+PT-08 [P] Computer Matching Requirements

PT-08 [P] Computer Matching Requirements

Control

When a system or organization processes information for the purpose of conducting a matching program:
  1. Obtain approval from the Data Integrity Board to conduct the matching program;
  2. Develop and enter into a computer matching agreement;
  3. Publish a matching notice in the Federal Register;
  4. Independently verify the information produced by the matching program before taking adverse action against an individual, if required; and
  5. Provide individuals with notice and an opportunity to contest the findings before taking adverse action against an individual.

Discussion

The [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) establishes requirements for federal and non-federal agencies if they engage in a matching program. In general, a matching program is a computerized comparison of records from two or more automated [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) systems of records or an automated system of records and automated records maintained by a non-federal agency (or agent thereof). A matching program either pertains to federal benefit programs or federal personnel or payroll records. A federal benefit match is performed to determine or verify eligibility for payments under federal benefit programs or to recoup payments or delinquent debts under federal benefit programs. A matching program involves not just the matching activity itself but also the investigative follow-up and ultimate action, if any.

Assessment Objective

  1. approval to conduct the matching program is obtained from the Data Integrity Board when a system or organization processes information for the purpose of conducting a matching program;
    1. a computer matching agreement is developed when a system or organization processes information for the purpose of conducting a matching program;
    2. a computer matching agreement is entered into when a system or organization processes information for the purpose of conducting a matching program;
  3. a matching notice is published in the Federal Register when a system or organization processes information for the purpose of conducting a matching program;
  4. the information produced by the matching program is independently verified before taking adverse action against an individual, if required, when a system or organization processes information for the purpose of conducting a matching program;
    1. individuals are provided with notice when a system or organization processes information for the purpose of conducting a matching program;
    2. individuals are provided with an opportunity to contest the findings before adverse action is taken against them when a system or organization processes information for the purpose of conducting a matching program.

Assessment Method

Examine

Personally identifiable information processing and transparency policy and procedures privacy notice Privacy Act system of records Federal Register notices Data Integrity Board determinations contracts information sharing agreements memoranda of understanding governing requirements privacy plan other relevant documents or records

Interview

Organizational personnel with personally identifiable information processing and transparency responsibilities organizational personnel with information security and privacy responsibilities

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by PT-08 [P] Computer Matching Requirements – Assessment Procedure
is blocked by Computer Matching Agreements (CMA)