U.S. Nuclear Regulatory Commission.
Issuance of Order Imposing Safeguards Information Protection Requirements and Fingerprinting and Criminal History Check Requirements for Access to Certain Safeguards Information.Start Further Info
FOR FURTHER INFORMATION CONTACT:
L. Raynard Wharton, Senior Project Manager, Licensing and Inspection Directorate, Division of Spent Fuel Storage and Transportation, Office of Nuclear Material Safety and Safeguards (NMSS), U.S. Nuclear Regulatory Commission (NRC), Rockville, MD 20852. Telephone: (301) 492-3316; fax number: (301) 492-3350; e-mail: firstname.lastname@example.org.End Further Info End Preamble Start Supplemental Information
Pursuant to 10 CFR 2.106, NRC (or the Commission) is providing notice, in the matter of Certain 10 CFR Part 72 Certificate Holders Who Have Near-Term Plans To Access Safeguards Information Order Imposing Safeguards Information Protection Requirements and Fingerprinting and Criminal History Check Requirements for Access to Certain Safeguards Information (Effective Immediately).
II. Further Information
Transnuclear, Inc., Holtec International, NAC International, and EnergySolutions Corporation, have been issued certificates, by the U.S. Nuclear Regulatory Commission (NRC or the Commission), certifying dry cask storage designs in accordance with the Atomic Energy Act of 1954, as amended, (AEA) and Title 10 of the Code of Federal Regulations (10 CFR) part 72. These entities will be referred to herein as “the affected vendors.” On August 8, 2005, the Energy Policy Act of 2005 (EPAct) was enacted. Section 652 of the EPAct Start Printed Page 66062amended section 149 of the AEA to require fingerprinting and a Federal Bureau of Investigation (FBI) identification and criminal history records check of any person who is to be permitted to have access to Safeguards Information (SGI). The EPAct fingerprinting and criminal history check requirements for access to SGI were immediately effective upon enactment of the EPAct. Although the EPAct permits the Commission, by rule, to except certain categories of individuals from the fingerprinting requirement, which the Commission has done [see 10 CFR 73.59, 71 FR 33,989 (June 13, 2006)], it is unlikely that licensee or certificate holder employees are excepted from the fingerprinting requirement by the “fingerprinting-relief” rule. Individuals relieved from fingerprinting and criminal history checks under the relief rule include (a) Federal, State, and local officials and law enforcement personnel; (b) Agreement State inspectors who conduct security inspections on behalf of NRC; (c) members of Congress and certain employees of members of Congress or Congressional Committees; and (d) representatives of the International Atomic Energy Agency or certain foreign government organizations. In addition, individuals who have a favorably decided U.S. Government criminal history check within the last five (5) years, and individuals who have active Federal security clearances (provided in either case that they make available the appropriate documentation), have satisfied the EPAct fingerprinting requirement and need not be fingerprinted again. Therefore, in accordance with section 149 of the AEA, as amended by the EPAct, the Commission is imposing additional requirements for access to SGI, as set forth by this Order, so that affected licensees and certificate holders can obtain and grant access to SGI. This Order also imposes requirements for access to SGI by any person, from any person, whether or not a licensee, applicant, or certificate holder of the Commission or Agreement States. The SGI that is the subject of this Order is all SGI including aircraft impact-related data, which will be presented to the affected vendors at a one-day workshop at NRC. This aircraft impact-related information is hereby designated as SGI in accordance with section 147 of the AEA.
The Commission has broad statutory authority to protect and prohibit the unauthorized disclosure of SGI. Section 147 of the AEA grants the Commission explicit authority to issue such Orders as necessary to prohibit the unauthorized disclosure of SGI. Furthermore, section 149 of the AEA requires fingerprinting and an FBI identification and a criminal history records check of each individual who seeks access to SGI. In addition, no person may have access to SGI unless the person has an established need-to-know the information.
To provide assurance that appropriate measures are being implemented to comply with the fingerprinting and criminal history check requirements for access to SGI, the affected vendors shall implement the requirements of this Order. In addition, pursuant to 10 CFR 2.202, I find that, in consideration of the common defense and security matters identified above, which warrant the issuance of this Order, the public health, safety, and interest require that this Order be effective immediately.
Accordingly, pursuant to sections 147, 149, 161b, 161i, 161o, 182, and 186 of the Atomic Energy Act of 1954, as amended, and the Commission's regulations in 10 CFR 2.202, Parts 72 and 73, it is hereby ordered, effective immediately, that the affected vendors and all other persons who seek or obtain access to safeguards information as described herein shall comply with the requirements set forth in 10 CFR 73.21 and this order.
A.1. No person may have access to SGI unless that person has a need-to-know the SGI, has been fingerprinted, or has a favorably decided FBI identification and criminal history records check, and satisfies all other applicable requirements for access to SGI. Fingerprinting and the FBI identification and criminal history records check are not required, however, for any person who is relieved from that requirement by 10 CFR 73.59 [71 FR 33989 (June 13, 2006)], or who has a favorably decided U.S. Government criminal history check within the last five (5) years, or who has an active Federal security clearance, provided in the latter two cases, that the appropriate documentation is made available to the affected vendor's NRC-approved reviewing official.
2. No person may have access to any SGI if NRC has determined, based on fingerprinting and an FBI identification and criminal history records check, that the person may not have access to SGI.
3. For SGI designated by the Commission as containing aircraft impact-related information, the affected vendor may provide SGI designated by this Order to individuals (such as foreign nationals, U.S. citizens living in foreign countries, or individuals under the age of 18) for whom fingerprinting and an FBI criminal history records check is not reasonably expected to yield sufficient criminal history information to form the basis of an informed decision on granting access to SGI, provided that the individual satisfies the requirements of this Order, and that the affected vendor has implemented measures, in addition to those set forth in this Order, to ensure that the individual is suitable for access to the SGI designated by this Order. Such additional measures must include, but are not limited to, equivalent criminal history records checks conducted by a local, State, or foreign governmental agency; and/or enhanced background checks, including employment and credit history. NRC must review these additional measures and approve them in writing. These additional measures are not required for individuals described in this paragraph who are seeking access to SGI that is not related to the aircraft impact-related SGI.
B. No person may provide SGI to any other person except in accordance with Condition III.A. Prior to providing SGI to any person, a copy of this Order shall be provided to that person.
C.1. The affected vendor shall, within twenty (20) days of the date of this Order, establish and maintain a fingerprinting program that meets the requirements of the Attachment to this Order.
2. The affected vendor shall, within twenty (20) days of the date of this Order, submit the fingerprints of one (1) individual who needs access to SGI, and Start Printed Page 66063who the affected vendor nominates as the “reviewing official” for determining access to SGI by other individuals and has an established need-to-know the information. NRC will determine whether this individual (or any subsequent reviewing official) may have access to SGI and, therefore, will be permitted to serve as the affected vendor's reviewing official. The affected vendor may, at the same time or later, submit the fingerprints of other individuals for whom access to SGI is sought. Fingerprints shall be submitted and reviewed in accordance with the procedures described in the Attachment of this Order.
3. The affected vendor may allow any individual who currently has access to SGI, in accordance with the previously issued NRC Orders, to continue to have access to previously designated SGI, without being fingerprinted, pending a decision by the NRC-approved reviewing official (based on fingerprinting, an FBI criminal history records check, and a trustworthy and reliability determination) that the individual may continue to have access to SGI. The affected vendor shall make determinations on continued access to SGI, within ninety (90) days of the date of this Order, in part on the results of the fingerprinting and criminal history check, for those individuals who were previously granted access to SGI before the issuance of this Order.
4. The affected vendor shall, in writing, within twenty (20) days of the date of this Order, notify the Commission: (1) If it is unable to comply with any of the requirements described in the Order, including the Attachment; or (2) if compliance with any of the requirements is unnecessary in its specific circumstances. The notification shall provide the affected vendor's justification for seeking relief from, or variation of, any specific requirement.
The affected vendor responses to C.1., C.2., C.3., and C.4., above, shall be submitted to the Director, Office of Nuclear Material Safety and Safeguards, U.S. Nuclear Regulatory Commission, Washington, DC 20555. In addition, responses shall be marked as “Security-Related Information—Withhold under 10 CFR 2.390.”
The Director, Office of Nuclear Material Safety and Safeguards, may, in writing, relax or rescind any of the above conditions upon demonstration of good cause by the affected vendor.
In accordance with 10 CFR 2.202, the affected vendor must, and any other person adversely affected by this Order may, submit an answer to this Order within 20 days of the date of the Order. In addition, the affected vendor, and any other person adversely affected by this Order, may request a hearing on this Order, within 20 days of the date of the Order. Where good cause is shown, consideration will be given to extending the time to answer or request a hearing. A request for extension of time must be made, in writing, to the Director, Office of Nuclear Material Safety and Safeguards, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, and include a statement of good cause for the extension.
The answer may consent to this Order. If the answer includes a request for a hearing, it shall, under oath or affirmation, specifically set forth the matters of fact and law on which the affected vendor relies and the reasons as to why the Order should not have been issued. If a person other than the affected vendor requests a hearing, that person shall set forth, with particularity, the manner in which his or her interest is adversely affected by this Order and shall address the criteria set forth in 10 CFR 2.309(d).
All documents filed in NRC adjudicatory proceedings, including a request for hearing, a petition for leave to intervene, any motion or other document filed in the proceeding before the submission of a request for hearing or petitions to intervene, and documents filed by interested governmental entities participating under 10 CFR 2.315(c), must be filed in accordance with the NRC E-Filing rule, which NRC promulgated in August 2007, 72 FR 49139 (August 28, 2007) and codified in pertinent part at 10 CFR Part 2, Subpart B. The E-Filing process requires participants to submit and serve all adjudicatory documents over the internet, or in some cases, to mail copies on electronic storage media. Participants may not submit paper copies of their filings unless they seek a waiver, in accordance with the procedures described below.
To comply with the procedural requirements associated with E-Filing, at least ten (10) days before the filing deadline, the requestor must contact the Office of the Secretary, by e-mail, at Hearing.Docket@nrc.gov, or by calling (301) 415-1677, to request: (1) A digital ID certificate, which allows the participant (or its counsel or representative) to digitally sign documents and access the E-Submittal server for any NRC proceeding in which it is participating; and/or (2) creation of an electronic docket for the proceeding [even in instances when the requestor (or its counsel or representative) already holds an NRC-issued digital ID certificate]. Each requestor will need to download the Workplace Forms ViewerTM to access the Electronic Information Exchange (EIE), a component of the E-Filing system. The Workplace Forms ViewerTM is free and is available at http://www.nrc.gov/site-help/e-submittals/install-viewer.html. Information about applying for a digital ID certificate is also available on NRC's public Web site, at http://www.nrc.gov/site-help/e-submittals/apply-certificates.html.
Once a requestor has obtained a digital ID certificate, had a docket created, and downloaded the EIE viewer, he/she can then submit a request for a hearing through EIE. Submissions should be in Portable Document Format, in accordance with NRC guidance, available on the NRC public Web site, at http://www.nrc.gov/site-help/e-submittals.html. A filing is considered complete at the time the filer submits its document through EIE. To be timely, electronic filings must be submitted to the EIE system no later than 11:59 p.m., Eastern Time, on the due date. On receipt of a transmission, the E-Filing system time-stamps the document and sends the submitter an e-mail notice confirming receipt of the document. The EIE system also distributes an e-mail notice that provides access to the document to the NRC Office of the General Counsel and any others who have advised the Office of the Secretary that they wish to participate in the proceeding, so that the filer need not serve the document on those participants separately. Therefore, any others who wish to participate in the proceeding (or their counsel or representative) must apply for, and receive, digital ID certificates, before hearing requests are filed, so that they may obtain access to the documents via the E-Filing system.
A person filing electronically may seek assistance through the “Contact-Us” link located on the NRC Web site at http://www.nrc.gov/site-help/e-submittals.html, or by calling the NRC technical help line, which is available between 8:30 a.m. and 4:15 p.m., Eastern Time, Monday through Friday. The help line number is (800) 397-4209 or, locally (301) 415-4737.
Participants who believe that they have good cause for not submitting documents electronically must file motions, in accordance with 10 CFR 2.302(g), with their initial paper filings, Start Printed Page 66064requesting authorization to continue to submit documents in paper format. Such filings must be submitted by: (1) First-class mail, addressed to the Office of the Secretary of the Commission, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, Attention: Rulemaking and Adjudications Staff; or (2) courier, express mail, or expedited delivery service to the Office of the Secretary, Sixteenth Floor, One White Flint North, 11555 Rockville Pike, Rockville, Maryland 20852, Attention: Rulemaking and Adjudications Staff. Participants filing a document in this manner are responsible for serving the document on all other participants. Filing is considered complete, by first-class mail, as of the time of deposit in the mail—or by courier, express mail, or expedited delivery service, on depositing the document with the provider of the service.
Documents submitted in adjudicatory proceedings will appear in NRC's electronic hearing docket, which is available to the public at http://ehd.nrc.gov/EHD Proceeding/home.asp, unless excluded pursuant to an order of the Commission, an Atomic Safety and Licensing Board, or a Presiding Officer. Participants are requested not to include personal privacy information, such as social security numbers, home addresses, or home phone numbers, in their filings. With respect to copyrighted works, except for limited excerpts that serve the purpose of the adjudicatory filings and would constitute a Fair-Use application, Participants are requested not to include copyrighted materials in their works.
If a hearing is requested by the affected vendor or a person whose interest is adversely affected, the Commission will issue an Order designating the time and place of any hearing. If a hearing is held, the issue to be considered at such hearing shall be whether this Order should be sustained.
Pursuant to 10 CFR 2.202(c)(2)(i), the affected vendor may, in addition to requesting a hearing, at the time the answer is filed or sooner, move the presiding officer to set aside the immediate effectiveness of the Order on the grounds that the Order, including the need for immediate effectiveness, is not based on adequate evidence, but on mere suspicion, unfounded allegations, or error.
In the absence of any request for hearing, or written approval of an extension of time in which to request a hearing, the provisions, as specified in section III, shall be final twenty (20) days from the date of this Order, without further Order or proceedings. If an extension of time for requesting a hearing has been approved, the provisions, as specified in section III, shall be final when the extension expires, if a hearing request has not been received. An answer or a request for hearing shall not stay the immediate effectiveness of this order.Start Signature
Dated this 28th day of October 2008.
For the Nuclear Regulatory Commission.
Michael F. Weber,
Director, Office of Nuclear Material Safety and Safeguards.
Attachment: Requirements for Fingerprinting and Criminal History Checks of Individuals When Licensee's and/or Certificate Holder's Reviewing Official Is Determining Access to Safeguards Information
Licensees and certificate holders shall comply with the requirements of this attachment.
A.1. Each licensee and/or certificate holder subject to the provisions of this attachment shall fingerprint each individual who is seeking or permitted access to Safeguards Information (SGI). The licensee and certificate holder shall review and use the information received from the Federal Bureau of Investigation (FBI) and ensure that the provisions contained in the subject Order and this attachment are satisfied.
2. The licensee and/or certificate holder shall notify each affected individual that the fingerprints will be used to secure a review of his/her criminal history record and inform the individual of the procedures for revising the record or including an explanation in the record, as specified in the “Right to Correct and Complete Information” section of this attachment.
3. Fingerprints need not be taken if an employed individual (e.g., a licensee and/or certificate holder employee, contractor, manufacturer, or supplier) is relieved from the fingerprinting requirement by 10 CFR 73.59, has a favorably decided U.S. Government criminal history check within the last five (5) years, or has an active Federal security clearance. Written confirmation from the Agency/employer that granted the Federal security clearance or reviewed the criminal history check must be provided. The licensee and/or certificate holder must retain this documentation for a period of three (3) years from the date the individual no longer requires access to SGI associated with the licensee's and/or certificate holder's activities.
4. All fingerprints obtained by the licensee and/or certificate holder pursuant to this Order must be submitted to the Commission for transmission to the FBI.
5. The licensee and/or certificate holder shall review the information received from the FBI and consider it, in conjunction with the trustworthy and reliability requirements of the previously issued U.S. Nuclear Regulatory Commission (NRC or Commission) Orders, in making a determination of whether to grant access to SGI to individuals who have a need-to-know the SGI.
6. The licensee and/or certificate holder shall use any information obtained as part of a criminal history records check solely for the purpose of determining an individual's suitability for access to SGI.
7. The licensee and/or certificate holder shall document the basis for its determination whether to grant access to SGI.
B. The licensee and/or certificate holder shall notify NRC of any desired change in reviewing officials. NRC will determine whether the individual nominated as the new reviewing official may have access to SGI, based on a previously obtained or new criminal history check, and, therefore, will be permitted to serve as the licensee's and/or certificate holder's reviewing official.
A licensee and/or certificate holder shall not base a final determination to deny an individual access to SGI solely on the basis of information received from the FBI involving: (1) An arrest more than one (1) year old for which there is no information of the disposition of the case; or (2) an arrest that resulted in dismissal of the charge, or an acquittal.
A licensee and/or certificate holder shall not use information received from a criminal history check obtained pursuant to this Order in a manner that would infringe upon the rights of any individual, under the First Amendment to the Constitution of the United States, nor shall the licensee and/or certificate holder use the information in any way that would discriminate among individuals on the basis of race, religion, national origin, sex, or age.
Procedures for Processing Fingerprint Checks
For the purpose of complying with this Order, licensees and/or certificate holders shall, using an appropriate method listed in 10 CFR 73.4, submit to NRC's Division of Facilities and Security, Mail Stop T-6E46, one completed, legible standard fingerprint card (Form FD-258, ORIMDNRCOOOZ) or, where practicable, other fingerprint Start Printed Page 66065records for each individual seeking unescorted access to an independent spent fuel storage installation, to the Director of the Division of Facilities and Security, marked for the attention of the Division's Criminal History Check Section. Copies of these forms may be obtained by writing the Office of Information Services, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, by calling (301) 415-5877, or by e-mail to email@example.com. Practicable alternative formats are set forth in 10 CFR 73.4. The licensee and/or certificate holder shall establish procedures to ensure that the quality of the fingerprints taken results in minimizing the rejection rate of fingerprint cards because of illegible or incomplete cards.
NRC will review submitted fingerprint cards for completeness. Any Form FD-258 fingerprint record containing omissions or evident errors will be returned to the licensee and/or certificate holder for corrections. The fee for processing fingerprint checks includes one re-submission if the initial submission is returned by the FBI because the fingerprint impressions cannot be classified. The one free resubmission must have the FBI Transaction Control Number reflected on the re-submission. If additional submissions are necessary, they will be treated as initial submittals and will require a second payment of the processing fee.
Fees for processing fingerprint checks are due upon application. The licensee and/or certificate holder shall submit payment of the processing fees electronically. To be able to submit secure electronic payments, licensees and/or certificate holders will need to establish an account with Pay.Gov (https://www.pay.gov). To request an account, the licensee and/or certificate holder shall send an e-mail to firstname.lastname@example.org. The e-mail must include the licensee's and/or certificate holder's company name, address, point of contact (POC), POC e-mail address, and phone number. NRC will forward the request to Pay.Gov, who will contact the licensee and/or certificate holder with a password and user lD. Once licensees and/or certificate holders have established an account and submitted payment to Pay.Gov, they shall obtain a receipt. A licensee and/or certificate holder shall submit the receipt from Pay.Gov to NRC along with fingerprint cards. For additional guidance on making electronic payments, contact the Facilities Security Branch, Division of Facilities and Security, at (301) 415-7739. Combined payment for multiple applications is acceptable.
The application fee (currently $36) is the sum of the user fee charged by the FBI for each fingerprint card or other fingerprint record submitted by NRC on behalf of a licensee and/or certificate holder, and an NRC processing fee, which covers administrative costs associated with NRC handling of licensee and/or certificate holder fingerprint submissions. The Commission will directly notify licensees and/or certificate holders subject to this regulation of any fee changes.
The Commission will forward to the submitting licensee and/or certificate holder all data received from the FBI as a result of the licensee's and/or certificate holder's application(s) for criminal history records checks, including the FBI fingerprint record.
Right to Correct and Complete Information
Prior to any final adverse determination, the licensee and/or certificate holder shall make available to the individual the contents of any criminal records, obtained from the FBI for the purpose of assuring correct and complete information. The individual's written confirmation of receipt of this notification must be maintained by the licensee and/or certificate holder for a period of one (1) year from the date of the notification. If, after reviewing the record, an individual believes that it is incorrect or incomplete in any respect and wishes to change, correct, or update the alleged deficiency, or to explain any matter in the record, the individual may initiate challenge procedures. These procedures include either direct application, by the individual challenging the record to the agency (i.e., law enforcement agency) that contributed the questioned information, or direct challenge as to the accuracy or completeness of any entry on the criminal history record, to the Assistant Director, Federal Bureau of Investigation Identification Division, Washington, DC 20537-9700 (as set forth in 28 CFR 16.30 through 16.34). In the latter case, the FBI forwards the challenge to the agency that submitted the data and requests that agency to verify or correct the challenged entry. Upon receipt of an official communication directly from the agency that contributed the original information, the FBI Identification Division makes any changes necessary in accordance with the information supplied by that agency. The licensee and/or certificate holder must provide at least ten (10) days for an individual to initiate an action challenging the results of an FBI criminal history records check after the record is made available for his/her review. The licensee and/or certificate holder may make a final SGI access determination based on the criminal history record only upon receipt of the FBI's ultimate confirmation or correction of the record. Upon a final adverse determination on access to SGI, the licensee and/or certificate holder shall provide the individual its documented basis for denial. Access to SGI shall not be granted to an individual during the review process.
Protection of Information
1. Each licensee and/or certificate holder that obtains a criminal history record on an individual pursuant to this Order shall establish and maintain a system of files and procedures for protecting the record and the personal information from unauthorized disclosure.
2. The licensee and/or certificate holder may not disclose the record or personal information collected and maintained to persons other than the subject individual, his/her representative, or to those who have a need to access the information in performing assigned duties in the process of determining access to SGI. No individual authorized to have access to the information may re-disseminate the information to any other individual who does not have a need-to-know.
3. The personal information obtained on an individual from a criminal history records check may be transferred to another licensee and/or certificate holder if the gaining licensee and/or certificate holder receives the individual's written request to re-disseminate the information contained in his/her file, and the gaining licensee and/or certificate holder verifies information such as the individual's name, date of birth, social security number, sex, and other applicable physical characteristics for identification purposes.
4. The licensee and/or certificate holder shall make criminal history records, obtained under this section, available for examination by an authorized NRC representative, to determine compliance with the regulations and laws.
5. The licensee and/or certificate holder shall retain all fingerprint and criminal history records received from the FBI, or a copy, if the individual's file has been transferred, for three (3) years after termination of employment or determination of access to SGI. After the required three (3)-year period, these documents shall be destroyed by a Start Printed Page 66066method that will prevent reconstruction of the information in whole or in part.End Supplemental Information
1. Safeguards Information is a form of sensitive, unclassified, security-related information that the Commission has the authority to designate and protect under section 147 of the AEA.Back to Citation
2. The storage and handling requirements for certain SGI have been modified from the existing 10 CFR Part 73 SGI requirements that require a higher level of protection; such SGI is designated as Safeguards Information—Modified Handling (SGI-M). However, the information subject to the SGI-M handling and protection requirements is SGI, and licensees and other persons who seek or obtain access to such SGI are subject to this Order.Back to Citation
3. Person means: (1) Any individual, corporation, partnership, firm, association, trust, estate, public or private institution, group, government agency other than the Commission or the U.S. Department of Energy (DOE), except that the DOE shall be considered a person with respect to those DOE facilities specified in section 202 of the Energy Reorganization Act of 1974 (88 Stat. 1244); (2) any State or any political subdivision of, or any political entity within a State, any foreign government or nation or any political subdivision of any such government or nation, or other entity; and (3) any legal successor, representative, agent, or agency of the foregoing.Back to Citation
4. The NRC's determination of this individual's access to SGI, in accordance with the process described in Enclosure 3 to the transmittal letter of this Order, is an administrative determination that is outside the scope of this Order.Back to Citation
[FR Doc. E8-26464 Filed 11-5-08; 8:45 am]
BILLING CODE 7590-01-P