NARA Privacy Act Systems: NARA 37
SYSTEM NAME: Order Online! (NARA Online Ordering System).
FEDERAL REGISTER CITATION: 78 FR 77255
SYSTEM LOCATION: Order Online! is an automated application hosted in the NARA's data center in College Park, Maryland.
CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM: Individuals covered by this system include researchers who order reproductions of NARA archival materials at www.archives.gov.
CATEGORIES OF RECORDS IN THE SYSTEM: Order Online! records may include: User login data (i.e., user ID and password; user profile data (e.g., name, address, phone number); credit card payment data (e.g., card type, card number, expiration date); reproduction order form data (e.g., detailed information describing the requested archival record); and transaction data (e.g., system-generated order identification information such as order number, order date, order type).
AUTHORITY FOR MAINTENANCE OF THE SYSTEM: 44 U.S.C. 2116(c), 2307, and 3504.
ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES: Records maintained in the system are used only for order entry, order validation, order processing, payment processing, and order fulfillment. The public may use the Order Online! system to complete and submit a reproduction order to NARA. Each night, Order Online! submissions are sent to NARA's Order Fulfillment and Accounting System (OFAS - NARA 25) via an automated XML (extensible markup language) interface that operates within NARA's secure internal network. Order Online! maintains profile data (e.g., name, address, phone number) for researchers who initiate reproduction orders. The profile data is used to automatically complete the payment and/or shipping address sections of the order form so that customers do not have to manually re-enter the information. Neither NARA nor its agents use Order Online! customer profile data for other purposes. The routine use statements A, E, F and I, described in Appendix A, apply to this system of records.
POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE: Electronic records.
RETRIEVABILITY: Information in the Order Online! records may be retrieved by the NARA customer using his or her user ID and password. Also, summary order data (order number, master number [OFAS order number]), status (e.g., received, processing, shipped, cancelled) and submission date) may be retrieved by the customer or the NARA customer service agent using the order number.
SAFEGUARDS: Access to the data center that houses the Order Online! system is restricted to approved systems administrators and, with the exception of a limited number of operations staff, is limited to normal business hours. Electronic records are accessible only on a "need to know basis" using controlled logins and passwords from terminals located in attended offices. Credit card information is compartmentalized so that it is available only to those NARA employees responsible for posting and billing credit card transactions. The National Archives at College Park has 24-hour security guards, controlled entrances, and electronic surveillance.
RETENTION AND DISPOSAL: Order Online! records are temporary records and are destroyed in accordance with the disposition instructions in the NARA Records Schedule (a supplement to the NARA Files Maintenance and Records Disposition Manual). Individuals may request a copy of the disposition instructions from the NARA Privacy Act Officer.
SYSTEM MANAGER(S) AND ADDRESS: The system manager for Order Online! records is the Executive for Research Services. The business address for this system manager is listed in Appendix B.
NOTIFICATION PROCEDURE: People interested in inquiring about their records should notify the NARA Privacy Act Officer at the address listed in Appendix B.
RECORD ACCESS PROCEDURES: People who wish to access their records should submit a request in writing to the NARA Privacy Act Officer at the address given in Appendix B.
CONTESTING RECORD PROCEDURES: NARA rules for contesting the contents of a person's records and appealing initial determinations are found in 36 CFR part 1202.
RECORD SOURCE CATEGORIES: Information in Order Online! records is obtained from NARA customers, employees, or agents who are involved in the order process, and General Services Administration (GSA) employees who process refunds.