45 CFR 303.21 - Safeguarding and disclosure of confidential information.

§ 303.21 Safeguarding and disclosure of confidential information.

(a)Definitions -

(1)Confidential information means any information relating to a specified individual or an individual who can be identified by reference to one or more factors specific to him or her, including but not limited to the individual's Social Security number, residential and mailing addresses, employment information, and financial information.

(2)Independent verification is the process of acquiring and confirming confidential information through the use of a second source. The information from the second source, which verifies the information about NDNH or FCR data, may be released to those authorized to inspect and use the information as authorized under the regulations or the Act.

(b)Scope. The requirements of this section apply to the IV-D agency, any other State or local agency or official to whom the IV-D agency delegates any of the functions of the IV-D program, any official with whom a cooperative agreement as described in § 302.34 of this part has been entered into, and any person or private agency from whom the IV-D agency has purchased services pursuant to § 304.22 of this chapter.

(c)General rule. Except as authorized by the Act and implementing regulations, an entity described in paragraph (b) of this section may not disclose any confidential information, obtained in connection with the performance of IV-D functions, outside the administration of the IV-D program.

(d)Authorized disclosures.

(1) Upon request, the IV-D agency may, to the extent that it does not interfere with the IV-D agency meeting its own obligations and subject to such requirements as the Office may prescribe, disclose confidential information to State agencies as necessary to assist them to carry out their responsibilities under plans and programs funded under titles IV (including Tribal programs under title IV), XIX, or XXI of the Act, and the Supplemental Nutrition Assistance Program (SNAP), including:

(i) Any investigation, prosecution or criminal or civil proceeding conducted in connection with the administration of any such plan or program; and

(ii) Information on known or suspected instances of physical or mental injury, sexual abuse or exploitation, or negligent treatment or maltreatment of a child under circumstances which indicate that the child's health or welfare is threatened.

(2) Upon request, the IV-D agency may disclose information in the SDNH, pursuant to sections 453A and 1137 of the Act for purposes of income and eligibility verification.

(3) Authorized disclosures under paragraph (d)(1) and (2) of this section shall not include confidential information from the National Directory of New Hires or the Federal Case Registry, unless authorized under § 307.13 of this Chapter or unless it is independently verified information. No financial institution data match information may be disclosed outside the administration of the IV-D program and no IRS information may be disclosed, unless independently verified or otherwise authorized in Federal statute. States must have safeguards in place as specified in section 454A(d) and (f) of the Act.

(e)Safeguards. In addition to, and not in lieu of, the safeguards described in § 307.13 of this chapter, which governs computerized support enforcement systems, the IV-D agency shall establish appropriate safeguards to comply with the provisions of this section. These safeguards shall also include prohibitions against the release of information when the State has reasonable evidence of domestic violence or child abuse against a party or a child and that the disclosure of such information could be harmful to the party or the child, as required by section 454(26) of the Act, and shall include use of the family violence indicator required under § 307.11(f)(1)(x) of this chapter.

(f) Penalties for unauthorized disclosure. Any disclosure or use of confidential information in violation of 42 U.S.C. 653(l)(2) and implementing regulations shall be subject to:

(1) Any State and Federal statutes that impose legal sanctions for such disclosure; and

(2) The maximum civil monetary penalties associated with the statutory provisions authorizing civil monetary penalties under 42 U.S.C. 653(l)(2) as shown in the table at 45 CFR 102.3.

[ 73 FR 56444, Sept. 26, 2008, as amended at 75 FR 81907, Dec. 29, 2010; 81 FR 61582, Sept. 6, 2016]

This is a list of United States Code sections, Statutes at Large, Public Laws, and Presidential Documents, which provide rulemaking authority for this CFR Part.

This list is taken from the Parallel Table of Authorities and Rules provided by GPO [Government Printing Office].

It is not guaranteed to be accurate or up-to-date, though we do refresh the database weekly. More limitations on accuracy are described at the GPO site.


United States Code

Title 45 published on 03-Jun-2017 03:14

The following are ALL rules, proposed rules, and notices (chronologically) published in the Federal Register relating to 45 CFR Part 303 after this date.

  • 2016-12-20; vol. 81 # 244 - Tuesday, December 20, 2016
    1. 81 FR 93492 - Flexibility, Efficiency, and Modernization in Child Support Enforcement Programs
      GPO FDSys XML | Text
      DEPARTMENT OF HEALTH AND HUMAN SERVICES, Centers for Medicare & Medicaid Services, Administration for Children and Families
      Final rule.
      This final rule is effective on January 19, 2017. States may comply any time after the effective date, but before the final compliance date, except for the amendment to § 433.152, which is effective on January 20, 2017. The compliance dates, or the dates that States must comply with the final rule, vary for the various sections of the Federal regulations. The reasons for delaying compliance dates include State legislative changes, system modifications, avoiding the need for a special guidelines commission review, etc. The compliance date, or the date by which the States must follow the rule, will be February 21, 2017 except, as noted below: • Guidelines for setting child support orders [§ 302.56(a)-(g)], Establishment of support obligations [§ 303.4], and Review and adjustment of child support orders [§ 303.8(c) and (d)]: The compliance date is 1 year after completion of the first quadrennial review of the State's guidelines that commences more than 1 year after publication of the final rule. • The requirements for reviewing guidelines for setting child support awards [§ 302.56(h)]: The compliance date is for the first quadrennial review of the guidelines commencing after the State's guidelines have initially been revised under this final rule. • Continuation of service for IV-E cases [§ 302.33(a)(4)], Location of noncustodial parents in IV-D cases [§ 303.3], Mandatory notice under Review and adjustment of child support orders [§ 303.8(b)(7)(ii)], Mandatory provisions of Case closure criteria [§ 303.11(c) and (d)], and Functional requirements for computerized support enforcement systems in operation by October 1, 2000 [§ 307.11(c)(3)(i) and (ii)]: The compliance date is 1 year from date of publication of the final rule, or December 20, 2017. However, if State law changes are needed, then the compliance date will be the first day of the second calendar quarter beginning after the close of the first regular session of the State legislature that begins after the effective date of the final rule. • Optional provisions (such as Paternity-only Limited Service [§ 302.33(a)(6)], Case closure criteria [§ 303.11(b)], Review and adjustment of child support orders [§  303.8 (b)(2)], Availability and rate of Federal financial participation [§ 304.20], and Topic 2 Revisions): There is no specific compliance date for optional provisions. • Payments to the family [§ 302.38], Enforcement of support obligations [§  303.6(c)( 4)], and Securing and enforcing medical support obligations [§ 303.31]: If State law revisions are needed, the compliance date is the first day of the second calendar quarter beginning after the close of the first regular session of the State legislature that begins after the effective date of the regulation. If State law revisions are not needed, the compliance date is 60 days after publication of the final rule. • Collection and disbursement of support payments by the IV-D agency [§ 302.32], Required State laws [§ 302.70], Procedures for income withholding [§ 303.100], Expenditures for which Federal financial participation is not available [§ 304.23], and Topic 3 revisions: The compliance date is the same as the effective date for the regulation since these revisions reflect existing requirements.
      42 CFR Part 433