Changeflow GovPing Environment Privacy Act System of Records: Compass Records ...
Routine Notice Amended Final

Privacy Act System of Records: Compass Records Modification

Favicon for www.federalregister.gov FR: Environmental Protection Agency
Published
Detected
Email

Summary

The EPA is modifying its Privacy Act System of Records for Compass records, which track accounts receivable, accounts payable, budget execution, and related reporting. The modification adds a new routine use required by Executive Order 14249 and OMB Memorandum M-25-32. Contact information for the Agency Privacy Officer is also updated.

What changed

The EPA is amending its Privacy Act System of Records notice for the Compass financial tracking system to add a new routine use as mandated by Executive Order 14249 and OMB Memorandum M-25-32. Compass records track accounts receivable, accounts payable, budget execution, and related reporting across the agency. The modification also updates Agency Privacy Officer contact information.

Affected parties should monitor this notice as it affects how EPA handles personal information in its financial management systems. Public comments are being accepted through May 18, 2026, at Docket ID No. EPA-HQ-OFA-2026-1882.

What to do next

  1. Monitor for updates to Compass Privacy Act system of records

Archived snapshot

Apr 16, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Notice

Privacy Act of 1974; System of Records

A Notice by the Environmental Protection Agency on 04/16/2026

  • This document has a comment period that ends in 32 days.
    (05/18/2026) View Comment Instructions

  • PDF

  • Document Details

  • Document Dates

- Table of Contents

  • Public Comments
  • Regulations.gov Data

- Sharing

  • Print
  • Other Formats
  • Public Inspection Published Document: 2026-07406 (91 FR 20428) Document Headings ###### Environmental Protection Agency
  1. [EPA-HQ-OFA-2026-1882; FRL-13285-01-OMS]

AGENCY:

Environmental Protection Agency (EPA).

ACTION:

Notice of a modified system of records.

SUMMARY:

The U.S. Environmental Protection Agency's (EPA or Agency) Office of Finance and Administration is giving notice that it proposes to modify a system of records pursuant to the provisions of the Privacy Act of 1974. Compass records and tracks accounts receivable to help the Agency collect debts owed; records and tracks accounts payable for authorized travel and other services; supports tracking and execution of the Agency's budget; and provides reporting across these activities. The modification is to add a new routine use as required by Executive Order 14249 and Office of Management and Budget (OMB) Memorandum M-25-32. The notice also updates the contact information for the Agency Privacy Officer.

DATES:

This action will become effect on April 16, 2026. The routine uses in this action will become effective May 18, 2026, unless the EPA makes changes based on comments received. Written comments should be submitted on or before May 18, 2026.

Persons wishing to comment on this system of records notice must do so by May 18, 2026.

ADDRESSES:

Submit your comments, identified by Docket ID No. EPA-HQ-OFA-2026-1882, by one of the following methods:

Federal eRulemaking Portal: https://www.regulations.gov. Follow the online instructions for submitting comments.

Email: docket_oms@epa.gov. Include the Docket ID number in the subject line of the message.

Fax: 202-566-1752. ( printed page 20429)

Mail: OMS Docket, Environmental Protection Agency, Mail Code: 2822T, 1200 Pennsylvania Ave. NW, Washington, DC 20460.

Hand Delivery: OMS Docket, EPA/DC, WJC West Building, Room 3334, 1301 Constitution Ave. NW, Washington, DC 20460. Such deliveries are only accepted during the Docket's normal hours of operation, and special arrangements should be made for deliveries of boxed information.

Instructions: Direct your comments to Docket ID No. EPA-HQ-OFA-2026-1882. The EPA policy is that all comments received will be included in the public docket without change and may be made available online at https://www.regulations.gov, including any personal information provided, unless the comment includes information claimed to be Controlled Unclassified Information (CUI) or other information for which disclosure is restricted by statute. Do not submit information that you consider to be CUI or otherwise protected through https://www.regulations.gov. The https://www.regulations.gov website is an “anonymous access” system for EPA, which means the EPA will not know your identity or contact information unless you provide it in the body of your comment. Each agency determines submission requirements within their own internal processes and standards. EPA has no requirement to include personal information. If you send an email comment directly to the EPA without going through https://www.regulations.gov your email address will be automatically captured and included as part of the comment that is placed in the public docket and made available on the internet. If you submit an electronic comment, the EPA recommends that you include your name and other contact information in the body of your comment. If the EPA cannot read your comment due to technical difficulties and cannot contact you for clarification, the EPA may not be able to consider your comment. Electronic files should avoid the use of special characters, any form of encryption, and be free of any defects or viruses. For additional information about the EPA public docket, visit the EPA Docket Center homepage at https://www.epa.gov/​dockets.

Docket: All documents in the docket are listed in the https://www.regulations.gov index. Although listed in the index, some information is not publicly available, e.g., CUI or other information for which disclosure is restricted by statute. Certain other material, such as copyrighted material, will be publicly available only in hard copy. Publicly available docket materials are available either electronically in https://www.regulations.gov or in hard copy at the OMS Docket, EPA/DC, WJC West Building, Room 3334, 1301 Constitution Ave. NW, Washington. DC 20460.

We encourage the public to submit comments via https://www.regulations.gov or email, as there may be a delay in processing mail and faxes. Hand deliveries and couriers may be received by scheduled appointment only. For further information on EPA Docket Center services and the current status, please visit us online at https://www.epa.gov/​dockets. The telephone number for the Public Reading Room is (202) 566-1744, and the telephone number for the OMS Docket is (202) 566-1752.

FOR FURTHER INFORMATION CONTACT:

Please submit questions to Lee Kelly, Agency Privacy Act Officer, 1200 Pennsylvania Ave. NW, Washington, DC 20460; telephone number: (202) 566-1197, email address: kelly.lee@epa.gov.

SUPPLEMENTARY INFORMATION:

EPA is modifying this system of records notice (SORN) to comply with Executive Order 14249 and OMB Memorandum M-25-32, which require agencies to modify relevant SORNs to include a routine use that allows for the disclosure of records to the U.S. Department of the Treasury for the purpose of identifying, preventing, or recouping fraud and improper payments. Additionally, EPA is updating the contact information for the Agency Privacy Officer. This system of records is composed of an accounts receivable module and travel and other accounts payable modules. The system contains personal identifying information such as names, addresses, and Social Security numbers of people indebted to or owed money by EPA. The accounts receivable module contains information about the nature of the debt or claim, the amount owed, the historical status of the debt, and information that relates to and documents efforts to collect debts owed the Agency. The travel and other accounts payable modules contain information about the travel authorization; travel vouchers, which support the claim for the reimbursement to the travel; travel advance authorizations, which provide fund advances to pay travel expenses incurred in the performance of official government business; and finally itemized invoices for other services performed for EPA. In both modules, banking information necessary to support electronic funds transfers may be maintained.

SYSTEM NAME AND NUMBER:

Compass Financials IT System, EPA-29.

SECURITY CLASSIFICATION:

Unclassified.

SYSTEM LOCATION:

National Computer Center, Environmental Protection Agency, Research Triangle Park, North Carolina 27711; other EPA offices.

SYSTEM MANAGER(S):

Controller, Office of Financial Operations and Management, Environmental Protection Agency, William Jefferson Clinton Building, 1200 Pennsylvania Avenue NW, Washington, DC 20460.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

OMB Circular A-127; Chief Financial Officers Act of 1990, Public Law 101-576; Federal Managers Financial Integrity Act of 1982, Public Law 97-255 (31 U.S.C. 3512 et seq.); 31 U.S.C. Chapter 11.

PURPOSE(S) OF THE SYSTEM:

Records in the accounts receivable module is used primarily to create a record of, and track, all accounts receivable and to assist the EPA in collecting debts owed the Agency. Records in the travel and other accounts payable modules are used primarily to create a record of and to track all monies owed by the EPA for authorized travel and for other services performed for the EPA. Tracks and executes the Agency's budget. The system provides reporting in all areas listed above.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

Individuals who owe monies to and individuals who are owed monies from the Environmental Protection Agency are covered by the system. This includes, but is not limited to, individuals who owe monies to the EPA for refunds, penalties, travel advances, Interagency Agreements, or Freedom of Information Act Requests. This system also contains information on corporations and other entities that are in debt to the EPA. This system also includes monies owed by the EPA to Agency employees, consultants, private citizens, and others who travel or perform other services for the EPA.

CATEGORIES OF RECORDS IN THE SYSTEM:

This system of records is composed of an accounts receivable module, travel, other accounts payable modules and reporting. The system contains personal identifying information such as names, addresses, and Social Security numbers ( printed page 20430) of persons indebted to or owed money by the EPA. The accounts receivable module contain information about the nature of the debt or claim, the amount owed, the historical status of the debt, and information that relates to and documents efforts to collect debts owed the Agency. The travel and other accounts payable modules contain information about the travel authorization; travel vouchers, which support the claim for the reimbursement to the travel; travel advance authorizations, which provide fund advances to pay travel expenses incurred in the performance of official government business; and itemized invoices for other services performed for the EPA. In both modules, banking information necessary to support electronic funds transfers may be maintained.

RECORD SOURCE CATEGORIES:

Record subjects, supervisors, consumer reporting agencies, debt collection agencies, the Department of the Treasury and other Federal agencies.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND PURPOSES OF SUCH USES:

General routine uses D, E, F, G, K and L apply to this system. Records may also be disclosed:

  1. To the Department of Treasury for Purpose of carrying out the EPA's financial management functions and responsibilities. This refers to the routine, system-driven processes that enable core financial management activities, such as payment processing, financial reporting, reconciliations, and other operational transactions necessary to support the agency's financial operations. Another use for Treasury is to identify and prevent payment errors, waste, fraud, and abuse within federal spending.

  2. To disclose limited debtor information to debt collection agencies under contract with the EPA solely for the purpose of collecting debts owed to the Agency. For this routine use, “debtor information” is limited to the individual's name, address, Social Security number, and other information necessary to identify the individual; the amount, status, and history of the claim; and the agency or program under which the claim arose. Debt collection agencies must comply with the Privacy Act, and their agents are subject to the Act's criminal penalty provisions.

  3. To the U.S. Department of the Treasury when disclosure of the information is relevant to review payment and award eligibility through the Do Not Pay Working System for the purposes of identifying, preventing, or recouping improper payments to an applicant for, or recipient of, Federal funds, including funds disbursed by a state (meaning a state of the United States, the District of Columbia, a territory or possession of the United States, or a federally recognized Indian Tribe) in a state-administered, federally funded program.

Disclosure to Consumer Reporting Agencies

Pursuant to 5 U.S.C. 552a(b)(12), disclosure may be made to a consumer reporting agency as defined in the Fair Credit Reporting Act (15 U.S.C. 1681a(f)) or the Federal Claims Collection Act of 1966 (31 U.S.C. 3701(a)(30)).

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:

The Compass Momentum component stores records on a storage area network (SAN), located at Research Triangle Park, North Carolina. Backup tapes are maintained at a disaster recovery site. The Compass Data Warehouse also stores data on a SAN, located at Research Triangle Park, North Carolina.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:

Accounts receivable module records are indexed by account receivable control number (a number assigned to each “incoming” account receivable). Individual records can be accessed by using a cross-reference table which links accounts receivable control numbers with the debtor's name and records. Travel and other accounts payable module records are retrievable by name and social security number.

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:

Records are maintained for 6 years and 3 months after final payment, in accordance with applicable federal records schedules. They are deleted when applicable records schedules allow and when no longer needed for agency business, unless related to the Superfund program cost recovery efforts. In accordance with applicable federal records schedules, Superfund cost recovery records are maintained more than 30 years after the completion of cost recovery at the site. The Records Control Schedule is #054.

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:

Security controls used to protect personally identifiable information in Compass Financials IT are commensurate with those required for an information system rated moderate for confidentiality, integrity, and availability, as prescribed in NIST Special Publication, 800-53, “Security and Privacy Controls for Information Systems and Organizations,” Revision 5.

1. Administrative Safeguards: EPA personnel are required to complete annual agency Information Security and Privacy training. EPA personnel are instructed to lock their computers when they leave their desks.

2. Technical Safeguards: Electronic records are maintained in a secure, password protected electronic system. Compass Financials IT System access is limited to authorized, authenticated users. All of the system's electronic communication utilizes Transport Layer Security (TLS) secure communication protocol for all transactions.

3. Physical Safeguards: All records are maintained in secure, access-controlled areas or buildings.

RECORD ACCESS PROCEDURES:

All requests for access to personal records should cite the Privacy Act of 1974 and reference the type of request being made (i.e., access). Requests must include: (1) the name and signature of the individual making the request; (2) the name of the Privacy Act system of records to which the request relates; (3) a statement whether a personal inspection of the records or a copy of them by mail is desired; and (4) proof of identity. A full description of EPA's Privacy Act procedures for requesting access to records is included in EPA's Privacy Act regulations at 40 CFR part 16.

CONTESTING RECORD PROCEDURES:

Requests for correction or amendment must include: (1) the name and signature of the individual making the request; (2) the name of the Privacy Act system of records to which the request relates; (3) a description of the information sought to be corrected or amended and the specific reasons for the correction or amendment; and (4) proof of identity. A full description of EPA's Privacy Act procedures for the correction or amendment of a record is included in EPA's Privacy Act regulations at 40 CFR part 16.

NOTIFICATION PROCEDURES:

Individuals who wish to be informed whether a Privacy Act system of records maintained by EPA contains any record pertaining to them, should make a written request to EPA, Attn: Agency Privacy Officer, MC 2810A, 1200 Pennsylvania Ave. NW, Washington, DC 20460, privacy@epa.gov, or submit their request online at https://epabap.my.site.com/​privacy/​s/. A full ( printed page 20431) description of EPA's Privacy Act procedures is included in EPA's Privacy Act regulations at 40 CFR part 16.

EXEMPTIONS PROMULGATED FOR THE SYSTEM:

None.

History: N/A.

FRL-7145-7-posted on February 22, 2002: The EPA provided notice that it proposed to establish a new system of records, the EPA Travel, Other Accounts Payable, and Accounts Receivable Files.

Carter Farmer,

Senior Agency Official for Privacy.

[FR Doc. 2026-07406 Filed 4-15-26; 8:45 am]

BILLING CODE 6560-50-P

Published Document: 2026-07406 (91 FR 20428)

Get daily alerts for FR: Environmental Protection Agency

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from Environmental Protection Agency.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
Environmental Protection Agency
Published
April 16th, 2026
Comment period closes
May 18th, 2026 (32 days)
Compliance deadline
May 18th, 2026 (32 days)
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Minor
Document ID
91 FR 20428 / EPA-HQ-OFA-2026-1882
Docket
EPA-HQ-OFA-2026-1882 FRL-13285-01-OMS

Who this affects

Applies to
Government agencies
Industry sector
9211 Government & Public Administration
Activity scope
Financial system records Privacy Act compliance Data management
Geographic scope
United States US

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Cybersecurity Government Contracting

Get alerts for this source

We'll email you when FR: Environmental Protection Agency publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!