I-1-4-3.Privacy Act

A. General

1. The Privacy Act applies to all records or information about an individual maintained by an agency in a system of records (SOR), which is retrievable by the individual's name, Social Security number, or some other type of personal identifier assigned to that individual. The Privacy Act does not require or protect access to records retrieved by some other method (e.g., by date or geographical location).

2. Subject to several exemptions, the Privacy Act grants individuals the right to access their own records and prohibits disclosure of such records to others without the prior written request or consent of the individual.

3. The Privacy Act does not apply to all documents and records pertaining to individuals. It applies only to records maintained by an agency in an SOR from which information is retrieved using the name of the individual or some other type of personal identifier. The Freedom of Information Act (FOIA), by comparison, requires an agency to consider any request that reasonably describes the records whether or not such information is maintained in an SOR.

B. List of SORs Attributed to the Office of Hearings Operations and the Office of Analytics, Review, and Oversight

Information concerning these SORs is available at http://www.ssa.gov/privacy/sorn.html. Each SOR below is listed with its corresponding catalogue number.

• Attorney Fee File (60-0003)

• Working File of the Appeals Council (60-0004)

• Administrative Law Judge Working File on Claimant Cases (60-0005)

• Storage of Hearing Records: Tape Cassettes (60-0006)

• Hearings and Appeals Case Control System (60-0009)

• Hearing Office Tracking System of Claimant Cases (60-0010)

• Listing and Alphabetical Name File (Folder) of Vocational Experts, Medical Experts, and Other Health Care Professional and/or Non-Health Care Professional Experts (Medicare) (60-0012)

• Records of Usage of Medical Experts, Vocational Experts, and Other Health Care Professional and/or Non-Health Care Professional Experts (Medicare) (60-0013)

• Curriculum Vitae and Professional Qualifications of Medical Advisors, and Resumes of Vocational Experts (60-0014)

• Quality Review of Hearing/Appellate Process (60-0213)

• Representative Disqualification, Suspension and Non-Recognition Information File (60-0219)

• Appointed Representative File (60-0325)

C. Individual's Right to Access Their Information in an SOR

Pursuant to the Privacy Act (see 5 U.S.C. § 552a(d)(1)), we generally grant individuals the right to access any information about themselves maintained in an SOR. This general principle is subject to exceptions, including restrictions on access to:

1. Investigative information compiled for criminal law enforcement records that are maintained in an SOR for which the Social Security Administration (SSA) has published a “notice of exemption from access” in the Federal Register; or,

2. Records compiled in anticipation of a court action or formal administrative proceeding.

D. Processing an Individual's Request to Access Material in OHO's and OARO's SORs and the Claims Folders System

1. If access is requested for a program purpose (see 20 CFR 402.170 and POMS GN 03311.005B.3.b.) and the request is the first request for access to material in an OHO or OARO SOR or the Claims Folders System made by a claimant or a claimant's representative:

   • The HO staff will process the request following the procedures in HALLEX I-2-1-35 C.

     NOTE:

     If an HO or RO receives a request for the Administrative Law Judge Working File on Claimant Cases, the HO or RO must send scanned portable document format (PDF) copies to OHO's Office of Executive Operations and Strategic Management Audit Liaison Branch via email (OHO OEOSM FOIA), including a scan of the incoming request. If the HO or RO does not have all the requested information, the email to the Audit Liaison Branch should identify what information is not available. The Audit Liaison Branch will refer these materials to SSA's FOI Officer for a decision on disclosure (in accordance with Social Security Ruling (SSR) 92-1p). If there are any questions, OHO management may contact their OHO RO. If the question cannot be resolved at the regional level, the OHO RO management team may contact the Office of Privacy and Disclosure (OPD) through the Audit Liaison Branch.

   • The Office of Appellate Operations (OAO) staff should follow the procedures in HALLEX I-3-1-21 and I-1-4-3 H, below, and refer non-program requests from Members of Congress (MC) to the Claimant and Public Assistance Branch (CPAB) and requests from claimants and third parties other than MCs to the Executive Director's Office (EDO).

2. If access is requested for a program purpose, and the claimant or claimant's representative requests two or more copies at the same time or requests a second copy a short time after a free first copy of the material that was provided to the claimant or the claimant's representative:

   • Compute the cost of the material using 10 cents per page for copying paper records (see 20 CFR 401.95) and the appropriate cost for providing a second copy of a recording or transcript of the hearing (if requested), and

   • Waive the cost if the total cost does not exceed $50.

     NOTE:

     If the claimant or the claimant's representative requests another copy of the material after some time has passed after receiving the first free copy, there is a possibility of changes or additions to the file. In that case, do not charge for the copy as a second copy.

E. Third-Party Disclosure — Request for Records About an Individual Identified in an OHO or OARO SOR or the Claims Folders System — Consent of the Individual Identified Is Required

1. All third-party requests for information—i.e., requests not made by the individual identified in the SOR—other than those listed in subsection F, below, must be accompanied by the identified individual's consent. (See SSA's preferred form and its instructions at SSA-3288.)

2. The third party must identify the material requested and provide a signed and dated consent statement from the individual. The consent statement must:

   • Contain the name, Social Security number, date of birth, and address of the individual whose information is to be disclosed;

   • Be signed and dated by the individual or someone who can consent for them;

   • Specifically authorize SSA to release records. A consent addressed to “all third parties,” “to whom it may concern,” or any similarly worded consent is not acceptable. However, an authorization listing other entities is acceptable, as long as SSA is specifically named; this satisfies our requirement that the consent is addressed specifically to SSA;

   • Specify the information to be disclosed. A consent authorizing the disclosure of “all records,” “entire file,” or any similar blanket request is not acceptable. For example, a consent authorizing disclosure of “my complete claim file” or “my complete disability file” is not acceptable;

   • State the purpose for which the information is to be disclosed. (This helps SSA determine if a fee is applicable to the disclosure);

   • Specify to whom the record may be disclosed; and

   • State a time during which the record may be disclosed. If no time frame is given, assume the consent is for a one-time-only disclosure.

F. Third-Party Disclosure — Request for Records About an Individual Identified in an OHO or OARO System of Records or the Claims Folders System — Consent of the Individual Identified Is Not Required

1. The consent of the individual identified in an OHO, OARO, or other SSA SOR is not required if the third-party disclosure is:

   • To employees of the agency that maintains the record, and the employees need the record to perform their duties;

   • Required by FOIA;

   • For a “routine use” (i.e., a disclosure outside SSA for a purpose compatible with the purpose for which the record was collected, including disclosures that may be made to third-party contacts to assist in administering SSA programs in accordance with POMS GN 03316.065A.5. and disclosure to MCs and their staffs on behalf of the individual identified);

   • To either House of Congress or to any committee, subcommittee, or joint committee, and the information involves a matter within that committee's jurisdiction;

   • For law enforcement purposes (generally limited to crimes involving SSA programs, similar programs of other agencies, or violent crimes when the individual has been indicted or convicted);

   • For health and safety reasons;

     NOTE:

     The Privacy Act (5 U.S.C. 552a(b)(8)) and SSA regulations (20 CFR 401.160) provide that when disclosure for a health or safety reason is made to a third party, the disclosing individual must send a notice of the disclosure to the last known address of the individual whose record was disclosed.

   • For statistical and research activities;

   • To the Government Accountability Office;

   • To courts, under certain circumstances; and

   • To accommodate other specific recipients such as the Bureau of the Census or the National Archives and Records Administration.

2. If consent is not required and the request is not received in writing, the receiving office will prepare a “Memorandum for the File” to document the request.

G. HO and RO Procedures

1. HO procedures for providing access to material in an OHO SOR or the Claims Folders System related to a program purpose are provided in HALLEX I-2-1-35 C. (See also the note in HALLEX I-1-4-3 D.1, above, and SSR 92-1p.)

2. The HO or RO may provide the claimant, the claimant's representative, or an MC inquiring on behalf of the claimant access to information contained in the claim(s) file either by permitting on-site review or by providing a disk or copies of requested documents.

   NOTE:

   We must have written consent to disclose tax return information (e.g., information provided to SSA by employers or self-employed individuals) to an MC.

3. When providing access or allowing disclosure of claim(s) file material, do not allow a paper claim(s) file or any other original paper file (as opposed to providing copies, including copies on a disk in accordance with HALLEX I-1-4-2 B.2.) to leave the custody and control of SSA.

4. While a claim is pending before an administrative law judge (ALJ), we may refuse to provide an individual direct access to their medical records if such disclosure is likely to have an adverse effect on the individual. In such cases, we require an individual to designate a responsible person to review and explain the records to the individual before giving them to the individual. In these cases, the designated representative must give all of the records to the individual. (See also NOTE 1, above, in HALLEX I-1-4-3 C.)

5. The HO or RO may disclose or provide copies of representative material without the consent of the claimant to an attorney or non-attorney representative “to the extent necessary to dispose of . . . [a] fee request.”

   NOTE:

   An RO may also disclose material from an Attorney Fee File to a claimant. If material is requested from the Administrative Law Judge Working File on Claimant Cases, do not release it; instead, follow HALLEX I-1-4-3 D.1, above. (See also SSR 92-1p.)

6. If a request for information under the Privacy Act raises a question concerning the propriety or legality of complying with the request, including a question involving the claim(s) file or the Attorney Fee File, HO management teams may contact their respective OHO RO. If the question cannot be resolved at the regional level, the OHO RO management teams may contact the OPD through the Audit Liaison Branch.

H. OAO Procedures

1. OAO procedures for providing access to material in an OARO SOR or the Claims Folders System are provided in HALLEX I-3-1-21. OAO should refer requests from MCs to CPAB, and requests from claimants and third parties other than MCs to the EDO.

2. When a claim is under the jurisdiction of the Appeals Council (AC), the AC or other OAO management will determine at its discretion whether the hearings and appeals analyst or other OAO staff will respond to requests for records from a claim(s) file when a request is made by the claimant or the claimant's representative. The designated OAO staff member will place a copy of the response in the claim(s) file to document SSA's action on the request.

3. If the request is for information from the Attorney Fee File or the Working File of the Appeals Council (see SSR 92-1p), or if the claim is no longer under the jurisdiction of the AC, OAO staff will refer the request to the EDO for review at ^DCARO OAO. The EDO will review the request and take appropriate action, including, as warranted, consulting with the OHO's Office of Executive Operations and Strategic Management Audit Liaison Branch for possible referral to OPD for decisions on disclosure. See the note in subsection D.1, above, for information about contacting the Audit Liaison Branch.

I. Access Procedures for OHO HQ Components

1. Any OHO HQ component in possession of a claim(s) file (or with access to the CEF) may respond to program-related requests for information from the claim(s) file when made by the claimant, the claimant's representative, or an MC inquiring on behalf of the claimant. Place a copy of the response in the claim(s) file to document SSA's action on the request.

2. With the exception of the instructions specific to OAO in HALLEX I-3-1-21 and I-1-4-3 H, above, other OHO HQ components should consult with ALS to determine how to handle requests for information under the Privacy Act that do not involve the claim file, or requests from individuals other than the claimant or the claimant's representative.