Privacy Act Resources

The Judicial Redress Act, a public law, extends certain rights of judicial remedies established under the Privacy Act of 1974.

Governs the requirement of PIAs and PTAs for Information Technology systems.

The FRA provides that “the head of each Federal agency shall make and preserve records containing adequate and proper documentation of the organization, functions, policies, decisions, procedures, and essential transactions of the agency and designed to furnish the information necessary to protect the legal and financial rights of the Government and of persons directly affected by the agency’s activities.” [44 U.S.C. § 3101]

Federal agencies are required to disclose any information requested under the FOIA unless it falls under one of nine exemptions which protect interests such as personal privacy, national security, and law enforcement.

The Paperwork Reduction Act (PRA), signed into law in 1980 and reauthorized in 1995, provides the statutory framework for the Federal government’s collection, use, and dissemination of information.

The Federal Privacy Council is the principal interagency forum established by Executive Order 13719 to improve the privacy practices of agencies. The Federal Privacy Council seeks to strengthen the protections of personal information and privacy rights across the Federal Government.

Suspected or confirmed PII incidents are reported within 1 hour of discovery to the Cybersecurity Defense Operations Division through the Incident Reporting Portal or via the CPOC Cyber Incident Hotline by calling 1-866-905-6890.