EPA proposes revisions to 40 CFR part 16 to clarify procedures related to how it safeguards personally identifiable information and to provide transparency to the public about what data the agency collects and under what circumstances it is authorized to share that data. Following the EPA's January 4, 2006, publication of a final rule that revised 40 CFR part 16 to comply with federal mandates associated with the Privacy Act (5 U.S.C. 552a), the Agency proposes to revise its Privacy Act Rules to: (1) add four new Systems of Records exempted from the Privacy Act; (2) include an appendix that lists General Routine Uses applicable to data collected from more than one system; (3) revise the process for submitting Privacy Act requests to the Agency in compliance with OMB Memorandum M-21-04 (Modernizing Access to and Consent for Disclosure of Records Subject to the Privacy Act); (4) provide clarity on how a user can provide proof of identification in order to access or change personal records in compliance with OMB Memorandum 23-04; and (5) add new provisions that place restrictions on the use of social security numbers as identifiers in compliance with the Social Security Fraud Prevention Act of 2017.