSA/CSS libraries.
    Categories of records in the system:
      File consists of borrower's name, work organization, contracting
      sponsor's name, work telephone number, Social Security Number, and
      library materials borrowed.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 50 U.S.C. 831-835 (Pub. L. 88-290); 18 U.S.C. 798; and EOs. 9397
      and 12333.
    Purpose(s):
      To track and administer the use of NSA/CSS library materials.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Computer database (floppy or hard drive or magnetic tape) or paper
      printout of stored information.
    Retrievability:
      Records are retrieved by the borrower's name, Social Security Number,
      or the title of the library material borrowed.
    Safeguards:
      Only the library staff has access to the retrieval system and to the
      passwords for operating this system. The system is logged off at the
      close of business.
    Retention and disposal:
      Once a borrower has registered with the library, the borrower remains
      registered until he/she leaves the Agency. Disposal of records is
      accomplished by deletion from the database.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000. Inquiries should contain
      full name, Social Security Number, and mailing address.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000. The inquiry should include the
      individual's full name, Social Security Number and mailing address.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Contents of the record are obtained from the individual borrower and
      library staff.
    Exemptions claimed for the system:
      Portions of this file may be exempt under 5 U.S.C. 552a(k)(1) and
      (k)(4), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-63]

    GNSA 15

    System name: NSA/CSS Computer Users Control System.

    System location:
      National Security Agency/Central Security Service, Ft. George G.
      Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      Users of National Security Agency/Central Security Service computers
      and software.
    Categories of records in the system:
      The user's name, Social Security Number, an assigned identification
      (I.D.) code, organization, work phone number, terminal identification,
      system name, programs accessed or attempted to access, data files
      used, date and time logged onto and off the system.
    Authority for maintenance of the system:
      National Security Agency Act of 1959, 50 U.S.C. 402 note (Pub. L. 86-
      36); 50 U.S.C. 831-835, (Pub. L. 88-290); 18 U.S.C. 798; and EOs 9397
      and 12333.
    Purpose(s):
      To administer and monitor use of NSA/CSS computers, software, and data
      bases.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Computer data base (floppy or hard drive or magnetic tape) or paper
      printout of stored information.
    Retrievability:
      Records are retrieved by the user's name, Social Security Number, or
      assigned identification (I.D.) code.
    Safeguards:
      Records are kept in a secured and guarded area. Only authorized
      individuals have access to the retrieval system and to the passwords
      for operating the system.
    Retention and disposal:
      Records are retained in the computer system as long as the individual
      has access to the materials. Computer records are disposed of by
      deleting the information from the data base; paper records may be
      disposed of by destruction.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
      Inquiries should contain the individual's full name, Social Security
      Number, and mailing address.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
      Inquiries should contain the individual's full name, Social Security
      Number and mailing address.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Contents of the record are obtained from the individual about whom the
      record pertains, from administrative personnel and computer system
      administrators, and a self-generated computer program.
    Exemptions claimed for the system:
      Portions of this file may be exempt pursuant to 5 U.S.C. 552a (k)(1)
      and (k)(2), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-64]

    GNSA 16

    System name: NSA/CSS Drug Testing Program.

    System location:
      National Security Agency/Central Security Service, Ft. George G.
      Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      NSA/CSS applicants for employment and employees tested for the use of
      illegal drugs.
    Categories of records in the system:
      The user's name, Social Security Number, an assigned identification
      (I.D.) code, organization, work phone number, and records relating to
      the selection, notification, and testing of covered individuals as
      well as urine specimens and drug test results and other related
      information.
    Authority for maintenance of the system:
      5 U.S.C. 7301 and 7361; E.O. 12564, Drug-Free Federal Workplace and
      9397.
    Purpose(s):
      The system is used to maintain NSA/CSS Drug Program Coordinator
      records on the selection, notification, and testing (i.e., urine
      specimens, drug test results, chain of custody records, etc.) of
      employees and applicants for employment for illegal drug use.
      Records contained in this system are also used by the employee's
      Medical Review Official; the administrator of any Employee Assistance
      Program in which the employee is receiving counseling or treatment or
      is otherwise participating; and supervisory or management officials
      within the employee's Agency having authority to take adverse
      personnel action against such employee.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      In order to comply with provisions of 5 U.S.C. 7301, NSA/CSS' `Blanket
      Routine Uses' do not apply to this system of records.
      To a court of competent jurisdiction where required by the United
      States Government to defend against any challenge against any adverse
      personnel action.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Computer database (floppy or hard drive or magnetic tape) or paper
      printout of stored information, microfilm or microfiche.
    Retrievability:
      Records are retrieved by the user's name, Social Security Number, or
      assigned identification (I.D.) code.
    Safeguards:
      For paper computer printouts and microfilm/microfiche-secured limited
      access facilities, within those facilities secure limited access rooms
      and within those rooms lockable containers. Access to information is
      limited to those individuals specifically authorized and granted
      access by the Deputy Director for Administration. For records on the
      computer system, access is controlled by a password and limited to
      authorized personnel only.
    Retention and disposal:
      Records are retained for two years and then destroyed by shredding,
      burning or erasure in the case of magnetic media.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
      The inquiry should contain the individual's full name, Social Security
      Number and mailing address.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
      The inquiry should include the individual's full name, Social Security
      Number and mailing address.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Contents of the record are obtained from the individual about whom the
      record pertains, from laboratories that test urine specimens for the
      presence of illegal drugs, from supervisors and managers and other
      NSA/CSS employees, from confidential sources, and from other sources
      as appropriate and required.
    Exemptions claimed for the system:
      Portions of this file may be exempt pursuant to 5 U.S.C. 552a(k)(1),
      as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-65]

    GNSA 17

    System name: NSA/CSS Employee Assistance Service (EAS) Case
          Records.

    System location:
      National Security Agency/Central Security Service, Ft. George G.
      Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      NSA/CSS civilian employees, military assignees, applicants, retirees,
      and family members who are referred, or voluntarily request
      counselling assistance. Civilian counselors to whom cases are
      referred.
    Categories of records in the system:
      Files consist of the case records compiled by counselors,
      questionnaires completed by patients, questionnaires completed by
      private counselors to whom clients are referred, the records of
      medical treatment and services, correspondence with personal
      physicians, NSA/CSS Medical Center reports, results of psychological
      assessment testing and interviews, psychiatric examination results and
      related reports.
    Authority for maintenance of the system:
      E.O. 12333; Pub. L. 86-36; 5 U.S.C. 7901; and E.O. 9397.
    Purpose(s):
      Used by counselors to facilitate and record treatment, referral and
      follow-up on behalf of employees.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      NSA/CSS's `Blanket Routine Uses' do not apply to this system of
      records.
      To law enforcement agencies to carry out their functions when a record
      indicates a violation or potential violation of law, whether civil,
      criminal or regulatory in nature, and whether arising by general
      statute or by regulation, rule or order issued pursuant thereto, the
      relevant records in the system of records may be referred, as a
      routine use, to the appropriate agency, whether Federal, state, local,
      or foreign, charged with the responsibility of investigating or
      prosecuting such violation or charged with enforcing or implementing
      the statute, rule, regulation or order issued pursuant thereto.
      To a Federal, state, or local agency maintaining civil, criminal, or
      other relevant enforcement information or other pertinent information,
      such as current licenses, if necessary to obtain information relevant
      to a component decision concerning the hiring or retention of an
      employee, the issuance of a security clearance, the letting of a
      contract, or the issuance of a license, grant or other benefit.
      To a Federal agency, in response to its request, in connection with
      the hiring or retention of an employee, the issuance of a security
      clearance, the reporting of an investigation of an employee, the
      letting of a contract, or the issuance of a license, grant or other
      benefit by the requesting agency, to the extent that the information
      is relevant and necessary to the requesting agency's decision on the
      matter.
      To a Congressional office from the record of an individual in response
      to an inquiry from the Congressional office made at the request of
      that individual.
      To the Office of Personnel Management concerning information on pay
      and leave, benefits, retirement deductions, and any other information
      necessary for the Office of Personnel Management to carry out its
      legally authorized, Government-wide personnel management functions and
      studies.
      To any component of the Department of Justice for the purpose of
      representing the Department of Defense, or any office, employee or
      member of the Department in pending or potential litigation to which
      the record is pertinent.
      To the Merit Systems Protection Board, including the Office of the
      Special Counsel for the purpose of litigation, including
      administrative proceeding, appeals, special studies of the civil
      service and other merit systems, review of OPM or component rules and
      regulations, investigation of alleged or possible prohibited personnel
      practices; including administrative proceedings involving any
      individual subject of a DoD investigation, and such other functions,
      promulgated in 5 U.S.C. 1205 and 1206, or as may be authorized by law.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Paper records in file folders, magnetic tape, disk, or other computer
      storage media, computer listings and data bases.
    Retrievability:
      Records are retrieved by the user's name, Social Security Number,
      assigned identification (I.D.) code or specific subject matter data
      element.
    Safeguards:
      Secure limited access facilities and within these facilities lockable
      containers. Records are accessible only to authorized personnel. For
      machine records stored on magnetic tape, disk, or other computer
      storage, terminals are secured and require passwords only available to
      authorized users.
    Retention and disposal:
      Records of clients will be retained at the Employee Assistance Service
      facility for three years after case closure, retained for five
      additional years in the Agency storage facility, then destroyed.
      Records of clients who retire or separate within three years of case
      closing will be retained at the Employee Assistance Service facility
      for a year after the date of separation or retirement, then stored for
      five years in the Agency storage facility, then destroyed.
      Records of counselors to whom cases are referred will be destroyed at
      the same time that the counselors are removed from the referral list.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
      The inquiry should contain the individual's full name, Social Security
      Number and mailing address.
    Record access procedures:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
      The inquiry should include the individual's full name, Social Security
      Number, and mailing address.
    Contesting record procedures:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Primary sources are EAS counselors, the client and the client's
      family. Other sources include other counselors, and other individuals
      within NSA/CSS.
    Exemptions claimed for the system:
      Portions of this system may be exempt under 5 U.S.C. 552a (k)(1),
      (k)(2), (k)(4) and (k)(5), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

    From the Privacy Act Online via GPO Access [wais.access.gpo.gov]
    [DOCID:dod_othr-66]

    GNSA 18

    System name: NSA/CSS Operations Files.

    System location:
      National Security Agency/Central Security Service, Ft. George G.
      Meade, MD 20755-6000.
    Categories of individuals covered by the system:
      Individuals identified in foreign intelligence or counterintelligence
      reports and supportive materials, including individuals involved in
      matters of foreign intelligence interest, information systems
      security, the compromise of classified information, or terrorism.
    Categories of records in the system:
      Records include administrative information; biographic information;
      intelligence requirements, analysis, and reporting; operational
      records; articles, public-source data, and other published information
      on individuals and events of interest to NSA/CSS; actual or purported
      compromises of classified intelligence; countermeasures in connection
      therewith; and identification of classified source documents and
      distribution thereof.
    Authority for maintenance of the system:
      National Security Act of 1947 as amended, 50 U.S.C. 403(d)(3) (Pub. L.
      80-253); E.O. 12333, 3 CFR part 200 (1981); E.O. 12356; E.O. 9397;
      section 506(a), Federal Records Act of 1950 (44 U.S.C. 3101).
    Purpose(s):
      To maintain records on foreign intelligence and counterintelligence
      matters relating to the mission of the National Security Agency.
    Routine uses of records maintained in the system, including categories
        of users and the purposes of such uses:
      To U.S. Government agencies, and in some instances foreign government
      agencies or their representatives, to provide foreign intelligence,
      counterintelligence, and other information.
      To U.S. Government officials regarding compromises of classified
      information including the document(s) apparently compromised,
      implications of disclosure of intelligence sources and methods,
      investigative data on compromises, and statistical and substantive
      analysis of the data.
      To any U.S. Government organization in order to facilitate any
      security, employment, detail, liaison, or contractual decision by any
      U.S. Government organization.
      Records may further be disclosed to agencies involved in the
      protection of intelligence sources and methods to facilitate such
      protection and to support intelligence analysis and reporting.
      The `Blanket Routine Uses' set forth at the beginning of the NSA/CSS'
      compilation of systems of records notices apply to this system.
    Policies and practices for storing, retrieving, accessing, retaining,
        and disposing of records in the system:
    Storage:
      Magnetic tape, disk or other computer storage media, computer listings
      and databases, paper in file folders, audio recordings, microfilm or
      microfiche.
    Retrievability:
      Information is retrieved by category of information contained therein,
      including by name, title, Social Security Number, or identification
      number.
    Safeguards:
      For paper, computer printouts, audio recordings, and microfilm secure
      limited access facilities, within those facilities secure limited
      access rooms, and within those rooms lockable containers. Access to
      information is limited to those individuals specifically authorized
      and granted access by NSA/CSS regulations. For records on the computer
      system, access is controlled by passwords or physical protection and
      limited to authorized personnel only.
    Retention and disposal:
      Records are reviewed for retention on a scheduled basis every 120 days
      to 5 years. Evidential, informational, and historical data are
      archived as permanent records. All other records are destroyed.
    System manager(s) and address:
      Director, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Notification procedure:
      Individuals seeking to determine whether information about themselves
      is contained in this system should address written inquiries to the
      Chief, Office of Policy, National Security Agency/Central Security
      Service, Ft. George G. Meade, MD 20755-6000.
    Record access procedure:
      Individuals seeking access to information about themselves contained
      in this system should address written inquiries to the Chief, Office
      of Policy, National Security Agency/Central Security Service, Ft.
      George G. Meade, MD 20755-6000.
    Contesting record procedure:
      The NSA/CSS rules for contesting contents and appealing initial
      determinations are published at 32 CFR part 322 or may be obtained by
      written request addressed to the Chief, Office of Policy, National
      Security Agency/Central Security Service, Ft. George G. Meade, MD
      20755-6000.
    Record source categories:
      Individuals themselves; U.S. agencies and organizations; media,
      including periodicals, newspapers, and broadcast transcripts; public
      and classified reporting, intelligence source documents, investigative
      reports, and correspondence.
    Exemptions claimed for the system:
      Portions of this file may be exempt pursuant to 5 U.S.C. 552a (k)(1),
      (k)(2), and (k)(5), as applicable.
      An exemption rule for this record system has been promulgated
      according to the requirements of 5 U.S.C. 553(b)(1), (2), and (3), (c)
      and (e) and published in 32 CFR part 322. For additional information
      contact the system manager.

                              DEFENSE NUCLEAR AGENCY

                                REQUESTING RECORDS

       Records are retrieved by name or by some other personal identifier.
      It is therefore especially important for expeditious service when
      requesting a record that particular attention be provided to the
      Notification and/or Access Procedures of the particular record system
      involved so as to furnish the required personal identifiers, or any
      other pertinent personal information as may be required to locate and
      retrieve the record.

                               BLANKET ROUTINE USES

      Certain `blanket routine uses' of the records have been established
      that are applicable to every record system maintained within the
      Department of Defense unless specifically stated otherwise within a
      particular record system. These additional blanket routine uses of the
      records are published below only once in the interest of simplicity,
      economy and to avoid redundancy.

                           LAW ENFORCEMENT ROUTINE USE

      In the event that a system of records maintained by this component to
      carry out its functions indicates a violation or potential violation
      of law, whether civil, criminal or regulatory in nature, and whether
      arising by general statute or by regulation, rule or order issued
      pursuant thereto, the relevant records in the system of records may be
      referred, as a routine use, to the appropriate agency, whether
      Federal, state, local, or foreign, charged with the responsibility of
      investigating or prosecuting such violation or charged with enforcing
      or implementing the statute, rule, regulation or order issued pursuant
      thereto.

                DISCLOSURE WHEN REQUESTING INFORMATION ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed as a routine use to a Federal, state, or local agency
      maintaining civil, criminal, or other relevant enforcement information
      or other pertinent information, such as current licenses, if necessary
      to obtain information relevant to a component decision concerning the
      hiring or retention of an employee, the issuance of a security
      clearance, the letting of a contract, or the issuance of a license,
      grant or other benefit.

                 DISCLOSURE OF REQUESTED INFORMATION ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed to a Federal agency, in response to its request, in
      connection with the hiring or retention of an employee, the issuance
      of a security clearance, the reporting of an investigation of an
      employee, the letting of a contract, or the issuance of a license,
      grant or other benefit by the requesting agency, to the extent that
      the information is relevant and necessary to the requesting agency's
      decision on the matter.

                       CONGRESSIONAL INQUIRIES ROUTINE USE

      Disclosure from a system of records maintained by this component may
      be made to a Congressional office from the record of an individual in
      response to an inquiry from the Congressional office made at the
      request of that individual.

                      PRIVATE RELIEF LEGISLATION ROUTINE USE

      Relevant information contained in all systems of records of the
      Department of Defense published on or before August 22, 1975, may be
      disclosed to the Office of Management and Budget in connection with
      the review of private relief legislation as set forth in OMB Circular
      A-19 at any stage of the legislative coordination and clearance
      process as set forth in that Circular.

           DISCLOSURES REQUIRED BY INTERNATIONAL AGREEMENTS ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed to foreign law enforcement, security, investigatory, or
      administrative authorities in order to comply with requirements
      imposed by, or to claim rights conferred in, international agreements
      and arrangements including those regulating the stationing and status
      in foreign countries of Department of Defense military and civilian
      personnel.

           DISCLOSURE TO STATE AND LOCAL TAXING AUTHORITIES ROUTINE USE

      Any information normally contained in IRS Form W-2 which is maintained
      in a record from a system of records maintained by this component may
      be disclosed to state and local taxing authorities with which the
      Secretary of the Treasury has entered into agreements pursuant to
      Title 5, U.S. Code, Sections 5516, 5517, 5520, and only to those state
      and local taxing authorities for which an employee or military member
      is or was subject to tax regardless of whether tax is or was withheld.
      This routine use is in accordance with Treasury Fiscal Requirements
      Manual Bulletin Number 76-07.

           DISCLOSURE TO THE OFFICE OF PERSONNEL MANAGEMENT ROUTINE USE

      A record from a system of records subject to the Privacy Act and
      maintained by this component may be disclosed to the Office of
      Personnel Management concerning information on pay and leave,
      benefits, retirement deductions, and any other information necessary
      for the Office of Personnel Management to carry out its legally
      authorized Government-wide personnel management functions and studies.

        DISCLOSURE TO THE DEPARTMENT OF JUSTICE FOR LITIGATION ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed as a routine use to any component of the Department of
      Justice for the purpose of representing the Department of Defense, or
      any officer, employee or member of the Department in pending or
      potential litigation to which the record is pertinent.

          DISCLOSURE TO MILITARY BANKING FACILITIES OVERSEAS ROUTINE USE

      Information as to current military addresses and assignments may be
      provided to military banking facilities who provide banking services
      overseas and who are reimbursed by the Government for certain checking
      and loan losses. For personnel separated, discharged, or retired from
      the Armed Forces, information as to last known residential or home of
      record address may be provided to the military banking facility upon
      certification by a banking facility officer that the facility has a
      returned or dishonored check negotiated by the individual or the
      individual has defaulted on a loan and that if restitution is not made
      by the individual, the U.S. Government will be liable for the losses
      the facility may incur.

        DISCLOSURE OF INFORMATION TO THE GENERAL SERVICES ADMINISTRATION
                                   ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed as a routine use to the General Services Administration for
      the purpose of records management inspections conducted under
      authority of 44 U.S.C. 2904 and 2906.

         DISCLOSURE OF INFORMATION TO THE NATIONAL ARCHIVES AND RECORDS
                            ADMINISTRATION ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed as a routine use to the National Archives and Records
      Administration for the purpose of records management inspections
      conducted under authority of 44 U.S.C. 2904 and 2906.

           DISCLOSURE TO THE MERIT SYSTEMS PROTECTION BOARD ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed as a routine use to the Merit Systems Protection Board,
      including the Office of the Special Counsel for the purpose of
      litigation, including administrative proceedings, appeals, special
      studies of the civil service and other merit systems, review of OPM or
      component rules and regulations, investigation of alleged or possible
      prohibited personnel practices; including administrative proceedings
      involving any individual subject of a DOD investigation, and such
      other functions, promulgated in 5 U.S.C 1205 and 1206, or as may be
      authorized by law.

                     COUNTERINTELLIGENCE PURPOSES ROUTINE USE

      A record from a system of records maintained by this component may be
      disclosed as a routine use outside the DOD or the U.S. Government for
      the purpose of counterintelligence activities authorized by U.S. Law
      or Executive Order or for the purpose of enforcing laws which protect
      the national security of the United States.