Privacy Act standards of conduct.

CFR · 2024-01-01 · US · Title 13

Each Program/Support Office Head or designee shall inform its employees of the provisions of the Privacy Act, including its civil liability and criminal penalty provisions. Unless otherwise permitted by law, an employee of the SBA shall: (a) Collect from individuals only the information that is relevant and necessary to discharge the responsibilities of the SBA; (b) Collect information about an individual directly from that individual whenever practicable; (c) Inform each individual from whom information is collected of: (1) The legal authority to collect the information and whether providing it is mandatory or voluntary; (2) The principal purpose for which the SBA intends to use the information; (3) The routine uses the SBA may make of the information; and (4) The effects on the individual, if any, of not providing the information; (d) Ensure that the office maintains no system of records without public notice and that it notifies appropriate SBA officials of the existence or development of any system of records that is not the subject of a current or planned public notice; (e) Maintain all records that are used by the SBA in making any determination about an individual with such accuracy, relevance, timeliness, and completeness as is reasonably necessary to ensure fairness to the individual in the determination; (f) Except as to disclosures made to an agency or made under the FOIA, make reasonable efforts, prior to disseminating any record about an individual, to ensure tha

official document · source cfr-2024 · id 13:§ 102.36