Privacy and Disclosure of Official Records and Information; Availability of Information and Records to the Public

Forms and Documents

Document Name	Status
Form SSA-3288 b. Consent of Release of Records - 20 CFR 401.100(a)&(b) - SSA-3288 Form and Instruction	Modified
Addendum - 0566 (Final).docx Supplementary Document	2025-07-22
Supporting Statement - 0566 (Final).docx Supporting Statement A	2025-07-22

IC Document Collections

IC ID	Document Title	Status
45121	b. Consent of Release of Records - 20 CFR 401.100(a)&(b) - SSA-3288 Form and Instruction	Modified
45120	a. Amendment of Records - 20 CFR 401.65(a)	Modified
257878	c. Consent for Release of Records (Electronic SSA-3288-OP1)+ Other-Webform Application	Modified

ICR Details

OMB Control No: 0960-0566	ICR Reference No: 202502-0960-003
Status: Received in OIRA	Previous ICR Reference No: 202406-0960-004
Agency/Subagency: SSA	Agency Tracking No:
Title: Privacy and Disclosure of Official Records and Information; Availability of Information and Records to the Public
Type of Information Collection: Revision of a currently approved collection	Common Form ICR:  No
Type of Review Request: Regular	Date Submitted to OIRA: 07/22/2025

	Requested	Previously Approved
Expiration Date	36 Months From Approved	04/30/2026
Responses	441,626	3,000,860
Time Burden (Hours)	646,805	2,954,216
Cost Burden (Dollars)	0	0

---

Abstract: Under the Privacy and Disclosure of Official Records and Information regulations, SSA has established methods in which the public can consent to and authorize the release of records protected under the Privacy Act of 1974, 5 U.S.C. 552a of the United States Code, and request records accessible through the Freedom of Information Act (FOIA), 5 U.S.C. 552. Consent for Release of Records SSA obtains the required consent(s) (with certain exceptions specified by law) from anyone requesting information in SSA systems of records about another individual. We will not release information requested about an individual until we obtain the required consent from that individual. Under the Privacy Act of 1974 (5 U.S.C. 552a(b)), individuals may give SSA written consent to disclose their personal information to a third party of their choosing. In addition, individuals may have multiple needs for the disclosure of their personal information, such as for qualification for a mortgage or preemployment screenings. a. Form SSA-3288 (Consent for Release of Information): Form SSA-3288, is SSA’s preferred paper form for requests for disclosure of information based on the consent of the subject of the record. Respondents can download the SSA-3288 from ssa.gov/forms, obtain a copy at a local SSA field office, or request SSA mail a copy to them directly. Use of this form ensures compliance with SSA consent regulations at 20 CFR 401.100. SSA also collects consent on other writings, including non-SSA forms often used by large employers, that incorporate SSA-approved consent language. b. Form SSA-3288-OP1 (Consent for Disclosure of Records Protected Under the Privacy Act): The Form SSA-3288-OP1 will comply with the CASES Act, OMB M-21-04, and SSA consent regulations at 20 CFR 401.100. The CASES Act directed OMB to develop templates for, among other things, electronic consents for SSA to disclose records protected by the Privacy Act of 1974 to third parties. OMB implemented that statutory directive in memorandum M-21-04. SSA developed the SSA-3288-OP1 pursuant to the CASES Act and M-21-04. The public will access the webform application that populates Form SSA-3288-OP1 on the Internet by selecting the ‘‘Electronic Request for Consent to Disclose’’ link which will be posted at www.ssa.gov/privacy. The respondents are individuals consenting to, authorizing, and requesting SSA disclosure of records protected by the Privacy Act of 1974 to third parties.

---

Authorizing Statute(s): US Code: 5 USC 552 Name of Law: The Freedom of Information Act
   US Code: 5 USC 552a Name of Law: The Privacy Act of 1974
  

Citations for New Statutory Requirements: None

---

Associated Rulemaking Information
RIN:	Stage of Rulemaking:	Federal Register Citation:	Date:
	Not associated with rulemaking

---

Federal Register Notices & Comments
60-day Notice:	Federal Register Citation:	Citation Date:
	90 FR 21817	05/21/2025
30-day Notice:	Federal Register Citation:	Citation Date:
	90 FR 34327	07/21/2025
Did the Agency receive public comments on this ICR? No

---

Number of Information Collection (IC) in this ICR: 3

IC Title	Form No.	Form Name
a. Amendment of Records - 20 CFR 401.65(a)
b. Consent of Release of Records - 20 CFR 401.100(a)&(b) - SSA-3288	SSA-3288	Consent for Release of Information
c. Consent for Release of Records (Electronic SSA-3288-OP1)+

---

ICR Summary of Burden

	Total Request	Previously Approved	Change Due to New Statute	Change Due to Agency Discretion	Change Due to Adjustment in Estimate	Change Due to Potential Violation of the PRA
Annual Number of Responses	441,626	3,000,860	0	0	-2,559,234	0
Annual Time Burden (Hours)	646,805	2,954,216	0	0	-2,307,411	0
Annual Cost Burden (Dollars)	0	0	0	0	0	0

Burden increases because of Program Change due to Agency Discretion: No

Burden Increase Due to:

Burden decreases because of Program Change due to Agency Discretion: No

Burden Reduction Due to:

Short Statement: When we last cleared this IC, the burden was 2954,216. However, we are currently reporting a burden of 36,907 hours. This change stems from replacing the estimated number of SSA-3288-OP1 submissions used in the prior calculations with the actual number of submissions received in FY 2024 based on current MI data. We also updated the number of SSA-3288 submissions received in FY 2024. We re-evaluated our MI data and noticed the previously reported Number of Respondents for the SSA-3288 was inaccurate. There is no change to the burden time per response. Although the number of responses changed, SSA did not take any actions to cause this change. We included FY 2024 updated data in the Estimates of Public Reporting Burden chart cited in #12 above. *Note: The total burden reflected in ROCIS is 646,805, while the burden cited in #12 of the Supporting Statement is 36,907. This discrepancy is because the ROCIS burden reflects the following components: field office waiting time + a rough estimate of a 30-minute, one-way, drive burden + learning costs. In contrast, the chart in #12 of the Supporting Statement reflects actual burden.

---

Annual Cost to Federal Government: $8,516,682

Does this IC contain surveys, censuses, or employ statistical methods? No

Does this ICR request any personally identifiable information (see OMB Circular No. A-130 for an explanation of this term)? Please consult with your agency's privacy program when making this determination.     Yes

Does this ICR include a form that requires a Privacy Act Statement (see 5 U.S.C. §552a(e)(3))? Please consult with your agency's privacy program when making this determination.     Yes

Is this ICR related to the Affordable Care Act [Pub. L. 111-148 & 111-152]? No

Is this ICR related to the Dodd-Frank Wall Street Reform and Consumer Protection Act, [Pub. L. 111-203]? No

Is this ICR related to the American Recovery and Reinvestment Act of 2009 (ARRA)? No

Is this ICR related to the Pandemic Response? No

---

Common Form ICR:  No

---

On behalf of this Federal agency, I certify that the collection of information encompassed by this request complies with 5 CFR 1320.9 and the related provisions of 5 CFR 1320.8(b)(3).

The following is a summary of the topics, regarding the proposed collection of information, that the certification covers:

(a) It is necessary for the proper performance of agency functions;

(b) It avoids unnecessary duplication;

(c) It reduces burden on small entities;

(d) It uses plain, coherent, and unambiguous language that is understandable to respondents;

(e) Its implementation will be consistent and compatible with current reporting and recordkeeping practices;

(f) It indicates the retention periods for recordkeeping requirements;

(g) It informs respondents of the information called for under 5 CFR 1320.8 (b)(3) about:

(i) Why the information is being collected;

(ii) Use of information;

(iii) Burden estimate;

(iv) Nature of response (voluntary, required for a benefit, or mandatory);

(v) Nature and extent of confidentiality; and

(vi) Need to display currently valid OMB control number;

(h) It was developed by an office that has planned and allocated resources for the efficient and effective management and use of the information to be collected.

(i) It uses effective and efficient statistical survey methodology (if applicable); and

(j) It makes appropriate use of information technology.

If you are unable to certify compliance with any of these provisions, identify the item by leaving the box unchecked and explain the reason in the Supporting Statement.

Certification Date: 07/22/2025

---