32 C.F.R. PART 1801—PUBLIC RIGHTS UNDER THE PRIVACY ACT OF 1974
Title 32 - National Defense
Authority: 5 U.S.C. 552a.
Source: 64 FR 49884, Sept. 14, 1999, unless otherwise noted.
(a) Authority. This part is issued under the authority of and in order to implement the Privacy Act of 1974 (5 U.S.C. 552a) and section 102 of the National Security Act of 1947, as amended (50 U.S.C. 403). (b) Purpose in general. This part prescribes procedures for a requester, as defined herein: (1) To request notification of whether the National Counterintellingence Center (NACIC) maintains a record concerning them in any non-exempt portion of a system of records or any non-exempt system of records; (2) To request a copy of all non-exempt records or portions of records; (3) To request that any such record be amended or augmented; and (4) To file an administrative appeal to any initial adverse determination to deny access to or amend a record. (c) Other purposes. This part also sets forth detailed limitations on how and to whom NACIC may disclose personal information and gives notice that certain actions by officers or employees of the United States Government or members of the public could constitute criminal offenses. For purposes of this part, the following terms have the meanings indicated: NACIC means the United States National Counterintelligence Center acting through the NACIC Information and Privacy Coordinator; Days means calendar days when NACIC is operating and specifically excludes Saturdays, Sundays, and legal public holidays. Three (3) days may be added to any time limit imposed on a requester by this part if responding by U.S. domestic mail; ten (10) days may be added if responding by international mail; Control means ownership or the authority of NACIC pursuant to federal statute or privilege to regulate official or public access to records; Coordinator means the NACIC Information and Privacy Coordinator who serves as the NACIC manager of the information review and release program instituted under the Privacy Act; Federal agency means any executive department, military department, or other establishment or entity included in the definition of agency in 5 U.S.C. 552(f); Interested party means any official in the executive, military, congressional, or judicial branches of government, United States or foreign, or U.S. Government contractor who, in the sole discretion of NACIC, has a subject matter or physical interest in the documents or information at issue; Maintain means maintain, collect, use, or disseminate; Originator means the U.S. Government official who originated the document at issue or successor in office or such official who has been delegated release or declassification authority pursuant to law; Privacy Act or PA means the statute as codified at 5 U.S.C. 552a; Record means an item, collection, or grouping of information about an individual that is maintained by NACIC in a system of records; Requester or individual means a citizen of the United States or an alien lawfully admitted for permanent residence who is a living being and to whom a record might pertain; Responsive record means those documents (records) which NACIC has determined to be within the scope of a Privacy Act request; Routine use means, with respect to the disclosure of a record, the use of such record for a purpose which is compatible with the purpose for which the record is maintained; System of records means a group of any records under the control of NACIC from which records are retrieved by the name of an individual or by some identifying number, symbol, or other identifying particular assigned to that individual. For general information on this part, to inquire about the Privacy Act program at NACIC, or to file a Privacy Act request, please direct your communication in writing to the Information and Privacy Coordinator, Executive Secretariat Office, National Counterintelligence Center, 3W01 NHB, Washington, DC 20505. Requests with the required identification statement pursuant to §1801.13 must be filed in original form by mail. Subsequent communications and any inquiries will be accepted by mail or facsimile at (703) 874–5844 or by telephone at (703) 874–4121. Collect calls cannot be accepted. NACIC welcomes suggestions or complaints with regard to its administration of the Privacy Act. Letters of suggestion or complaint should identify the specific purpose and the issues for consideration. NACIC will respond to all substantive communications and take such actions as determined feasible and appropriate. Members of the public shall address all communications to the contact specified at §1801.3 and clearly delineate the communication as a request under the Privacy Act and this regulation. Requests and administrative appeals on requests, referrals, and coordinations received from members of the public who owe outstanding fees for information services at this or other federal agencies will not be accepted and action on existing requests and appeals will be terminated in such circumstances. (a) In general. No particular form is required. All requests must contain the identification information required at §1801.13. (b) For access. For requests seeking access, a requester should, to the extent possible, describe the nature of the record sought and the record system(s) in which it is thought to be included. Requesters may find assistance from information described in the Privacy Act Issuances Compilation which is published biennially by the (c) For amendment. For requests seeking amendment, a requester should identify the particular record or portion subject to the request, state a justification for such amendment, and provide the desired amending language. (a) In general. Individuals seeking access to or amendment of records concerning themselves shall provide their full (legal) name, address, date and place of birth, and current citizenship status together with a statement that such information is true under penalty of perjury or a notarized statement swearing to or affirming identity. If NACIC determines that this information is not sufficient, NACIC may request additional or clarifying information. (b) Requirement for aliens. Only aliens lawfully admitted for permanent residence (PRAs) may file a request pursuant to the Privacy Act and this part. Such individuals shall provide, in addition to the information required under paragraph (a) of this section, their Alien Registration Number and the date that status was acquired. (c) Requirement for representatives. The parent or guardian of a minor individual, the guardian of an individual under judicial disability, or an attorney retained to represent an individual shall provide, in addition to establishing the identity of the minor or individual represented as required in paragraph (a) or (b) of this section, evidence of such representation by submission of a certified copy of the minor's birth certificate, court order, or representational agreement which establishes the relationship and the requester's identity. (d) Procedure otherwise. If a requester or representative fails to provide the information in paragraph (a), (b), or (c) of this section within forty-five (45) days of the date of our request, NACIC will deem the request closed. This action, of course, would not prevent an individual from refiling his or her Privacy Act request at a subsequent date with the required information. No fees will be charged for any action under the authority of the Privacy Act, 5 U.S.C. 552a, irrespective of the fact that a request is or may be processed under the authority of both the Privacy Act and the Freedom of Information Act. (a) In general. Requests meeting the requirements of §1801.11 through §1801.13 shall be processed under both the Freedom of Information Act, 5 U.S.C. 552, and the Privacy Act, 5 U.S.C. 552a, and the applicable regulations, unless the requester demands otherwise in writing. Such requests will be processed under both Acts regardless of whether the requester cites one Act in the request, both, or neither. This action is taken in order to ensure the maximum possible disclosure to the requester. (b) Receipt, recording and tasking. Upon receipt of a request meeting the requirements of §§1801.11 through 1801.13, NACIC shall within ten (10) days record each request, acknowledge receipt to the requester, and thereafter effect the necessary taskings to the office(s) reasonably believed to hold responsive records. (c) Effect of certain exemptions. In processing a request, NACIC shall decline to confirm or deny the existence or nonexistence of any responsive records whenever the fact of their existence or nonexistence is itself classified under Executive Order 12958 and that confirmation of the existence of a record may jeopardize intelligence sources and methods protected pursuant to section 103(c)(6) of the National Security Act of 1947. In such circumstances, NACIC, in the form of a final written response, shall so inform the requester and advise of his or her right to an administrative appeal. (d) Time for response. Although the Privacy Act does not mandate a time for response, our joint treatment of requests under both the Privacy Act and the FOIA means that the NACIC should provide a response within the FOIA statutory guideline of ten (10) days on initial requests and twenty (20) days on administrative appeals. However, the volume of requests may require that NACIC seek additional time from a requester pursuant to §1801.33. In such event, NACIC will inform the requester in writing and further advise of his or her right to file an administrative appeal. (a) Initial action for access. NACIC offices tasked pursuant to a Privacy Act access request shall search all relevant record systems within their cognizance. They shall: (1) Determine whether responsive records exist; (2) Determine whether access must be denied in whole or part and on what legal basis under both Acts in each such case; (3) Approve the disclosure of records for which they are the originator; and (4) Forward to the Coordinator all records approved for release or necessary for coordination with or referral to another originator or interested party as well as the specific determinations with respect to denials (if any). (b) Initial action for amendment. NACIC offices tasked pursuant to a Privacy Act amendment request shall review the official records alleged to be inaccurate and the proposed amendment submitted by the requester. If they determine that NACIC's records are not accurate, relevant, timely or complete, they shall promptly: (1) Make the amendment as requested; (2) Write to all other identified persons or agencies to whom the record has been disclosed (if an accounting of the disclosure was made) and inform of the amendment; and (3) Inform the Coordinator of such decisions. (c) Action otherwise on amendment request. If the NACIC office records manager declines to make the requested amendment (or declines to make the requested amendment) but agrees to augment the official records, that manager shall promptly: (1) Set forth the reasons for refusal; and (2) Inform the Coordinator of such decision and the reasons therefore. (d) Referrals and coordinations. As applicable and within ten (10) days of receipt by the Coordinator, any NACIC records containing information originated by other NACIC offices shall be forwarded to those entities for action in accordance with paragraphs (a), (b), or (c) of this section and return. Records originated by other federal agencies or NACIC records containing other federal information shall be forwarded to such agencies within ten (10) days of our completion of initial action in the case for action under their regulations and direct response to the requester (for other NACIC records) or return to NACIC (for NACIC records). (e) Effect of certain exemptions. This section shall not be construed to allow access to systems of records exempted by the Director, NACIC pursuant to subsections (j) and (k) of the Privacy Act or where those exemptions require that NACIC can neither confirm nor deny the existence or nonexistence of responsive records. Within ten (10) days of receipt of responses to all initial taskings and subsequent coordinations (if any), and dispatch of referrals (if any), NACIC will provide disclosable records to the requester. If a determination has been made not to provide access to requested records (in light of specific exemptions) or that no records are found, NACIC shall so inform the requester, identify the denying official, and advise of the right to administrative appeal. (a) In general. When a request for access or amendment involves medical or psychological records and when the originator determines that such records are not exempt from disclosure, NACIC will, after consultation with the Director of Medical Services, CIA, determine: (1) Which records may be sent directly to the requester and (2) Which records should not be sent directly to the requester because of possible medical or psychological harm to the requester or another person. (b) Procedure for records to be sent to physician. In the event that NACIC determines, in accordance with paragraph (a)(2) of this section, that records should not be sent directly to the requester, NACIC will notify the requester in writing and advise that the records at issue can be made available only to a physician of the requester's designation. Upon receipt of such designation, verification of the identity of the physician, and agreement by the physician: (1) To review the documents with the requesting individual, (2) To explain the meaning of the documents, and (3) To offer counseling designed to temper any adverse reaction, NACIC will forward such records to the designated physician. (c) Procedure if physician option not available. If within sixty (60) days of paragraph (a)(2) of this section, the requester has failed to respond or designate a physician, or the physician fails to agree to the release conditions, NACIC will hold the documents in abeyance and advise the requester that this action may be construed as a technical denial. NACIC will also advise the requester of the responsible official and of his or her rights to administrative appeal and thereafter judicial review. (a) All requests will be handled in the order received on a strictly “first-in, first-out” basis. Exceptions to this rule will only be made in circumstances that NACIC deems to be exceptional. In making this determination, NACIC shall consider and must decide in the affirmative on all of the following factors: (1) That there is a genuine need for the records; and (2) That the personal need is exceptional; and (3) That there are no alternative forums for the records sought; and (4) That it is reasonably believed that substantive records relevant to the stated needs may exist and be deemed releasable. (b) In sum, requests shall be considered for expedited processing only when health, humanitarian, or due process considerations involving possible deprivation of life or liberty create circumstances of exceptional urgency and extraordinary need. In accordance with established judicial precedent, requests more properly the scope of requests under the Federal Rules of Civil or Criminal Procedure (or equivalent state rules) will not be granted expedited processing under this or related (e.g., Freedom of Information Act) provisions unless expressly ordered by a federal court of competent jurisdiction. (a) In general. NACIC components shall devote such personnel and other resources to the responsibilities imposed by the Privacy Act as may be appropriate and reasonable considering: (1) The totality of resources available to the component, (2) The business demands imposed on the component by the Director, NACIC or otherwise by law, (3) The information review and release demands imposed by the Congress or other governmental authority, and (4) The rights of all members of the public under the various information review and disclosure laws. (b) Discharge of Privacy Act responsibilities. Offices shall exercise due diligence in their responsibilities under the Privacy Act and must allocate a reasonable level of resources to requests under the Act in a strictly “first-in, first-out” basis and utilizing two or more processing queues to ensure that smaller as well as larger (i.e., project) cases receive equitable attention. The Information and Privacy Coordinator is responsible for management of the NACIC-wide program defined by this part and for establishing priorities for cases consistent with established law. The Director, NACIC shall provide policy and resource direction as necessary and shall render decisions on administrative appeals. (c) Requests for extension of time. While the Privacy Act does not specify time requirements, our joint treatment of requests under the FOIA means that when NACIC is unable to meet the statutory time requirements of the FOIA, NACIC may request additional time from a requester. In such instances NACIC will inform a requester of his or her right to decline our request and proceed with an administrative appeal or judicial review as appropriate. The Director, NACIC will make final NACIC decisions from appeals of initial adverse decisions under the Privacy Act and such other information release decisions made under 32 CFR parts 1800, 1802, and 1803 of this chapter. Matters decided by the Director, NACIC will be deemed a final decision by NACIC. (a) Right of Appeal. A right of administrative appeal exists whenever access to any requested record or any portion thereof is denied, no records are located in response to a request, or a request for amendment is denied. NACIC will apprise all requesters in writing of their right to appeal such decisions to the Director, NACIC through the Coordinator. (b) Requirements as to time and form. Appeals of decisions must be received by the Coordinator within forty-five (45) days of the date of NACIC's initial decision. NACIC may, for good cause and as a matter of administrative discretion, permit an additional thirty (30) days for the submission of an appeal. All appeals to the Director, NACIC shall be in writing and addressed as specified in §1801.3. All appeals must identify the documents or portions of documents at issue with specificity, provide the desired amending language (if applicable), and may present such information, data, and argument in support as the requester may desire. (c) Exceptions. No appeal shall be accepted if the requester has outstanding fees for information services at this or another federal agency. In addition, no appeal shall be accepted if the information in question has been the subject of an administrative review within the previous two (2) years or is the subject of pending litigation in the federal courts. (d) Receipt, recording, and tasking. NACIC shall promptly record each administrative appeal, acknowledge receipt to the requester in writing, and thereafter effect the necessary taskings to the office chief in charge of the office(s) which originated or has an interest in the record(s) subject to the appeal. Each Office Chief in charge of an office which originated or has an interest in any of the records subject to the appeal, or designee, is a required party to any appeal; other interested parties may become involved through the request of the Coordinator when it is determined that some or all of the information is also within their official cognizance. These parties shall respond in writing to the Coordinator with a finding as to the exempt or non-exempt status of the information including citations to the applicable exemption and/or their agreement or disagreement as to the requested amendment and the reasons therefore. Each response shall be provided expeditiously on a “first-in, first-out” basis taking into account the business requirements of the parties and consistent with the information rights of members of the general public under the various information review and release laws. (a) Preparation of docket. The Coordinator shall provide a summation memorandum for consideration of the Director, NACIC; the complete record of the request consisting of the request, the document(s) (sanitized and full text) at issue, and the findings of any concerned office chiefs or designee(s). (b) Decision by the Director, NACIC. The Director, NACIC shall personally decide each case; no personal appearances shall be permitted without the express permission of the Director, NACIC. (a) In general. The Coordinator shall promptly prepare and communicate the decision of the Director, NACIC to the requester. With respect to any decision to deny information or deny amendment, that correspondence shall state the reasons for the decision, identify the officer responsible, and include a notice of the right to judicial review. (b) For amendment requests. With further respect to any decision to deny an amendment, that correspondence shall also inform the requester of the right to submit within forty-five (45) days a statement of his or her choice which shall be included in the official records of NACIC. In such cases, the applicable record system manager shall clearly note any portion of the official record which is disputed, append the requester's statement, and provide copies of the statement to previous recipients (if any are known) and to any future recipients when and if the disputed information is disseminated in accordance with a routine use. No record which is within a system of records shall be disclosed by any means of communication to any individual or to another agency, except pursuant to a written request by, or with the prior written consent of, the individual to whom the record pertains, unless disclosure of the record would be: (a) To those officers and employees of NACIC which maintains the record who have a need for the record in the performance of their duties; (b) Required under the Freedom of Information Act, 5 U.S.C. 552; (c) For a routine use as defined in §1801.02(m), as contained in the Privacy Act Issuances Compilation which is published biennially in the (d) To the Bureau of the Census for purposes of planning or carrying out a census or survey or related activity pursuant to the provisions of U.S.C. Title 13; (e) To a recipient who has provided NACIC with advance adequate written assurance that the record will be used solely as a statistical research or reporting record, and the record is to be transferred in a form that is not individually identifiable; (f) To the National Archives and Records Administration as a record which has sufficient historical or other value to warrant its continued preservation by the United States Government, or for evaluation by the Archivist of the United States or designee to determine whether the record has such value; (g) To another agency or to an instrumentality of any governmental jurisdiction within or under the control of the United States for a civil or criminal law enforcement activity if the activity is authorized by law, and if the head of that agency or instrumentality has made a written request to NACIC specifying the particular information desired and the law enforcement activity for which the record is sought; (h) To a person pursuant to a showing of compelling circumstances affecting the health or safety of an individual if upon such disclosure notification is transmitted to the last known address of such individual; (i) To either House of Congress, or, to the extent of matter within its jurisdiction, any committee or subcommittee thereof, any joint committee of Congress or subcommittee of any such joint committee; (j) To the Comptroller General or any of his authorized representatives in the course of the performance of the duties of the General Accounting Office; or (k) To any agency, government instrumentality, or other person or entity pursuant to the order of a court of competent jurisdiction of the United States or constituent states. (a) Unauthorized disclosure. Criminal penalties may be imposed against any officer or employee of NACIC who, by virtue of employment, has possession of or access to NACIC records which contain information identifiable with an individual, the disclosure of which is prohibited by the Privacy Act or by these rules, and who, knowing that disclosure of the specific material is so prohibited, willfully discloses the material in any manner to any person or agency not entitled to receive same. (b) Unauthorized maintenance. Criminal penalties may be imposed against any officer or employee of NACIC who willfully maintains a system of records without meeting the requirements of section (e)(4) of the Privacy Act, 5 U.S.C. 552a. The Coordinator and the Director of NACIC are authorized independently to conduct such surveys and inspect such records as necessary from time to time to ensure that these requirements are met. (c) Unauthorized requests. Criminal penalties may be imposed upon any person who knowingly and willfully requests or obtains any record concerning an individual from NACIC under false pretenses. Pursuant to authority granted in section (k) of the Privacy Act, the Director, NACIC has determined to exempt from section (d) of the Privacy Act those portions and only those portions of all systems of records maintained by NACIC that would consist of, pertain to, or otherwise reveal information that is: (a) Classified pursuant to Executive Order 12958 (or successor or prior Order) and thus subject to the provisions of 5 U.S.C. 552(b)(1) and 5 U.S.C. 552a(k)(1); (b) Investigatory in nature and compiled for law enforcement purposes, other than material within the scope of section (j)(2) of the Act; provided however, that if an individual is denied any right, privilege, or benefit to which they are otherwise eligible, as a result of the maintenance of such material, then such material shall be provided to that individual except to the extent that the disclosure would reveal the identity of a source who furnished the information to the United States Government under an express promise of confidentiality, or, prior to the effective date of this section, under an implied promise of confidentiality; (c) Maintained in connection with providing protective services to the President of the United States or other individuals pursuant to 18 U.S.C. 3056; (d) Required by statute to be maintained and used solely as statistical records; (e) Investigatory in nature and compiled solely for the purpose of determining suitability, eligibility, or qualifications for federal civilian employment, military service, federal contracts, or access to classified information, but only to the extent that the disclosure of such material would reveal the identity of a source who furnished information to the United States Government under an express promise of confidentiality, or, prior to the effective date of this section, under an implied promise of confidentiality; (f) Testing or examination material used solely to determine individual qualifications for appointment or promotion in the federal service the disclosure of which would compromise the objectivity or fairness of the testing or examination process; or (g) Evaluation material used to determine potential for promotion in the armed services, but only to the extent that the disclosure of such material would reveal the identity of a source who furnished information to the United States Government under an express promise of confidentiality, or, prior to the effective date of this section, under an implied promise of confidentiality.
Title 32: National Defense
PART 1801—PUBLIC RIGHTS UNDER THE PRIVACY ACT OF 1974
Section Contents
§ 1801.1 Authority and purpose.
§ 1801.2 Definitions.
§ 1801.3 Contact for general information and requests.
§ 1801.4 Suggestions and complaints.
§ 1801.11 Preliminary information.
§ 1801.12 Requirements as to form.
§ 1801.13 Requirements as to identification of requester.
§ 1801.14 Fees.
§ 1801.21 Processing requests for access to or amendment of records.
§ 1801.22 Action and determination(s) by originator(s) or any interested party.
§ 1801.23 Notification of decision and right of appeal.
§ 1801.31 Special procedures for medical and psychological records.
§ 1801.32 Requests for expedited processing.
§ 1801.33 Allocation of resources; agreed extensions of time.
§ 1801.41 Appeal authority.
§ 1801.42 Right of appeal and appeal procedures.
§ 1801.43 Determination(s) by Office Chiefs.
§ 1801.44 Action by appeals authority.
§ 1801.45 Notification of decision and right of judicial review.
§ 1801.51 Limitations on disclosure.
§ 1801.52 Criminal penalties.
§ 1801.63 Specific exemptions.
Subpart A—General
top
§ 1801.1 Authority and purpose.
top
§ 1801.2 Definitions.
top
§ 1801.3 Contact for general information and requests.
top
§ 1801.4 Suggestions and complaints.
top
Subpart B—Filing Of Privacy Act Requests
top
§ 1801.11 Preliminary information.
top
§ 1801.12 Requirements as to form.
top
§ 1801.13 Requirements as to identification of requester.
top
§ 1801.14 Fees.
top
Subpart C—Action On Privacy Act Requests
top
§ 1801.21 Processing requests for access to or amendment of records.
top
§ 1801.22 Action and determination(s) by originator(s) or any interested party.
top
§ 1801.23 Notification of decision and right of appeal.
top
Subpart D—Additional Administrative Matters
top
§ 1801.31 Special procedures for medical and psychological records.
top
§ 1801.32 Requests for expedited processing.
top
§ 1801.33 Allocation of resources; agreed extensions of time.
top
Subpart E—Action On Privacy Act Administrative Appeals
top
§ 1801.41 Appeal authority.
top
§ 1801.42 Right of appeal and appeal procedures.
top
§ 1801.43 Determination(s) by Office Chiefs.
top
§ 1801.44 Action by appeals authority.
top
§ 1801.45 Notification of decision and right of judicial review.
top
Subpart F—Prohibitions
top
§ 1801.51 Limitations on disclosure.
top
§ 1801.52 Criminal penalties.
top
Subpart G—Exemptions
top
§ 1801.63 Specific exemptions.
top
