Collapse to view only § 1202.42 - How are requests for access to medical records handled?

§ 1202.40 - How can I gain access to NARA records about myself?

(a) If you wish to request access to information about yourself contained in a NARA Privacy Act system of records, you may do so in writing or electronically.

(1) Written requests must be directed to the NARA Privacy Act Officer, National Archives and Records Administration, Rm. 3110, 8601 Adelphi Rd., College Park, MD 20740-6001. Your request should be clearly marked on the letter and the envelope as a “Privacy Act Request.”

(2) Electronic requests may be initiated online at https://www.archives.gov/privacy.

(b) If you wish to allow another person to review or obtain a copy of your record, you must provide authorization in writing or electronically for that person to obtain access as part of your request.

(c) Your request must contain:

(1) The complete name and identifying number of the NARA system as published in the Federal Register;

(2) A brief description of the nature, time, place, and circumstances of your association with NARA;

(3) Any other information which you believe would help NARA to determine whether the information about you is included in the system of records;

(4) If you are authorizing another individual to have access to your records, the name of that person; and

(5) A Privacy Act certification of identity. When you make a request for access to records about yourself, you must verify your identity.

(i) If you are submitting a written request, you must sign your request and your signature must either be notarized or submitted by you under 28 U.S.C. 1746, a law that permits statements to be made under penalty of perjury as a substitute for notarization. While no specific form is required, you may obtain a Certification of Identity form for this purpose from the NARA Privacy Act Officer. The following information is required:

(A) Your full name;

(B) An acknowledgment that you understand the criminal penalty in the Privacy Act for requesting or obtaining access to records under false pretenses (5 U.S.C. 552a(i)(3)); and

(C) A declaration that your statement is true and correct under penalty of perjury (18 U.S.C. 1001).

(ii) If you are submitting an electronic request, you must provide an electronically signed statement on the electronic form. The statement affirms your identity and the fact that you understand penalties associated with requesting information under false pretenses.

(d) The procedure for accessing an accounting of disclosure is identical to the procedure for access to a record as set forth in this section.

[89 FR 16698, Mar. 8, 2024]

§ 1202.42 - How are requests for access to medical records handled?

When NARA receives a request for access to medical records, if NARA believes that disclosure of medical and/or psychological information directly to you could have an adverse effect on you, you may be asked to designate in writing a physician or mental health professional to whom you would like the records to be disclosed, and disclosure that otherwise would be made to you will instead be made to the designated physician or mental health professional.

§ 1202.44 - How long will it take for NARA to process my request?

(a) NARA will acknowledge your request within 10 workdays of its receipt by NARA and if possible, will make the records available to you at that time. If NARA cannot make the records immediately available, the acknowledgment will indicate when the system manager will make the records available.

(b) If NARA anticipates more than a 10 workday delay in making a record you requested available, NARA also will explain in the acknowledgment specific reasons for the delay.

(c) If your request for access does not contain sufficient information to permit the system manager to locate the records, NARA will request additional information from you. NARA will have 10 workdays following receipt of the additional information in which to make the records available or to acknowledge receipt of the request and to indicate when the records will be available.

§ 1202.46 - In what ways will NARA provide access?

(a) At your request, NARA will provide you, or a person authorized by you, a copy of the records by mail or by making the records available in person during normal business hours at the NARA facility where the records are located. If you are seeking access in person, the system manager will permit you to examine the original record, will provide you with a copy of the records, or both.

(b) When obtaining access to the records in person at a NARA facility, you must provide proof of identification either by producing at least one piece of identification bearing a name or signature and either a photograph or physical description (e.g., a driver's license or employee identification card) or by signing the Certification of Identity form described in § 1204.40 (b)(5). NARA reserves the right to ask you to produce additional pieces of identification to assure NARA of your identity. You will also be asked to sign an acknowledgement that you have been given access.

§ 1202.48 - Will I have to pay for copies of records?

Yes. However NARA will waive fees for the first 100 pages copied or when the cost to collect the fee will exceed the amount collected. When a fee is charged, the charge per copy is $0.20 per page if NARA makes the copy or $0.15 per page if you make the copy on a NARA self-service copier. Fees for other reproduction processes are computed upon request.

§ 1202.50 - Does NARA require prepayment of fees?

If the system manager determines that the estimated total fee is likely to exceed $250, NARA will notify you that the estimated fee must be prepaid before you can have copies of the records. If the final fee is less than the amount you prepaid, NARA will refund the difference.

§ 1202.52 - How do I pay?

You must pay by check or money order. Make your check or money order payable to the National Archives and Records Administration and send it to the NARA Privacy Act Officer, Room 3110, 8601 Adelphi Road, College Park, MD 20740-6001.

§ 1202.54 - On what grounds can NARA deny my Privacy Act request?

(a) NARA can deny your Privacy Act request for records if the records are maintained in an exempt systems of records are described in subpart F of this part.

(b) A system manager may deny your request for access to your records only if:

(1) NARA has published rules in the Federal Register exempting the pertinent system of records from the access requirement; and

(2) The record is exempt from disclosure under the Freedom of Information Act (FOIA).

(c) Upon receipt of a request for access to a record which is contained within an exempt system of records, NARA will:

(1) Review the record to determine whether all or part of the record must be released to you in accordance with § 1202.40, notwithstanding the inclusion of the record within an exempt system of records; and

(2) Provide access to the record (or part of the record, if it is not fully releasable) in accordance with § 1202.46 or notify you that the request has been denied in whole or in part.

(d) If your request is denied in whole or in part, NARA's notice will include a statement specifying the applicable Privacy Act and FOIA exemptions and advising you of the right to appeal the decision as explained in § 1202.56.

§ 1202.56 - How do I appeal a denial of my Privacy Act request?

(a) If you are denied access in whole or in part to records pertaining to yourself, you may file with NARA an appeal of that denial. Your appeal letter must be post marked no later than 35 calendar days after the date of the denial letter from NARA.

(1) Address appeals involving denial of access to Office of Inspector General records to NARA Privacy Act Appeal Official (N), National Archives and Records Administration, Room 4200, 8601 Adelphi Road, College Park, MD 20740-6001.

(2) Address all other appeals to the NARA Privacy Act Appeal Official (ND), National Archives and Records Administration, Room 4200, 8601 Adelphi Road, College Park, MD 20740-6001.

(b) All appeals of denial of access to the NARA Privacy Act Appeal Official must be in writing. Mark both the envelope and the appeal “Privacy Act “ Access Appeal.”

§ 1202.58 - How are appeals processed?

(a) Upon receipt of your appeal, the NARA Privacy Act Appeal Official will consult with the system manager, legal counsel, and such other officials as may be appropriate. If the NARA Privacy Act Appeal Official determines that the records you requested are not exempt from release, NARA grants you access and so notifies you.

(b) If the NARA Privacy Act Appeal Official determines that your appeal must be rejected, NARA will immediately notify you in writing of that determination. This decision is final and cannot be appealed further within NARA. NARA's notification to you will include:

(1) The reason for the rejection of the appeal; and

(2) Notice of your right to seek judicial review of NARA's final determination, as described in 36 CFR 1202.84.

(c) NARA will make its final determination no later than 30 workdays from the date on which NARA receives your appeal. NARA may extend this time limit by notifying you in writing before the expiration of the 30 workdays. This notification will include an explanation of the reasons for the time extension.