GSA Access Card FAQs
What is the GSA Access Card?
The GSA Access Card is a secure, smart card ID credential. It uses technology such as an embedded microchip and antenna to verify the user's identity by matching the information stored on the card with the information a user provides to obtain the card.
Why do GSA personnel need to obtain a GSA Access Card?
The Homeland Security Presidential Directive - 12 (HSPD-12) requires federal agencies to use a standard smart credential to verify the identities of all employees and contractors accessing federal buildings and information systems. The directive mandates that all government personnel obtain Personal Verification Identification (PIV) cards, which enhance security, increase government efficiency, reduce identity fraud and protect personal privacy. GSA branded the PIV credential it issues to its employees and contractors as the "GSA Access Card."
Who must obtain a GSA Access Card?
All employees must obtain a GSA Access Card. Contractors who need access to GSA information systems or network or need long-term access (more than six months) to GSA buildings and assets also must obtain a GSA Access Card.
How long does it take to obtain a GSA Access Card?
After the completion of a preliminary background check and the Access Card enrollment process, it takes an average of two weeks for the employee or contractor to be issued their GSA Access Card for activation.
Can an employee or contractor receive a short-term card for unescorted access to a GSA building while waiting to receive their GSA Access Card?
A short-term card such as Temporary Badge are no longer being used, employoees and contractors waiting to receive their GSA Access Card must follow local visitor access policies to access GSA facilities.
What are the investigation requirements to obtain a GSA Access Card?
A favorable result on a fingerprint check and the initiation of a personnel security investigation at the level of the National Agency Check with written Inquiries (NACI) or higher is required to obtain a GSA Access Card. If the final adjudication of the personnel investigation results is unfavorable, the Access Card is revoked. The employee’s or contractor’s position may require a higher investigation than the minimum investigation requirements to obtain a GSA Access Card.
How does an employee or contractor use the GSA Access Card?
GSA personnel use the GSA Access Card to access federal buildings. If the building has a Physical Access Control System (PACS), the cardholder may be required to have their GSA Access Card electronically scanned and enter their card Personal Identification Number (PIN) to gain access to the building. GSA personnel also use the GSA Access Card to log into their GSA computer and IT network, and may use the card to log into some GSA IT applications.
What are the HSPD-12 requirements for non-U.S. residents or non-U.S. citizen contractors?
GSA will request the following checks for contractors who have been a U.S. resident for at least three consecutive years but do not have U.S. citizenship:
- FBI Fingerprint and Name Check
- National Crime Information Center (NCIC)/Interstate Identification Index (III)/National Law Enforcement Telecommunications System (NLETS)/Wanted Person Check
- Citizen and Immigration Services Check (CIS)/e-Verify
Non-U.S. citizens who do not meet the three-year resident requirement and receive a favorable result on the required checks for initial access will not received a GSA Access Card until the three-year residency requirement is met. Requesting officials will need to complete a short-term or Special Agreement Check (SAC) every six months until the three-year residency requirement is met, at which point an appropriate investigations of Tier 1 (formerly NACI) or higher should be requested.
What should someone do if they find a lost GSA Access Card?
Found GSA Access Cards should be given to the security personnel at a GSA work location or dropped in any mailbox to be mailed to the address printed on the back of the card.
What information is stored on the GSA Access Card?
The GSA Access Card is encrypted to protect the data stored on the card, which includes the employee’s or contractor’s:
- Full legal name
- Facial photograph
- Organization affiliation
- Digital representation of biometric identifiers (fingerprints)
- Cryptographic keys (digital signature)
GSA Access Cards do not contain personal information, such as a social security number, date of birth, or personal address.
What steps have been taken to protect privacy information?
GSA has taken strong steps to maintain security for Personally Identifiable Information (PII) through review, transmission, storage, and destruction procedures using the following methods:
All card holders are informed of exactly what data has been collected to verify their identities.
Securing IT Systems:
All GSA IT systems must store and transmit data securely and must have received a completed a Privacy Impact Assessment (PIA) filed with the Privacy Office. The PIA ensures that the IT system complies with federal and GSA privacy regulations.
Securing Paper Forms
All paper forms containing PII data must be stored and transmitted in accordance with the GSA IT Security Policy and are protected from any unauthorized disclosure.
Designating Staff Roles:
All staff members who handle GSA Access Cards and related PII have carefully designated roles, marked by clearly defined parameters on who can access private information and what they are authorized to do with it.
Where may I obtain additional help?
Employees should contact their Human Resource Officer (HRO) Point of Contact while contractors should contact their Regional OMA POC or Central Office HSSO POC. These officials serve as the primary points of contact for questions related to the credentialing process and personnel investigation requests, and can provide advice on how to proceed.
For general information, email the The Office of Mission Assurance (OMA) HSPD-12 Branch at email@example.com.
What should I do if I lose my GSA Access Card?
- Your supervisor
- the security office,
- the GSA IT Service Desk and
- Your Regional OMA POC or Central Office HSSO POC (Contractors only)
Immediately contact the GSA's IT Service Desk at 866-450-5250 to complete a security incident report if you have been provided a government furnished laptop. You will also need to notify your supervisor and security office, as they will notify the appropriate people for a replacement card. Contractors will additionally need to notify your Regional OMA POC or Central Office HSSO POC. They will provide your with the Lost or Stolen GSA Access Card Replacement Request form to be signed by your supervisor for employees or COR for contractors, notify the appropriate people for a replacement card, and order a replacement card. You will NOT need to go through the enrollment process again to receive an updated card. Until you receive your replacement card, you will follow the local visitor access policy to enter agency buildings.
The Office of Mission Assurance (OMA) HSPD-12 Branch will be notified by your POC to terminate your lost card to prevent other from using it. No one can access your limited encrypted information on the card after it is terminated.
If I am a contractor, when should I return my GSA Access Card?
All GSA contractors must return GSA Access Cards to their Requesting OMA POC or central Office HSSO POC on or before their last day of work for any of the following conditions:
- When the contract is completed or terminated,
- When the individual GSA Access Card holder is no longer required by the contract vendor for contract performance,
- If the individual GSA Access Card holder’s employment is completed or terminated by the contract vendor, or
- If an unfavorable suitability determination has been made for any contractor
If my contracting company works on multiple GSA contracts or has another contract coming soon, can I just keep my GSA Access Card when I switch projects?
No, you may not do so without written authorization from the GSA Requesting Official responsible for your new project. GSA Access Cards are issued to contractors on a per-contract basis to ensure that adequate levels of risk screening have been performed. If you will transition to a new contract or are working on multiple contracts within GSA, you should request that your Vendor POC contact the GSA Requesting Official to determine if your GSA Access Card can be used for multiple contracts. You may be required to fill out a new Contractor Information Worksheet (CIW). You may ultimately be able to keep your GSA Access Card as you transition to a new project, but that decision must be made by your GSA Requesting Official.
Who is my GSA Requesting Official?
RequestingOfficials are authorized to request personnel investigations and credentials for contractors. They are appointed by the Contracting Officer to serve as a Contractor Requesting Official. Examples of Requesting Officials include Contracting Officer's Representatives (CORs), Project Managers, PBS Building Managers, and Regional OMA and Central Office HSSO POCs.