Retention Date: 03/28/2027
A. Purpose
The Creating Advanced Streamlined Electronic Services for Constituents Act of 2019 (CASES Act) and Office of Management and Budget (OMB) Memorandum M-21-04, Modernizing Access to and Consent for Disclosure of Records Subject to the Privacy Act, mandate that Federal agencies modernize the processes by which individuals may request access to records protected under the Privacy Act. The CASES Act and OMB M-21-04 require SSA to digitally accept access request forms from individuals who have been remotely identity proofed and authenticated.
To comply with the requirements of the CASES Act and OMB M-21-04 regarding Privacy Act rights to access, the agency developed Form SSA-2288-OP1, Request for Individual Access to Records Protected Under the Privacy Act.
B. Background
Form SSA-2288-OP1 is a new agency webform for members of the public to electronically request access to claims-related records. Form SSA-2288-OP1 is currently limited to users who have been successfully electronically identity proofed and authenticated, reside in the United States, are over age 18, and request access to their own claims-related records. It cannot be used to obtain records about another individual, including by parents or legal guardians seeking access to records on behalf of a minor or an adult who has been declared legally incompetent.
C. Instructions
Form SSA-2288-OP1 will be completed, signed, and submitted electronically only via Upload Documents by the record holder. The completed Form SSA-2288-OP1 will be routed via WorkTrack to the appropriate Field Office (FO) based on the user’s zip code and will include an electronic signature audit page. Form SSA-2288-OP1 is not currently available as a paper or fillable PDF form for submission by any other method.
Form SSA-2288-OP1 does not change the current procedures for processing individuals’ requests to access their own records. FOs should follow existing procedures for processing these requests, including but not limited to, assessing and collecting any applicable fee(s), contacting the individual to clarify the request (if needed), and retrieving and releasing the records.
If the access request involves medical records, please follow existing procedures in GN 03340.035.
Privacy & Disclosure Policy developed notice templates to assist Field Offices in responding to invalid or denied SSA-2288-OP1 requests. Please see the “SSA-2288-OP1 Response Letter Templates for Field Offices” document linked below in the References section.
For program and technical questions, please consult your in-line management. If further assistance is required, follow official guidance and escalate your inquiry through vHelp as directed.
References
SSA-2288-OP1 FO Template Language - 9.24.26.docx
GN 03340.010 Processing Access Requests for SSA Records
GN 03340.015 Access Requirements
GN 03340.035 Access to Medical Records
GN 03340.075 Access Request Denials and Privacy Act Appeals