[Code of Federal Regulations]
[Title 13, Volume 1]
[Revised as of January 1, 2006]
From the U.S. Government Printing Office via GPO Access
[CITE: 13CFR102]

[Page 10-22]
 
                TITLE 13--BUSINESS CREDIT AND ASSISTANCE
 
                CHAPTER I--SMALL BUSINESS ADMINISTRATION
 
PART 102_RECORD DISCLOSURE AND PRIVACY

                   Subpart A_Disclosure of Information

Sec.
102.1 General provisions.
102.2 Public reading rooms.
102.3 Requirements pertaining to the submission of requests.
102.4 Timing of responses to requests.
102.5 Responses to requests.
102.6 Fees.
102.7 Business information.
102.8 Appeals.
102.9 Public Index.
102.10 What happens if I subpoena records or testimony of employees in 
          connection with a civil lawsuit, criminal proceeding or 
          administrative proceeding to which SBA is not a party?

                        Subpart B_The Privacy Act

102.20 What privacy rights does this subpart regulate?
102.21 How will SBA maintain records?
102.22 When will SBA disclose records?
102.23 Are there special rules about personnel and equal employment 
          opportunity files?
102.24 What is a record?
102.25 What is a system of records?
102.26 What does this subpart mean by ``person to whom a record 
          pertains'' or ``you''?
102.27 What records are partially exempt from the provisions of the 
          Privacy Act?
102.28 What about information compiled for a civil action?
102.29 Who administers SBA's responsibilities under the Privacy Act?
102.30 How can I write to the Privacy Act Officer?
102.31 Who appoints Systems Managers?
102.32 What do Systems Managers do?
102.33 How can I write to a Systems Manager?
102.34 How can I see records kept on me?
102.35 How long will it take SBA to respond to my request?
102.36 How will SBA respond to my request?
102.37 How may I appeal a decision to deny me access to my records?

[[Page 11]]

102.38 To whom should my appeal be addressed?
102.39 By when must I appeal to the Privacy Act Officer?
102.40 When will SBA respond to my appeal?
102.41 How will SBA respond to my appeal?
102.42 How can I get SBA to amend a record kept on me?
102.43 What should my petition say?
102.44 For what reasons will SBA amend my record?
102.45 Will SBA ask me for more information after I make my request?
102.46 When will SBA respond to my request?
102.47 How will SBA respond to my request?
102.48 How do I appeal a refusal to amend a record kept on me?
102.49 To whom should I address my appeal?
102.50 By when must I submit my appeal?
102.51 By what standards will the Privacy Act Officer review my appeal?
102.52 When will SBA respond to my appeal?
102.53 How will SBA respond to my appeal?
102.54 How can I obtain judicial review of an SBA Privacy Act decision?
102.55 What must SBA tell the individuals from whom it collects 
          information?
102.56 Will SBA release my name or address?
102.57 Do I have to give SBA my SSN?
102.58 When will SBA show personnel records to a representative?
102.59 What fees will SBA charge me for my records?
102.60 May I be informed of disclosures made of my records?
102.61 Are there Matching Program procedures?

    Authority: 5 U.S.C. 552 and 552a; 31 U.S.C. 1 et seq. and 67 et 
seq.; 44 U.S.C. 3501 et seq.; E.O. 12600, 3 CFR, 1987 Comp., p. 235.

    Source: 61 FR 2673, Jan. 29, 1996, unless otherwise noted.

                   Subpart A_Disclosure of Information

    Source: 68 FR 59092, Oct. 14, 2003, unless otherwise noted.

Sec. 102.1  General provisions.

    This subpart describes the procedures that the U.S. Small Business 
Administration (SBA) follows for responding to requests made under the 
Freedom of Information Act (FOIA) (5 U.S.C. 552).

Sec. 102.2  Public reading rooms.

    (a) SBA maintains a public reading room in the Headquarters 
Reference Library at 409 3rd St., SW., Suite 5000, Washington, DC 20416 
where you may read and copy the following:
    (1) Final SBA opinions and orders issued by the Office of Hearings 
and Appeals in adjudicating a case,
    (2) Official non-privileged policy statements, opinions, or 
interpretations,
    (3) Standard operating procedures affecting members of the public,
    (4) Records SBA has released in response to previous FOIA requests 
which, because of their subject matter, SBA determines are likely to be 
requested again, and
    (5) An index of the records referred to under paragraph (a)(4) of 
this section.
    (b) The records described in paragraph (a) of this section are 
available in the SBA Online Reading Room at http://www.sba.gov/library/.
    (c) Reading room records created on or after November 1, 1996 are 
available electronically.

Sec. 102.3  Requirements pertaining to the submission of requests.

    (a) You may make a request for SBA records by writing directly to 
the program or field office that maintains the records, or to the 
Freedom of Information/Privacy Acts (FOI/PA) Office by mail to 409 3rd 
St., SW., Washington, DC 20416 or fax to 202-205-7059 or e-mail to 
foia@sba.gov. The office receiving your request will forward it to the 
correct office. The correct office will consider your request to be 
complete only when you:
    (1) Describe the records sought in enough detail for an Agency 
employee to locate the records with a reasonable amount of effort;
    (2) Agree to pay applicable fees pursuant to Sec. 102.6, unless you 
seek a waiver of fees; and
    (3) Make an advance payment if either the correct office estimates 
the fees will exceed $250 or you owe for past FOIA fees. If you owe past 
due FOIA fees, you must pay the estimated amount, plus any past due 
charges and interest.
    (b) If you make a request on behalf of another person for 
information pertaining to that person, your request must include an 
authorization signed by the latter, allowing SBA to release such 
information to you.

[[Page 12]]

    (c) To make a Privacy Act request for records about yourself, you 
must follow the procedures detailed in Sec. 102.34(b) of Subpart B.

Sec. 102.4  Timing of responses to requests.

    (a) In general. Subject to paragraphs (b) and (c) of this section, 
once the correct office receives your complete request, that office must 
respond within 20 working days unless that office notifies you in 
writing that the time is extended by an additional 10 working days for 
one or more of the following reasons:
    (1) The need to search for and collect the requested records from 
field facilities or other establishments separate from the office 
processing the request;
    (2) The need to search for, collect, and appropriately examine a 
voluminous amount of separate and distinct records which are demanded in 
a single request; or
    (3) The need for consultation, which shall be conducted with all 
practicable speed, with another agency having substantial interest in 
the determination of the request or among two or more components of the 
agency having substantial subject matter interest therein.
    (b) Additional time. Where an extension of more than ten working 
days will be necessary due to exceptional circumstances, the correct 
office will give the requester an opportunity to modify the request so 
it may be processed within the usual time limits in paragraph (a) of 
this section, or to arrange an alternative time period for processing 
the request or a modified request.
    (c) Expedited processing. (1) SBA will give expedited processing to 
requests and appeals upon written request, if one of the following 
conditions is met:
    (i) You demonstrate someone's life or physical safety will be in 
imminent danger if SBA does not expedite its response to your request; 
or
    (ii) You are a news media representative (as defined in Sec. 
102.6(b)(8)) who demonstrates an urgent need to inform the public about 
an actual or alleged Federal government activity.
    (2) You must provide a written statement, certified to be true and 
correct to the best of your knowledge and belief, explaining in detail 
one of these circumstances of ``compelling need'' and submit it to the 
correct office. Within 10 working days of its receipt of such a 
statement, or sooner, if SBA concludes that circumstances warrant, that 
office will notify you of its decision whether or not to grant expedited 
processing. If expedited processing is granted, the request shall be 
given priority and processed as soon as practicable. If an expedited 
processing request is denied, an appeal may be submitted which will be 
acted on expeditiously.
    (d) Multiple requests. Where an office believes that multiple 
requests submitted by a requester, or by a group of collaborating 
requesters, constitute a single request that would otherwise involve 
unusual circumstances, and the requests involve clearly related matters, 
they will be aggregated for processing.

Sec. 102.5  Responses to requests.

    Within the time limits described in Sec. 102.4, SBA will respond to 
your request in writing. SBA's response will do one or more of the 
following:
    (a) Advise you that SBA is releasing the requested documents;
    (b) Explain why SBA has decided not to give you all or some of the 
records requested, citing specific FOIA exemptions where applicable and 
noting the number of pages withheld (except where noting the number of 
pages withheld would harm an interest protected by an exemption), and 
explain how to appeal that decision;
    (c) Provide a cost estimate or bill you for the actual fee, less any 
advance payment you have made. SBA will not provide any records until 
payment in full is received; and/or
    (d) Advise you that SBA will refer your request for records 
generated by another Federal agency to that agency for proper 
processing.

Sec. 102.6  Fees.

    (a) In general. SBA will charge fees for processing requests as 
outlined in this section. Fees must be paid by check or money order made 
payable to SBA.

[[Page 13]]

    (b) Definitions and applicable fees. For purposes of this section:
    (1) Direct costs means those expenses that SBA actually incurs in 
searching for and duplicating (and, in the case of commercial use 
requesters, reviewing) documents in response to an FOIA request. Direct 
costs include the salary of the employee performing the work and the 
cost of operating duplication machinery.
    (2) Search means the process of looking for and retrieving records 
responsive to a request. It includes page-by-page or line-by-line 
identification of information within records and also includes 
reasonable efforts to locate and retrieve information from records 
maintained in electronic form or format. SBA may charge search fees even 
if they fail to locate records or if records located are determined to 
be exempt from disclosure. Search fees are $30 per hour.
    (3) Duplication means the making of a copy of a record. Copies can 
take the form of paper, microfilm, audiovisual materials, or electronic 
records (for example, magnetic tape or disk), among others. SBA will 
charge $.10 per page for photocopy duplication and the actual cost for 
other methods. SBA will honor a requester's specified preference of form 
or format of disclosure if the record is readily reproducible with 
reasonable efforts in the requested form or format by the office 
responding to the request.
    (4) Review refers to the examination of documents responsive to a 
request in order to determine whether any portion of it is exempt from 
disclosure. It includes processing any record for disclosure, e.g., all 
necessary redaction and preparation for disclosure. It also includes 
time spent considering any formal objection to disclosure made by a 
business submitter under Sec. 102.7, but does not include time spent 
resolving general legal or policy issues regarding the application of 
exemptions. Review costs are recoverable even if a record is ultimately 
not disclosed. Only commercial use requesters are assessed review costs. 
Review costs are $30 per hour.
    (5) A commercial use request refers to a request from or on behalf 
of a person who seeks information for a use or purpose that furthers his 
or her commercial, trade or profit interests, which can include 
furthering those interests through litigation. When it appears the 
requester will put the requested records to a commercial use, either 
because of the nature of the request itself or where SBA has reasonable 
cause to doubt a requester's stated use, SBA will seek additional 
clarification. SBA will charge commercial use requesters the full direct 
costs of searching for, reviewing for release, and duplicating the 
records sought.
    (6) Educational institution means a state-certified preschool, 
elementary or secondary school; an accredited college or university; an 
accredited institution of professional education; or any accredited or 
state-certified institution of vocational education that operates a 
program of scholarly research. An educational institution requester must 
show that the request is authorized by and is made under the auspices of 
a qualifying institution and that the records are not sought for a 
commercial use but are sought to further scholarly research. SBA will 
provide documents to requesters in this category for the cost of 
reproduction alone, excluding charges for the first 100 pages.
    (7) Noncommercial scientific institution means an institution that 
is not operated on a commercial basis, and that is operated solely for 
the purpose of conducting scientific research the results of which are 
not intended to promote any particular product or industry. A 
noncommercial scientific institution requester must show that the 
request is authorized by and is made under the auspices of a qualifying 
institution and that the records are not sought for a commercial use but 
are sought to further scientific research. SBA will charge noncommercial 
scientific institution requesters for the cost of reproduction alone 
after the first 100 pages.
    (8) A representative of the news media is a requester actively 
gathering information for one or more news media who:
    (i) Is employed by a news medium or
    (ii) Has a reasonable expectation of selling the information 
obtained to one or more news media. A news medium is an entity organized 
and operated to

[[Page 14]]

distribute information to the general public. A news medium may provide 
information by subscription and may target its dissemination to a narrow 
section of the general public so long as any member of the general 
public may purchase information from it. A request for records 
supporting the news dissemination function of the requester shall not be 
considered to be for commercial use. A news media requester must show 
that the request is authorized by and is made under the auspices of a 
qualifying news medium and that the records are not sought for a 
commercial use but are sought to further the dissemination of 
information to the general public. SBA will provide documents to 
representatives of the news media for the cost of reproduction alone, 
excluding charges for the first 100 pages.
    (9) A member of the general public is a requester who does not fit 
into any of the categories in paragraphs (b)(1) through (8) of this 
section. SBA will charge requesters in this category search time after 
the first two hours and duplication after the first 100 pages.
    (c) Other charges. SBA will recover the full costs of providing 
special services, such as certifying that records are true copies or 
sending copies by other than ordinary mail, to the extent that SBA 
elects to provide them.
    (d) Charging interest. SBA will charge interest on any unpaid bill 
starting on the 31st day following the date of billing. Interest charges 
will accrue at the maximum rate allowed under 31 U.S.C. 3717. If still 
unpaid by the 91st day after the billing date, SBA may notify consumer 
credit reporting agencies of the delinquency and/or take other 
appropriate action in accordance with law.
    (e) Fee waivers or reductions. SBA will furnish responsive records 
without charge or at a reduced charge when a requester can show that 
disclosure of the information is in the public interest because it is 
likely to contribute significantly to public understanding of the 
operations or activities of the government and is not primarily in the 
commercial interest of the requester.
    (1) You must submit a request for a fee waiver or reduction to the 
initial processing office.
    (2) On the basis of the information that you provide, the initial 
processing office will determine whether you meet the fee waiver 
requirements outlined in this section.

Sec. 102.7  Business information.

    (a) In general. Business information provided to SBA from a 
submitter will only be disclosed in accordance with this section.
    (b) Definitions. For purposes of this section:
    (1) Business information is commercial or financial information 
obtained by SBA from a submitter that may arguably be protected from 
disclosure under Exemption 4 of the FOIA.
    (2) Submitter is any person or entity who provides business 
information, directly or indirectly to SBA.
    (c) Designation of business information. Submitters of business 
information will use reasonable, good-faith efforts to designate, by 
appropriate markings, either at the time of submission or at a 
reasonable time thereafter, any portions of their submissions that they 
consider to be protected from disclosure under Exemption 4 of the FOIA. 
Designations will expire ten years after the date of the submission 
unless the submitter requests, and provides justification for, a longer 
designation period.
    (d) Notice to submitters. SBA will provide a submitter with written 
notice of a FOIA request or administrative appeal that seeks its 
business information whenever SBA intends to release that information. 
The notice will either describe the business information or include 
copies of the records in the form SBA proposes to release them. SBA will 
also advise the requester that the submitter is being given the 
opportunity to object to any proposed disclosure. When notification of a 
voluminous number of submitters is required, SBA may post or publish 
such a notice in a place reasonably likely to accomplish notice.
    (e) Opportunity to object to disclosure. SBA will give the submitter 
ten working days from the date of the written notice to submit a 
detailed written

[[Page 15]]

statement specifying all grounds upon which disclosure is opposed. A 
reasonable extension of time may be granted by the correct office upon 
good cause shown by the submitter. The submitter's statement must 
demonstrate why it believes information is a trade secret or commercial 
or financial information that is privileged or confidential. If a 
submitter fails to timely respond to the notice, such failure will be 
deemed a waiver by the submitter of any objection to the disclosure of 
the information. Information provided by a submitter under this 
paragraph may itself be subject to disclosure under the FOIA.
    (f) Notice of intent to disclose. SBA will consider a submitter's 
objections and specific grounds for nondisclosure in accordance with 
paragraph (e) of this section in deciding whether to disclose business 
information. If SBA decides to disclose business information despite the 
objection of a submitter, SBA will give the submitter written notice, 
advising the submitter what will be disclosed, and that such disclosure 
will occur within 10 working days from the date of the notice.

Sec. 102.8  Appeals.

    (a) If you are dissatisfied with SBA's response to your request, you 
may appeal an adverse determination denying your request, in any 
respect, to the Chief, FOI/PA Office, 409 Third St., SW., Washington, DC 
20416.
    (b) The Chief must receive your signed, written appeal within 60 
calendar days of the date of the SBA determination from which you are 
appealing.
    (c) You should include as much information as possible, i.e., 
identifying the records not disclosed, the reason(s) a fee should be 
waived, or the reason(s) a request should be expedited. You must 
identify the deciding official and his/her office location.
    (d) The Chief will decide your appeal unless the Chief originally 
made the determination you are appealing. In that case, the Assistant 
Administrator for Hearings and Appeals will decide your appeal.
    (e) If SBA upholds the initial adverse determination, SBA will tell 
you why the decision has been upheld and tell you how to obtain judicial 
review of the decision.

Sec. 102.9  Public Index.

    (a) The Public Index is a document that provides identifying 
information about official documents that SBA has issued.
    (b) SBA has administratively determined, as permitted by FOIA, that 
periodic publication and distribution of the Public Index is unnecessary 
and impracticable.
    (c) The Public Index is an appendix to SBA Standard Operating 
Procedure 40 03. You can obtain the latest edition of SOP 40 03 from 
SBA's Online Reading Room at http://www.sba.gov/library or by requesting 
it from any SBA office.

Sec. 102.10  What happens if I subpoena records or testimony of 
          employees in connection with a civil lawsuit, criminal 
          proceeding or administrative proceeding to which SBA is not a 
          party?

    (a) The person to whom the subpoena is directed must consult with 
SBA counsel in the relevant SBA office, who will seek approval for 
compliance from the Associate General Counsel for Litigation. Except 
where the subpoena requires the testimony of an employee of the 
Inspector General's office, or records within the possession of the 
Inspector General, the Associate General Counsel may delegate the 
authorization for appropriate production of documents or testimony to 
local SBA counsel.
    (b) If SBA counsel approves compliance with the subpoena, SBA will 
comply.
    (c) If SBA counsel disapproves compliance with the subpoena, SBA 
will not comply, and will base such noncompliance on an appropriate 
legal basis such as privilege or a statute.
    (d) SBA counsel must provide a copy of any subpoena relating to a 
criminal matter to SBA's Inspector General prior to its return date.

[69 FR 21952, Apr. 23, 2004]

[[Page 16]]

                        Subpart B_The Privacy Act

Sec. 102.20  What privacy rights does this subpart regulate?

    This subpart establishes SBA's policy and procedures safeguarding an 
individual against an invasion of personal privacy.
    (a) Except as otherwise provided by law or regulation, SBA will 
permit you to do the following:
    (1) Determine what records pertaining to you are collected, 
maintained, used, or disseminated by SBA;
    (2) Object when records pertaining to you are obtained by SBA for a 
particular purpose and are proposed to be used or made available for 
another purpose without your consent; and
    (3) Gain access to information pertaining to you in records, have a 
copy made of all or any portion of those records, and correct or amend 
such records as appropriate.
    (b) SBA will collect, maintain, use, or disseminate any record of 
identifiable personal information in a manner that assures that such 
action is for a necessary and lawful purpose, that the information is 
current and accurate for its intended use, and that adequate safeguards 
are provided to prevent misuse of such information.
    (c) SBA will permit exemptions from the requirements of 5 U.S.C. 
552a (Privacy Act of 1974) (``PA'') only where an important public 
policy need for such exemption has been determined pursuant to or under 
specific statutory authority.

Sec. 102.21  How will SBA maintain records?

    SBA records will:
    (a) Contain only such information about an individual as is relevant 
and necessary to accomplish a purpose required of SBA by statute, 
regulation, or by Executive Order of the President.
    (b) Be comprised, to the maximum practical extent, of an 
individual's own statements when the information may result in an 
adverse determination about an individual's rights, benefits, or 
privileges under a Federal program.

Sec. 102.22  When will SBA disclose records?

    SBA will not disclose to anyone any record which is contained in a 
system of records, except that it will disclose a record:
    (a) To the person about whom the record is maintained, or to that 
person's agent, within the limits discussed in this subpart;
    (b) To those SBA employees who have a need for the record to perform 
their duties;
    (c) When required under 5 U.S.C. 552 (FOIA);
    (d) For a routine use of the record compatible with the purpose for 
which it was collected;
    (e) To the Bureau of the Census for purposes of planning or carrying 
out a census, survey, or related activity pursuant to Title 13, United 
States Code;
    (f) To a recipient who has provided the Agency with advance adequate 
written assurance that the record will be used solely as a statistical 
research or reporting record, where the record is transferred in a form 
that is not individually identifiable;
    (g) To the National Archives of the United States as a record which 
has sufficient historical or other value to warrant its continued 
preservation by the U.S. Government, or for evaluation by the 
Administrator of General Services or his or her designee to determine 
whether the record has such value;
    (h) To another agency or to an instrumentality of any governmental 
jurisdiction within or under the control of the United States for a 
civil or criminal law enforcement activity if:
    (1) The activity is authorized by law; and
    (2) The head of the agency or instrumentality has made a written 
request to the PA Officer specifying the particular portion desired and 
the law enforcement activity for which the record is sought;
    (i) To a person showing compelling circumstances affecting the 
health or safety of an individual. Upon disclosure, SBA will notify such 
individual at his or her last known address;

[[Page 17]]

    (j) To either House of Congress, or, to the extent of matters within 
its jurisdiction, any committee or subcommittee thereof, or any joint 
committee of Congress or subcommittee of any such joint committee;
    (k) To the Comptroller General, or any of his or her authorized 
representatives, in the course of the performance of the duties of the 
General Accounting Office;
    (l) Pursuant to the order of a court of competent jurisdiction; or
    (m) To a consumer reporting agency in accordance with 31 U.S.C. 
3711(f).

Sec. 102.23  Are there special rules about personnel and equal 
          employment opportunity files?

    (a) The provisions of parts 293 and 297 of title 5 of the Code of 
Federal Regulations govern all SBA files which the Office of Personnel 
Management determines are personnel files.
    (b) The provisions of part 1611 of title 29 of the Code of Federal 
Regulations govern all Equal Employment Opportunity complaint files.

Sec. 102.24  What is a record?

    A record is information which SBA maintains on an individual and 
which includes either his name or an identifying symbol (such as a 
fingerprint, a social security number (``SSN''), or a photograph).

Sec. 102.25  What is a system of records?

    A system of records is one or more records which SBA routinely keeps 
for official purposes, and from which SBA can retrieve records by using 
a name or personal identifier.

Sec. 102.26  What does this subpart mean by ``person to whom a record 
          pertains'' or ``you''?

    When this subpart refers to the ``person to whom a record pertains'' 
or uses the pronoun ``you'', it refers to a United States citizen or a 
lawfully admitted alien. It does not refer to a corporation, 
partnership, or sole proprietorship.

Sec. 102.27  What records are partially exempt from the provisions of 
          the Privacy Act?

    (a) The following systems of records are exempt from certain 
provisions of the PA: Audit Reports (system of records <greek-i>SBA 
015), Litigation and Claims Files (<greek-i>SBA 070), Personnel Security 
Files (<greek-i>SBA 100), Security and Investigations Files 
(<greek-i>SBA 120), Office of Inspector General Referrals (<greek-i>SBA 
125), Investigations Division Management Information System 
(<greek-i>SBA 130), and Standards of Conduct Files (<greek-i>SBA 140).
    (b) The provisions of the PA from which these systems of records are 
exempt are subsections (c)(3) (Accounting of Certain Disclosures), (d) 
(Access to Records), (e)(1), 4G, H, and I (Agency Requirements), and (f) 
(Agency Rules).
    (c) The systems of records described in paragraph (a) of this 
section are exempt from the provisions of the Privacy Act described in 
paragraph (b) of this section in order to:
    (1) Prevent the subject of investigations from frustrating the 
investigatory process;
    (2) Protect investigatory material compiled for law enforcement 
purposes;
    (3) Fulfill commitments made to protect the confidentiality of 
sources and to maintain access to necessary sources of information; or
    (4) Prevent interference with law enforcement proceedings.
    (d) In addition to the foregoing exemptions in paragraphs (a) 
through (c) of this section, the systems of records described in 
paragraph (a) of this section numbered SBA 015, 100, 120, 125 and 130 
are fully exempt from the Privacy Act to the extent that they contain:
    (1) Information compiled to identify individual criminal offenders 
and alleged offenders and consisting only of identifying data and 
notations of arrests, confinement, release, and parole and probation 
status;
    (2) Information, including reports of informants and investigators, 
associated with an identifiable individual compiled to investigate 
criminal activity; or
    (3) Reports compiled at any stage of the process of enforcement of 
the criminal laws from arrest or indictment through release from 
supervision

[[Page 18]]

associated with an identifiable individual.
    (e) The systems of records described in paragraph (d) of this 
section are fully exempt from the PA to the extent described in that 
paragraph because they are records maintained by the Investigations 
Division of the Inspector General, which is a component of SBA which 
performs as its principal function activities pertaining to the 
enforcement of criminal laws within the meaning of 5 U.S.C. 552a(j)(2). 
They are exempt in order to:
    (1) Prevent the subjects of Office of Inspector General (OIG) 
investigations from using the PA to frustrate the investigative process;
    (2) Protect the identity of Federal employees who furnish a 
complaint or information to the OIG, consistent with section 7(b) of the 
Inspector General Act of 1978, 5 U.S.C. App. I;
    (3) Protect the confidentiality of other sources of information;
    (4) Avoid endangering confidential sources and law enforcement 
personnel;
    (5) Prevent interference with law enforcement proceedings;
    (6) Assure access to sources of confidential information, including 
that contained in Federal, State, and local criminal law enforcement 
information systems;
    (7) Prevent the disclosure of investigative techniques; or
    (8) Prevent the disclosure of classified information.

Sec. 102.28  What about information compiled for a civil action?

    No individual shall have access to any information compiled by SBA 
in reasonable anticipation of a civil action or proceeding. In the event 
of a question as to disclosure, the Systems Manager for the system of 
records involved will rely on the opinion of the General Counsel or 
designee, and will also consult with the PA Officer.

Sec. 102.29  Who administers SBA's responsibilities under the Privacy 
          Act?

    The PA Officer has overall responsibility for administering the PA 
for SBA. A Systems Manager is responsible for administering the PA as to 
systems of records within an SBA Office.

Sec. 102.30  How can I write to the Privacy Act Officer?

    You can write to the PA Officer at 409 3rd Street, SW., Washington, 
DC 20416.

[61 FR 2673, Jan. 29, 1996, as amended at 70 FR 29937, May 25, 2005]

Sec. 102.31  Who appoints Systems Managers?

    The senior official in each field office and each Headquarters 
program area designates himself or herself or appoints another as the 
Systems Manager for that office.

Sec. 102.32  What do Systems Managers do?

    Systems Managers have the following responsibilities, among others, 
for the offices for which they are appointed:
    (a) Acting as the initial contact person for individuals seeking 
access to or amendment of their records.
    (b) Responding to requests for information.
    (c) Discussing the availability of records with individuals.
    (d) Amending records in cases where amended information is not 
controversial and does not involve policy decisionmaking.
    (e) Informing individuals of any reproduction fees to be charged.
    (f) Assuring that their systems of records contain no record 
describing how any individual exercises rights guaranteed by the First 
Amendment unless expressly authorized by statute or by the individual 
about whom the record is maintained, or unless pertinent to and within 
the scope of an authorized law enforcement activity.

Sec. 102.33  How can I write to a Systems Manager?

    You can write to a Systems Manager by writing to the SBA Office 
which maintains the record you are seeking. If you do not know which 
office that is, or you do not know the address of that office, you can 
write to the PA Officer at 409 3rd Street SW., Suite 5900, Washington, 
DC 20416, who will forward your request to the proper Systems Manager.

[[Page 19]]

Sec. 102.34  How can I see records kept on me?

    (a) You may look at any information pertaining to yourself contained 
in any SBA system of records unless some law or regulation prohibits it.
    (b) In order to see this information, you must ask for it in 
writing, identifying what records you want. The writing should be 
addressed to the Systems Manager overseeing the system of records 
containing the record you wish to see.
    (c) The Systems Manager (or, when appropriate, the PA Officer) may 
ask for more specific information about the system of records in which 
the document you are seeking is kept, and may ask you for 
identification. The Systems Manager may ask you for your social security 
number but you are not obliged to present it and your request will not 
be denied simply because you do not provide it. The Systems Manager may, 
however, deny your request if he or she cannot determine that you are 
the person to whom the information pertains.

Sec. 102.35  How long will it take SBA to respond to my request?

    The Systems Manager will respond within 10 working days.

Sec. 102.36  How will SBA respond to my request?

    The Systems Manager will inform you that:
    (a) Your request is denied, in which case he or she will set forth 
the reasons for denial and your rights to appeal; or
    (b) Your request is granted and you may view your record, in which 
case he or she will set forth the time and date for you to review your 
record in the presence of an SBA employee; or
    (c) Your request is granted and, unless you object, SBA will mail 
you a copy of your record. SBA will mail you your record only if it 
determines that there are no other reasonable means for you to obtain 
access to your record.

Sec. 102.37  How may I appeal a decision to deny me access to my 
          records?

    Your appeal should be in writing and should set forth any 
information you think would show that you should have access to your 
records.

Sec. 102.38  To whom should my appeal be addressed?

    (a) Denial of a personnel file. Address an appeal of a denial of a 
request for a personnel file to the Office of Personnel Management, 1900 
E Street NW., Washington, DC 20006.
    (b) Denial of an Equal Employment Opportunity Complaint File. 
Address an appeal of a denial of a request for an Equal Employment 
Opportunity Complaint File to the Equal Employment Opportunity 
Commission, 1801 L Street NW., Washington, DC 20036.
    (c) All other appeals. Appeal the denial of any other record to the 
PA Officer. See Sec. 102.30.

Sec. 102.39  By when must I appeal to the Privacy Act Officer?

    Your appeal must reach the PA Officer on or before 30 calendar days 
after the date the denial was issued. If your appeal is based on the 
failure of the Systems Manager to answer your request, your appeal must 
reach the PA Officer on or before 90 calendar days after the date by 
which the Systems Manager should have responded under Sec. 102.35.

Sec. 102.40  When will SBA respond to my appeal?

    The PA Officer will respond to you within 30 working days of the 
date when your appeal was received.

Sec. 102.41  How will SBA respond to my appeal?

    The PA Officer will inform you that:
    (a) Your request is denied, in which case the reasons for denial 
will be set forth along with your rights to judicial review of SBA's 
decision; or
    (b) Your request is granted and you may view your record, in which 
case the time and date for you to review your records in the presence of 
an SBA employee will be set forth; or
    (c) Your request is granted and, unless you object, SBA will mail 
you a copy of your record. SBA will mail you your record only if it 
determines that there are no other reasonable means for you to obtain 
access to your record.

[[Page 20]]

Sec. 102.42  How can I get SBA to amend a record kept on me?

    You can petition to have records kept on you amended by writing to 
the Systems Manager who oversees the system of records in which the 
record you wish amended is kept. If you are unable to determine who that 
Systems Manager is, you may send your petition to the PA Officer, who 
will forward it to the right Systems Manager. See Sec. 102.30.

Sec. 102.43  What should my petition say?

    Your petition should include the following:
    (a) In what system of records the record you want amended is kept.
    (b) What record you want amended.
    (c) What specific information in that record you want amended.
    (d) Why you want the record amended.
    (e) Any information you have, including copies of evidence, which 
you think will persuade the Systems Manager to amend the record.
    (f) What the record should say.

Sec. 102.44  For what reasons will SBA amend my record?

    SBA seeks to maintain only accurate, complete, and up-to-date 
records which are relevant to accomplish some purpose required by law, 
regulation, or Executive Order of the President. There are four grounds 
for amending a record. They are:
    (a) The record is not accurate.
    (b) The record is not relevant to any legitimate SBA concern.
    (c) The record is out-of-date. For example, there may have been 
events since the date of the record which have affected some of the 
information contained in the record.
    (d) The record is incomplete. There may be additional information 
relevant to the material contained in the record.

Sec. 102.45  Will SBA ask me for more information after I make my 
          request?

    Perhaps, in which case the procedures of Sec. 102.34(c) shall 
apply.

Sec. 102.46  When will SBA respond to my request?

    The Systems Manager will acknowledge receipt of your request within 
10 working days and issue a written response within 30 working days.

Sec. 102.47  How will SBA respond to my request?

    The Systems Manager will:
    (a) Make the amendment you request, and send all individuals who had 
previously received a copy of that record a copy of the amended record; 
or
    (b) Amend the record, in a different manner, sending all individuals 
who had previously received a copy of that record a copy of the amended 
record and, in addition, telling you why your request was not granted in 
full and what appeal rights you have; or
    (c) Decline to amend the record, explaining why your request was not 
granted and telling you of your appeal rights.

Sec. 102.48  How do I appeal a refusal to amend a record kept on me?

    Your appeal should be in writing and include the following:
    (a) All of the information contained in your original request to 
amend the record;
    (b) Any response of the Systems Manager, including any reasons for 
denying your request; and
    (c) Any information you wish to submit in response to the Systems 
Manager's findings.

Sec. 102.49  To whom should I address my appeal?

    (a) Personnel file. Address your appeal to the Office of Personnel 
Management, 1900 E Street NW., Washington, DC 20006.
    (b) Equal Employment Opportunity Complaint File. Address your appeal 
to the Equal Employment Opportunity Commission, 1801 L Street NW., 
Washington, DC 20036.
    (c) All other appeals. Address your appeal to the PA Officer. See 
Sec. 102.30.

Sec. 102.50  By when must I submit my appeal?

    Your appeal must be received by the PA Officer within 30 calendar 
days of the date the Systems Manager declined

[[Page 21]]

to amend your records, or within 90 calendar days of the date the 
Systems Manager should have responded under Sec. 102.46 if the Systems 
Manager did not so respond.

Sec. 102.51  By what standards will the Privacy Act Officer review my 
          appeal?

    The PA Officer will decide your appeal using the criteria of 
accuracy, relevance, timeliness, and completeness described in Sec. 
102.44. The PA Officer will review all relevant information and may seek 
the views of other SBA personnel. The PA Officer may review information 
not available to or not used by the Systems Manager.

Sec. 102.52  When will SBA respond to my appeal?

    The PA Officer will respond to your appeal within 30 working days of 
its receipt, unless the Administrator determines that unusual 
circumstances exist, in which case the PA Officer will notify you of the 
presence of these unusual circumstances within 30 working days of the 
date upon which he or she received your appeal, and will respond to your 
appeal within 60 working days of the date of receipt.

Sec. 102.53  How will SBA respond to my appeal?

    The PA Officer will:
    (a) Make the amendment you request, sending all individuals who had 
previously received a copy of that record a copy of the amended record; 
or
    (b) Amend the record in a different manner; or decline to amend it 
at all:
    (1) Sending all individuals who had previously received a copy of 
that record a copy of the amended record;
    (2) Telling you why your request was not granted in full and that 
you can seek judicial review; and
    (3) Marking the areas of dispute, including your statement of 
disagreement in the file, and, if appropriate, a concise statement of 
why SBA refused to amend the record as you requested, sending this 
material to all individuals who had previously received a copy of that 
record.

Sec. 102.54  How can I obtain judicial review of an SBA Privacy Act 
          decision?

    You may bring a civil action against SBA in a United States district 
court if the SBA:
    (a) Makes a final determination not to provide you with access to or 
to amend your record in accordance with your request;
    (b) Fails to maintain your records with such accuracy, relevance, 
timeliness and completeness as is necessary to assure fairness in any 
determination relating to the qualifications, character, rights, 
opportunities of, or benefits to you that may be made on the basis of 
such records, and consequently a determination is made which harms you; 
or
    (c) Fails to comply with any other provisions of the PA (5 U.S.C. 
552a) or the implementing regulations in this subpart, in such a way as 
to cause harm to you.

Sec. 102.55  What must SBA tell the individuals from whom it collects 
          information?

    When SBA collects information from an individual, it must, either on 
the form which collects the information or on a separate form which the 
individual may keep, state:
    (a) Whether disclosure of the information is voluntary or mandatory;
    (b) By what authority SBA is collecting the information;
    (c) For what principal purpose or purposes SBA is collecting the 
information;
    (d) What routine uses might be made of that information; and
    (e) What will happen if the information isn't supplied.

Sec. 102.56  Will SBA release my name or address?

    No, unless compelled to by law.

Sec. 102.57  Do I have to give SBA my SSN?

    (a) No. You need not give SBA your SSN, even if SBA asks for it.
    (b) If SBA asks you for your SSN, it must tell you under what 
authority it seeks your SSN, and for what purpose.

[[Page 22]]

    (c) SBA cannot withhold a benefit solely because you refuse to tell 
it your SSN.

Sec. 102.58  When will SBA show personnel records to a representative?

    (a) If you go to where the records are kept, SBA will permit one 
person of your choosing to inspect the records with you.
    (b) If you want your representative to inspect the records without 
you, you must give SBA a written authorization.
    (c) SBA will mail a copy of the record to your representative if you 
direct SBA to do so in writing.
    (d) You may inspect the records of a minor if you present evidence 
that you are the custodial parent (including joint custodial parent) or 
legal guardian of that minor. An affidavit or declaration, signed by you 
under penalty of perjury, is normally sufficient evidence unless SBA has 
information to the contrary.
    (e) You may inspect the records of an adult incompetent if you 
present evidence that you are the legal guardian of that person. A 
guardianship order is sufficient evidence of your guardianship. Other 
evidence may be considered.

Sec. 102.59  What fees will SBA charge me for my records?

    SBA will charge you only for photocopying at the rate of 10 cents 
per page. SBA will not charge you for finding or reviewing your records. 
Fees less than $25 will be waived.

Sec. 102.60  May I be informed of disclosures made of my records?

    SBA will tell you what disclosures it made of your records if you 
ask, except that SBA will not tell you about disclosures it made to 
another federal agency or government entity for law enforcement 
purposes.

Sec. 102.61  Are there Matching Program procedures?

    (a) SBA will comply with the Computer Matching and Privacy 
Protection Act of 1988 (5 U.S.C. 552a, 552a notes). This Act establishes 
procedures federal agencies must use if they want to match their 
computer lists.
    (b) If SBA adopts any procedures to supplement its compliance with 
the Computer Matching and Privacy Protection Act of 1988 which are not 
mandated in that Act, SBA will publish those procedures in Standard 
Operating Procedure (SOP) 40 04. You can get a copy of SOP 40 04 at any 
SBA Office.
    (c) If SBA enters into an agreement with any federal agency, 
contractor of any federal agency, state or local government, or agency 
of any state or local government to disclose records for purposes of a 
computer matching program, SBA will make a copy of that agreement 
available to the general public. You can get a copy of any such 
agreement by writing to the Privacy Act Officer.