# Exemption of Certain Systems of Records Under the Privacy Act
> **US Department of Health and Human Services** · Final rule. · Published 2008-09-26 · Effective 2008-10-27 · 73 FR 55772
## Document
- **Document number:** E8-21909
- **Category:** hipaa-privacy
- **Sub-agency:** US Department of Health and Human Services
- **Federal Register citation:** 73 FR 55772
- **CFR reference:** 45 CFR 5
- **Publication date:** 2008-09-26
- **Effective date:** 2008-10-27
- **HHS docket:** CMS-0029-F
## Abstract

This final rule exempts four systems of records (SORs) from subsections (c)(3), (d)(1) through (d)(4), (e)(4)(G) and (H), and (f) of the Privacy Act pursuant to 5 U.S.C. 552a(k)(2): The Automated Survey Processing Environment (ASPEN) Complaint/ Incidents Tracking System (ACTS), HHS/CMS, System No. 09-70-0565; the Health Insurance Portability and Accountability Act (HIPAA) Information Tracking System (HITS), HHS/CMS, System No. 09-70-0544; the Organ Procurement Organizations System (OPOS), HHS/CMS, System No. 09-70-0575; and the Fraud Investigation Database (FID), HHS/CMS, System No. 09-70-0527.

## Source
- [Federal Register document](https://www.federalregister.gov/documents/2008/09/26/E8-21909/exemption-of-certain-systems-of-records-under-the-privacy-act)
---
*AI Analytics · CC0 1.0*