[Code of Federal Regulations]
[Title 29, Volume 9]
[Revised as of July 1, 2005]
From the U.S. Government Printing Office via GPO Access
[CITE: 29CFR2400.5]

[Page 323-324]
 
                             TITLE 29--LABOR
 
      CHAPTER XX--OCCUPATIONAL SAFETY AND HEALTH REVIEW COMMISSION
 
PART 2400_REGULATIONS IMPLEMENTING THE PRIVACY ACT--Table of Contents
 
Sec. 2400.5  Notification.

    (a) Notification of systems. The following procedures permit 
individuals to determine the types of personal records systems 
maintained by OSHRC.
    (1) Upon written request, OSHRC shall notify any individual whether 
a specific system named by him contains a record pertaining to him. See 
Sec. 2400.6 for suggested form of request.
    (2) OSHRC shall publish annually in the Federal Register a notice of 
existence and character of all personal systems of records. This notice 
shall contain the following information:
    (i) Name and location of the system,
    (ii) Nature and purposes of the system,
    (iii) Categories of individuals on whom records are maintained and 
categories of records generally maintained in the system,
    (iv) Confidentiality requirements and the extent to which access 
controls apply to such information,
    (v) OSHRC policies and standards regarding the safeguarding and 
disclosure of information, retrievability of information, information 
storage, duration of retention of information, and disposal of such 
information from the system,
    (vi) Each routine use made by OSHRC of the personal information 
contained in the system, including the categories of users and the 
purpose of the use,
    (vii) Title and official address of the custodian,
    (viii) Procedures by which an individual can be informed if a system 
contains personal information pertaining to himself, gain access to such 
information, and contest the content, accuracy, completeness, 
timeliness, relevance and necessity for retention of the information,
    (ix) Categories of sources of such personal information,
    (x) System status--either developmental or operational.
    (b) Notification of disclosure. OSHRC shall make reasonable efforts 
to serve

[[Page 324]]

notice on an indivudial before any personal information is made 
available to any person under compulsory legal process when such process 
becomes a matter of public record.

(Also see Sec. 2400.4(b)(1)(ii) and (2)(vii).)
    (c) Notification of amendment. (See Sec. 2400.7 relating to 
amendment of records upon request.)
    (d) Notification of new use. Any new or revised use of personal 
information maintained by OSHRC shall be published in the Federal 
Register thirty (30) days before such use becomes operational. Public 
views may then be submitted to the Executive Director.
    (e) Notification of exemptions. OSHRC shall publish in the Federal 
Register its intent to exempt any system of records and shall specify 
the nature and purpose of that system.