INTERIOR/NPS-24, Commercial Use Authorization (CUA) System

• (1) To assist NPS employees in managing the NPS Commercial Services program allowing commercial uses within a unit of the National Park System to ensure that business activities are conducted in a manner that complies with Federal laws and regulations; 
• (2) To monitor resources that are or may be affected by the authorized commercial uses within a unit of the National Park System; 
  (3) To track applicants and holders of commercial use authorizations who are planning to conduct or are conducting business within units of the National Park System; and 
  (4) To provide to the public the description and contact information for businesses that provide services in national parks.

In addition to those disclosures generally permitted under 5 U.S.C. 552a(b) of the Privacy Act, disclosures outside DOI may be made as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows: 

• (1)(a) To any of the following entities or individuals, when the circumstances set forth in paragraph (b) are met:
  • (i)  The U.S. Department of Justice (DOJ);
  • (ii)  A court or an adjudicative or other administrative body;
  • (iii) A party in litigation before a court or an adjudicative or other administrative body; or
  • (iv) Any Department employee acting in his or her individual capacity if DOI or DOJ has agreed to represent that employee or pay for private representation of the employee;
• (b) When:
  • (i)  One of the following is a party to the proceeding or has an interest in the proceeding:
    • (A)  DOI or any component of DOI;
    • (B)  Any other federal agency appearing before the Office of Hearings and Appeals;
    • (C)  Any DOI employee acting in his or her official capacity;
    • (D)  Any DOI employee acting in his or her individual capacity if DOI or DOJ has agreed to represent that employee or pay for private representation of the employee;
    • (E)  The United States, when DOJ determines that DOI is likely to be affected by the proceeding; and
  • (ii)  DOI deems the disclosure to be:
    • (A)  Relevant and necessary to the proceeding; and
    • (B)  Compatible with the purpose for which the records were compiled.
• (2) To a congressional office in response to a written inquiry that an individual covered by the system, or the heir of such individual if the covered individual is deceased, has made to the office.
• (3) To any criminal, civil, or regulatory law enforcement authority (whether Federal, state, territorial, local, tribal or foreign) when a record, either alone or in conjunction with other information, indicates a violation or potential violation of law—criminal, civil, or regulatory in nature, and the disclosure is compatible with the purpose for which the records were compiled.
• (4) To an official of another Federal agency to provide information needed in the performance of official duties related to reconciling or reconstructing data files or to enable that agency to respond to an inquiry by the individual to whom the record pertains.
• (5) To Federal, state, territorial, local, tribal, or foreign agencies that have requested information relevant or necessary to the hiring, firing or retention of an employee or contractor, or the issuance of a security clearance, license, contract, grant or other benefit, when the disclosure is compatible with the purpose for which the records were compiled.
• (6) To representatives of the National Archives and Records Administration to conduct records management inspections under the authority of 44 U.S.C. 2904 and 2906.
• (7) To state and local governments and tribal organizations to provide information needed in response to court order and/or discovery purposes related to litigation, when the disclosure is compatible with the purpose for which the records were compiled.
• (8) To an expert, consultant, or contractor (including employees of the contractor) of DOI that performs services requiring access to these records on DOI’s behalf to carry out the purposes of the system.
• (9) To appropriate agencies, entities, and persons when:
• • (a)  It is suspected or confirmed that the security or confidentiality of information in the system of records has been compromised; and
  • (b)  DOI has determined that as a result of the suspected or confirmed compromise there is a risk of harm to economic or property interest, identity theft or fraud, or harm to the security or integrity of this system or other systems or programs (whether maintained by the 
    DOI or another agency or entity) that rely upon the compromised information;
  • (c)  The disclosure is made to such agencies, entities and persons who are reasonably necessary to assist in connection with the DOI's efforts to respond to the suspected or confirmed compromise and prevent, minimize, or remedy such harm.
• (10) To the Office of Management and Budget (OMB) during the coordination and clearance process in connection with legislative affairs as mandated by OMB Circular A-19.
  (11) To the Department of the Treasury to recover debts owed to the United States.
  (12) To the news media when the disclosure is compatible with the purpose for which the records were compiled.
  (13) To a consumer reporting agency if the disclosure requirements of the Debt Collection Act, as outlined at 31 U.S.C. 3711(e)(1), have been met. 
• (14) To Federal, state and local governments, tribal organizations, and members of the general public upon request for names, addresses and phone numbers of CUA holders conducting business within units of the National Park System for the purpose of informing the public of the availability of the services offered by the CUA holder.
• (15) To another Federal agency or Federal entity, when DOI determines that information from this system of records is reasonably necessary to assist the recipient agency or entity in:
  • (a) Responding to a suspected or confirmed breach; or
  • (b) Preventing, minimizing, or remedying the risk of harm to individuals, the recipient agency or entity (including its information systems, programs, and operations), the Federal Government, or national security, resulting from a suspected or confirmed breach.

• (1) Applicants of CUAs; and
• (2) holders of CUAs.