(vi) The Regional Directors in order of seniority.

(vii) The District Administrators in order of seniority.

(2) If and when a commissioner previously incapacitated or otherwise unavailable, again becomes available, he shall thereupon have all the powers and functions he would have had if he had not been incapacitated or otherwise unavailable.

(d) Actions taken for and in the name of the Commission as described above shall be effective immediately or as specified by the successor acting, but shall be subject to reconsideration by the Commissioners when the Commission has been reconstituted and is functioning.

(e) Except as may be determined otherwise by the Chairman or his successor, the duties of each head of a division or office of the Commission shall be discharged, in the absence or incapacity of such person during the emergency conditions, by the available staff member next in line of succession. The head of each division or office shall designate the line of succession within his division or office. If no such designation has been made or the designatee is unavailable, such duties shall be assumed by the available subordinate officer or employee in the particular division or office who is highest in grade and in the event that there is more than one such person, in length of service with the Commission.

(Sec. 4, 48 Stat. 885, as amended; 15 U.S.C. 78d, sec. 1, 76 Stat. 394; 15 U.S.C. 78d-1. Reorganization Plan No. 10 of 1950; 3 CFR, 19491953 Comp., p. 1006)

[28 FR 6970, July 9, 1963, as amended at 28 FR 7672, July 27, 1963; 28 FR 14493, Dec. 31, 1963; 54 FR 40862, Oct. 4, 1989; 59 FR 5945, Feb. 9, 1994]

§ 200.204 Personnel, fiscal, and service functions.

In the absence of unavailability of the appropriate staff officer or his successor, authority to effect temporary appointments of such additional officers and employees, to classify and allocate positions to their proper grades, to issue travel orders, and to effect emergency purchases of supplies, equipment and services shall be exercised by the respective Regional Direc

tors and District Administrators, their deputies, or staff in line of succession, as may be required for the discharge of the lawful duties of the respective offices.

(Sec. 4, 48 Stat. 885, as amended; 15 U.S.C. 78d, sec. 1, 76 Stat. 394; 15 U.S.C. 78d-1, Reorganization Plan No. 10 of 1950; 3 CFR, 19491953 Comp., p. 1006)

[28 FR 6970, July 9, 1963, as amended at 59 FR 5945, Feb. 9, 1994]

§ 200.205 Effect upon existing Commission organization, delegations, and rules.

Except as otherwise provided herein, all outstanding Commission organizational statements, delegations of authority, orders, rules and regulations shall remain in force and effect during emergency conditions, subject to all lawful requirements and such changes as may be authorized by or in the name of the Chairman or the Commission.

(Sec. 4, 48 Stat. 885, as amended; 15 U.S.C. 78d, sec. 1, 76 Stat. 394, 15 U.S.C. 78d-1. Reorganization Plan No. 10 of 1950; 3 CFR, 19491953 Comp., p. 1006)

Subpart H-Regulations Pertaining to the Privacy of Individuals and Systems of Records Maintained by the Commission

AUTHORITY: 5 U.S.C. 552a(f), unless otherwise noted.

Section 200.312 is also issued under Pub. L. 93-579, sec. k, 5 U.S.C. 552a(k).

Section 200.313 is also issued under Pub. L. 93-579, sec. j, 5 U.S.C. 552a(j) and sec. k, 5 U.S.C. 552a(k).

SOURCE: 40 FR 44068, Sept. 24, 1975, unless otherwise noted.

§200.301 Purpose and scope.

(a) The Privacy Act of 1974, Pub. L. 93-579, 88 Stat. 1896, is based, in part, on the finding by Congress that "in order to protect the privacy of individuals identified in information systems maintained by Federal agencies, it is necessary and proper for the Congress to regulate the collection, maintenance, use, and dissemination of information by such agencies. To achieve this objective the Act, among other things, provides, with some exceptions, that Federal agencies shall advise an

individual

upon request whether records maintained by the agency in a system of records pertain to the individual and shall grant the individual access to such records. The Act further provides that individuals may request amendments or corrections to records pertaining to them that are maintained by the agency, and that the agency shall either grant the requested amendments or set forth fully its reasons for refusing to do so.

(b) The Securities and Exchange Commission, pursuant to subsection (f) of the Privacy Act, adopts the following rules and procedures to implement the provisions of the Act summarized above, and other provisions of the Act. These rules and procedures are applicable to all requests for information, access or amendment to records pertaining to an individual that are contained in any system of records that is maintained by the Commission.

§200.302 Definitions.

The following definitions shall apply for purposes of this subpart:

(a) The terms individual, maintain, record, system of records, and routine use are defined for purposes of these rules as they are defined in 5 U.S.C. 552a(a)(2), (a)(3), (a)(4), (a)(5), and (a)(6). (b) Commission means the Securities and Exchange Commission.

§200.303 Times, places and require

ments for requests pertaining to individual records in a record system and for the identification of individuals making requests for access to the records pertaining to them. (a) Place to make request. Any request by an individual to be advised whether any system of records maintained by the Commission and named by the individual contains a record pertaining to him or her, or any request by an individual for access to a record pertaining to him or her that is contained in a system of records maintained by the Commission, shall be submitted by the individual in person during normal business hours at the Commission's Public Reference Room which is located at 450 Fifth Street, NW., Room 1024, Washington, DC, or by mail addressed to the Privacy Act Officer, Securities and Exchange Commission, Washington, DC 20549. All requests will

be required to be put in writing and signed by the individual making the request. In the case of requests for access that are made by mail, the envelope should be clearly marked "Privacy Act Request."

(1) Information to be included in requests. Each request by an individual concerning whether the Commission maintains in a system of records a record that pertains to him, or for access to any record pertaining to the individual that is maintained by the Commission in a system of records, shall include such information as will assist the Commission in identifying those records as to which the individual is seeking information or access. Where practicable, the individual should identify the system of records that is the subject of his request by reference to the Commission's notices of systems of records, which are published in the FEDERAL REGISTER, as required by section (e)(4) of the Privacy Act, 5 U.S.C. 552a(e)(4). Where a system of records is compiled on the basis of a specific identification scheme, the individual should include in his request the identification number or other identifier assigned to him. In the event the individual does not know the specific identifier assigned to him, he shall provide other information, including his full name, address, date of birth and subject matter of the record, to aid in processing his request. If additional information is required before a request can be processed, the individual shall be so advised.

(2) Verification of identity. When the fact of the existence of a record is not required to be disclosed under the Freedom of Information Act, 5 U.S.C. 552, as amended, or when a record as to which access has been requested is not required to be disclosed under that Act, the individual seeking the information or requesting access to the record shall be required to verify his or her identity before access will be granted or information given. For this purpose, individuals shall appear at the Commission's Public Reference Room located at 450 Fifth Street, NW., Room 1024, Washington, DC, during normal business hours of 9 a.m. to 4:30 p.m. e.s.t., Monday through Friday, or at one of the Commission's Regional or District

Offices. The addresses and business hours of those offices are listed below: Northeast Regional Office. 7 World Trade

Center, suite 1300, New York, NY 10048. Office hours-9 a.m. to 5:30 p.m. E.S.T. Boston District Office-73 Tremont Street, Sixth Floor, suite 600, Boston, MA 02108. Office hours-9 a.m. to 5:30 p.m. E.S.T. Philadelphia District Office The Curtis Center, suite 1005 E., 601 Walnut Street, Philadelphia, PA 19106. Office hours-9 a.m. to 5:30 p.m. E.S.T.

Southeast Regional Office. 1401 Brickell Avenue, suite 200, Miami, FL 33131. Office hours 8:30 a.m. to 5 p.m. E.S.T. Atlanta District Office-3475 Lenox Road, NE., suite 1000, Atlanta, GA 30326. Office hours-9 a.m. to 5:30 p.m. E.S.T. Midwest Regional Office. 500 West Madison Street, suite 1400, Chicago, IL 60661. Office hours-8:45 a.m. to 5:15 p.m. C.S.T. Central Regional Office. 1801 California Street, suite 4800, Denver, CO 80202. Office hours-8 a.m. to 4:30 p.m. C.S.T. Fort Worth District Office 801 Cherry Street, 19th Floor, Fort Worth, TX 76102. Office hours-8:30 a.m. to 5 p.m. C.S.T. Salt Lake District Office-500 Key Bank Tower, 50 S. Main Street, suite 500, Box 79, Salt Lake City, UT 84144. Office hours 8 a.m. to 4:30 p.m. M.S.T. Pacific Regional Office. 5670 Wilshire Boulevard, 11th Floor, Los Angeles, CA 90036. Office hours 8:30 a.m. to 5 p.m. P.S.T. San Francisco District Office-44 Montgom

ery Street, Suite 1100, San Francisco, CA 94104. Office hours -8:30 a.m. to 5 p.m. P.S.T.

None of the Commission's Offices are open on Saturday, Sunday or the following legal holidays: New Year's Day, President's Day, Memorial Day, Independence Day, Labor Day, Veterans' Day, Columbus Day, Thanksgiving Day or Christmas Day.

(3) Methods for verifying identity-appearance in person. For the purpose of verifying his identity, an individual seeking information as to records pertaining to him or access to those records shall furnish documentation that may reasonably be relied on to establish the individual's identity. Such documentation might include a valid birth certificate, driver's license, employee or military identification card, or medicare card.

(4) Method for verifying identity by mail. Where an individual cannot appear at one of the Commission's Offices for the purpose of verifying his identity, he shall submit, along with the request for information or access, a

signed and notarized statement attesting to his identity. Where access is being sought, the sworn statement shall include a representation that the records being sought pertain to the individual and a stipulation that the individual is aware that knowingly and willfully requesting or obtaining records pertaining to an individual from the Commission under false pretenses is a criminal offense.

(5) Additional procedures for verifying identity. When it appears appropriate, there may be made such other arrangements for the verification of identity as are reasonable under the circumstances and appear to be effective to prevent unauthorized disclosure of, or access to, individual records.

(b) Acknowledgement of requests for information pertaining to individual records in a record system or for access to individual records. (1) Except where an immediate acknowledgement is given for requests made in person, the receipt of a request for information pertaining to individual records in a record system will be acknowledged within 10 days after the receipt of such request. Requests will be processed as promptly as possible and a response to such requests will be given within 30 days (excluding Saturdays, Sundays, and legal holidays) unless, within the 30 day period and for cause shown, the individual making the request is notified in writing that a longer period is necessary.

(2) When an individual appears in person at the Commission's Public Reference Room in Washington, DC, or at one of its Regional or District Offices to request access to records pertaining to him, and such individual provides the required information and verification of identity, the Commission's staff, if practicable, will indicate at that time whether it is likely that the individual will be given access to the records and, if so, when and under what circumstances such access will be given. In the case of requests received by mail, whenever practicable, acknowledgement of the receipt of the request will be given within 10 days after receipt (excluding Saturdays, Sundays, and legal holidays). The acknowledgement will indicate, if practicable, whether or not access likely will be

(a) Initial review. Requests by individuals for access to records pertaining to them will be referred to the Commission's Privacy Act Officer who initially will determine whether access will be granted, Provided, however, That a Director of a staff Division of the Commission or Office head, other than the General Counsel, whose zone of responsibility relates to the record requested (see 17 CFR 200.13 et seq.), may make a determination that access is not lawfully required to be granted and should not be granted, in which case he, and not the Privacy Act Officer, shall make the required notification to the individual making the request.

(b) Grant of request for access. (1) If it is determined that a request for access to records pertaining to an individual will be granted, the individual will be advised by mail that access will be given at the designated Office of the Commission or a copy of the requested record will be provided by mail if the individual shall so indicate. Where the individual requests that copies of the record be mailed to him or requests copies of a record upon reviewing it at a Commission Office, the individual shall pay the cost of making the requested copies, as set forth in §200.310 of this subpart.

(2) In granting access to an individual to a record pertaining to him, such steps shall be taken by the Commission's staff as are necessary to prevent the unauthorized disclosure at the same time of information pertaining to individuals other than the person making the request or of other information that does not pertain to the individual. (c) Denial of request for access. If it is determined that access will not be granted, the individual making the re

quest will be notified of that fact and given the reasons why access is being denied. The individual also will be advised (1) of his right to seek review by the General Counsel of the intital decision to deny access, in accordance with the procedures set forth in §200.308 of this subpart; and (2) of his right ultimately to obtain judicial review pursuant to 5 U.S.C. 552a(g)(1)(A) of a final denial of access by the General Counsel.

(d) Time for acting on requests for access. Access to a record pertaining to an individual normally will be granted or denied within 30 days (excluding Saturdays, Sundays and legal holidays) after the receipt of the request for access unless the individual making the request is notified in writing within the 30 day period that, for good cause shown, a longer time is required. In such cases, the individual making the request shall be informed in writing of the difficulties encountered and an indication shall be given as to when it is anticipated that access may be granted or denied.

(e) Authorization to allow designated person to review and discuss records pertaining to another individual. An individual who is granted access to records pertaining to him, and who appears at a Commission Office to review the records, may be accompanied by another person of his choosing. Where the records as to which access has been granted are not required to be disclosed under provisions of the Freedom of Information Act 5 U.S.C. 552, as amended, the individual requesting the records, before being granted access, shall execute a written statement, signed by him and the person accompanying him, which specifically authorizes the latter individual to review and discuss the records. If such authorization has not been given as described, the person who has accompanied the individual making the request will be excluded from any review or discussion of the records.

(f) Exclusion for certain records. Nothing contained in these rules shall allow

174-049 0-97--4

an individual access to any information compiled in reasonable anticipation of a civil action or proceeding.

(5 U.S.C. 552a(f); sec. 19, Securities Act of 1933, 48 Stat. 85, as amended; sec. 23, Securities Exchange Act of 1934, 48 Stat. 901, as amended; sec. 20, Public Utility Holding Company Act of 1935, 49 Stat. 833; sec. 319, Trust Indenture Act of 1939, 53 Stat. 1173; sec. 38, Investment Company Act of 1940, 54 Stat. 841; sec. 211, Investment Advisers Act of 1940, 54 Stat. 855 (15 U.S.C. 77s, 78w, 79t, 77sss, 80a37, 80b-11))

[40 FR 44068, Sept. 24, 1975, as amended at 49 FR 13866, Apr. 9, 1984]

§200.305 Special procedure: Medical records.

(a) Statement of physician or mental health professional. When an individual requests access to records pertaining to him that include medical and/or psychological information, the Commission, if it deems it necessary under the particular circumstances, may require the individual to submit with the request a signed statement by his physician or a mental health professional indicating that, in their opinion, disclosure of the requested records or information directly to the individual will not have an adverse effect on the individual.

(b) Designation of physician or mental health professional to receive records. If the Commission believes, in good faith, that disclosure of medical and/or psychological information directly to an individual could have an adverse effect on that individual, the individual may be asked to designate in writing a physician or mental health professional to whom he would like the records to be disclosed, and disclosure that otherwise would be made to the individual will instead be made to the designated physician or mental health professional.

§200.306 Requests for amendment or correction of records.

(a) Place to make requests. A request by an individual to amend or correct records pertaining to him or her may be made in person during normal business hours at the Commission's Public Reference Room located at 450 Fifth Street, NW., Room 1024, Washington, DC, or by mail addressed to the Privacy Act Officer, Securities and Ex

change Commission, Washington, DC 20549.

(1) Information to be included in requests. Each request to amend or correct a Commission record shall reasonably describe the record sought to be amended or corrected. Such description should include, for example, relevant names, dates and subject matter to permit the record to be located among the records maintained by the Commission. An individual who has requested that a record pertaining to him be amended or corrected will be advised promptly if the record cannot be 10cated on the basis of the description given and that further identifying information is necessary before his request can be processed. An initial evaluation of a request presented in person will be made immediately to ensure that the request is complete and to indicate what, if any, additional information will be required. Verification of the individual's identity as set forth in §200.303(a) (2), (3), (4) and (5) may also be required.

(2) Basis for amendment or correction. An individual requesting an amendment or correction to a record pertaining to him shall specify the substance of the amendment or correction and set forth facts and provide such materials that would support his contention that the record pertaining to him as maintained by the Commission is not accurate, timely or complete, or that the record is not necessary and relevant to accomplish a statutory purpose of the Commission as authorized by law or by Executive Order of the President.

(b) Acknowledgement of requests for amendment or correction. Receipt of a request to amend or correct a record pertaining to an individual normally will be acknowledged in writing within 10 days after such request has been received. When a request to amend or correct is made in person, the individual making the request will be given a written acknowledgement when the request is presented. The acknowledgement will describe the request received and indicate when it is anticipated that action will be taken on the request. No acknowledgement will be sent when the request for amendment or correction will be reviewed, and an