Privacy and Disclosure of Official Records and Information; Availability of Information and Records to the Public
Revision of a currently approved collection
No
Regular
Approved with change
04/14/2023
01/11/2023
The agency made clarifications to its supporting statement to describe the various instruments under the ICR as well as future enhancements.
The web-based instrument is approved consistent with the agencyâs assertion of this instrumentâs compliance with Pub. L. No. 116-50 ("Creating Advanced Streamlined Electronic Services for Constituents Act of 2019ââ) and relevant guidance. The agency is encouraged to routinely review its standards to ensure ongoing consistency with P.L. 116-50 and other relevant statutes.
table that charts list comparision
Inventory as of this Action
Requested
Previously Approved
04/30/2026
36 Months From Approved
05/31/2025
3,000,860
0
3,028,870
2,954,216
0
159,139
0
0
0
Under the Privacy and Disclosure of Official Records and Information regulations, SSA has established methods in which the public can
consent to and authorize the release of records protected under the Privacy Act of 1974, 5 U.S.C. 552a of the United States Code, and request records accessible through the Freedom of Information Act (FOIA), 5 U.S.C. 552.
Consent for Release of Records
SSA obtains the required consent(s) (with certain exceptions specified by law) from anyone requesting information in SSA systems of records about another individual. We will not release information requested about an individual until we obtain the required consent from that individual. Under the Privacy Act of 1974 (5 U.S.C. 552a(b)), individuals may give SSA written consent to disclose their personal information to a third party of their choosing. In addition, individuals may have multiple needs for the disclosure of their personal information, such as for qualification for a mortgage or
preemployment screenings.
a. Form SSA-3288 (Consent for Release of Information): Form SSA-3288, is SSAâs preferred paper form for requests for disclosure of information based on the consent of the subject of the record. Respondents can download the SSA-3288 from ssa.gov/forms, obtain a copy at a local SSA field office, or request SSA mail a copy to them directly. Use of this form ensures compliance with SSA consent regulations at 20 CFR 401.100. SSA also
collects consent on other writings, including non-SSA forms often used by large employers, that incorporate SSA-approved consent language.
b. Form SSA-3288-OP1 (Consent for Disclosure of Records Protected Under the Privacy Act): The Form SSA-3288-OP1 will comply with the CASES Act, OMB M-21-04, and SSA consent regulations at 20 CFR 401.100. The CASES Act directed OMB to develop templates for, among other things, electronic consents for SSA to disclose records protected by the Privacy Act of 1974 to third parties. OMB implemented that statutory directive in memorandum M-21-04. SSA developed the SSA-3288-OP1 pursuant to the CASES Act and M-21-04. The public will access the webform application that populates Form SSA-3288-OP1 on the Internet by selecting the ââElectronic Request for Consent to Discloseââ link which will be posted at
www.ssa.gov/privacy.
The respondents are individuals consenting to, authorizing, and requesting SSA disclosure of records protected by the Privacy Act of 1974 to third parties.
US Code:
5 USC 552a
Name of Law: The Privacy Act of 1974
US Code:
5 USC 552
Name of Law: The Freedom of Information Act
When we last cleared this IC in May 2022, the burden was 159,139. However, we are currently reporting a burden of 253,443 hours. This change stems from the following revisions:
⢠An increase in the average burden per response (minutes) for Form SSA-3288, from 3 minutes to 5 minutes;
⢠The addition of the new CASES Act compatible webform application, SSA-3288-OP1 which increases the public reporting burden, as our usability testing showed it takes an average of 10 minutes for respondents to read the instructions, gather the information, and complete the webform online. Which is five minutes more than the average burden for our paper SSA-3288.
⢠The removal of the individual information collections (ICs) for Access to Records, Designating a Representative for Disclosure, FOIA Requests for Records, and Respondents Who Request Access to an Extract of their SSN Record. We removed these as we account for them under the IC for the SSA-3288 paper form.
* Note: The total burden reflected in ROCIS is 2,954,216, while the burden cited in #12 of the Supporting Statement is 253,443. This discrepancy is because the ROCIS burden reflects the following components: field office waiting time + a rough estimate of a 30 minute, one-way, drive burden. In contrast, the chart in #12 of the Supporting Statement reflects actual burden.
On behalf of this Federal agency, I certify that the collection of information encompassed by this request complies with 5 CFR 1320.9 and the related provisions of 5 CFR 1320.8(b)(3).
The following is a summary of the topics, regarding the proposed collection of information, that the certification covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control number;
If you are unable to certify compliance with any of these provisions, identify the item by leaving the box unchecked and explain the reason in the Supporting Statement.