Changeflow GovPing Healthcare Research Data Center Data Security Forms - Prop...
Routine Notice Added Consultation

Research Data Center Data Security Forms - Proposed Information Collection

Favicon for www.federalregister.gov FR: Centers for Disease Control and Prevention
Published April 1st, 2026
Detected April 1st, 2026
Email

Summary

The Centers for Disease Control and Prevention published a notice inviting public comment on a proposed information collection titled 'Research Data Center Data Security Forms for Access to Confidential Data.' The National Center for Health Statistics plans to collect information to fulfill data security requirements when providing access to restricted-use microdata for evidence building purposes. Comments are due by June 1, 2026.

What changed

The CDC is soliciting public comments on a proposed information collection under the Paperwork Reduction Act of 1995. NCHS intends to collect information through data security forms that allow researchers to access restricted-use microdata while maintaining confidentiality controls as required by law. The collection includes security protocols and forms necessary for data access approval.

Regulated entities and researchers seeking access to NCHS confidential data should review the proposed collection and submit comments by June 1, 2026. No immediate compliance action is required; this is an administrative notice inviting input on burden estimates and collection methods. Comments may be submitted via regulations.gov under Docket No. CDC-2026-0496 or by mail.

What to do next

  1. Review the proposed information collection and burden estimates for the Research Data Center Data Security Forms
  2. Submit comments by June 1, 2026 via regulations.gov (Docket No. CDC-2026-0496) or mail to the address provided
  3. Contact OMB@cdc.gov for more information on the information collection plan

Source document (simplified)

Notice

Proposed Data Collection Submitted for Public Comment and Recommendations

A Notice by the Centers for Disease Control and Prevention on 04/01/2026

  • This document has a comment period that ends in 61 days.
    (06/01/2026) View Comment Instructions

  • PDF

  • Document Details

  • Document Dates

- Table of Contents

  • Public Comments
  • Regulations.gov Data

- Sharing

  • Print
  • Other Formats
  • Public Inspection Published Document: 2026-06232 (91 FR 16198) Document Headings ###### Department of Health and Human Services
Centers for Disease Control and Prevention
  1. [60Day-26-1393; Docket No. CDC-2026-0496]

AGENCY:

Centers for Disease Control and Prevention (CDC), Department of Health and Human Services (HHS).

ACTION:

Notice with comment period.

SUMMARY:

The Centers for Disease Control and Prevention (CDC), as part of its continuing effort to reduce public burden and maximize the utility of government information, invites the general public and other federal agencies the opportunity to comment on a continuing information collection, as required by the Paperwork Reduction Act of 1995. This notice invites comment on a proposed information collection project titled Research Data Center Data Security Forms for Access to Confidential Data. NCHS plans to collect information from the public to fulfill its data security requirements when providing access to restricted-use microdata for the purpose of evidence building. NCHS's data security forms along with the corresponding security protocols allow NCHS to maintain careful controls on confidentiality and privacy, as required by law.

DATES:

Written comments must be received on or before June 1, 2026.

ADDRESSES:

You may submit comments, identified by Docket No. CDC-2026-0496 by either of the following methods:

  • Federal eRulemaking Portal: www.regulations.gov. Follow the instructions for submitting comments.
  • Mail: Jeffrey M. Zirger, Information Collection Review Office, Centers for Disease Control and Prevention, 1600 Clifton Road NE, MS H21-8, Atlanta, Georgia 30329. Instructions: All submissions received must include the agency name and Docket Number. CDC will post, without change, all relevant comments to www.regulations.gov.

Please note:

Submit all comments through the Federal eRulemaking portal (www.regulations.gov) or by U.S. mail to the address listed above.

FOR FURTHER INFORMATION CONTACT:

To request more information on the proposed project or to obtain a copy of the information collection plan and instruments, contact Jeffrey M. Zirger, Information Collection Review Office, Centers for Disease Control and Prevention, 1600 Clifton Road NE, MS H21-8, Atlanta, Georgia 30329; Telephone: 404-639-7570; Email: omb@cdc.gov.

SUPPLEMENTARY INFORMATION:

Under the Paperwork Reduction Act of 1995 (PRA) (44 U.S.C. 3501-3520), federal agencies must obtain approval from the Office of Management and Budget (OMB) for each collection of information they conduct or sponsor. In addition, the PRA also requires federal agencies to provide a 60-day notice in the Federal Register concerning each proposed collection of information, including each new proposed collection, each proposed extension of existing collection of information, and each reinstatement of previously approved information collection before submitting the collection to OMB for approval. To comply with this requirement, we are publishing this notice of a proposed data collection as described below.

The OMB is particularly interested in comments that will help:

  1. Evaluate whether the proposed collection of information is necessary for the proper performance of the functions of the agency, including whether the information will have practical utility;

  2. Evaluate the accuracy of the agency's estimate of the burden of the proposed collection of information, including the validity of the methodology and assumptions used;

  3. Enhance the quality, utility, and clarity of the information to be collected;

  4. Minimize the burden of the collection of information on those who are to respond, including through the use of appropriate automated, electronic, mechanical, or other technological collection techniques or other forms of information technology, e.g., permitting electronic submissions of responses; and

  5. Assess information collection costs.

Proposed Project

Research Data Center Data Security Forms for Access to Confidential Data for the National Center for Health Statistics (OMB Control No. 0920-1393, Exp. 4/30/2026)—Reinstatement—National Center for Health Statistics (NCHS), Centers for Disease Control and Prevention (CDC).

Background and Brief Description

Section 306(b)(4) of the Public Health Service (PHS) Act (42 U.S.C. 242k(b)(4)), as amended, authorizes the Secretary of Health and Human Services (DHHS), acting through NCHS, to receive requests for furnishing statistics to the public. NCHS receives requests for statistics from the public through the Standard Application Process (SAP). The public may apply to access confidential data assets held by a federal statistical agency or unit through the SAP for the purposes of generating statistics and developing evidence. Once an application for confidential data is approved through the SAP, NCHS will collect information to meet its data security requirements through its Data Security Forms. This information collection through the Data Security Forms will occur outside of the SAP. This is a request for approval from OMB to collect information via the Researcher Data Center Data Security Forms over the next three years.

As part of a comprehensive data dissemination program, the Research Data Center (RDC), National Center for Health Statistics (NCHS), Centers for Disease Control and Prevention (CDC), ( printed page 16199) requires prospective researchers who need access to confidential data to complete a research proposal. Researchers self-select whether they need access to confidential data to answer their research questions. The RDC requires the researcher to complete a research proposal, so NCHS understands the research proposed. The completed proposal is sent to NCHS through the SAP portal for review and adjudication. If the research proposal is approved by NCHS, then the researcher must fill out data security forms. If the researcher will access the data at a Research Data Center, then the “Data Use Agreement Form” and the “Designated Agent Agreement Form” would need to be completed and returned to NCHS. If the researcher will access the data through the NCHS Virtual Data Enclave (VDE), then the “VDE Data Use Agreement Form”, “Data Use Agreement Form” and the “Designated Agent Agreement Form” would need to be completed and returned to NCHS.

To capture the information needed to adjudicate a researcher's commitment to protect confidential NCHS data, researchers must complete and sign these data security forms. This request allows for both researcher signature and the time per response for a total estimated annual burden total of 110 hours (330 hours for a three-year clearance period). There is no cost to a researcher other than their time to complete the forms, unless the researcher has to pay a nominal notary fee for services incurred. The resulting information will be used for NCHS internal purposes.

| Type of respondents | Form name | Number of
respondents | Number of
responses per
respondent | Avg. burden
per response
(in hrs.) | Total burden
(in hrs.) |
| --- | --- | --- | --- | --- | --- |
| Researcher | Research Data Center proposal | 110 | 1 | 1 | 110 |
| Total | | | | | 110 |
Jeffrey M. Zirger,

Lead, Information Collection Review Office, Office of Public Health Ethics and Regulations, Office of Science, Centers for Disease Control and Prevention.

[FR Doc. 2026-06232 Filed 3-31-26; 8:45 am]

BILLING CODE 4163-18-P

Published Document: 2026-06232 (91 FR 16198)

Named provisions

Paperwork Reduction Act of 1995 Research Data Center Data Security Forms for Access to Confidential Data

Classification

Agency
Health and Human Services Department
Published
April 1st, 2026
Comment period closes
June 1st, 2026 (61 days)
Compliance deadline
June 1st, 2026 (61 days)
Instrument
Notice
Legal weight
Non-binding
Stage
Consultation
Change scope
Minor
Document ID
91 FR 16198 / 60Day-26-1393
Docket
60Day-26-1393 Docket No. CDC-2026-0496

Who this affects

Applies to
Healthcare providers Clinical investigators Public health authorities
Industry sector
6211 Healthcare Providers
Activity scope
Health Data Collection Research Data Access Confidential Data Security
Geographic scope
United States US

Taxonomy

Primary area
Public Health
Operational domain
Compliance
Topics
Data Privacy Healthcare

Get Healthcare alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when FR: Centers for Disease Control and Prevention publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.