9/3/2016

FHWA - Title 49 CFR Part 15, Protection of Sensitive Security Information

49CFRPart15
TITLE49TRANSPORTATION
SubtitleAOfficeoftheSecretaryofTransportation
PART15.PROTECTIONOFSENSITIVESECURITYINFORMATION
Sec.
15.1Scope.
15.3Termsusedinthispart.
15.5Sensitivesecurityinformation.
15.7Coveredpersons.
15.9RestrictionsonthedisclosureofSSI.
15.11Personswithaneedtoknow.
15.13MarkingSSI.
15.15SSIdisclosedbyDOT.
15.17ConsequencesofunauthorizeddisclosureofSSI.
15.19DestructionofSSI.

Sec.15.1Scope.
(a)Applicability.Thispartgovernsthemaintenance,safeguarding,anddisclosureofrecordsandinformationthatthe
SecretaryofDOThasdeterminedtobeSensitiveSecurityInformation,asdefinedinSec.15.5.Thispartdoesnotapply
tothemaintenance,safeguarding,ordisclosureofclassifiednationalsecurityinformation,asdefinedbyExecutiveOrder
12968,ortoothersensitiveunclassifiedinformationthatisnotSSI,butthatnonethelessmaybeexemptfrompublic
disclosureundertheFreedomofInformationAct.Inaddition,inthecaseofinformationthathasbeendesignatedas
criticalinfrastructureinformationundersection214oftheHomelandSecurityAct,thereceipt,maintenance,ordisclosure
ofsuchinformationbyaFederalagencyoremployeeisgovernedbysection214andanyimplementingregulations,not
bythispart.
(b)Delegation.TheauthorityoftheSecretaryunderthispartmaybefurtherdelegatedwithinDOT.

Sec.15.3Termsusedinthispart.
InadditiontothetermsinSec.15.3ofthischapter,thefollowingtermsapplyinthispart:
AdministratormeanstheUnderSecretaryofTransportationforSecurityreferredtoin49U.S.C.114(b),orhisorher
designee.
CoastGuardmeanstheUnitedStatesCoastGuard.
Coveredpersonmeansanyorganization,entity,individual,orotherpersondescribedinSec.15.7.Inthecaseofan
individual,coveredpersonincludesanyindividualapplyingforemploymentinapositionthatwouldbeacoveredperson,
orintrainingforsuchaposition,regardlessofwhetherthatindividualisreceivingawage,salary,orotherformof
payment.Coveredpersonincludesapersonapplyingforcertificationorotherformofapprovalthat,ifgranted,would
makethepersonacoveredpersondescribedinSec.15.7.
DHSmeanstheDepartmentofHomelandSecurityandanydirectorate,bureau,orothercomponentwithinthe
DepartmentofHomelandSecurity,includingtheUnitedStatesCoastGuard.
DOTmeanstheDepartmentofTransportationandanyoperatingadministration,entity,orofficewithintheDepartmentof
Transportation,includingtheSaintLawrenceSeawayDevelopmentCorporationandtheBureauofTransportation
Statistics.
FederalFlightDeckOfficermeansapilotparticipatingintheFederalFlightDeckOfficerProgramunder49U.S.C.44921
andimplementingregulations.
Maritimefacilitymeansanyfacilityasdefinedin33CFRpart101.
Recordincludesanymeansbywhichinformationispreserved,irrespectiveofformat,includingabook,paper,drawing,
map,recording,tape,film,photograph,machinereadablematerial,andanyinformationstoredinanelectronicformat.
Thetermrecordalsoincludesanydraft,proposed,orrecommendedchangetoanyrecord.
Securitycontingencyplanmeansaplandetailingresponseprocedurestoaddressatransportationsecurityincident,
threatassessment,orspecificthreatagainsttransportation,includingdetailsofpreparation,response,mitigation,
https://www.fhwa.dot.gov/legsregs/directives/orders/ssi/ssiregulations.htm

1/7

9/3/2016

FHWA - Title 49 CFR Part 15, Protection of Sensitive Security Information

recovery,andreconstitutionprocedures,continuityofgovernment,continuityoftransportationoperations,andcrisis
management.
Securityprogrammeansaprogramorplanandanyamendmentsdevelopedforthesecurityofthefollowing,including
anycomments,instructions,orimplementingguidance:
(1)Anairport,aircraft,oraviationcargooperation
(2)Amaritimefacility,vessel,orportareaor
(3)Atransportationrelatedautomatedsystemornetworkforinformationprocessing,control,andcommunications.
Securityscreeningmeansevaluatingapersonorpropertytodeterminewhethereitherposesathreattosecurity.
SSImeanssensitivesecurityinformation,asdescribedinSec.15.5.
Threatimageprojectionsystemmeansanevaluationtoolthatinvolvesperiodicpresentationoffictionalthreatimagesto
operatorsandisusedinconnectionwithxrayorexplosivesdetectionsystemsequipment.
TSAmeanstheTransportationSecurityAdministration.
Vulnerabilityassessmentmeansanyreview,audit,orotherexaminationofthesecurityofatransportationinfrastructure
assetairportmaritimefacility,portarea,vessel,aircraft,train,commercialmotorvehicle,orpipeline,oratransportation
relatedautomatedsystemornetwork,todetermineitsvulnerabilitytounlawfulinterference,whetherduringthe
conception,planning,design,construction,operation,ordecommissioningphase.Avulnerabilityassessmentmayinclude
proposed,recommended,ordirectedactionsorcountermeasurestoaddresssecurityconcerns.

Sec.15.5Sensitivesecurityinformation.
(a)Ingeneral.Inaccordancewith49U.S.C.40119(b)(1),SSIisinformationobtainedordevelopedintheconductof
securityactivities,includingresearchanddevelopment,thedisclosureofwhichtheSecretaryofDOThasdetermined
would
(1)Constituteanunwarrantedinvasionofprivacy(including,butnotlimitedto,informationcontainedinanypersonnel,
medical,orsimilarfile)
(2)Revealtradesecretsorprivilegedorconfidentialinformationobtainedfromanypersonor
(3)Bedetrimentaltotransportationsafety.
(b)InformationconstitutingSSI.ExceptasotherwiseprovidedinwritingbytheSecretaryofDOTintheinterestofpublic
safetyorinfurtheranceoftransportationsecurity,thefollowinginformation,andrecordscontainingsuchinformation,
constituteSSI:
(1)Securityprogramsandcontingencyplans.Anysecurityprogramorsecuritycontingencyplanissued,established,
required,received,orapprovedbyDOTorDHS,including
(i)Anyaircraftoperatororairportoperatorsecurityprogramorsecuritycontingencyplanunderthischapter
(ii)Anyvessel,maritimefacility,orportareasecurityplanrequiredordirectedunderFederallaw
(iii)Anynationalorareasecurityplanpreparedunder46U.S.C.70103and
(iv)Anysecurityincidentresponseplanestablishedunder46U.S.C.70104.
(2)SecurityDirectives.AnySecurityDirectiveororder
(i)IssuedbyTSAunder49CFR1542.303,1544.305,orotherauthority
(ii)IssuedbytheCoastGuardundertheMaritimeTransportationSecurityAct,33CFRpart6,or33U.S.C.1221etseq.
relatedtomaritimesecurityor
(iii)Anycomments,instructions,andimplementingguidancepertainingthereto.
(3)InformationCirculars.AnynoticeissuedbyDHSorDOTregardingathreattoaviationormaritimetransportation,
includingany
(i)InformationCircularissuedbyTSAunder49CFR1542.303or1544.305,orotherauthorityand
(ii)NavigationorVesselInspectionCircularissuedbytheCoastGuardrelatedtomaritimesecurity.
(4)Performancespecifications.Anyperformancespecificationandanydescriptionofatestobjectortestprocedure,for
https://www.fhwa.dot.gov/legsregs/directives/orders/ssi/ssiregulations.htm

2/7

9/3/2016

FHWA - Title 49 CFR Part 15, Protection of Sensitive Security Information

(i)AnydeviceusedbytheFederalgovernmentoranyotherpersonpursuanttoanyaviationormaritimetransportation
securityrequirementsofFederallawforthedetectionofanyweapon,explosive,incendiary,ordestructivedeviceor
substanceand
(ii)AnycommunicationsequipmentusedbytheFederalgovernmentoranyotherpersonincarryingoutorcomplyingwith
anyaviationormaritimetransportationsecurityrequirementsofFederallaw.
(5)Vulnerabilityassessments.Anyvulnerabilityassessmentdirected,created,held,funded,orapprovedbytheDOT,
DHS,orthatwillbeprovidedtoDOTorDHSinsupportofaFederalsecurityprogram.
(6)Securityinspectionorinvestigativeinformation.(i)Detailsofanysecurityinspectionorinvestigationofanalleged
violationofaviationormaritimetransportationsecurityrequirementsofFederallawthatcouldrevealasecurity
vulnerability,includingtheidentityoftheFederalspecialagentorotherFederalemployeewhoconductedtheinspection
oraudit.
(ii)InthecaseofinspectionsorinvestigationsperformedbyTSA,thisincludesthefollowinginformationastoeventsthat
occurredwithin12monthsofthedateofreleaseoftheinformation:thenameoftheairportwhereaviolationoccurred,the
airportidentifierinthecasenumber,adescriptionoftheviolation,theregulationallegedlyviolated,andtheidentityofany
aircraftoperatorinconnectionwithspecificlocationsorspecificsecurityprocedures.Suchinformationwillbereleased
aftertherelevant12monthperiod,exceptthatTSAwillnotreleasethespecificgateorotherlocationonanairportwhere
aneventoccurred,regardlessoftheamountoftimethathaspassedsinceitsoccurrence.Duringtheperiodwithin12
monthsofthedateofreleaseoftheinformation,TSAmayreleasesummariesofanaircraftoperator's,butnotanairport
operator's,totalsecurityviolationsinaspecifiedtimerangewithoutidentifyingspecificviolationsorlocations.Summaries
mayincludetotalenforcementactions,totalproposedcivilpenaltyamounts,numberofcasesopened,numberofcases
referredtoTSAorFAAcounselforlegalenforcementaction,andnumberofcasesclosed.
(7)Threatinformation.AnyinformationheldbytheFederalgovernmentconcerningthreatsagainsttransportationor
transportationsystemsandsourcesandmethodsusedtogatherordevelopthreatinformation,includingthreatsagainst
cyberinfrastructure.
(8)Securitymeasures.Specificdetailsofaviationormaritimetransportationsecuritymeasures,bothoperationaland
technical,whetherapplieddirectlybytheFederalgovernmentoranotherperson,including
(i)SecuritymeasuresorprotocolsrecommendedbytheFederalgovernment
(ii)Informationconcerningthedeployments,numbers,andoperationsofCoastGuardpersonnelengagedinmaritime
securitydutiesandFederalAirMarshals,totheextentitisnotclassifiednationalsecurityinformationand
(iii)InformationconcerningthedeploymentsandoperationsofFederalFlightDeckOfficers,andnumbersofFederalFlight
DeckOfficersaggregatedbyaircraftoperator.
(9)Securityscreeninginformation.Thefollowinginformationregardingsecurityscreeningunderaviationormaritime
transportationsecurityrequirementsofFederallaw:
(i)Anyprocedures,includingselectioncriteriaandanycomments,instructions,andimplementingguidancepertaining
thereto,forscreeningofpersons,accessibleproperty,checkedbaggage,U.S.mail,stores,andcargo,thatisconducted
bytheFederalgovernmentoranyotherauthorizedperson.
(ii)Informationandsourcesofinformationusedbyapassengerorpropertyscreeningprogramorsystem,includingan
automatedscreeningsystem.
(iii)Detailedinformationaboutthelocationsatwhichparticularscreeningmethodsorequipmentareused,onlyif
determinedbyTSAtobeSSI.
(iv)Anysecurityscreenertestandscoresofsuchtests.
(v)Performanceortestingdatafromsecurityequipmentorscreeningsystems.
(vi)Anyelectronicimageshownonanyscreeningequipmentmonitor,includingthreatimagesanddescriptionsofthreat
imagesforthreatimageprojectionsystems.
(10)Securitytrainingmaterials.Recordscreatedorobtainedforthepurposeoftrainingpersonsemployedby,contracted
with,oractingfortheFederalgovernmentoranotherpersontocarryoutanyaviationormaritimetransportationsecurity
measuresrequiredorrecommendedbyDHSorDOT.
(11)Identifyinginformationofcertaintransportationsecuritypersonnel.(i)Listsofthenamesorotheridentifying
informationthatidentifypersonsas
(A)Havingunescortedaccesstoasecureareaofanairportorasecureorrestrictedareaofamaritimefacility,portarea,
orvesselor

https://www.fhwa.dot.gov/legsregs/directives/orders/ssi/ssiregulations.htm

3/7

9/3/2016

FHWA - Title 49 CFR Part 15, Protection of Sensitive Security Information

(B)HoldingapositionasasecurityscreeneremployedbyorundercontractwiththeFederalgovernmentpursuantto
aviationormaritimetransportationsecurityrequirementsofFederallaw,wheresuchlistsareaggregatedbyairport
(C)HoldingapositionwiththeCoastGuardresponsibleforconductingvulnerabilityassessments,securityboardings,or
engagedinoperationstoenforcemaritimesecurityrequirementsorconductforceprotection
(D)HoldingapositionasaFederalAirMarshalor
(ii)Thenameorotheridentifyinginformationthatidentifiesapersonasacurrent,former,orapplicantforFederalFlight
DeckOfficer.
(12)Criticalaviationormaritimeinfrastructureassetinformation.Anylistidentifyingsystemsorassets,whetherphysical
orvirtual,sovitaltotheaviationormaritimetransportationsystemthattheincapacityordestructionofsuchassetswould
haveadebilitatingimpactontransportationsecurity,ifthelistis
(i)PreparedbyDHSorDOTor
(ii)PreparedbyaStateorlocalgovernmentagencyandsubmittedbytheagencytoDHSorDOT.
(13)Systemssecurityinformation.Anyinformationinvolvingthesecurityofoperationaloradministrativedatasystems
operatedbytheFederalgovernmentthathavebeenidentifiedbytheDOTorDHSascriticaltoaviationormaritime
transportationsafetyorsecurity,includingautomatedinformationsecurityproceduresandsystems,securityinspections,
andvulnerabilityinformationconcerningthosesystems.
(14)Confidentialbusinessinformation.(i)SolicitedorunsolicitedproposalsreceivedbyDHSorDOT,andnegotiations
arisingtherefrom,toperformworkpursuanttoagrant,contract,cooperativeagreement,orothertransaction,butonlyto
theextentthatthesubjectmatteroftheproposalrelatestoaviationormaritimetransportationsecuritymeasures
(ii)Tradesecretinformation,includinginformationrequiredorrequestedbyregulationorSecurityDirective,obtainedby
DHSorDOTincarryingoutaviationormaritimetransportationsecurityresponsibilitiesand
(iii)Commercialorfinancialinformation,includinginformationrequiredorrequestedbyregulationorSecurityDirective,
obtainedbyDHSorDOTincarryingoutaviationormaritimetransportationsecurityresponsibilities,butonlyifthesource
oftheinformationdoesnotcustomarilydiscloseittothepublic.
(15)Researchanddevelopment.Informationobtainedordevelopedintheconductofresearchrelatedtoaviationor
maritimetransportationsecurityactivities,wheresuchresearchisapproved,accepted,funded,recommended,ordirected
bytheDHSorDOT,includingresearchresults.
(16)Otherinformation.AnyinformationnototherwisedescribedinthissectionthatTSAdeterminesisSSIunder49
U.S.C.114(s)orthattheSecretaryofDOTdeterminesisSSIunder49U.S.C.40119.Upontherequestofanother
Federalagency,theSecretaryofDOTmaydesignateasSSIinformationnototherwisedescribedinthissection.
(c)LossofSSIdesignation.TheSecretaryofDOTmaydetermineinwritingthatinformationorrecordsdescribedin
paragraph(b)ofthissectiondonotconstituteSSIbecausetheynolongermeetthecriteriasetforthinparagraph(a)of
thissection.

Sec.15.7Coveredpersons.
Personssubjecttotherequirementsofpart15are:
(a)EachairportoperatorandaircraftoperatorsubjecttotherequirementsofSubchapterCofthistitle.
(b)Eachindirectaircarrier,asdefinedin49CFR1540.5.
(c)Eachowner,charterer,oroperatorofavessel,includingforeignvesselowners,charterers,andoperators,requiredto
haveasecurityplanunderFederalorInternationallaw.
(d)EachowneroroperatorofamaritimefacilityrequiredtohaveasecurityplanundertheMaritimeTransportation
SecurityAct,(Pub.L.107295),46U.S.C.70101etseq.,33CFRpart6,or33U.S.C.1221etseq.
(e)Eachpersonperformingthefunctionofacomputerreservationsystemorglobaldistributionsystemforairline
passengerinformation.
(f)Eachpersonparticipatinginanationalorareasecuritycommitteeestablishedunder46U.S.C.70112,oraport
securitycommittee.
(g)Eachindustrytradeassociationthatrepresentscoveredpersonsandhasenteredintoanondisclosureagreement
withtheDHSorDOT.
(h)DHSandDOT.
https://www.fhwa.dot.gov/legsregs/directives/orders/ssi/ssiregulations.htm

4/7

9/3/2016

FHWA - Title 49 CFR Part 15, Protection of Sensitive Security Information

(i)Eachpersonconductingresearchanddevelopmentactivitiesthatrelatetoaviationormaritimetransportationsecurity
andareapproved,accepted,funded,recommended,ordirectedbyDHSorDOT.
(j)EachpersonwhohasaccesstoSSI,asspecifiedinSec.15.11.
(k)Eachpersonemployedby,contractedto,oractingforacoveredperson,includingagranteeofDHSorDOT,and
includingapersonformerlyinsuchposition.
(l)Eachpersonforwhichavulnerabilityassessmenthasbeendirected,created,held,funded,orapprovedbytheDOT,
DHS,orthathaspreparedavulnerabilityassessmentthatwillbeprovidedtoDOTorDHSinsupportofaFederalsecurity
program.
(m)EachpersonreceivingSSIunderSec.1520.15(d)or(e).

Sec.15.9RestrictionsonthedisclosureofSSI.
(a)Dutytoprotectinformation.Acoveredpersonmust
(1)TakereasonablestepstosafeguardSSIinthatperson'spossessionorcontrolfromunauthorizeddisclosure.Whena
personisnotinphysicalpossessionofSSI,thepersonmuststoreitasecurecontainer,suchasalockeddeskorfile
cabinetorinalockedroom.
(2)Disclose,orotherwiseprovideaccessto,SSIonlytocoveredpersonswhohaveaneedtoknow,unlessotherwise
authorizedinwritingbyTSA,theCoastGuard,ortheSecretaryofDOT.
(3)ReferrequestsbyotherpersonsforSSItoTSAortheapplicablecomponentoragencywithinDOTorDHS.
(4)MarkSSIasspecifiedinSec.15.13.
(5)DisposeofSSIasspecifiedinSec.15.19.
(b)UnmarkedSSI.IfacoveredpersonreceivesarecordcontainingSSIthatisnotmarkedasspecifiedinSec.1520.13,
thecoveredpersonmust
(1)MarktherecordasspecifiedinSec.15.13and
(2)InformthesenderoftherecordthattherecordmustbemarkedasspecifiedinSec.15.13.
(c)Dutytoreportunauthorizeddisclosure.WhenacoveredpersonbecomesawarethatSSIhasbeenreleasedto
unauthorizedpersons,thecoveredpersonmustpromptlyinformTSAortheapplicableDOTorDHScomponentor
agency.
(d)Additionalrequirementsforcriticalinfrastructureinformation.InthecaseofinformationthatisbothSSIandhasbeen
designatedascriticalinfrastructureinformationundersection214oftheHomelandSecurityAct,anycoveredpersonwho
isaFederalemployeeinpossessionofsuchinformationmustcomplywiththedisclosurerestrictionsandother
requirementsapplicabletosuchinformationundersection214andanyimplementingregulations.

Sec.15.11Personswithaneedtoknow.
(a)Ingeneral.ApersonhasaneedtoknowSSIineachofthefollowingcircumstances:
(1)WhenthepersonrequiresaccesstospecificSSItocarryouttransportationsecurityactivitiesapproved,accepted,
funded,recommended,ordirectedbyDHSorDOT.
(2)Whenthepersonisintrainingtocarryouttransportationsecurityactivitiesapproved,accepted,funded,
recommended,ordirectedbyDHSorDOT.
(3)Whentheinformationisnecessaryforthepersontosuperviseorotherwisemanageindividualscarryingout
transportationsecurityactivitiesapproved,accepted,funded,recommended,ordirectedbytheDHSorDOT.
(4)Whenthepersonneedstheinformationtoprovidetechnicalorlegaladvicetoacoveredpersonregarding
transportationsecurityrequirementsofFederallaw.
(5)Whenthepersonneedstheinformationtorepresentacoveredpersoninconnectionwithanyjudicialoradministrative
proceedingregardingthoserequirements.
(b)Federalemployees,contractors,andgrantees.(1)AFederalemployeehasaneedtoknowSSIifaccesstothe
informationisnecessaryforperformanceoftheemployee'sofficialduties.
(2)ApersonactingintheperformanceofacontractwithorgrantfromDHSorDOThasaneedtoknowSSIifaccessto
theinformationisnecessarytoperformanceofthecontractorgrant.
https://www.fhwa.dot.gov/legsregs/directives/orders/ssi/ssiregulations.htm

5/7

9/3/2016

FHWA - Title 49 CFR Part 15, Protection of Sensitive Security Information

(c)Backgroundcheck.TheSecretaryofDOTmaymakeanindividual'saccesstotheSSIcontingentuponsatisfactory
completionofasecuritybackgroundcheckandtheimpositionofproceduresandrequirementsforsafeguardingSSIthat
aresatisfactorytotheSecretary.
(d)NeedtoknowfurtherlimitedbytheDHSorDOT.ForsomespecificSSI,DHSorDOTmaymakeafindingthatonly
specificpersonsorclassesofpersonshaveaneedtoknow.

Sec.15.13MarkingSSI.
(a)Markingofpaperrecords.InthecaseofpaperrecordscontainingSSI,acoveredpersonmustmarktherecordby
placingtheprotectivemarkingconspicuouslyonthetop,andthedistributionlimitationstatementonthebottom,of
(1)Theoutsideofanyfrontandbackcover,includingabindercoverorfolder,ifthedocumenthasafrontandbackcover
(2)Anytitlepageand
(3)Eachpageofthedocument.
(b)Protectivemarking.Theprotectivemarkingis:SENSITIVESECURITYINFORMATION.
(c)Distributionlimitationstatement.Thedistributionlimitationstatementis:
WARNING:ThisrecordcontainsSensitiveSecurityInformationthatiscontrolledunder49CFRparts15and1520.No
partofthisrecordmaybedisclosedtopersonswithouta"needtoknow",asdefinedin49CFRparts15and1520,except
withthewrittenpermissionoftheAdministratoroftheTransportationSecurityAdministrationortheSecretaryof
Transportation.Unauthorizedreleasemayresultincivilpenaltyorotheraction.ForU.S.governmentagencies,public
disclosureisgovernedby5U.S.C.552and49CFRparts15and1520.
(d)Othertypesofrecords.InthecaseofnonpaperrecordsthatcontainSSI,includingmotionpicturefilms,videotape
recordings,audiorecording,andelectronicandmagneticrecords,acoveredpersonmustclearlyandconspicuouslymark
therecordswiththeprotectivemarkingandthedistributionlimitationstatementsuchthattheviewerorlisteneris
reasonablylikelytoseeorhearthemwhenobtainingaccesstothecontentsoftherecord.

Sec.15.15SSIdisclosedbyDOT.
(a)Ingeneral.Exceptasotherwiseprovidedinthissection,andnotwithstandingtheFreedomofInformationAct(5U.S.C.
552),thePrivacyAct(5U.S.C.552a),andotherlaws,recordscontainingSSIarenotavailableforpublicinspectionor
copying,nordoesDOTreleasesuchrecordstopersonswithoutaneedtoknow.
(b)DisclosureundertheFreedomofInformationActandthePrivacyAct.IfarecordcontainsbothSSIandinformation
thatisnotSSI,DOT,onaproperFreedomofInformationActorPrivacyActrequest,maydisclosetherecordwiththeSSI
redacted,providedtherecordisnototherwiseexemptfromdisclosureundertheFreedomofInformationActorPrivacy
Act.
(c)DisclosurestocommitteesofCongressandtheGeneralAccountingOffice.NothinginthispartprecludesDOTfrom
disclosingSSItoacommitteeofCongressauthorizedtohavetheinformationortotheComptrollerGeneral,ortoany
authorizedrepresentativeoftheComptrollerGeneral.
(d)Disclosureinenforcementproceedings.(1)Ingeneral.TheSecretaryofDOTmayprovideSSItoapersoninthe
contextofanadministrativeenforcementproceedingwhen,inthesolediscretionoftheSecretary,accesstotheSSIis
necessaryforthepersontopreparearesponsetoallegationscontainedinalegalenforcementactiondocumentissued
byDOT.
(2)Securitybackgroundcheck.PriortoprovidingSSItoapersonunderparagraph(d)(1)ofthissection,theSecretaryof
DOTmayrequiretheindividualor,inthecaseofanentity,theindividualsrepresentingtheentity,andtheircounsel,to
undergoandsatisfy,inthejudgmentoftheSecretaryofDOT,asecuritybackgroundcheck.
(e)Otherconditionaldisclosure.TheSecretaryofDOTmayauthorizeaconditionaldisclosureofspecificrecordsor
informationthatconstituteSSIuponthewrittendeterminationbytheSecretarythatdisclosureofsuchrecordsor
information,subjecttosuchlimitationsandrestrictionsastheSecretarymayprescribe,wouldnotbedetrimentalto
transportationsafety.
(f)Obligationtoprotectinformation.WhenanindividualreceivesSSIpursuanttoparagraph(d)or(e)ofthissectionthat
individualbecomesacoveredpersonunderSec.15.7andissubjecttotheobligationsofacoveredpersonunderthis
part.
(g)NoreleaseunderFOIA.WhenDOTdisclosesSSIpursuanttoparagraphs(b)through(e)ofthissection,DOTmakes
thedisclosureforthesolepurposedescribedinthatparagraph.Suchdisclosureisnotapublicreleaseofinformation
undertheFreedomofInformationAct.

https://www.fhwa.dot.gov/legsregs/directives/orders/ssi/ssiregulations.htm

6/7

9/3/2016

FHWA - Title 49 CFR Part 15, Protection of Sensitive Security Information

(h)DisclosureofCriticalInfrastructureInformation.DisclosureofinformationthatisbothSSIandhasbeendesignatedas
criticalinfrastructureinformationundersection214oftheHomelandSecurityActisgovernedsolelybytherequirements
ofsection214andanyimplementingregulations.

Sec.15.17ConsequencesofunauthorizeddisclosureofSSI.
ViolationofthispartisgroundsforacivilpenaltyandotherenforcementorcorrectiveactionbyDOT,andappropriate
personnelactionsforFederalemployees.CorrectiveactionmayincludeissuanceofanorderrequiringretrievalofSSIto
remedyunauthorizeddisclosureoranordertoceasefutureunauthorizeddisclosure.

Sec.15.19DestructionofSSI.
(a)DOT.SubjecttotherequirementsoftheFederalRecordsAct(5U.S.C.105),includingthedutytopreserverecords
containingdocumentationofaFederalagency'spolicies,decisions,andessentialtransactions,DOTdestroysSSIwhen
nolongerneededtocarryouttheagency'sfunction.
(b)Othercoveredpersons.(1)Ingeneral.AcoveredpersonmustdestroySSIcompletelytoprecluderecognitionor
reconstructionoftheinformationwhenthecoveredpersonnolongerneedstheSSItocarryouttransportationsecurity
measures.
(2)Exception.Paragraph(b)(1)ofthissectiondoesnotrequireaStateorlocalgovernmentagencytodestroyinformation
thattheagencyisrequiredtopreserveunderStateorlocallaw.
FHWAHome|LegislationandRegulations|Feedback
UnitedStatesDepartmentofTransportationFederalHighwayAdministration

https://www.fhwa.dot.gov/legsregs/directives/orders/ssi/ssiregulations.htm

7/7