32 C.F.R. PART 320—NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY PRIVACY
Title 32 - National Defense
Authority: Pub. L. 93–579, 88 Stat. 1986 (5 U.S.C. 552a).
Source: 66 FR 52681, Oct. 17, 2001, unless otherwise noted.
Editorial Note: Nomenclature changes to part 320 appear at 69 FR 2066, Jan. 14, 2004.
(a) This part is published pursuant to the Privacy Act of 1974, as amended (5 U.S.C. 552a), (hereinafter the “Privacy Act”). This part: (1) Establishes or advises of the procedures whereby an individual can: (i) Request notification of whether the National Geospatial-Intelligence Agency (NGA) maintains or has disclosed a record pertaining to him in any nonexempt system of records, (ii) Request a copy or other access to such a record or to an accounting of its disclosure, (iii) Request that the record be amended and (iv) Appeal any initial adverse determination of any such request; (2) Specifies those systems of records which the Director, Headquarters NGA has determined to be exempt from the procedures established by this regulation and from certain provisions of the Privacy Act. NGA policy encompasses the safeguarding of individual privacy from any misuse of NGA records and the provision of the fullest access practicable to individuals to NGA records concerning them. As used in this part: (a) Appellate authority (AA). A NGA employee who has been granted authority to review the decision of the Initial Denial Authority (IDA) that has been appealed by the Privacy Act requester and make the appeal determination for NGA on the release ability of the records in question. (b) Individual. A living person who is a citizen of the United States or an alien lawfully admitted for permanent residence. The parent of a minor or the legal guardian of any individual also may act on behalf of an individual. Corporations, partnerships, sole proprietorships, professional groups, businesses, whether incorporated or unincorporated, and other commercial entities are not “individuals”. (c) Initial denial authority (IDA). A NGA employee, or designee, who has been granted authority to make an initial determination for NGA that records requested in a Privacy Act request should be withheld from disclosure or release. (d) Maintain. Includes maintain, collect, use or disseminate. (e) Personal information. Information about an individual that identifies, relates to or is unique to, or describes him or her; e.g., a social security number, age, military rank, civilian grade, marital status, race, or salary, home/office phone numbers, etc. (f) Record. Any item, collection, or grouping of information, whatever the storage media (e.g., paper, electronic, etc.), about an individual that is maintained by NGA, including, but not limited to education, financial transactions, medical history, criminal or employment history, and that contains the individual's name or the identifying number, symbol or other identifying particulars assigned to the individual such as a finger or voice print or a photograph. (g) Routine use. The disclosure of a record outside the Department of Defense for a use that is compatible with the purpose for which the information was collected and maintained by the Department of Defense. The routine use must be included in the published system notice for the system of records involved. (h) System of records. A group of records under the control of NGA from which personal information is retrieved by the individual's name or by some identifying number, symbol, or other identifying particular assigned to the individual. (i) System manger. The NGA official who is responsible for the operation and management of a system of records. (a) Director of NGA: (1) Implements the NGA privacy program. (2) Designates the Director of the Public Affairs Office as the NGA Initial Denial Authority; (3) Designates the Chief of Staff as the Appellate Authority. (4) Designates the General Counsel as the NGA Privacy Act Officer and the principal point of contact for matters involving the NGA privacy program. (b) NIMA General Counsel: (1) Oversees systems of records maintained throughout NIMA, administered by Information Services. This includes coordinating all notices of new systems of records and changes to existing systems for publication in the (2) Coordinates all denials of requests for access to or amendment of records. (3) Assesses and collects fees for costs associated with processing Privacy Act requests and approves or denies requests for fee waivers. Fees collected are forwarded through Financial Management Directorate to the U.S. Treasury. (4) Prepares the annual report to the Defense Privacy Office. (5) Oversees investigations of allegations of unauthorized maintenance, disclosure, or destruction of records. (6) Conducts or coordinates Privacy Act training for NGA personnel as needed, including training for public affairs officers and others who deal with the public and news media. (c) NIMA System Managers: (1) Ensure that all personnel who either have access to a system of records or who are engaged in developing or supervising procedures for handling records in a system of records are aware of their responsibilities for protecting personal information. (2) Prepare notices of new systems of records and changes to existing systems for publication in the (3) Ensure that no records subject to this part are maintained for which a systems notice has not been published. (4) Respond to requests by individuals for access, correction, or amendment to records maintained pursuant to the NGA privacy program. (5) Provide recommendations to General Counsel for responses to requests from individuals for access, correction, or amendment to records. (6) Safeguard records to ensure that they are protected from unauthorized alteration or disclosure. (7) Dispose of records in accordance with accepted records management practices to prevent inadvertent compromise. Disposal methods such as tearing, burning, melting, chemical decomposition, pulping, pulverizing, shredding, or mutilation are considered adequate if the personal data is rendered unrecognizable or beyond reconstruction. (a) Upon request in person or by mail, any individual, as defined in §320.2, shall be informed whether or not any NGA system of records contains a record pertaining to him. (b) Any individual requesting such information in person may appear at NGA General Counsel Office (refer to the NGA address list at paragraph (e) of this section) or at the NGA office thought to maintain the record in question and shall provide: (1) Information sufficient to identify the record, e.g., the individual's own name, date of birth, place of birth, and, if possible, an indication of the type of record believed to contain information concerning the individual, and (2) Acceptable identification to verify the individual's identity, e.g., driver's license, employee identification card or Medicare card. (c) Any individual requesting such information by mail shall address the request to the Office of General Counsel (refer to paragraph (e) of this section) or NGA office thought to maintain the record in question and shall include in such request the following: (1) Information sufficient to identify the record, e.g., the individual's own name, date of birth, place of birth, and, if possible, an indication of the type of record believed to contain information concerning the individual, and (2) A notarized statement or unsworn declaration in accordance with 28 U.S.C. 1746 to verify the individual's identity, if, in the opinion of the NGA system manager, the sensitivity of the material involved warrants. (d) NGA procedures on requests for information. Upon receipt of a request for information made in accordance with these regulations, notice of the existence or nonexistence of any records described in such requests will be furnished to the requesting party within ten working days of receipt. (e) Written requests for access to records should be sent to NGA Bethesda, ATTN: NGA/GC, Mail Stop D–10, 4600 Sangamore Road, Bethesda, MD 20816–5003. (f) Requests for information made under the Freedom of Information Act are processed in accordance with “DoD Freedom of Information Act Program Regulation” (32 CFR part 286). (g) Requests for personal information from the Government Accounting Office (GAO) are processed in accordance with DoD Directive 7650.1 1 Copies may be obtained via Internet at http://www.dtic.mil/whs/directives. (a) Upon request by an individual made in accordance with the procedures set forth in this section, such individual shall be granted access to any pertinent record which is contained in a nonexempt NGA system of records. However, nothing in this section shall allow an individual access to any information compiled by NGA in reasonable anticipation of a civil or criminal action or proceeding. (b) Procedures for requests for access to records. Any individual may request access to a pertinent NGA record in person or by mail. (1) Any individual making such request in person shall appear at Office of General Counsel, NGA Bethesda, ATTN: NGA/GC, Mail Stop D–10, 4600 Sangamore Road, Bethesda, MD 20816–5003, and shall provide identification to verify the individuals' identity, e.g., driver's license, employee identification card, or Medicare card. (2) Any individual making a request for access to records by mail shall address such request to the Office of General Counsel, NIMA Bethesda, ATTN: NGA/GC, Mail Stop D–10, 4600 Sangamore Road, Bethesda, MD 20816–5003; and shall include therein a signed, notarized statement, or an unsworn statement or declaration in accordance with 28 U.S.C. 1746, to verify identity. (3) Any individual requesting access to records under this section in person may be accompanied by a person of the individual's own choosing while reviewing the record requested. If an individual elects to be so accompanied, said individual shall give notice of such election in the request and shall provide a written statement authorizing disclosure of the record in the presence of the accompanying person. Failure to so notify NGA in a request for access shall be deemed to be a decision by the individual not to be accompanied. (c) NGA determination of requests for access. (1) Upon receipt of a request made in accordance with this section, the NGA Office of General Counsel or NGA office having responsibility for maintenance of the record in question shall release the record, or refer it to an Initial Denial Authority, who shall: (i) Determine whether such request shall be granted. (ii) Make such determination and provide notification within 30 working days after receipt of such request. (iii) Notify the individual that fees for reproducing copies of records will be assessed and should be remitted before the copies may be delivered. Fee schedule and rules for assessing fees are contained in §320.9. (iv) Requests for access to personal records may be denied only by an agency official authorized to act as an Initial Denial Authority or Final Denial Authority, after coordination with the Office of General Counsel. (2) If access to a record is denied because such information has been compiled by NGA in reasonable anticipation of a civil or criminal action or proceeding, the individual will be notified of such determination and his right to judicial appeal under 5 U.S.C. 552a(g). (d) Manner of providing access. (1) If access is granted, the individual making the request shall notify NGA whether the records requested are to be copied and mailed. (2) If the records are to be made available for personal inspection the individual shall arrange for a mutually agreeable time and place for inspection of the record. NIMA reserves the right to require the presence of a NIMA officer or employee during personal inspection of any record pursuant to this section and to request of the individual that a signed acknowledgment of the fact be provided that access to the record in question was granted by NIMA. (a) Any individual may request amendment of a record pertaining to said individual. (b) After inspection of a pertinent record, the individual may file a request in writing with the NGA Office of General Counsel for amendment. Such requests shall specify the particular portions of the record to be amended, the desired amendments and the reasons, supported by documentary proof, if available. (a) Not later than 10 working days after receipt of a request to amend a record, in whole or in part, the NGA Office of General Counsel, or NGA office having responsibility for maintenance of the record in question, shall correct any portion of the record which the individual demonstrates is not accurate, relevant, timely or complete, and thereafter either inform the individual of such correction or process the request for denial. (b) Denials of requests for amendment of a record will be made only by an agency official authorized to act as an Initial Denial Authority, after coordination with the Office of General Counsel. The denial letter will inform the individual of the denial to amend the record setting forth the reasons therefor and notifying the individual of his right to appeal the decision to NGA. (c) Any person or other agency to whom the record has been previously disclosed shall be informed of any correction or notation of dispute with respect to such records. (d) These provisions for amending records are not intended to permit the alteration of evidence previously presented during any administrative or quasi-judicial proceeding, such as an employee grievance case. Any changes in such records should be made only through the established procedures for such cases. Further, these provisions are not designed to permit collateral attack upon what has already been the subject of an administrative or quasi-judicial action. For example, an individual may not use this procedure to challenge the final decision on a grievance, but the individual would be able to challenge the fact that such action has been incorrectly recorded in his file. (a) An individual whose request for amendment of a record pertaining to him may further request a review of such determination in accordance with this section. (b) Not later than 30 working days following receipt of notification of denial to amend, an individual may file an appeal of such decision with NGA. The appeal shall be in writing, mailed or delivered to NGA, ATTN: Mail Stop D–10, 4600 Sangamore Road, Bethesda, MD 20816–5003. The appeal must identify the records involved, indicate the dates of the request and adverse determination, and indicate the express basis for that determination. In addition, the letter of appeal shall state briefly and succinctly the reasons why the adverse determination should be reversed. (c) Upon appeal from a denial to amend a record the NGA Appellate Authority or designee shall make a determination whether to amend the record and must notify the individual of that determination by mail, not later than 10 working days after receipt of such appeal, unless extended pursuant to paragraph (d) of this section. (1) The Appellate Authority or designee shall also notify the individual of the provisions of the Privacy Act of 1974 regarding judicial review of the NGA Appellate Authority's determination. (2) If on appeal the denial to amend the record is upheld, the individual shall be permitted to file a statement setting forth the reasons for disagreement with the Appellate Authority's determination and such statement shall be appended to the record in question. (d) The Appellate Authority or designee may extend up to 30 days the time period in which to make a determination on an appeal from denial to amend a record for the reason that a fair and equitable review cannot be completed within the prescribed time period. (a) No officer or employee of NGA will disclose any record which is contained in a system of records, by any means of communication to any person or agency within or outside the Department of Defense without the request or consent of the individual to whom the record pertains, except as described in to 32 CFR 310.41; Appendix C to part 310 of this chapter; and/or a NGA Privacy Act system of records notice. (b) Any such record may be disclosed to any person or other agency only upon written request, of the individual to whom the record pertains. (c) In the absence of a written consent from the individual to whom the record pertains, such record may be disclosed only provided such disclosure is: (1) To those officers and employees of the DoD who have a need for the record in the performance of their duties. (2) Required under the Freedom of Information Act (32 CFR part 286). (3) For a routine use established within the system of records notice. (4) To the Bureau of Census for purposes of planning or carrying out a census or survey or related activity pursuant to the provisions of title 13. (5) To a recipient who has provided the NGA with adequate advance written assurance that the record will be used solely as a statistical research or reporting record and the record is transferred in a form that is not individually identifiable and will not be used to make any decisions about the rights, benefits or entitlements of an individual. (6) To the National Archives of the United States as a record which has sufficient historical or other value to warrant its continued preservation by the U.S. Government or for evaluation by the Administrator of the General Services Administration or his designee to determine whether the record has such value. (7) To another agency or to an instrumentality of any governmental jurisdiction within or under the control of the U.S. for a civil or criminal law enforcement activity authorized by law, provided the head of the agency or instrumentality has made a prior written request to the Director, NGA specifying the particular record and the law enforcement activity for which it is sought. (8) To a person pursuant to a showing of compelling circumstances affecting the health or safety of an individual, if upon such disclosure notification is transmitted to the last known address of such individual. (9) To either house of Congress, and, to the extent of the matter within its jurisdiction, any committee or subcommittee or joint committee of Congress. (10) To the Comptroller General or any of his authorized representatives in the course of the performance of the duties of the GAO. (11) Under an order of a court of competent jurisdiction. (12) To a consumer reporting agency in accordance with section 3711(f) of title 31. (d) Except for disclosures made pursuant to paragraphs (c)(1) and (2) of this section, an accurate accounting will be kept of the data, nature and purpose of each disclosure of a record to any person or agency, and the name and address of the person or agency to whom the disclosure was made. The accounting of disclosures will be made available for review by the subject of a record at his request except for disclosures made pursuant to paragraph (c)(7) of this section. If an accounting of disclosure has been made, any person or agency contained therein will be informed of any correction or notation of dispute made pursuant to section 320.6 of this part. Individuals may request copies for retention of any documents to which they are granted access to NGA records pertaining to them. Requesters will not be charged for the first copy of any records provided; however, duplicate copies will require a charge to cover costs of reproduction. Such charges will be computed in accordance with 32 CFR part 310. The Privacy Act of 1974 (5 U.S.C. 552a(i)(3)) makes it a misdemeanor subject to a maximum fine of $5,000, to knowingly and willfully request or obtain any record concerning an individual under false pretenses. The Act also establishes similar penalties for violations by NGA employees of the Act or regulations established thereunder. (a) Exempt systems of record. All systems of records maintained by the NGA and its components shall be exempt from the requirements of 5 U.S.C. 552a(d) pursuant to 5 U.S.C. 552a(k)(1) to the extent that the system contains any information properly classified under Executive Order 12958 and that is required by Executive Order to be withheld in the interest of national defense or foreign policy. This exemption is applicable to parts of all systems of records, including those not otherwise specifically designated for exemptions herein, which contain isolated items of properly classified information. (b) System identifier and name: B0210–07, Inspector General Investigative and Complaint Files. (1) Exemptions: (i) Investigative material compiled for law enforcement purposes may be exempt pursuant to 5 U.S.C. 552a(k)(2). However, if an individual is denied any right, privilege, or benefit for which he would otherwise be entitled by Federal law or for which he would otherwise be eligible, as a result of the maintenance of such information, the individual will be provided access to such information except to the extent that disclosure would reveal the identity of a confidential source. (ii) Investigative material compiled solely for the purpose of determining suitability, eligibility, or qualifications for federal civilian employment, military service, federal contracts, or access to classified information may be exempt pursuant to 5 U.S.C. 552a(k)(5), but only to the extent that such material would reveal the identity of a confidential source. (iii) Therefore, portions of this system of records may be exempt pursuant to 5 U.S.C. 552a(k)(2) and/or (k)(5) from the following subsections of 5 U.S.C. 552a(c)(3), (d), (e)(1), (e)(4)(G), (H) and (I), and (f). (2) Authority: 5 U.S.C. 552a(k)(2) and (k)(5). (3) Reasons: (i) From subsection (c)(3) because to grant access to the accounting for each disclosure as required by the Privacy Act, including the date, nature, and purpose of each disclosure and the identity of the recipient, could alert the subject to the existence of the investigation or prosecutable interest by the NGA or other agencies. This could seriously compromise case preparation by prematurely revealing its existence and nature; compromise or interfere with witnesses or make witnesses reluctant to cooperate; and lead to suppression, alteration, or destruction of evidence. (ii) From subsections (d) and (f) because providing access to investigative records and the right to contest the contents of those records and force changes to be made to the information contained therein would seriously interfere with and thwart the orderly and unbiased conduct of the investigation and impede case preparation. Providing access rights normally afforded under the Privacy Act would provide the subject with valuable information that would allow interference with or compromise of witnesses or render witnesses reluctant to cooperate; lead to suppression, alteration, or destruction of evidence; enable individuals to conceal their wrongdoing or mislead the course of the investigation; and result in the secreting of or other disposition of assets that would make them difficult or impossible to reach in order to satisfy any Government claim growing out of the investigation or proceeding. (iii) From subsection (e)(1) because it is not always possible to detect the relevance or necessity of each piece of information in the early stages of an investigation. In some cases, it is only after the information is evaluated in light of other evidence that its relevance and necessity will be clear. (iv) From subsections (e)(4)(G) and (H) because this system of records is compiled for investigative purposes and is exempt from the access provisions of subsections (d) and (f). (v) From subsection (e)(4)(I) because to the extent that this provision is construed to require more detailed disclosure than the broad, generic information currently published in the system notice, an exemption from this provision is necessary to protect the confidentiality of sources of information and to protect privacy and physical safety of witnesses and informants. NGA will, nevertheless, continue to publish such a notice in broad generic terms, as is its current practice. (vi) Consistent with the legislative purpose of the Privacy Act of 1974, NGA will grant access to nonexempt material in the records being maintained. Disclosure will be governed by NGA's Privacy Regulation, but will be limited to the extent that the identity of confidential sources will not be compromised; subjects of an investigation of an actual or potential criminal or civil violation will not be alerted to the investigation; the physical safety of witnesses, informants and law enforcement personnel will not be endangered; the privacy of third parties will not be violated; and that the disclosure would not otherwise impede effective law enforcement. Whenever possible, information of the above nature will be deleted from the requested documents and the balance made available. The controlling principle behind this limited access is to allow disclosures except those indicated in this paragraph. The decisions to release information from these systems will be made on a case-by-case basis. [66 FR 52681, Oct. 17, 2001, as amended at 67 FR 55724, Aug. 30, 2002]
Title 32: National Defense
PART 320—NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY PRIVACY
Section Contents
§ 320.1 Purpose and scope.
§ 320.2 Definitions.
§ 320.3 Responsibilities.
§ 320.4 Procedures for requesting information.
§ 320.5 Disclosure of requested information.
§ 320.6 Request for correction or amendment to record.
§ 320.7 Agency review of request for correction or amendment of record.
§ 320.8 Appeal of initial adverse agency determination on correction or amendment.
§ 320.9 Disclosure of record to person other than the individual to whom it pertains.
§ 320.10 Fees.
§ 320.11 Penalties.
§ 320.12 Exemptions.
§ 320.1 Purpose and scope.
top
§ 320.2 Definitions.
top
§ 320.3 Responsibilities.
top
§ 320.4 Procedures for requesting information.
top
§ 320.5 Disclosure of requested information.
top
§ 320.6 Request for correction or amendment to record.
top
§ 320.7 Agency review of request for correction or amendment of record.
top
§ 320.8 Appeal of initial adverse agency determination on correction or amendment.
top
§ 320.9 Disclosure of record to person other than the individual to whom it pertains.
top
§ 320.10 Fees.
top
§ 320.11 Penalties.
top
§ 320.12 Exemptions.
top
