62406 Federal Register / Vol. 85, No. 192 / Friday, October 2, 2020 / Notices DEPARTMENT OF VETERANS Technology Centers (CTC): Primary Data Routine Use sixty-three (63) is being AFFAIRS Center in Kansas City, MO and added to state, ‘‘Disclosure of Veteran Continuity of Operations/Disaster identifiers and demographic Privacy Act of 1974; System of Recovery (COOP/DR) Data Center in information (e.g., name, social security Records Lees Summit, MO. number (SSN), address, date of birth) The System Manager is being updated may be made to an organization with AGENCY: Department of Veterans Affairs to reflect organization changes. This whom VA has a documented (VA). section will also replace, ‘‘Health Data partnership, arrangement or agreement ACTION: Notice of a Modified System of Repository: Director, Health Data (e.g., Health Information Exchange Records. Systems (19–SL), Department of (HIE), Health Information Service Veterans Affairs, 295 Chipeta Way, Salt Provider (HISP) Direct, CommonWell SUMMARY: As required by the Privacy Lake City, UT 84108.’’ with ‘‘Clinical Health Alliance network), for the Act of 1974, notice is hereby given that Data Repository/Health Data Repository: purpose of identifying and correlating the Department of Veterans Affairs (VA) Director, Clinical Informatics and Data patients.’’ VA needs this ability to share is amending the system of records Management Office (10A7A0), 810 demographic information for correlation entitled ‘‘Patient Medical Records–VA’’ Vermont Avenue NW, Washington, DC and identification purposes. (24VA10P2). VA is amending the system 20420.’’ Routine Use sixty-four (64) is being by revising the System Number; System The Purpose is being amended to added to state, VA may disclose relevant Location; System Manager; Purpose; remove law enforcement investigations. health care information to the Centers Categories of Individuals Covered by the The Categories of Individuals Covered for Disease Control and Prevention System; Categories of Records in the by the System, number 7 is being (CDC) and/or their designee in response System; Record Source Categories; amended to include ‘‘other to its request or at the initiation of VA, Routine Uses of Records Maintained in circumstances including but not limited in connection with disease-tracking, the System; Policies and Practices for to’’. patient outcomes, bio-surveillance, or Storage of Records; Policies and The Categories of Records in the other health information required for Practices For Retention and Disposal of System, (iii) is being amended to program accountability. VA needs the Records; Physical, Procedural, and include medical record number. ability to conduct disease tracking to Administrative Safeguards; and Record Source Categories is being impact patient outcomes, respond to Appendix. VA is republishing the amended to include the individual public health threats, and to contribute system notice in its entirety. receiving care and VHA national significantly to the CDC’s ability to DATES: Comments on this amended databases. conduct and monitor public health system of records must be received no Routine use seventeen (17) is being surveillance. later than November 2, 2020. If no amended to remove General Services Policies and Practices for Storage of public comment is received during the Administration. Records section is being amended to period allowed for comment or unless Routine use forty-seven (47) is being include Cerner Technology Centers. otherwise published in the Federal amended to include care coordination. Policies and Practices for Register by VA, the new system will Routine Use sixty-one (61) is being Retrievability of Records is being become effective November 2, 2020. added to state, ‘‘VA may disclose health amended to include medical record care information to DoD for the purpose ADDRESSES: Comments may be number. of VHA health care operations as submitted through www.Regulations.gov Policies and Practices for Retention defined in the HIPAA Privacy Rule, 45 or mailed to, Director, Information and Disposal of Records is being CFR parts 160 and 164 and to the Access and Privacy (10A7B), amended to include VHA Records Defense Health Agency (DHA), as a Department of Veterans Affairs, 810 Control Schedule (RCS 10–1) 6000.1d health care provider, for the purpose of Vermont Avenue NW, Washington, DC (N1–15–91–6, Item 1d) and 6000.2b DHA heath care operations.’’ VHA, as a 20420. Comments should indicate that (N1–15–02–3, Item 3). health care provider, must be able to The Physical, Procedural and they are submitted in response to share health care information with other Administrative Safeguards section is ‘‘Patient Medical Records-VA’’. entities and health care providers for being amended to change the VA Boston Comments received will be available at VA to perform certain health care Development Center to the Allocation regulations.gov for public viewing, operations, such as quality assessment Resource Center. This section will add, inspection or copies. and improvement activities and medical ‘‘Access to Cerner Technology Centers is FOR FURTHER INFORMATION CONTACT: reviews. generally restricted to Cerner Stephania Griffin, Veterans Health Routine use sixty-two (62) is being employees, contractors or associates Administration (VHA) Privacy Officer, added to state, ‘‘VA may disclose with a Cerner issued ID badge and other Department of Veterans Affairs, 810 information from this system of records security personnel cleared for access to Vermont Avenue NW, Washington, DC to another Federal agency or Federal the data center. Access to computer 20420; telephone (704) 245–2492 (Note: entity, when VA determines that rooms housing Federal data, hence not a toll-free number). information from this system of records Federal enclave, is restricted to persons SUPPLEMENTARY INFORMATION: The is reasonably necessary to assist the Federally cleared for Federal enclave System Number is being updated from recipient agency or entity in (1) access through electronic badge entry 24VA10P2 to 24VA10A7 to address responding to a suspected or confirmed devices. All other persons, such as organizational changes. breach or (2) preventing, minimizing, or custodians, gaining access to Federal The System Location is being updated remedying the risk of harm to enclave are escorted.’’ to reflect electronic records being individuals, the recipient agency or Appendix 1 is being amended update located at Federal Records Centers, VA entity (including its information addresses pertaining to VA facilities. Enterprise Cloud Data Centers/Amazon systems, programs, and operations), the The Report of Intent to Amend a Web Services, 1915 Terry Avenue, Federal Government, or national System of Records Notice and an Seattle, WA 98101 and contracted data security, resulting from a suspected or advance copy of the system notice have repository sites, such as the Cerner confirmed breach.’’ been sent to the appropriate VerDate Sep<11>2014 20:59 Oct 01, 2020 Jkt 253001 PO 00000 Frm 00002 Fmt 4701 Sfmt 4703 E:\FR\FM\02OCN2.SGM 02OCN2 jbell on DSKJLSW7X2PROD with NOTICES2 Federal Register / Vol. 85, No. 192 / Friday, October 2, 2020 / Notices 62407 Congressional committees and to the Veterans Integrated Service Networks; Title 38, United States Code, and Director of the Office of Management and Regional and General Counsel members of their immediate families; and Budget (OMB) as required by 5 Offices. 2. Spouses, surviving spouses, and U.S.C. 552a(r) (Privacy Act) and children of Veterans who have applied guidelines issued by OMB (65 FR SYSTEM MANAGER(S): for health care services under Chapter 77677), December 12, 2000. Patient Medical Records: Director, 17 of Title 38, United States Code; Health Information Governance 3. Beneficiaries of other Federal Signing Authority (10A7B), Department of Veterans agencies; The Senior Agency Official for Affairs, 810 Vermont Avenue NW, 4. Individuals examined or treated Privacy, or designee, approved this Washington, DC 20420. Clinical Health under contract or resource sharing document and authorized the Data Repository/Health Data Repository: agreements; undersigned to sign and submit the Director, Clinical Informatics and Data 5. Individuals examined or treated for document to the Office of the Federal Management Office (10A7A), 810 research or donor purposes; Register for publication electronically as Vermont Avenue NW, Washington, DC 6. Individuals who have applied for an official document of the Department 20420. Title 38 benefits but who do not meet of Veterans Affairs. James P. Gfrerer, the requirements under Title 38 to Assistant Secretary of Information and AUTHORITY FOR MAINTENANCE OF THE SYSTEM: receive such benefits; Technology and Chief Information Title 38, United States Code, Sections 7. Individuals who were provided Officer, approved this document on 501(b) and 304. medical care under other circumstances, June 16, 2020 for publication. including but not limited to, emergency PURPOSE(S) OF THE SYSTEM: conditions for humanitarian reasons; Dated: September 24, 2020. The paper and automated records may 8. Pensioned members of allied forces Amy L. Rose, be used for such purposes as: ongoing provided health care services under Program Analyst, VA Privacy Service, Office treatment of individuals and patients; Chapter I of Title 38, United States of Information Security, Office of Information documentation of treatment provided; Code; and and Technology, Department of Veterans payment; health care operations such as 9. Caregivers.