Standards of conduct for administration of the Privacy Act.

CFR · 2024-01-01 · US · Title 6

Each component will inform its employees of the provisions of the Privacy Act, including the Act's civil liability and criminal penalty provisions referenced in § 5.35. Unless otherwise permitted by law, the Department will: (a) Maintain only such information about an individual as is relevant and necessary to accomplish a purpose of the Component or the Department that is required to be accomplished by statute or by Executive order of the President; (b) Collect information about an individual directly from that individual whenever practicable and when the information may result in adverse determinations about an individual's rights, benefits, and privileges under federal programs; (c) Inform each individual from whom information is collected of: (1) The legal authority to collect the information and whether providing it is mandatory or voluntary; (2) The principal purpose for which the Department intends to use the information; (3) The routine uses the Department may make of the information; and (4) The effects on the individual, if any, of not providing the information; (d) Ensure that the component maintains no system of records without public notice and that it notifies appropriate Department officials of the existence or development of any system of records that is not the subject of a current or planned public notice; (e) Maintain all records that are used by the Department in making any determination about an individual with such accuracy, relevance, timeliness, and co

official document · source cfr-2024 · id 6:§ 5.34