Training; rules of conduct; penalties for non-compliance.

CFR · 2024-01-01 · US · Title 12

(a) (b) (1) The head of each office of the CFPB shall be responsible for assuring that employees subject to such official's supervision are advised of the provisions of the Privacy Act, including the criminal penalties and civil liabilities provided therein, and the regulations in this subpart, and that such employees are made aware of their individual and collective responsibilities to protect the security of personal information, to assure its accuracy, relevance, timeliness and completeness, to avoid unauthorized disclosure either orally or in writing, and to ensure that no system of records is maintained without public notice. (2) Employees of the CFPB involved in the design, development, operation, or maintenance of any system of records, or in maintaining any record shall: (i) Collect no information of a personal nature from individuals unless authorized to collect it to achieve a function or carry out a responsibility of the CFPB; (ii) Collect information, to the extent practicable, directly from the individual to whom it relates; (iii) Inform each individual asked to supply information, on the form used to collect the information or on a separate form that can be retained by the individual of— (A) The authority (whether granted by statute, or by executive order of the President) which authorizes the solicitation of the information and whether disclosure of such information is mandatory or voluntary; (B) The principal purpose or purposes for which the information is in

official document · source cfr-2024 · id 12:§ 1070.61