(a) Any Person desiring access to the Limited Access DMF must certify in accordance with this part. Upon acceptance of a Person's certification by NTIS, such Person will be a Certified Person, will be entered into the publicly available list of Certified Persons maintained by NTIS, and will be eligible to access the Limited Access DMF made available by NTIS through subscription.

(b) Certification under this part is not required for any Person to access the Open Access DMF made available by NTIS; however, a Certified Person may also access the Open Access DMF.

(a) In order to become certified under the certification program established under this part, a Person must submit a completed certification statement and any required documentation, using the most current version of the Limited Access Death Master File Subscriber Certification Form, and its accompanying instructions at https://dmf.ntis.gov, together with the required fee.

(b) In addition to the requirements under paragraph (a) of this section, in order to become certified, a Person must submit a written attestation from an Accredited Conformity Assessment Body that such Person has systems, facilities, and procedures in place as required under § 1110.102(a)(2). Such attestation must be based on the Accredited Conformity Assessment Body's review or assessment conducted no more than three years prior to the date of submission of the Person's completed certification statement, but such review or assessment need not have been conducted specifically or solely for the purpose of submission under this part.

In order to be certified to be eligible to access the Limited Access DMF under the certification program established under this part, a Person shall certify, in the manner set forth in this part and pursuant to section 1001 of title 18, United States Code, that

(a) Such Person's access to the Limited Access DMF is appropriate because:

(1) Such Person has a legitimate fraud prevention interest, or has a legitimate business purpose pursuant to a law, governmental rule, regulation, or fiduciary duty, and shall specify the basis for so certifying;

(2) Such Person has systems, facilities, and procedures in place to safeguard the accessed information, and experience in maintaining the confidentiality, security, and appropriate use of accessed information, pursuant to requirements reasonably similar to the requirements of section 6103(p)(4) of the Internal Revenue Code of 1986;

(3) Such Person agrees to satisfy such similar requirements; and

(4) Such Person shall not, with respect to Limited Access DMF of any deceased individual:

(i) Disclose such deceased individual's Limited Access DMF to any person other than a person who meets the requirements of paragraphs (a)(1) through (3) of this section;

(ii) Disclose such deceased individual's Limited Access DMF to any person who uses the information for any purpose other than a legitimate fraud prevention interest or a legitimate business purpose pursuant to a law, governmental rule, regulation, or fiduciary duty;

(iii) Disclose such deceased individual's Limited Access DMF to any person who further discloses the information to any person other than a person who meets the requirements of paragraphs (a)(1) through (3) of this section; or

(iv) Use any such deceased individual's Limited Access DMF for any purpose other than a legitimate fraud prevention interest or a legitimate business purpose pursuant to a law, governmental rule, regulation, or fiduciary duty.

(b) The certification required in this section shall state whether such Person intends to disclose such deceased individual's DMF to any person, and if so, shall state the manner of such disclosure and how such Person will ensure compliance with paragraphs (a)(4)(i) through (iii) of this section.

Disclosure by a Person certified under this part of Limited Access DMF to another Person certified under this part shall be deemed to satisfy the disclosing Person's obligation to ensure compliance with § 1110.102(a)(4)(i) through (iii).

False certification as to any element of § 1110.102(a)(1) through (4) shall be grounds for revocation of certification, in addition to any other penalties at law. A Person properly certified who thereafter becomes aware that the Person no longer satisfies one or more elements of § 1110.102(a) shall promptly inform NTIS thereof in writing.

(a) A Certified Person may renew its certification status by submitting, on or before the date of expiration of the term of its certification, a completed certification statement in accordance with § 1110.101, together with the required fee, indicating on the form NTIS FM161 that it is a renewal, and also indicating whether or not there has been any change in any basis previously relied upon for certification.

(b) Except as may otherwise be required by NTIS, where a Certified Person seeking certification status renewal has, within a three-year period preceding submission under paragraph (a) of this section, previously submitted a written attestation under § 1110.101(b), or has within such period been subject to a satisfactory audit under § 1110.201, such Certified Person shall so indicate on the form NTIS FM161, and shall not be required to submit a written attestation under § 1110.101(b).

(c) A Certified Person who submits a certification statement, attestation (if required) and fee pursuant to paragraph (a) of this section shall continue in Certified Person status pending notification of renewal or non-renewal from NTIS.

(d) A Person who is a Certified Person before November 28, 2016 shall be considered a Certified Person under this part, and shall continue in Certified Person status until the date which is one year from the date of acceptance of such Person's certification by NTIS under the Temporary Certification Program, provided that if such expiration date falls on a weekend or a federal holiday, the term of certification shall be considered to extend to the next business day.