32 C.F.R. § 310.5 Policy.
Title 32 - National Defense
(a) The privacy of an individual is a personal and fundamental right that shall be respected and protected. (b) Personal information shall be collected, maintained, used or disclosed to ensure that: (1) It shall be relevant and necessary to accomplish a lawful DoD purpose required to be accomplished by statute or Executive Order. (2) It shall be collected to the greatest extent practicable directly from the individual. (3) The individual shall be informed as to why the information is being collected, the authority for collection, what uses will be made of it, whether disclosure is mandatory or voluntary, and the consequences of not providing that information. (4) It shall be relevant, timely, complete and accurate for its intended use; and (5) Appropriate administrative, technical, and physical safeguards shall be established, based on the media (e.g., paper, electronic, etc.) involved, to ensure the security of the records and to prevent compromise or misuse during storage or transfer. (c) No record shall be maintained on how an individual exercises rights guaranteed by the First Amendment to the Constitution, except as follows: (1) Specifically authorized by statute. (2) Expressly authorized by the individual on whom the record is maintained; or (3) When the record is pertinent to and within the scope of an authorized law enforcement activity. (d) Notices shall be published in the (e) Individuals shall be permitted, to the extent authorized by 5 U.S.C. 552a and DoD 5400.11–R, to: (1) Determine what records pertaining to them are contained in a system of records. (2) Gain access to such records and to obtain a copy of those records or a part thereof. (3) Correct or amend such records on a showing that the records are not accurate, relevant, timely or complete. (4) Appeal a denial of access or a request for amendment. (f) Disclosure of records pertaining to an individual from a system of records shall be prohibited except with the consent of the individual or as otherwise authorized by 5 U.S.C. 552a, DoD 5400.11–R, and DoD 5400.7–R.7 7 See footnote 1 to §310.1. (g) Disclosure of records pertaining to personnel of the National Security Agency, the Defense Intelligence Agency, the National Reconnaissance Office, and the National Geospatial-Intelligence Agency shall be prohibited to the extent authorized by Public Law 86–36 (1959) and 10 U.S.C. 424. Disclosure of records pertaining to personnel of overseas, sensitive, or routinely deployable units shall be prohibited to the extent authorized by 10 U.S.C. 130b. Disclosure of medical records is prohibited except as authorized by DoD 6025.18–R.2 2 See footnote 1 to §310.1. (h) Computer matching programs between the DoD Components and the Federal, State, or local governmental agencies shall be conducted in accordance with the requirements of 5 U.S.C. 552a, OMB Circular A–130, and DoD 5400.11–R. (i) DoD personnel and system managers shall conduct themselves, consistent with §310.8 so that personal information to be stored in a system of records only shall be collected, maintained, used, and disseminated as is authorized by this part, 5 U.S.C. 552a, and DoD 5400.11–R. (j) DoD Field Activities shall receive Privacy Program support from the Director, Washington Headquarters Services. [65 FR 7732, Feb. 16, 2000, as amended at 70 FR 70490, Nov. 22, 2005]
Title 32: National Defense
PART 310—DoD PRIVACY PROGRAM
Subpart A—DoD Policy
§ 310.5 Policy.

