+PT-08 Computer Matching Requirements

PT-08 Computer Matching Requirements

Control

When a system or organization processes information for the purpose of conducting a matching program:
  1. Obtain approval from the Data Integrity Board to conduct the matching program;
  2. Develop and enter into a computer matching agreement;
  3. Publish a matching notice in the Federal Register;
  4. Independently verify the information produced by the matching program before taking adverse action against an individual, if required; and
  5. Provide individuals with notice and an opportunity to contest the findings before taking adverse action against an individual.

Discussion

The [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) establishes requirements for federal and non-federal agencies if they engage in a matching program. In general, a matching program is a computerized comparison of records from two or more automated [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) systems of records or an automated system of records and automated records maintained by a non-federal agency (or agent thereof). A matching program either pertains to federal benefit programs or federal personnel or payroll records. A federal benefit match is performed to determine or verify eligibility for payments under federal benefit programs or to recoup payments or delinquent debts under federal benefit programs. A matching program involves not just the matching activity itself but also the investigative follow-up and ultimate action, if any.

Assessment Objective

  1. approval to conduct the matching program is obtained from the Data Integrity Board when a system or organization processes information for the purpose of conducting a matching program;
    1. a computer matching agreement is developed when a system or organization processes information for the purpose of conducting a matching program;
    2. a computer matching agreement is entered into when a system or organization processes information for the purpose of conducting a matching program;
  3. a matching notice is published in the Federal Register when a system or organization processes information for the purpose of conducting a matching program;
  4. the information produced by the matching program is independently verified before taking adverse action against an individual, if required, when a system or organization processes information for the purpose of conducting a matching program;
    1. individuals are provided with notice when a system or organization processes information for the purpose of conducting a matching program;
    2. individuals are provided with an opportunity to contest the findings before adverse action is taken against them when a system or organization processes information for the purpose of conducting a matching program.

Assessment Method

Examine

Personally identifiable information processing and transparency policy and procedures privacy notice Privacy Act system of records Federal Register notices Data Integrity Board determinations contracts information sharing agreements memoranda of understanding governing requirements privacy plan other relevant documents or records

Interview

Organizational personnel with personally identifiable information processing and transparency responsibilities organizational personnel with information security and privacy responsibilities

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
is blocked by PT-08 Computer Matching Requirements – Assessment Procedure
is blocked by Computer Matching Agreements (CMA)
  • NIST -

    EN: Publications of the National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, from their electronic versions (OSCAL; SP 800-63-4 from its HTML version, https://pages.nist.gov/800-63-4/). Works of NIST employees are not subject to copyright protection in the United States (17 U.S.C. § 105); the OSCAL content is dedicated to the public domain worldwide (CC0 1.0); outside the United States NIST grants the right to reprint its technical series publications in all formats (NIST copyright statement). Republished courtesy of the National Institute of Standards and Technology; each document names its citation. Divided into sections and converted into the GRCA format, the wording unchanged. Only the versions published by NIST are authoritative.

    DE: Veröffentlichungen des National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, aus ihren elektronischen Fassungen (OSCAL; SP 800-63-4 aus ihrer HTML-Fassung, https://pages.nist.gov/800-63-4/). Werke von NIST-Beschäftigten sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105); die OSCAL-Inhalte sind weltweit gemeinfrei gestellt (CC0 1.0); außerhalb der USA räumt das NIST das Recht ein, seine Technical-Series-Publikationen in allen Formaten neu zu veröffentlichen (Copyright-Hinweis des NIST). „Republished courtesy of the National Institute of Standards and Technology“; jedes Dokument nennt seine Zitierangabe. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Maßgeblich sind allein die vom NIST veröffentlichten Fassungen.