PT-8 Computer Matching Requirements is a narrow, federal control. It applies when a system or organization processes information in order to run a matching program. Most companies will mark it not applicable, and that is a legitimate answer when you can explain it.
What it means in practice
The statement lists the steps for a matching program: get approval from the Data Integrity Board, develop and enter a computer matching agreement, publish a matching notice in the Federal Register, independently verify the information before taking adverse action against a person if required, and give individuals notice and a chance to contest the findings.
The guidance describes a matching program as a computerized comparison of records from two or more automated systems of records, or one such system and records held by a non federal agency. It covers federal benefit programs and federal personnel or payroll records.
Evidence to collect
If it applies, the signed agreement, the published notice and the verification and contest procedures. If it does not, a short note recording the scope decision and who made it.
Common gaps
- A contractor runs the match for an agency and has no copy of the agreement.
How to implement it
Ask whether your system compares records in the way described. If not, write the not applicable rationale and review it when your contracts change.
Quick check
Does matching customer records in our CRM count?
No. The control concerns Privacy Act matching programs for federal benefit or personnel records, not routine deduplication.
