Paperwork Reduction Act (PRA)

The Paperwork Reduction Act of 1980 (reauthorized and strengthened in 1995) requires that every federal agency obtain approval from the Office of Management and Budget before collecting information from the public — whether through forms, surveys, questionnaires, reporting requirements, or recordkeeping mandates. The PRA created the Office of Information and Regulatory Affairs (OIRA) within OMB, established Chief Information Officers at every agency, and provides a critical public protection: no person can be penalized for failing to respond to a federal information collection that doesn't display a valid OMB control number.

Current Law (2026)

Parameter	Value
Governing statute	Paperwork Reduction Act (44 U.S.C. §§ 3501–3521)
Oversight office	Office of Information and Regulatory Affairs (OIRA) within OMB
Approval required	OMB must approve all federal information collections before use
OMB control number	Required on every approved collection; displayed on forms
Approval duration	Maximum 3 years; must be renewed
Public notice	60-day + 30-day Federal Register notices required before approval
Public protection	No penalty for noncompliance with unapproved collections
CIO requirement	Every agency must designate a Chief Information Officer
Estimated annual burden	~10+ billion hours of paperwork imposed on the public

Legal Authority

44 U.S.C. § 3501 — Purposes (minimize paperwork burden, maximize utility of government information, coordinate federal information policy, ensure information quality)
44 U.S.C. § 3503 — Office of Information and Regulatory Affairs (establishes OIRA within OMB; Administrator appointed by President with Senate confirmation; administers the PRA)
44 U.S.C. § 3506 — Federal agency responsibilities (agencies must designate a Chief Information Officer, manage information resources, evaluate information collections, and reduce burden)
44 U.S.C. § 3507 — Public information collection activities (no agency may collect information without OMB approval; agencies must justify the need, evaluate burden, and publish Federal Register notices for public comment)
44 U.S.C. § 3512 — Public protection (no person shall be subject to any penalty for failing to comply with an information collection that does not display a valid OMB control number or that fails to inform the respondent that response is voluntary when applicable)

Key Numbers

10+ billion hours per year — total estimated annual burden the federal government imposes on the public through information collection requirements; this is the aggregate time individuals, businesses, and other entities spend completing federal forms, surveys, and mandatory reports; the IRS alone accounts for roughly 80% of this total
IRS Form 1040: the most burdensome single information collection in the federal government — estimated at 13+ hours per filer for a typical individual return; the PRA OMB control number "1545-0074" appears on the 1040 and its variants, confirming OMB has reviewed and approved this collection and quantified its burden
~3,000+ information collection requests reviewed annually by OIRA; each requires documentation of necessity, burden estimates by respondent category, and justification that the information cannot be obtained from existing federal data — OIRA can and does reject collections it finds duplicative, excessive, or insufficiently justified
60-day + 30-day public notice process: two rounds of Federal Register notice before any new information collection takes effect; the 60-day comment period allows the public to challenge the necessity or scope of a proposed collection before it reaches OMB; the 30-day period follows agency consideration of comments and formal OMB submission — the entire process takes a minimum of 4-6 months for routine collections
3-year maximum approval period: all OMB approvals expire and must be renewed; agencies must re-justify ongoing collections every three years, providing an automatic review cycle for whether a standing collection is still necessary
Emergency clearance: the PRA provides a 29-day turnaround for collections needed urgently; emergency clearance was used extensively during COVID-19 for benefit program applications, economic surveys, and public health data collections; still requires OMB approval but compresses the public notice period
OMB control number format: always appears as "OMB No. XXXX-XXXX" — the four-digit agency identifier followed by a four-digit collection number; no valid OMB control number = no legal obligation to respond, and no penalty for noncompliance; this protection applies to all federal information collections regardless of how they're delivered (paper forms, online portals, email surveys)

How It Works

The PRA's central mechanism is OMB clearance. Before any federal agency can ask the public for information — whether through a tax form, a survey, a regulatory reporting requirement, or a grant application — it must submit the proposed collection to OIRA for review and approval. The process requires two rounds of public notice: a 60-day notice in the Federal Register inviting public comment on the proposed collection, followed by a 30-day notice after the agency has considered comments and submitted the collection to OMB. OIRA then approves, modifies, or disapproves the collection.

Approved collections receive an OMB control number — the familiar number displayed on federal forms (e.g., "OMB No. 1545-0074" on the IRS Form 1040). This number signals that the collection has been reviewed for necessity and burden minimization. Approvals last a maximum of three years, after which the agency must seek renewal.

The public protection provision (§ 3512) is the PRA's most direct impact on individuals: you cannot be penalized for failing to respond to an information collection that doesn't display a valid OMB control number. If a federal agency sends you a form without an OMB number, you have no legal obligation to respond, and the agency cannot sanction you for not responding. This provision gives the PRA real enforcement power — agencies that skip the clearance process risk having their collections declared unenforceable.

OIRA — created by the PRA — has become one of the most influential offices in the federal government. Beyond PRA administration, OIRA reviews significant federal regulations under Executive Order 12866 — part of the broader APA rulemaking process — making it the central clearinghouse for both regulatory policy and information policy. The Regulatory Flexibility Act imposes complementary requirements to minimize burden on small entities.

The PRA also established Chief Information Officers at every federal agency, responsible for information resources management, IT investment oversight, and PRA compliance. This CIO requirement has shaped how agencies manage technology and data.

The burden estimate process requires agencies to quantify the time and cost the public spends responding to each information collection. Total estimated annual paperwork burden across the federal government exceeds 10 billion hours, with the IRS accounting for the largest share (tax compliance paperwork).

How It Affects You

If you receive a federal questionnaire, survey, or demand for information and wonder if you have to respond: Look for the OMB control number — it appears on every lawfully approved federal form as "OMB No. XXXX-XXXX" and must include a statement of whether response is voluntary or mandatory. If there is no OMB control number, you cannot be penalized for not responding. This isn't a technicality — it's the PRA's central enforcement mechanism. If you received something that looks like a federal information demand with no OMB number (or an expired one), you can ignore it without legal consequence. If you're unsure whether a collection is legitimate, OIRA maintains a public database of approved collections at reginfo.gov where you can verify any OMB number.

If your company is subject to a new federal reporting or recordkeeping requirement: The 60-day public comment period in the Federal Register is your opportunity to push back on burden estimates before an information collection becomes effective. If an agency proposes a new reporting requirement and estimates it will take 2 hours per form per quarter for your industry, but you know from operational reality it will take 12 hours, the PRA comment process is the formal channel to submit that correction — with documentation. OIRA weighs these comments when deciding whether to approve, modify, or reject a collection. Industry associations commonly coordinate comments on significant new collections to build an evidence-based record. Submitting substantive, well-documented comments can result in reduced reporting frequency, simplified form design, or outright disapproval of excessive requirements.

If you work in a federal agency and need to create a new form or survey: Budget 4-6 months minimum for routine PRA clearance from first draft to approval — longer if public comments require significant revision. The process requires a burden estimate (how long will it take each respondent?), a justification for why this information is needed and can't be obtained from existing sources, and certification from your agency's Chief Information Officer. Emergency clearance (29 days) is available for genuine urgency but requires OIRA approval of the emergency determination itself. Build PRA timing into your project schedule from the beginning — waiting until a form is already designed and you need to deploy it is too late.

If you're a small business hit with an unexpected federal regulatory information demand: If the demand doesn't carry a current OMB control number, you have no legal obligation to respond, and the agency cannot sanction you for noncompliance. If it does have a current OMB number, the form's instructions should state clearly whether response is mandatory or voluntary. Mandatory collections carry legal authority (specified in the form instructions) — but even mandatory collections are subject to the PRA's anti-harassment provision: agencies cannot use information collection as a harassment mechanism, and OIRA can terminate any collection that exceeds its approved purpose. For ongoing compliance burdens (quarterly or annual reporting requirements), check whether your reporting falls below any small entity exemption thresholds specified in the collection's instructions — PRA approvals sometimes include reduced frequency or simplified reporting for small respondents.

State Variations

The PRA applies to federal information collections. State-level paperwork requirements are governed by state law:

Some states have adopted their own versions of paperwork reduction requirements
State tax forms and regulatory filings are not subject to the federal PRA
When federal programs delegate reporting to states (e.g., Medicaid, environmental programs), the federal PRA applies to the information the federal agency requires but not to additional state-specific requirements

Implementing Regulations

5 CFR Part 1320 — OMB regulations controlling paperwork burdens: information collection request procedures, OMB approval number requirements, public notice and comment, and clearance procedures for agency forms.

Pending Legislation

S 3411 — Would exempt the SEC Advocate for Small Business Capital Formation from PRA information collection requirements. Status: Introduced.

Recent Developments

The DOGE deregulatory agenda has generated unusual pressure on the PRA framework from two directions simultaneously. On one side, OMB under the new administration has been reviewing existing information collections for elimination or consolidation, consistent with broader regulatory reduction goals — some reporting requirements that businesses have long found burdensome are being targeted for streamlining or rescission. On the other side, some deregulatory initiatives have been challenged on grounds that the elimination of data collection itself requires PRA processes when agencies are redesigning how they collect (or stop collecting) regulatory compliance data. The net effect on the 10+ billion hour annual burden figure is unclear; reducing federal reporting requirements in some areas while the regulatory environment shifts in others creates offsetting movements that OIRA's annual Information Collection Budget report tracks, but with a multi-year lag.

The EVIDENCE Act of 2018 — which added Chief Data Officers, an Interagency Council on Statistical Policy, and evidence-building requirements to the PRA framework — created a new layer of data governance infrastructure that the PRA's basic clearance process didn't contemplate. Agencies now must maintain evidence-building plans that identify key policy questions and the data needed to answer them, connecting the PRA's burden-reduction mandate to a positive data strategy: what information should the government collect, not just how much is too much. This shift from purely defensive paperwork reduction to affirmative evidence-building has created tension in agencies trying to both reduce compliance burden and build better administrative data. The Chief Data Officer (CDO) role, required at all CFO Act agencies by the EVIDENCE Act, is now a significant PRA-adjacent compliance function alongside the long-standing Chief Information Officer requirement.

The PRA's coverage of digital-era information collection methods remains genuinely unsettled. When the Act was written (1980, substantially revised 1995), "information collection" meant paper forms and structured surveys. Today, agencies collect public information through website analytics, application programming interfaces (APIs) that require structured data submission, mandatory electronic reporting systems, and increasingly through automated data sharing arrangements with state and local governments. OIRA's 2016 PRA Guide and subsequent guidance has attempted to clarify which digital activities require PRA clearance, but the lines remain contested: does a mandatory online registration portal require a PRA clearance? Does a dataset download requirement trigger burden estimation? Does collecting geolocation data as a condition of a federal permit constitute an information collection? These questions matter practically — agencies that proceed without clearance risk having their collections challenged as invalid, and third parties have successfully invoked the PRA's public-protection provision to challenge digital collections that lacked OMB numbers. The next major revision of OMB's PRA guidance is expected to address some of these questions more definitively.