Chemical Data Reporting

Asserting Confidential Business Information (CBI) Claims and Certification Statements

Return to Table of Contents

  1. General
    • 31.1. What are the restrictions on submitting confidential information under CDR?

      Information submitted under CDR may be claimed as confidential at the time the Form U is submitted. Submitters must provide upfront substantiation of confidentiality claims for processing and use information as well as for confidentiality claims for site or chemical identity. Confidentiality claims for data elements identified as “not known or reasonably ascertainable by” are not allowed (40 CFR 711.30(b)).

    • 31.2. Does the Frank R. Lautenberg Chemical Safety for the 21st Century Act change the requirements for substantiation of CBI claims asserted with submission of CDR forms?

      For the 2016 CDR, there is no revised or new substantiation beyond what the current regulations at 40 CFR 711.30 require. Although the Agency may revise CBI substantiation requirements by subsequent rulemaking, EPA has determined that the retention of current CBI substantiation requirements is the most practicable approach for the 2016 CDR reporting cycle, given that the submission period is already ongoing. EPA will use the answers to the CDR substantiation questions to inform the confidentiality determinations for chemical identity.

    • 31.3. TSCA section 14(c)(2) now provides that certain information will not be subject to substantiation requirements, including “[s]pecific information describing the processes used in the manufacturing or processing of a chemical substance, mixture, or article,” and “[s]pecific information regarding the use, function, or application of a chemical substance or mixture in a process, mixture or article” Do these provisions conflict with the substantiation requirements of 40 CFR 711.30?

      No. The information for which upfront substantiation is required under 40 CFR 711.30 (e.g., general use and process information collected under 40 CFR 711.15(b)(4) of CDR) is not the type of specific information that TSCA section 14(c)(2) is referring to.

    • 31.4. What must generally be considered in making a claim of confidentiality under TSCA?

      EPA’s procedures for processing and reviewing confidentiality claims are set forth at 40 CFR Part 2, Subpart B and 40 CFR 711.30. When claiming information confidential, a submitter must ensure that the information meets the regulatory criteria found at 40 CFR 2.208. Under this regulation, business information is entitled to confidential treatment if:

      1. The business has asserted a business confidentiality claim which has not expired by its terms, nor been waived, nor withdrawn;
      2. The business has satisfactorily shown that it has taken reasonable measures to protect the confidentiality of the information and that it intends to continue to take such measures;
      3. The information is not, and has not been, reasonably obtainable without the business’s consent by other persons (other than governmental bodies) by use of legitimate means (other than discovery based on a showing of special need in a judicial or quasi-judicial proceeding);
      4. No statute specifically requires disclosure of the information; and,
      5. Either –
        1. The business has satisfactorily shown that disclosure of the information is likely to cause substantial harm to the business’s competitive position, or
        2. The information is voluntarily submitted information and its disclosure would be likely to impair the Government’s ability to obtain necessary information in the future.

      n

      In addition, the Frank R. Lautenberg Chemical Safety for the 21st Century Act requires that for all claims for protection for any confidential information made with this submission the submitter certify they have:

      (i) taken reasonable measures to protect the confidentiality of the information;
      (ii) determined that the information is not required to be disclosed or otherwise made available to the public under any other Federal law;
      (iii) a reasonable basis to conclude that disclosure of the information is likely to cause substantial harm to my competitive position; and
      (iv) a reasonable basis to believe that the information is not readily discoverable through reverse engineering. 15 U.S.C. 2613(c).

      Additional requirements apply when chemical identity, site identity, or processing and use information is claimed to be confidential (See 40 CFR 711.30).

    • 31.5. How does a submitter make CBI claims and provide the required substantiation in e-CDRweb?

      CBI claims are made for CDR reporting by checking a box next to the data element. For those data elements that require upfront substantiation, checking the CBI box automatically triggers the substantiation questions. The answers must be complete and specific to the chemical substance in question.

    • 31.6. Did the Agency install a warning system in the reporting tool to remind submitters to complete required substantiation before submitting Form U?

      Yes. When a user checks a field that requires up front substantiation, a pop-up window will appear containing the substantiation questions a user needs to complete. If a user tries to save the substantiation questions without entering information into each of the required questions, the tool will show a validation warning that will require a user to enter information into the text fields. If a user clicks on the 'X' button to close the pop-up window, or on the 'Cancel' button to close the pop-up window, the check will be removed from the CBI box.

    • 31.7. Can information that is “not known or reasonably ascertainable” be claimed as confidential?

      No. Entries designated as “not known or reasonably ascertainable” (i.e., “NKRA”) may no longer be claimed as confidential (40 CFR 711.30(a)).

    • 31.8. Does the Agency contact submitters after it determines the data is non-CBI and releases it as public information?

      CBI claims made under the CDR rule must comply with certain procedural provisions in order to be recognized, and if the procedures for asserting a claim are not followed the information may be disclosed without further notification to the submitter.

      Information properly claimed as confidential may only be declassified pursuant to specific regulatory provisions. EPA has long established procedures for the protection of properly asserted CBI claims and also the review of these claims. Regarding those instances where a substantiation is required for a CBI claim but EPA concluded that it was insufficient, the Agency has procedures in place in 40 CFR part 2, subpart B that provide for notification to the submitter prior to disclosure.

    • 31.9. How will the confidentiality of CDR data submitted electronically to EPA be maintained?

      EPA maintains data security according to the Federal Information Processing Standards (FIPS) standards. The Central Data Exchange environment maintains ‘In Progress’ and ‘Submitted’ Form U’s in an encrypted state within a firewalled environment. Submissions can only be accessed by passphrase as a secondary security mechanism to prevent unauthorized access to company submissions. The submissions remain encrypted through the transmission process from CDX into EPA’s firewalled Confidential Business Information (CBI) LAN. Only once inside EPA backend systems is the data decrypted for EPA use. In summary, all data is encrypted during preparation, during transmission to EPA, and while it is maintained post submission within CDX. The information only becomes available for use once securely inside EPA systems.

    • 31.10. How do I claim my CBI substantiation answers as CBI themselves?

      In order to claim information in your answers to the required CBI substantiation questions as CBI, you must clearly identify the information that is claimed confidential by marking the specific information in each answer with a label such as “confidential business information,” “proprietary,” or “trade secret.”

  2. Part I — Company and Site Information (Blocks 2.B.1-2.B.3)
    • 32.1. Can the identity and contact information for the person listed as the technical contact for a site be claimed as confidential?

      Yes. Check the CBI box adjacent to block 2.B.3. Note that this CBI claim is a chemical-specific claim and must be made for each reported chemical substance for which the technical contact information is being claimed as confidential.

    • 32.2. How does a submitter claim the link between the identity of the company and the information submitted under CDR to be confidential?

      To claim the link between the company and the information being reported on CDR Form U as confidential, check the box next to the CBI for Company Identification field (Block 2.B.1). Also mark as confidential any correspondence that may link the company name or site to the reported.

    • 32.3. How does a submitter claim site information as CBI?

      Under CDR, a submitter may assert a confidentiality claim for the site identity (site information) for each chemical substance reported. Claiming site information confidential protects the release of the site name, address, city, county, state, zip code, and Dun & Bradstreet number. Confidentiality claims should be limited to circumstances in which they are absolutely necessary and legally justified (see 40 CFR 2.208). Note that claiming site identity confidential does not alone protect the link between the specific chemical identity and the company’s identity. It does protect the identity of the site where the chemical substance was manufactured (including imported). To claim the site address as confidential, check the site information CBI box (Block 2.B.2) on Form U. Note that written substantiation is required to claim site information as CBI.

    • 32.4. What is the difference between claiming Company Information as confidential and claiming Site Information as confidential? Should they both be claimed confidential?

      Confidentiality claims for both site and company information are to be made in conjunction with a specific chemical substance and cannot be made generically for a whole submission. A claim of confidentiality for the identity of the site may be made if the linkage of the site with a reportable chemical substance is confidential and not publicly available. Selecting the CBI box for site information protects the link between a specific chemical substance and the information reported in Part I, Section B of Form U and automatically triggers substantiation questions which must be answered and submitted as part of Form U. Claiming site identity as confidential does not protect the link between the chemical identity and the company name. Selecting the CBI box for company information protects the link between a specific chemical substance and the information reported in Part I, Section A of Form U and does not require upfront substantiation.

      Where several chemical substances are being reported, a submitter may claim the company name and/or site identity as confidential for some of the chemical substances being reported, while not making those claims for others. EPA also has observed that submitters sometimes claim only their company identity, but not their site identity, as confidential. EPA will not impute the existence of a CBI claim for site identity from a CBI claim for company identity, even if the company name appears within the site identity information. Neither will EPA impute the existence of a CBI claim for company name or site identity from a CBI claim associated with a different chemical substance.

      Top of Page

  3. Part II — Chemical Substance and Manufacturing Information (Block 2.A.1 and Blocks 2.B.4-2.B.20)