As a general rule, comparison programs with federal data sets must be implemented as part of a correspondence agreement between the source and the recipient agencies. The correspondence agreement describes the purpose and procedures for comparison and defines the protection of matching data sets. The agreement is subject to verification and approval by a Data Integrity Board. Any federal authority involved in a matching operation must set up a Data Integrity Board. In accordance with Article 5.C No. 552a (o), records contained in a data system may only be disclosed to a receiving agency or a non-federal agency for use in a computer matching program (CMA) between the source agency and the receiving agency or a non-federal agency. The department requires that THE CMAs be developed and approved for each matching program within the meaning of the statute. Notes for approved computer matching agreements that have been published in the federal registry are listed below: A computer matching program is required, pursuant to the Privacy Act of 1974, for any computerized comparison of two automated data sets or a non-federal registration system, to determine or verify eligibility or compliance, as it relates to cash or in-kind payments or under federal programs. The Computer Matching and Privacy Protection Act of 1988 (the Act), Pub.L.100-503, amends the Privacy Act of 1974 and establishes procedural safeguards that compromise the use of Privacy Act data by authorities in the execution of certain types of computerized matching programs. The law regulates the use of computer registration by federal authorities, who are required to keep personally identifiable data records in a recording system subject to the Data Protection Act.
The law requires agencies to have written agreements setting out the conditions under which matches must be implemented. The law applies to computerized comparison between federal authorities of two or more automated data sets (or federal personnel or wage settlement systems) or between a federal authority and a non-federal authority. Computer matching programs are more often indicated than computer or CMA agreement agreements. Computer comparison refers to the computerized comparison of data sets for the purposes of determining or verifying eligibility for a federal benefit program or recovering payments or debts under these programs. The Computer Matching and Privacy Protection Act of 1988 regulates the use of matching computing by federal authorities. However, games organized for statistical, research, enforcement, taxation and certain other purposes are not subject to such regulation. A comparison program may be subject to the requirements of the Computer Matching Act if records are used from a Privacy Act data system during the program. If the registrations of the Federal Data Protection Act are cross-referenced with government or local datasets, the government or local comparison program may be subject to the new matching requirements.