Training and employee standards of conduct with regard to privacy.

CFR · 2024-01-01 · US · Title 12

(a) The Director of the Office of Human Resources, with advice from the Senior Privacy Act Officer, is responsible for training NCUA employees in the obligations imposed by the Privacy Act and this subpart. (b) The head of each NCUA Office shall be responsible for assuring that employees subject to that person's supervision are advised of the provisions of the Privacy Act, including the criminal penalties and civil liabilities provided therein, and that such employees are made aware of their responsibilities to protect the security of personal information, to assure its accuracy, relevance, timeliness, and completeness, to avoid unauthorized disclosure either orally or in writing, and to insure that no information system concerning individuals, no matter how small or specialized, is maintained without public notice. (c) With respect to each system of records maintained by NCUA, Agency employees shall: (1) Collect no information of a personal nature from individuals unless authorized to collect it to achieve a function or carry out an NCUA responsibility; (2) Collect from individuals only that information which is necessary to NCUA functions or responsibilities; (3) Collect information, wherever possible, directly from the individual to whom it relates; (4) Inform individuals from whom information is collected of the authority for collection, the purposes thereof, the routine uses that will be made of the information, and the effects, both legal and practical of not furnishing

official document · source cfr-2024 · id 12:§ 792.69